last executing test programs: 15.188509784s ago: executing program 1 (id=954): openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0x2025}) 15.188149203s ago: executing program 1 (id=955): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) fanotify_init(0x7c59848bb7be4ac, 0x1000) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0xffff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x3912, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8000], [0x100, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x1], [0x0, 0xe64, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0xffffffff]}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz0\x00') r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x200, 0x100, 0x22}, 0x18) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) sendmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="e3b21fa70370b847f7f504a70abc9c37d087ea7c48af31c8d08fddf00cb899359a1b17b322ad8cc068b30fa778d83b9bce0be158de7436c974cbc98849604555eeadddd86cd77b67d8f9b395c34414c100736ec71577bb749443df233948616a3fbc91c831d8c66aafefee2e72f6bda5bd37b5ec4d7c86e0f035cd7e05be8591fd71c9b6425bc24d6b62ec3fb74f2eba4538f2f57771c17c1060b8eb8ee943537d15b04902058ea248f5d0c39037dd8c48a1dc8e4dde5aa44c82a4cd1cb7a056677c", 0xc2}, {&(0x7f0000000200)="366b1f1207f349964bafdf360fab31177d6ef560303d3adfb27baa69a8029dd6f5ab13e76bbafcc49cd8d368b9be855d6d02d4361973c16f40d3f7d6", 0x3c}, {&(0x7f0000000240)="69229b3949909375facb1d7250f94434bdabf6040c0c3f144a7f45801eb980b3fb127921a185120ad83ad283e22a5058efeafb98cb66611315d8ee1fe7ca2d2b24d25690ecb768c21ec6e8391f9f18ae0f8fb0465314375e9f68adcc9a80704493ec2ed6495f2a87f7b99a4ad09333bcb0106d2df14e6449c027e32e84c79f168eac0fee660542e2cad6fd12ba1a01fce8be47fa721cd39a0722bbada460016fcd42627992d2d93069d3786de8ec794840f73e93049175bcd22c3440be88b867a90b2a834a18ab37985fd0a933f6b2888fbd50553a487e7d583f654fc993e25b5a463f150fbbd64e378d0d6a1d9c955ab80ba9", 0xf3}, {&(0x7f0000000380)="a7dc8465111e66599d96f596d8abb0a8cd209afae6910da225cd739dde3a96954be334d27e54ca8845f138bfacbf56eda80cb5555d572a63d1006e1d8df2df0a342f093233fbabb4b46c53779da0a5afc7c502cbb3629b333c934530e4595e6bc6ab823a89ccec3f471b1ec8d6a83c58bb411b3b9f7e5484fdb8f3c5b4fe65274f364090ef3565e747566a3cd1d5e101f6dc22fcc3b13a651f7d8bc57683b92f8e8c42", 0xa3}, {&(0x7f0000000440)="c098f36ed4642620f426b196de1ce3bc20122716e788b7f6bd72f51379ca3db82a7ab5ab210761ee83f2c0e7b28fd2f278747505e32feb1bb81796b0f51ef1ce1afcadf5e3520abbb7268836cd86f9ab88bb885acc1cc35075c7a665387ae18a80cee6985f46aef2a9c466371361f25abf43e7eb744f3b252d5576ead73b504e0e4e786203dfbcf04189dfe12ee3b1b56476ba5d6ea6b40cf0932888be31ffc6002d00a7f51a30745d9906f8cce1059bb56a3a11da564bd3ba19703706d5c38a2cc926a6b5e06a2eeaf2e1c176a0add9c5307304c714cde3b47c6d06c060bcbe38d437f8cb6de656837732", 0xeb}, {&(0x7f0000000540)="13d160b640374066d49d3c43140cb5101caa", 0x12}], 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="400000000000000006000000f7ffffff494a8bd84603fd85aa7a342b8451ff8ce87d3d9157bb02155e0056e8faeccc14150e4b5d3743bc8f34523d0000000000"], 0x40}, 0x44000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x83, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2}]}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000840)='netlink_extack\x00', r2, 0x0, 0x10000001}, 0x18) sendto$inet6(r1, &(0x7f0000000680)="30ace91bf896b32b4d7dd88bc18f5889339e0c892b559c2f9656224ef81039b1e8ca77fa17278f9edab2831e80396448a2b1e378aa90f69fd2853dd98d0e4aa8e48345c0d6081f5435f639c007372194337b4847d215a4aebcc4c8c6e15f16cb9b1d639688b9b39fce241804758a5edeff6cf453002fa8b301fb7b873a0b31ec67d02d51979a43931a00c435d51593f5f478620b22acc473d423d05d88225b1eb8e72109d4a6155960c560b7a73b59a40ebf86152293aedd067a4c040917d86972b7ddb7fbd674343bb3ce02cd75e7dbf7358ad2f364cbd32de7d2ef6d9f8c9e0b3c023a4a4b80b613c427a51f3a7dbc4a7bf5", 0xf3, 0x5, &(0x7f0000000780)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe}, 0x1c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x3a, 0x0, &(0x7f00000000c0)) read$eventfd(r1, &(0x7f00000007c0), 0x8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002400), 0x0, 0x0) 14.917672206s ago: executing program 1 (id=957): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x10}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14.804810442s ago: executing program 1 (id=960): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x220) 14.472285077s ago: executing program 1 (id=962): ioctl$SNDCTL_FM_LOAD_INSTR(0xffffffffffffffff, 0x40285107) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40080000000008b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000070000000000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x7, 0x9, 0x10001, 0x8, 0x4, 0x10000, 0x8a}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x4000880) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$tipc(r4, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 14.132466656s ago: executing program 1 (id=965): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, 0x0) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r4, 0x0, &(0x7f0000000240), 0x0, 0x1c}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000340)={0x18, r4, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000003c0)={0x12, r4}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r4, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000500)={0x18, r5, 0x3, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000580)={0x18, r4}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) 13.719579217s ago: executing program 32 (id=965): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, 0x0) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r4, 0x0, &(0x7f0000000240), 0x0, 0x1c}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000340)={0x18, r4, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000003c0)={0x12, r4}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r4, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000500)={0x18, r5, 0x3, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000580)={0x18, r4}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) 7.656275829s ago: executing program 0 (id=991): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_BMAP(r2, &(0x7f0000000400)={0x18, 0x0, 0x0, {0x1}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) removexattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)=@known='user.incfs.size\x00') 7.154798948s ago: executing program 0 (id=992): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) epoll_create(0x4ba4) socket$nl_route(0x10, 0x3, 0x0) openat$dlm_monitor(0xffffff9c, &(0x7f0000000180), 0x80, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x0) 5.499662974s ago: executing program 0 (id=996): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000002300)) 5.382973423s ago: executing program 3 (id=997): newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', &(0x7f00000001c0), 0x1000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001900010025bd7000fedbdf251d01030008000900", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="1b3371b643834bbf4ef98f5b712c72b781d4c166b2c92783300e033658ff60ce9af99cb22e3b12f55f83cc22328ff251eb51673a643c568677b77a7d02bbe12fec6b92069f2061bdf0d37112f425c6e5488c8de233846c13cf5ee5a460f12cf379c548d7f341a1764f49abf7d3b020a863408c9f0464fe9ea963821f2c0d868090e2548d4feb472fc83c30c3edb378c3f15835e224e9e4053152fc"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB='raw'], &(0x7f0000000000)=0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x39, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, 0x0, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x3000000}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000010000000000040100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b37c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac6433"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) socket(0x2a, 0x3, 0x3) 5.278359323s ago: executing program 2 (id=998): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r3 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r5}) close_range(r0, 0xffffffffffffffff, 0x0) 5.201498422s ago: executing program 2 (id=999): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0xd7cc5d556c3ede87) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc00}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x40}}, 0x0) tkill(0x0, 0x1) 5.064503834s ago: executing program 2 (id=1000): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x40, 0x0, 0x44, "2af9fd05cd1472b2299a794f8e9edf4c73a1ab08b43186e06681acbce9ea98d5ac288cee7de96a36b3d2122f8d726141a698c08e5f9dfab29d5687cacbb2287bd944cb79"}, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0}) 5.005796661s ago: executing program 3 (id=1001): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) fanotify_init(0x7c59848bb7be4ac, 0x1000) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0xffff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x3912, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8000], [0x100, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x1], [0x0, 0xe64, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0xffffffff]}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz0\x00') r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x200, 0x100, 0x22}, 0x18) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) sendmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="e3b21fa70370b847f7f504a70abc9c37d087ea7c48af31c8d08fddf00cb899359a1b17b322ad8cc068b30fa778d83b9bce0be158de7436c974cbc98849604555eeadddd86cd77b67d8f9b395c34414c100736ec71577bb749443df233948616a3fbc91c831d8c66aafefee2e72f6bda5bd37b5ec4d7c86e0f035cd7e05be8591fd71c9b6425bc24d6b62ec3fb74f2eba4538f2f57771c17c1060b8eb8ee943537d15b04902058ea248f5d0c39037dd8c48a1dc8e4dde5aa44c82a4cd1cb7a056677c", 0xc2}, {&(0x7f0000000200)="366b1f1207f349964bafdf360fab31177d6ef560303d3adfb27baa69a8029dd6f5ab13e76bbafcc49cd8d368b9be855d6d02d4361973c16f40d3f7d6", 0x3c}, {&(0x7f0000000240)="69229b3949909375facb1d7250f94434bdabf6040c0c3f144a7f45801eb980b3fb127921a185120ad83ad283e22a5058efeafb98cb66611315d8ee1fe7ca2d2b24d25690ecb768c21ec6e8391f9f18ae0f8fb0465314375e9f68adcc9a80704493ec2ed6495f2a87f7b99a4ad09333bcb0106d2df14e6449c027e32e84c79f168eac0fee660542e2cad6fd12ba1a01fce8be47fa721cd39a0722bbada460016fcd42627992d2d93069d3786de8ec794840f73e93049175bcd22c3440be88b867a90b2a834a18ab37985fd0a933f6b2888fbd50553a487e7d583f654fc993e25b5a463f150fbbd64e378d0d6a1d9c955ab80ba9", 0xf3}, {&(0x7f0000000380)="a7dc8465111e66599d96f596d8abb0a8cd209afae6910da225cd739dde3a96954be334d27e54ca8845f138bfacbf56eda80cb5555d572a63d1006e1d8df2df0a342f093233fbabb4b46c53779da0a5afc7c502cbb3629b333c934530e4595e6bc6ab823a89ccec3f471b1ec8d6a83c58bb411b3b9f7e5484fdb8f3c5b4fe65274f364090ef3565e747566a3cd1d5e101f6dc22fcc3b13a651f7d8bc57683b92f8e8c42", 0xa3}, {&(0x7f0000000440)="c098f36ed4642620f426b196de1ce3bc20122716e788b7f6bd72f51379ca3db82a7ab5ab210761ee83f2c0e7b28fd2f278747505e32feb1bb81796b0f51ef1ce1afcadf5e3520abbb7268836cd86f9ab88bb885acc1cc35075c7a665387ae18a80cee6985f46aef2a9c466371361f25abf43e7eb744f3b252d5576ead73b504e0e4e786203dfbcf04189dfe12ee3b1b56476ba5d6ea6b40cf0932888be31ffc6002d00a7f51a30745d9906f8cce1059bb56a3a11da564bd3ba19703706d5c38a2cc926a6b5e06a2eeaf2e1c176a0add9c5307304c714cde3b47c6d06c060bcbe38d437f8cb6de656837732", 0xeb}, {&(0x7f0000000540)="13d160b640374066d49d3c43140cb5101caa", 0x12}], 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="400000000000000006000000f7ffffff494a8bd84603fd85aa7a342b8451ff8ce87d3d9157bb02155e0056e8faeccc14150e4b5d3743bc8f34523d0000000000"], 0x40}, 0x44000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x83, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2}]}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000840)='netlink_extack\x00', r2, 0x0, 0x10000001}, 0x18) sendto$inet6(r1, &(0x7f0000000680)="30ace91bf896b32b4d7dd88bc18f5889339e0c892b559c2f9656224ef81039b1e8ca77fa17278f9edab2831e80396448a2b1e378aa90f69fd2853dd98d0e4aa8e48345c0d6081f5435f639c007372194337b4847d215a4aebcc4c8c6e15f16cb9b1d639688b9b39fce241804758a5edeff6cf453002fa8b301fb7b873a0b31ec67d02d51979a43931a00c435d51593f5f478620b22acc473d423d05d88225b1eb8e72109d4a6155960c560b7a73b59a40ebf86152293aedd067a4c040917d86972b7ddb7fbd674343bb3ce02cd75e7dbf7358ad2f364cbd32de7d2ef6d9f8c9e0b3c023a4a4b80b613c427a51f3a7dbc4a7bf5", 0xf3, 0x5, &(0x7f0000000780)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe}, 0x1c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x3a, 0x0, &(0x7f00000000c0)) read$eventfd(r1, &(0x7f00000007c0), 0x8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002400), 0x0, 0x0) 4.648487329s ago: executing program 4 (id=1003): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x109000) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x9, 0x0, [0x0], [0xff, 0x0, 0x39a], [], [0x100000001]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.548336009s ago: executing program 4 (id=1004): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="6f9726", 0x3}], 0x1}}], 0x1, 0x20004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) 4.506832861s ago: executing program 3 (id=1005): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/diskstats\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f0000002840)=""/4103, 0x1007) 4.269654798s ago: executing program 4 (id=1006): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) lstat(&(0x7f0000000cc0)='./file0\x00', 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 3.176401104s ago: executing program 4 (id=1007): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) fanotify_init(0x7c59848bb7be4ac, 0x1000) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0xffff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x3912, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8000], [0x100, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x1], [0x0, 0xe64, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0xffffffff]}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz0\x00') r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x200, 0x100, 0x22}, 0x18) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) sendmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="e3b21fa70370b847f7f504a70abc9c37d087ea7c48af31c8d08fddf00cb899359a1b17b322ad8cc068b30fa778d83b9bce0be158de7436c974cbc98849604555eeadddd86cd77b67d8f9b395c34414c100736ec71577bb749443df233948616a3fbc91c831d8c66aafefee2e72f6bda5bd37b5ec4d7c86e0f035cd7e05be8591fd71c9b6425bc24d6b62ec3fb74f2eba4538f2f57771c17c1060b8eb8ee943537d15b04902058ea248f5d0c39037dd8c48a1dc8e4dde5aa44c82a4cd1cb7a056677c", 0xc2}, {&(0x7f0000000200)="366b1f1207f349964bafdf360fab31177d6ef560303d3adfb27baa69a8029dd6f5ab13e76bbafcc49cd8d368b9be855d6d02d4361973c16f40d3f7d6", 0x3c}, {&(0x7f0000000240)="69229b3949909375facb1d7250f94434bdabf6040c0c3f144a7f45801eb980b3fb127921a185120ad83ad283e22a5058efeafb98cb66611315d8ee1fe7ca2d2b24d25690ecb768c21ec6e8391f9f18ae0f8fb0465314375e9f68adcc9a80704493ec2ed6495f2a87f7b99a4ad09333bcb0106d2df14e6449c027e32e84c79f168eac0fee660542e2cad6fd12ba1a01fce8be47fa721cd39a0722bbada460016fcd42627992d2d93069d3786de8ec794840f73e93049175bcd22c3440be88b867a90b2a834a18ab37985fd0a933f6b2888fbd50553a487e7d583f654fc993e25b5a463f150fbbd64e378d0d6a1d9c955ab80ba9", 0xf3}, {&(0x7f0000000380)="a7dc8465111e66599d96f596d8abb0a8cd209afae6910da225cd739dde3a96954be334d27e54ca8845f138bfacbf56eda80cb5555d572a63d1006e1d8df2df0a342f093233fbabb4b46c53779da0a5afc7c502cbb3629b333c934530e4595e6bc6ab823a89ccec3f471b1ec8d6a83c58bb411b3b9f7e5484fdb8f3c5b4fe65274f364090ef3565e747566a3cd1d5e101f6dc22fcc3b13a651f7d8bc57683b92f8e8c42", 0xa3}, {&(0x7f0000000440)="c098f36ed4642620f426b196de1ce3bc20122716e788b7f6bd72f51379ca3db82a7ab5ab210761ee83f2c0e7b28fd2f278747505e32feb1bb81796b0f51ef1ce1afcadf5e3520abbb7268836cd86f9ab88bb885acc1cc35075c7a665387ae18a80cee6985f46aef2a9c466371361f25abf43e7eb744f3b252d5576ead73b504e0e4e786203dfbcf04189dfe12ee3b1b56476ba5d6ea6b40cf0932888be31ffc6002d00a7f51a30745d9906f8cce1059bb56a3a11da564bd3ba19703706d5c38a2cc926a6b5e06a2eeaf2e1c176a0add9c5307304c714cde3b47c6d06c060bcbe38d437f8cb6de656837732", 0xeb}, {&(0x7f0000000540)="13d160b640374066d49d3c43140cb5101caa", 0x12}], 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="400000000000000006000000f7ffffff494a8bd84603fd85aa7a342b8451ff8ce87d3d9157bb02155e0056e8faeccc14150e4b5d3743bc8f34523d0000000000"], 0x40}, 0x44000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x83, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2}]}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000840)='netlink_extack\x00', r2, 0x0, 0x10000001}, 0x18) sendto$inet6(r1, &(0x7f0000000680)="30ace91bf896b32b4d7dd88bc18f5889339e0c892b559c2f9656224ef81039b1e8ca77fa17278f9edab2831e80396448a2b1e378aa90f69fd2853dd98d0e4aa8e48345c0d6081f5435f639c007372194337b4847d215a4aebcc4c8c6e15f16cb9b1d639688b9b39fce241804758a5edeff6cf453002fa8b301fb7b873a0b31ec67d02d51979a43931a00c435d51593f5f478620b22acc473d423d05d88225b1eb8e72109d4a6155960c560b7a73b59a40ebf86152293aedd067a4c040917d86972b7ddb7fbd674343bb3ce02cd75e7dbf7358ad2f364cbd32de7d2ef6d9f8c9e0b3c023a4a4b80b613c427a51f3a7dbc4a7bf5", 0xf3, 0x5, &(0x7f0000000780)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe}, 0x1c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x3a, 0x0, &(0x7f00000000c0)) read$eventfd(r1, &(0x7f00000007c0), 0x8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002400), 0x0, 0x0) 2.719803388s ago: executing program 4 (id=1008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40080000000008b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000070000000000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x7, 0x9, 0x10001, 0x8, 0x4, 0x10000, 0x8a}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x4000880) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 2.50907272s ago: executing program 2 (id=1009): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x200, 0x1) 1.875284616s ago: executing program 0 (id=1010): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000e, 0x12, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.760984542s ago: executing program 4 (id=1011): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) ioctl$EVIOCGMASK(r1, 0x5b16, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043b0a0000"], 0xd) 1.73847921s ago: executing program 5 (id=966): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4008, 0x0, 0x0, 0x22) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) 1.356496304s ago: executing program 3 (id=1012): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x98, 0x0, &(0x7f0000001540)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000b80)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.071929329s ago: executing program 0 (id=1013): socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) io_setup(0x8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={0x0, &(0x7f0000000480)=""/122, &(0x7f0000000080), &(0x7f0000000500), 0x5, r1}, 0x38) 1.065074724s ago: executing program 3 (id=1014): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x15, 0xa, 0x0, 0x2, 0x7, 0xe, 0x1, 0x81, 0xe5, 0xb0, 0x3, 0x0, 0x78, 0xfffffffd, 0x4, 0x17, 0xff, 0x2, '\x00', 0x2, 0xae}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 536.531505ms ago: executing program 2 (id=1015): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x2000c050) 536.273ms ago: executing program 0 (id=1016): open_tree(0xffffffffffffff9c, 0x0, 0x80001) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x541400) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r3, @ANYBLOB="64800400", @ANYBLOB="08000100", @ANYBLOB="06"], 0x90}}, 0x0) 150.386373ms ago: executing program 2 (id=1017): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) fanotify_init(0x7c59848bb7be4ac, 0x1000) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0xffff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x3912, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8000], [0x100, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x1], [0x0, 0xe64, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0xffffffff]}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz0\x00') r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x200, 0x100, 0x22}, 0x18) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) sendmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="e3b21fa70370b847f7f504a70abc9c37d087ea7c48af31c8d08fddf00cb899359a1b17b322ad8cc068b30fa778d83b9bce0be158de7436c974cbc98849604555eeadddd86cd77b67d8f9b395c34414c100736ec71577bb749443df233948616a3fbc91c831d8c66aafefee2e72f6bda5bd37b5ec4d7c86e0f035cd7e05be8591fd71c9b6425bc24d6b62ec3fb74f2eba4538f2f57771c17c1060b8eb8ee943537d15b04902058ea248f5d0c39037dd8c48a1dc8e4dde5aa44c82a4cd1cb7a056677c", 0xc2}, {&(0x7f0000000200)="366b1f1207f349964bafdf360fab31177d6ef560303d3adfb27baa69a8029dd6f5ab13e76bbafcc49cd8d368b9be855d6d02d4361973c16f40d3f7d6", 0x3c}, {&(0x7f0000000240)="69229b3949909375facb1d7250f94434bdabf6040c0c3f144a7f45801eb980b3fb127921a185120ad83ad283e22a5058efeafb98cb66611315d8ee1fe7ca2d2b24d25690ecb768c21ec6e8391f9f18ae0f8fb0465314375e9f68adcc9a80704493ec2ed6495f2a87f7b99a4ad09333bcb0106d2df14e6449c027e32e84c79f168eac0fee660542e2cad6fd12ba1a01fce8be47fa721cd39a0722bbada460016fcd42627992d2d93069d3786de8ec794840f73e93049175bcd22c3440be88b867a90b2a834a18ab37985fd0a933f6b2888fbd50553a487e7d583f654fc993e25b5a463f150fbbd64e378d0d6a1d9c955ab80ba9", 0xf3}, {&(0x7f0000000380)="a7dc8465111e66599d96f596d8abb0a8cd209afae6910da225cd739dde3a96954be334d27e54ca8845f138bfacbf56eda80cb5555d572a63d1006e1d8df2df0a342f093233fbabb4b46c53779da0a5afc7c502cbb3629b333c934530e4595e6bc6ab823a89ccec3f471b1ec8d6a83c58bb411b3b9f7e5484fdb8f3c5b4fe65274f364090ef3565e747566a3cd1d5e101f6dc22fcc3b13a651f7d8bc57683b92f8e8c42", 0xa3}, {&(0x7f0000000440)="c098f36ed4642620f426b196de1ce3bc20122716e788b7f6bd72f51379ca3db82a7ab5ab210761ee83f2c0e7b28fd2f278747505e32feb1bb81796b0f51ef1ce1afcadf5e3520abbb7268836cd86f9ab88bb885acc1cc35075c7a665387ae18a80cee6985f46aef2a9c466371361f25abf43e7eb744f3b252d5576ead73b504e0e4e786203dfbcf04189dfe12ee3b1b56476ba5d6ea6b40cf0932888be31ffc6002d00a7f51a30745d9906f8cce1059bb56a3a11da564bd3ba19703706d5c38a2cc926a6b5e06a2eeaf2e1c176a0add9c5307304c714cde3b47c6d06c060bcbe38d437f8cb6de656837732", 0xeb}, {&(0x7f0000000540)="13d160b640374066d49d3c43140cb5101caa", 0x12}], 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="400000000000000006000000f7ffffff494a8bd84603fd85aa7a342b8451ff8ce87d3d9157bb02155e0056e8faeccc14150e4b5d3743bc8f34523d0000000000"], 0x40}, 0x44000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x83, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2}]}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000840)='netlink_extack\x00', r2, 0x0, 0x10000001}, 0x18) sendto$inet6(r1, &(0x7f0000000680)="30ace91bf896b32b4d7dd88bc18f5889339e0c892b559c2f9656224ef81039b1e8ca77fa17278f9edab2831e80396448a2b1e378aa90f69fd2853dd98d0e4aa8e48345c0d6081f5435f639c007372194337b4847d215a4aebcc4c8c6e15f16cb9b1d639688b9b39fce241804758a5edeff6cf453002fa8b301fb7b873a0b31ec67d02d51979a43931a00c435d51593f5f478620b22acc473d423d05d88225b1eb8e72109d4a6155960c560b7a73b59a40ebf86152293aedd067a4c040917d86972b7ddb7fbd674343bb3ce02cd75e7dbf7358ad2f364cbd32de7d2ef6d9f8c9e0b3c023a4a4b80b613c427a51f3a7dbc4a7bf5", 0xf3, 0x5, &(0x7f0000000780)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe}, 0x1c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x3a, 0x0, &(0x7f00000000c0)) read$eventfd(r1, &(0x7f00000007c0), 0x8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002400), 0x0, 0x0) 106.988641ms ago: executing program 5 (id=1018): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, 0x0) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r4, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000340)={0x18, r4, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000003c0)={0x12, r4}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r4, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000500)={0x18, r5, 0x3, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000580)={0x18, r4}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) 0s ago: executing program 3 (id=1019): bpf$MAP_CREATE(0x0, 0x0, 0x18) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r2, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000020, 0x0) timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): ice number 6 [ 373.359406][ T29] audit: type=1400 audit(1736463889.764:774): avc: denied { listen } for pid=9011 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 373.378996][ T29] audit: type=1400 audit(1736463889.924:775): avc: denied { connect } for pid=9009 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 373.398502][ T29] audit: type=1400 audit(1736463890.004:776): avc: denied { write } for pid=9009 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 373.615797][ T29] audit: type=1400 audit(1736463890.024:777): avc: denied { accept } for pid=9011 comm="iou-wrk-9015" lport=51059 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 373.679528][ T9023] xt_CT: You must specify a L4 protocol and not use inversions on it [ 374.282021][ T29] audit: type=1400 audit(1736463890.244:778): avc: denied { append } for pid=9006 comm="syz.0.626" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 375.565447][ T9038] netlink: 344 bytes leftover after parsing attributes in process `syz.2.630'. [ 375.845621][ T9041] Scaler: ================= START STATUS ================= [ 375.853089][ T9041] Scaler: ================== END STATUS ================== [ 376.558361][ T9040] misc userio: The device must be registered before sending interrupts [ 377.711499][ T9054] input: syz1 as /devices/virtual/input/input72 [ 378.189645][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.578472][ T9061] input: syz1 as /devices/virtual/input/input74 [ 379.243874][ T9051] ALSA: mixer_oss: invalid OSS volume 'u' [ 379.981691][ T9086] usb usb8: usbfs: process 9086 (syz.1.642) did not claim interface 0 before use [ 380.118393][ T9090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.642'. [ 380.138081][ T29] audit: type=1400 audit(1736463896.824:779): avc: denied { connect } for pid=9080 comm="syz.1.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 380.265861][ T9093] binder: BINDER_SET_CONTEXT_MGR already set [ 380.272862][ T9093] binder: 9088:9093 ioctl 4018620d 200002c0 returned -16 [ 380.299533][ T9093] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.765599][ T29] audit: type=1400 audit(1736463896.914:780): avc: denied { read } for pid=9088 comm="syz.4.644" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 380.960519][ T29] audit: type=1400 audit(1736463896.914:781): avc: denied { open } for pid=9088 comm="syz.4.644" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 381.029217][ T29] audit: type=1400 audit(1736463896.924:782): avc: denied { ioctl } for pid=9088 comm="syz.4.644" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 381.079233][ T29] audit: type=1400 audit(1736463896.924:783): avc: denied { set_context_mgr } for pid=9088 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 381.119221][ T29] audit: type=1400 audit(1736463896.944:784): avc: denied { map } for pid=9088 comm="syz.4.644" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 381.177888][ T9095] netlink: 52 bytes leftover after parsing attributes in process `syz.4.645'. [ 382.663446][ T9109] syz.4.645: attempt to access beyond end of device [ 382.663446][ T9109] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 382.677097][ T9109] syz.4.645: attempt to access beyond end of device [ 382.677097][ T9109] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 382.690588][ T9109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 382.700854][ T9109] syz.4.645: attempt to access beyond end of device [ 382.700854][ T9109] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 382.720487][ T9109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 382.750851][ T9109] syz.4.645: attempt to access beyond end of device [ 382.750851][ T9109] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 382.905727][ T9109] syz.4.645: attempt to access beyond end of device [ 382.905727][ T9109] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 382.911548][ T9095] block nbd4: shutting down sockets [ 383.009776][ T9100] nbd4: detected capacity change from 0 to 67108884 [ 383.049374][ T9109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 383.404497][ T9116] overlay: Unknown parameter 'smackfshat' [ 383.416281][ T10] blk_print_req_error: 82 callbacks suppressed [ 383.416296][ T10] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.439433][ T9109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0 [ 383.479792][ T5813] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.830891][ T5813] buffer_io_error: 56 callbacks suppressed [ 383.830905][ T5813] Buffer I/O error on dev nbd4, logical block 0, async page read [ 384.157605][ T5813] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.222402][ T5813] Buffer I/O error on dev nbd4, logical block 1, async page read [ 384.414537][ T29] audit: type=1400 audit(1736463901.084:785): avc: denied { write } for pid=9120 comm="syz.3.653" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 384.437499][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.563324][ T5813] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.573623][ T5813] Buffer I/O error on dev nbd4, logical block 0, async page read [ 384.585794][ T5813] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.596081][ T5813] Buffer I/O error on dev nbd4, logical block 1, async page read [ 384.604219][ T5813] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.613618][ T5813] Buffer I/O error on dev nbd4, logical block 0, async page read [ 384.621724][ T5813] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.631052][ T5813] Buffer I/O error on dev nbd4, logical block 1, async page read [ 384.638939][ T5813] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.727168][ T9111] o2cb: This node has not been configured. [ 384.733170][ T9111] o2cb: Cluster check failed. Fix errors before retrying. [ 384.741900][ T9111] (syz.2.648,9111,1):user_dlm_register:674 ERROR: status = -22 [ 384.749475][ T9111] (syz.2.648,9111,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 384.763029][ T29] audit: type=1400 audit(1736463901.414:786): avc: denied { mount } for pid=9104 comm="syz.2.648" name="/" dev="ocfs2_dlmfs" ino=17379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 384.792517][ T5813] Buffer I/O error on dev nbd4, logical block 0, async page read [ 385.698676][ T5813] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 385.749407][ T29] audit: type=1400 audit(1736463901.414:787): avc: denied { write } for pid=9104 comm="syz.2.648" name="/" dev="ocfs2_dlmfs" ino=17379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.771782][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.777651][ T5813] Buffer I/O error on dev nbd4, logical block 1, async page read [ 385.786261][ T5813] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 385.795599][ T5813] Buffer I/O error on dev nbd4, logical block 0, async page read [ 385.803645][ T5813] Buffer I/O error on dev nbd4, logical block 1, async page read [ 385.812193][ T5813] ldm_validate_partition_table(): Disk read failed. [ 385.819881][ T5813] Dev nbd4: unable to read RDB block 0 [ 385.825661][ T5813] nbd4: unable to read partition table [ 385.854238][ T29] audit: type=1400 audit(1736463901.414:788): avc: denied { add_name } for pid=9104 comm="syz.2.648" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.874770][ T29] audit: type=1400 audit(1736463901.414:789): avc: denied { create } for pid=9104 comm="syz.2.648" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 385.894689][ T29] audit: type=1400 audit(1736463901.414:790): avc: denied { associate } for pid=9104 comm="syz.2.648" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 386.040003][ T9109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=1, location=1 [ 386.056659][ T5813] ldm_validate_partition_table(): Disk read failed. [ 386.063679][ T9109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 386.086143][ T5813] Dev nbd4: unable to read RDB block 0 [ 386.093483][ T5813] nbd4: unable to read partition table [ 386.100063][ T9109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 386.111006][ T9109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388609, location=8388609 [ 386.122055][ T9109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388353, location=8388353 [ 386.133301][ T9109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388608, location=8388608 [ 386.145709][ T9109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388352, location=8388352 [ 386.164050][ T9109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388607, location=8388607 [ 386.222691][ T9109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388351, location=8388351 [ 386.233605][ T9109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388459, location=8388459 [ 386.244535][ T9109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388203, location=8388203 [ 386.261278][ T9109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388457, location=8388457 [ 386.272345][ T9109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388201, location=8388201 [ 386.283440][ T9109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 386.293446][ T9109] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 386.387628][ T29] audit: type=1400 audit(1736463903.074:791): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 386.473889][ T9139] netlink: 48 bytes leftover after parsing attributes in process `syz.4.656'. [ 387.825865][ T9148] input: syz1 as /devices/virtual/input/input76 [ 391.646101][ T9175] capability: warning: `syz.4.663' uses deprecated v2 capabilities in a way that may be insecure [ 391.661495][ T9175] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 391.671769][ T9175] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 391.683384][ T9175] overlayfs: failed to get uuid (127/file1, err=-13); falling back to uuid=null. [ 393.289251][ T29] audit: type=1400 audit(1736463909.474:792): avc: denied { create } for pid=9179 comm="syz.1.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 393.309282][ T29] audit: type=1400 audit(1736463909.504:793): avc: denied { ioctl } for pid=9179 comm="syz.1.666" path="socket:[18247]" dev="sockfs" ino=18247 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 394.012181][ T9196] netlink: 52 bytes leftover after parsing attributes in process `syz.4.667'. [ 394.657158][ T9207] syz.4.667: attempt to access beyond end of device [ 394.657158][ T9207] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 394.689546][ T9207] syz.4.667: attempt to access beyond end of device [ 394.689546][ T9207] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 394.765896][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 394.778887][ T9207] syz.4.667: attempt to access beyond end of device [ 394.778887][ T9207] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 394.799866][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 394.815783][ T9207] syz.4.667: attempt to access beyond end of device [ 394.815783][ T9207] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 394.818728][ T9205] syz.0.670: attempt to access beyond end of device [ 394.818728][ T9205] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 394.859487][ T9205] syz.0.670: attempt to access beyond end of device [ 394.859487][ T9205] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 394.879529][ T9200] nbd4: detected capacity change from 0 to 67108884 [ 394.887008][ T5813] block nbd4: Send control failed (result -89) [ 394.894807][ T5813] block nbd4: Request send failed, requeueing [ 394.901795][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 394.919922][ T9193] nbd0: detected capacity change from 0 to 67108884 [ 394.920305][ T9216] input: syz1 as /devices/virtual/input/input78 [ 394.939998][ T5813] block nbd4: Dead connection, failed to find a fallback [ 394.941421][ T54] block nbd4: Receive control failed (result -32) [ 394.947023][ T5813] block nbd4: shutting down sockets [ 394.960290][ T10] blk_print_req_error: 72 callbacks suppressed [ 394.960303][ T10] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 394.975548][ T10] buffer_io_error: 55 callbacks suppressed [ 394.975559][ T10] Buffer I/O error on dev nbd4, logical block 0, async page read [ 394.980428][ T9207] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 394.989696][ T5865] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 395.009416][ T5813] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 395.030391][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 395.041012][ T9207] I/O error, dev nbd4, sector 67108880 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 395.050857][ T5813] Buffer I/O error on dev nbd4, logical block 1, async page read [ 395.050971][ T5813] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 395.050993][ T5813] Buffer I/O error on dev nbd4, logical block 0, async page read [ 395.051058][ T5813] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 395.051078][ T5813] Buffer I/O error on dev nbd4, logical block 1, async page read [ 395.051165][ T5813] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 395.051186][ T5813] Buffer I/O error on dev nbd4, logical block 0, async page read [ 395.069091][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777220, location=16777220 [ 395.136301][ T9198] block nbd0: shutting down sockets [ 395.190464][ T9207] I/O error, dev nbd4, sector 67107856 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 395.201150][ T29] audit: type=1400 audit(1736463911.884:794): avc: denied { setopt } for pid=9203 comm="syz.3.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 395.216120][ T5813] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 395.221115][ T9205] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 395.229613][ T5813] Buffer I/O error on dev nbd4, logical block 1, async page read [ 395.342053][ T5865] usb 2-1: config 2 has an invalid interface number: 174 but max is 0 [ 395.357665][ T5865] usb 2-1: config 2 has no interface number 0 [ 395.387811][ T5813] Buffer I/O error on dev nbd4, logical block 0, async page read [ 395.411452][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776964, location=16776964 [ 395.411516][ T5865] usb 2-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 395.427314][ T5943] Buffer I/O error on dev nbd0, logical block 0, async page read [ 395.461283][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0 [ 395.469719][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777219, location=16777219 [ 395.479831][ T5813] Buffer I/O error on dev nbd4, logical block 1, async page read [ 395.486947][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776963, location=16776963 [ 395.488816][ T10] Buffer I/O error on dev nbd0, logical block 1, async page read [ 395.513860][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1, location=1 [ 395.516415][ T5943] ldm_validate_partition_table(): Disk read failed. [ 395.529126][ T5813] ldm_validate_partition_table(): Disk read failed. [ 395.553173][ T5865] usb 2-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid maxpacket 1023, setting to 64 [ 395.554519][ T5943] Dev nbd0: unable to read RDB block 0 [ 395.579080][ T5865] usb 2-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 395.603659][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777218, location=16777218 [ 395.606607][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 395.615161][ T5813] Dev nbd4: unable to read RDB block 0 [ 395.625014][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 395.631294][ T5943] nbd0: unable to read partition table [ 395.641619][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776962, location=16776962 [ 395.660642][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777070, location=16777070 [ 395.664502][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777220, location=16777220 [ 395.672953][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776814, location=16776814 [ 395.683471][ T5865] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 395.694563][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777068, location=16777068 [ 395.712991][ T5813] nbd4: unable to read partition table [ 395.714661][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776812, location=16776812 [ 395.771852][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.772642][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 395.780566][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776964, location=16776964 [ 395.800984][ T5865] usb 2-1: Product: syz [ 395.801280][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 395.805133][ T5865] usb 2-1: Manufacturer: syz [ 395.817658][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388609, location=8388609 [ 395.820171][ T5865] usb 2-1: SerialNumber: syz [ 395.847442][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777219, location=16777219 [ 395.855049][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388353, location=8388353 [ 395.859146][ T5813] ldm_validate_partition_table(): Disk read failed. [ 395.875468][ T5813] Dev nbd4: unable to read RDB block 0 [ 395.881859][ T5813] nbd4: unable to read partition table [ 395.885058][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388608, location=8388608 [ 395.889769][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776963, location=16776963 [ 395.914772][ T9209] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 395.919888][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777218, location=16777218 [ 395.958752][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776962, location=16776962 [ 395.971322][ T5943] ldm_validate_partition_table(): Disk read failed. [ 395.978373][ T5943] Dev nbd0: unable to read RDB block 0 [ 395.984964][ T5943] nbd0: unable to read partition table [ 395.996449][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777070, location=16777070 [ 395.999059][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388352, location=8388352 [ 396.008774][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776814, location=16776814 [ 396.027841][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16777068, location=16777068 [ 396.040396][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=16776812, location=16776812 [ 396.047913][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388607, location=8388607 [ 396.051970][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 396.077704][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388351, location=8388351 [ 396.088777][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 396.090897][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388459, location=8388459 [ 396.098935][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388609, location=8388609 [ 396.112572][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388203, location=8388203 [ 396.127095][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388353, location=8388353 [ 396.146478][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388608, location=8388608 [ 396.158008][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388352, location=8388352 [ 396.168930][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388607, location=8388607 [ 396.180017][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388351, location=8388351 [ 396.191531][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388459, location=8388459 [ 396.202630][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388203, location=8388203 [ 396.213515][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388457, location=8388457 [ 396.225466][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8388201, location=8388201 [ 396.226510][ T9227] input: syz1 as /devices/virtual/input/input80 [ 396.236194][ T9205] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 396.246537][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388457, location=8388457 [ 396.252484][ T9205] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 396.273458][ T5865] usb 2-1: probing VID:PID(0424:012C) [ 396.280593][ T5865] usb 2-1: vub300 testing BULK IN EndPoint(0) 8E [ 396.286942][ T5865] usb 2-1: vub300 testing BULK IN EndPoint(1) 82 [ 396.293394][ T5865] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 396.310401][ T5865] vub300 2-1:2.174: probe with driver vub300 failed with error -22 [ 396.314842][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388201, location=8388201 [ 396.338730][ T5865] usb 2-1: USB disconnect, device number 3 [ 396.367026][ T9207] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 396.391790][ T9207] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 397.688426][ T5865] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 397.983857][ T9251] misc userio: The device must be registered before sending interrupts [ 398.429779][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 398.450771][ T5865] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 398.462608][ T5865] usb 1-1: config 0 has no interface number 0 [ 398.468707][ T5865] usb 1-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30 [ 398.488337][ T5865] usb 1-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 398.506136][ T5865] usb 1-1: config 0 interface 48 has no altsetting 0 [ 398.530326][ T5865] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.c2 [ 398.540215][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.563650][ T5865] usb 1-1: config 0 descriptor?? [ 398.569192][ T9257] netlink: 52 bytes leftover after parsing attributes in process `syz.2.687'. [ 398.829618][ T9261] nbd2: detected capacity change from 0 to 67108884 [ 398.864608][ T9261] block nbd2: Send control failed (result -89) [ 398.890603][ T5865] usb 1-1: string descriptor 0 read error: -71 [ 398.924450][ T5865] usbtest 1-1:0.48: couldn't get endpoints, -22 [ 398.931672][ T5865] usbtest 1-1:0.48: probe with driver usbtest failed with error -22 [ 398.947762][ T5865] usb 1-1: USB disconnect, device number 7 [ 398.959348][ T9261] block nbd2: Request send failed, requeueing [ 398.966716][ T9264] input: syz1 as /devices/virtual/input/input82 [ 398.979752][ T5830] block nbd2: Receive control failed (result -32) [ 398.980818][ T39] block nbd2: Dead connection, failed to find a fallback [ 398.993512][ T39] block nbd2: shutting down sockets [ 398.999403][ T9261] ldm_validate_partition_table(): Disk read failed. [ 399.006396][ T9261] Dev nbd2: unable to read RDB block 0 [ 399.012461][ T9261] nbd2: unable to read partition table [ 399.018663][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 399.033532][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554441, location=33554441 [ 399.044219][ T5817] ldm_validate_partition_table(): Disk read failed. [ 399.045084][ T5817] Dev nbd2: unable to read RDB block 0 [ 399.060315][ T5817] nbd2: unable to read partition table [ 399.109464][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554185, location=33554185 [ 399.127477][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554440, location=33554440 [ 399.144477][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554184, location=33554184 [ 399.167051][ T9271] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 399.188148][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554439, location=33554439 [ 399.202409][ T9271] netlink: 224 bytes leftover after parsing attributes in process `syz.1.689'. [ 399.208900][ T5813] ldm_validate_partition_table(): Disk read failed. [ 399.224176][ T5813] Dev nbd2: unable to read RDB block 0 [ 399.240308][ T5813] nbd2: unable to read partition table [ 399.263393][ T5813] ldm_validate_partition_table(): Disk read failed. [ 399.280188][ T5813] Dev nbd2: unable to read RDB block 0 [ 399.291584][ T5813] nbd2: unable to read partition table [ 399.409813][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554183, location=33554183 [ 399.612119][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554291, location=33554291 [ 399.732307][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554035, location=33554035 [ 399.743254][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554289, location=33554289 [ 399.763911][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554033, location=33554033 [ 399.804237][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 399.830358][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 399.841831][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777220, location=16777220 [ 399.856214][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776964, location=16776964 [ 399.867748][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777219, location=16777219 [ 399.885043][ T9282] input: syz1 as /devices/virtual/input/input84 [ 399.885374][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776963, location=16776963 [ 399.944401][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777218, location=16777218 [ 399.955726][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776962, location=16776962 [ 399.967207][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777070, location=16777070 [ 399.979009][ T9261] blk_print_req_error: 423 callbacks suppressed [ 399.979022][ T9261] I/O error, dev nbd2, sector 67107256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 399.996516][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776814, location=16776814 [ 400.008278][ T9261] I/O error, dev nbd2, sector 67108272 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.018748][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777068, location=16777068 [ 400.190860][ T9261] I/O error, dev nbd2, sector 67107248 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.233019][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776812, location=16776812 [ 400.266603][ T9285] input: syz1 as /devices/virtual/input/input86 [ 400.345558][ T9261] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.485444][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 400.525141][ T9261] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.547386][ T9261] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.619851][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 400.639481][ T9261] I/O error, dev nbd2, sector 67108872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.668792][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388609, location=8388609 [ 400.680045][ T9261] I/O error, dev nbd2, sector 67106824 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.690299][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388353, location=8388353 [ 400.709935][ T9261] I/O error, dev nbd2, sector 67108864 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.720443][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388608, location=8388608 [ 400.731417][ T9261] I/O error, dev nbd2, sector 67106816 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.741961][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388352, location=8388352 [ 400.752502][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388607, location=8388607 [ 400.763777][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388351, location=8388351 [ 400.775286][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388459, location=8388459 [ 400.786362][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388203, location=8388203 [ 401.105838][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388457, location=8388457 [ 401.146737][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388201, location=8388201 [ 401.157789][ T9261] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 401.167814][ T9261] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 401.306040][ T29] audit: type=1400 audit(1736463917.944:795): avc: denied { execute } for pid=9299 comm="syz.4.698" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=18389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 401.313795][ T9309] input: syz1 as /devices/virtual/input/input88 [ 401.397461][ T29] audit: type=1400 audit(1736463918.064:796): avc: denied { connect } for pid=9297 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 401.565501][ T29] audit: type=1400 audit(1736463918.254:797): avc: denied { connect } for pid=9297 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 401.606801][ T9320] misc userio: The device must be registered before sending interrupts [ 401.624922][ T29] audit: type=1400 audit(1736463918.314:798): avc: denied { read } for pid=9297 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 401.739485][ T5865] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 401.740005][ T29] audit: type=1400 audit(1736463918.434:799): avc: denied { write } for pid=9297 comm="syz.0.697" path="socket:[18399]" dev="sockfs" ino=18399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 401.901068][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 401.983900][ T9328] net_ratelimit: 4 callbacks suppressed [ 401.983971][ T9328] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 402.196718][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 402.235879][ T5865] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 402.244662][ T5865] usb 3-1: config 0 has no interface number 0 [ 402.258599][ T5865] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 402.270484][ T5865] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 402.288920][ T5865] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 402.299079][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 402.308796][ T5865] usb 3-1: Product: syz [ 402.316361][ T5865] usb 3-1: SerialNumber: syz [ 402.334359][ T5865] usb 3-1: config 0 descriptor?? [ 402.358860][ T5865] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 402.367020][ T5865] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input90 [ 402.429800][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 402.438042][ T8] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 402.448404][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.469990][ T8] usb 5-1: Product: syz [ 402.474211][ T8] usb 5-1: Manufacturer: syz [ 402.478829][ T8] usb 5-1: SerialNumber: syz [ 402.520908][ T8] usb 5-1: config 0 descriptor?? [ 402.541103][ T8] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 402.561963][ T8] usb 5-1: Detected FT-X [ 402.616821][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 402.626280][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 402.634248][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 402.641898][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 402.650015][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 402.657133][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 402.665409][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 402.672513][ T5863] usb 3-1: USB disconnect, device number 4 [ 402.679488][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 402.686444][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 402.701095][ T5863] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 402.738387][ T8] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 402.748322][ T8] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 402.757455][ T8] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 402.812851][ T8] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 403.108261][ T8] usb 5-1: USB disconnect, device number 4 [ 403.131860][ T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 403.142277][ T8] ftdi_sio 5-1:0.0: device disconnected [ 403.726493][ T9348] input: syz1 as /devices/virtual/input/input91 [ 403.756282][ T5813] udevd[5813]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 404.418246][ T9362] capability: warning: `syz.1.711' uses 32-bit capabilities (legacy support in use) [ 405.318547][ T29] audit: type=1400 audit(1736463922.004:800): avc: denied { link } for pid=9359 comm="syz.3.713" name="#1d" dev="tmpfs" ino=781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 405.487915][ T29] audit: type=1400 audit(1736463922.004:801): avc: denied { rename } for pid=9359 comm="syz.3.713" name="#1e" dev="tmpfs" ino=781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 405.570229][ T9369] xt_policy: neither incoming nor outgoing policy selected [ 405.679997][ T29] audit: type=1400 audit(1736463922.274:802): avc: denied { create } for pid=9357 comm="syz.4.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 406.352352][ T9374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3088 sclass=netlink_route_socket pid=9374 comm=syz.1.715 [ 406.552504][ T9378] tmpfs: Bad value for 'mpol' [ 406.697554][ T9382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.720'. [ 406.726175][ T9382] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.734982][ T9382] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.743703][ T9382] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.206803][ T29] audit: type=1400 audit(1736463924.864:803): avc: denied { getopt } for pid=9406 comm="syz.4.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 408.317068][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.730'. [ 408.333072][ T29] audit: type=1400 audit(1736463925.004:804): avc: denied { nlmsg_read } for pid=9412 comm="syz.4.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 408.991090][ T9416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.729'. [ 409.034644][ T9417] tipc: Started in network mode [ 409.051854][ T9417] tipc: Node identity f2cbd5e20b15, cluster identity 4711 [ 409.052011][ T9417] tipc: Enabled bearer , priority 0 [ 409.460307][ T9389] tipc: Disabling bearer [ 409.474943][ T9429] netlink: 52 bytes leftover after parsing attributes in process `syz.4.733'. [ 409.496355][ T9384] misc userio: The device must be registered before sending interrupts [ 409.666465][ T9429] nbd4: detected capacity change from 0 to 67108884 [ 409.809799][ T5813] block nbd4: Send control failed (result -89) [ 409.816026][ T5813] block nbd4: Request send failed, requeueing [ 409.822954][ T39] block nbd4: Dead connection, failed to find a fallback [ 409.830012][ T39] block nbd4: shutting down sockets [ 409.835254][ T39] blk_print_req_error: 7 callbacks suppressed [ 409.835266][ T39] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 409.850475][ T39] buffer_io_error: 345 callbacks suppressed [ 409.850485][ T39] Buffer I/O error on dev nbd4, logical block 0, async page read [ 409.867031][ T5813] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 409.876562][ T5813] Buffer I/O error on dev nbd4, logical block 0, async page read [ 409.885058][ T5813] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 409.894152][ T5813] Buffer I/O error on dev nbd4, logical block 0, async page read [ 409.902578][ T5813] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 409.911671][ T5813] Buffer I/O error on dev nbd4, logical block 0, async page read [ 410.386018][ T5813] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 410.400475][ T5813] Buffer I/O error on dev nbd4, logical block 0, async page read [ 410.408377][ T5813] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 410.417512][ T5813] Buffer I/O error on dev nbd4, logical block 0, async page read [ 410.425427][ T5813] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 410.434551][ T5813] Buffer I/O error on dev nbd4, logical block 0, async page read [ 410.442451][ T5813] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 410.451551][ T5813] Buffer I/O error on dev nbd4, logical block 0, async page read [ 410.459375][ T5813] ldm_validate_partition_table(): Disk read failed. [ 410.466064][ T5813] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 410.475144][ T5813] Buffer I/O error on dev nbd4, logical block 0, async page read [ 410.483298][ T5813] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 410.492548][ T5813] Buffer I/O error on dev nbd4, logical block 0, async page read [ 410.500648][ T5813] Dev nbd4: unable to read RDB block 0 [ 410.506331][ T5813] nbd4: unable to read partition table [ 410.513875][ T9429] ldm_validate_partition_table(): Disk read failed. [ 410.522073][ T9429] Dev nbd4: unable to read RDB block 0 [ 410.596666][ T9429] nbd4: unable to read partition table [ 410.603029][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 410.632506][ T29] audit: type=1400 audit(1736463927.314:805): avc: denied { append } for pid=9439 comm="syz.2.737" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 410.658168][ T5813] ldm_validate_partition_table(): Disk read failed. [ 410.680083][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554441, location=33554441 [ 410.680274][ T5813] Dev nbd4: unable to read RDB block 0 [ 410.691268][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554185, location=33554185 [ 410.723149][ T5813] nbd4: unable to read partition table [ 410.756152][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554440, location=33554440 [ 410.767801][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554184, location=33554184 [ 410.778940][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554439, location=33554439 [ 410.789989][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554183, location=33554183 [ 410.801373][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554291, location=33554291 [ 410.812693][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554035, location=33554035 [ 410.823663][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554289, location=33554289 [ 410.834269][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554033, location=33554033 [ 410.845549][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 410.857087][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 410.867068][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777220, location=16777220 [ 410.877941][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776964, location=16776964 [ 410.888815][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777219, location=16777219 [ 410.899976][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776963, location=16776963 [ 410.911024][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777218, location=16777218 [ 410.922041][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776962, location=16776962 [ 410.932884][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777070, location=16777070 [ 410.943732][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776814, location=16776814 [ 410.956395][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777068, location=16777068 [ 410.967190][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776812, location=16776812 [ 410.978150][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 410.990067][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 411.000297][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388609, location=8388609 [ 411.011807][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388353, location=8388353 [ 411.022616][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388608, location=8388608 [ 411.044445][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388352, location=8388352 [ 411.092779][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'. [ 411.109536][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388607, location=8388607 [ 411.138854][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388351, location=8388351 [ 411.177846][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388459, location=8388459 [ 411.195961][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388203, location=8388203 [ 411.208056][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388457, location=8388457 [ 411.220255][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388201, location=8388201 [ 411.231700][ T9429] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 411.241553][ T9429] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 411.244642][ T9448] xt_l2tp: v2 sid > 0xffff: 1245184 [ 412.365113][ T9448] syz_tun: entered allmulticast mode [ 412.434180][ T29] audit: type=1400 audit(1736463929.124:806): avc: denied { getopt } for pid=9447 comm="syz.1.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 412.663629][ T9470] input: syz1 as /devices/virtual/input/input93 [ 412.879322][ T5895] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 413.084540][ T9479] misc userio: The device must be registered before sending interrupts [ 413.526606][ T54] Bluetooth: hci4: unexpected event for opcode 0x2039 [ 413.599247][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 413.669499][ T5895] usb 4-1: config 2 has an invalid interface number: 169 but max is 0 [ 413.697144][ T5895] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 413.713342][ T5895] usb 4-1: config 2 has no interface number 0 [ 413.727081][ T5895] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 413.785863][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.818906][ T5895] cypress_m8 4-1:2.169: DeLorme Earthmate USB converter detected [ 413.847604][ T5895] earthmate ttyUSB0: required endpoint is missing [ 414.061594][ T5895] usb 4-1: USB disconnect, device number 9 [ 414.068222][ T5895] cypress_m8 4-1:2.169: device disconnected [ 414.363011][ T9503] netlink: 36 bytes leftover after parsing attributes in process `syz.2.761'. [ 414.481865][ T9505] netlink: 284 bytes leftover after parsing attributes in process `syz.1.759'. [ 414.650818][ T9508] netlink: zone id is out of range [ 414.656421][ T9508] netlink: zone id is out of range [ 414.663606][ T9508] netlink: zone id is out of range [ 414.669142][ T9508] netlink: zone id is out of range [ 414.674682][ T9508] netlink: zone id is out of range [ 414.682978][ T9508] netlink: zone id is out of range [ 414.688478][ T9508] netlink: zone id is out of range [ 414.695574][ T9508] netlink: zone id is out of range [ 414.700989][ T9508] netlink: zone id is out of range [ 414.706124][ T9508] netlink: zone id is out of range [ 414.913636][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.758'. [ 414.967562][ T9506] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 416.379384][ T5864] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 416.410704][ T9537] input: syz1 as /devices/virtual/input/input95 [ 416.689260][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 416.699046][ T5864] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 416.796175][ T9545] overlayfs: failed to resolve './file1': -2 [ 417.103832][ T5864] usb 1-1: config 2 has no interface number 0 [ 417.223676][ T5864] usb 1-1: config 2 interface 31 has no altsetting 0 [ 417.242655][ T5864] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 417.261690][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.437954][ T5864] usb 1-1: Product: syz [ 417.447636][ T5864] usb 1-1: Manufacturer: syz [ 417.453174][ T5864] usb 1-1: SerialNumber: syz [ 417.987594][ T9567] input: syz1 as /devices/virtual/input/input97 [ 418.327428][ T9571] syzkaller1: entered promiscuous mode [ 418.333634][ T9571] syzkaller1: entered allmulticast mode [ 418.365422][ T9571] netlink: 36 bytes leftover after parsing attributes in process `syz.4.779'. [ 419.142825][ T5864] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 419.157345][ T5864] usb 1-1: USB disconnect, device number 8 [ 419.172819][ T9586] input: syz1 as /devices/virtual/input/input99 [ 420.097508][ T29] audit: type=1400 audit(1736463936.364:807): avc: denied { ioctl } for pid=9587 comm="syz.4.787" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 420.128171][ T9598] input: syz1 as /devices/virtual/input/input101 [ 420.189846][ T29] audit: type=1400 audit(1736463936.594:808): avc: denied { ioctl } for pid=9587 comm="syz.4.787" path="socket:[19213]" dev="sockfs" ino=19213 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 420.817612][ T9614] Driver unsupported XDP return value 0 on prog (id 185) dev N/A, expect packet loss! [ 420.889429][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 421.020959][ T29] audit: type=1400 audit(1736463937.704:809): avc: denied { attach_queue } for pid=9615 comm="syz.3.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 421.073333][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 421.099433][ T8] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 421.128972][ T8] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 421.175794][ T8] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 421.202284][ T8] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 421.257782][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 421.275854][ T8] usb 1-1: config 0 has no interface number 0 [ 421.298305][ T8] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 421.628285][ T9636] netlink: 36 bytes leftover after parsing attributes in process `syz.2.797'. [ 421.861359][ T8] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 421.871270][ T8] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 421.881134][ T8] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 421.894211][ T8] usb 1-1: config 0 interface 125 has no altsetting 0 [ 421.915345][ T8] usb 1-1: config 0 interface 125 has no altsetting 2 [ 421.952507][ T9625] input: syz1 as /devices/virtual/input/input102 [ 421.952546][ T8] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 421.981834][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.997798][ T8] usb 1-1: Product: syz [ 422.003129][ T8] usb 1-1: Manufacturer: syz [ 422.003141][ T8] usb 1-1: SerialNumber: syz [ 422.018046][ T8] usb 1-1: config 0 descriptor?? [ 422.084220][ T8] usb 1-1: selecting invalid altsetting 2 [ 422.294636][ C0] usb 1-1: async_complete: urb error -71 [ 422.300409][ C0] usb 1-1: async_complete: urb error -71 [ 422.306106][ C0] usb 1-1: async_complete: urb error -71 [ 422.311796][ C0] usb 1-1: async_complete: urb error -71 [ 422.318469][ T8] get_1284_register: usb error -71 [ 422.323867][ T8] uss720 1-1:0.125: probe with driver uss720 failed with error -71 [ 422.342933][ T8] usb 1-1: USB disconnect, device number 9 [ 423.020285][ T9655] netlink: 52 bytes leftover after parsing attributes in process `syz.2.806'. [ 423.169924][ T9663] nbd2: detected capacity change from 0 to 67108884 [ 423.182549][ T9663] block nbd2: Send control failed (result -89) [ 423.209435][ T9663] block nbd2: Request send failed, requeueing [ 423.217912][ T54] block nbd2: Receive control failed (result -32) [ 423.225244][ T39] block nbd2: Dead connection, failed to find a fallback [ 423.232465][ T39] block nbd2: shutting down sockets [ 423.237669][ T39] blk_print_req_error: 130 callbacks suppressed [ 423.237681][ T39] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.253535][ T39] buffer_io_error: 90 callbacks suppressed [ 423.253547][ T39] Buffer I/O error on dev nbd2, logical block 0, async page read [ 423.267723][ T9663] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.289268][ T9663] Buffer I/O error on dev nbd2, logical block 0, async page read [ 423.333090][ T9663] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.359071][ T9663] Buffer I/O error on dev nbd2, logical block 0, async page read [ 423.373876][ T9663] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.499348][ T9663] Buffer I/O error on dev nbd2, logical block 0, async page read [ 423.508989][ T9663] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.518976][ T9663] Buffer I/O error on dev nbd2, logical block 0, async page read [ 423.543309][ T9663] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.663892][ T9675] syzkaller1: entered promiscuous mode [ 423.669490][ T9675] syzkaller1: entered allmulticast mode [ 423.687981][ T9675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.812'. [ 423.757071][ T9663] Buffer I/O error on dev nbd2, logical block 0, async page read [ 424.179640][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.813'. [ 424.188708][ T9663] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.232843][ T9663] Buffer I/O error on dev nbd2, logical block 0, async page read [ 424.241964][ T9663] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.257496][ T9663] Buffer I/O error on dev nbd2, logical block 0, async page read [ 424.267443][ T9663] ldm_validate_partition_table(): Disk read failed. [ 424.274411][ T9663] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.283687][ T9663] Buffer I/O error on dev nbd2, logical block 0, async page read [ 424.320602][ T9676] input: syz1 as /devices/virtual/input/input104 [ 424.339807][ T9663] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.388925][ T9663] Buffer I/O error on dev nbd2, logical block 0, async page read [ 424.401908][ T9663] Dev nbd2: unable to read RDB block 0 [ 424.419571][ T9663] nbd2: unable to read partition table [ 424.434977][ T5813] ldm_validate_partition_table(): Disk read failed. [ 424.452780][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 424.479758][ T5813] Dev nbd2: unable to read RDB block 0 [ 424.486805][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554441, location=33554441 [ 424.506727][ T5813] nbd2: unable to read partition table [ 424.566179][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554185, location=33554185 [ 424.707905][ T5813] ldm_validate_partition_table(): Disk read failed. [ 424.725050][ T5813] Dev nbd2: unable to read RDB block 0 [ 424.738271][ T5813] nbd2: unable to read partition table [ 424.828447][ T9686] input: syz1 as /devices/virtual/input/input106 [ 424.859532][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554440, location=33554440 [ 424.870174][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554184, location=33554184 [ 424.885342][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554439, location=33554439 [ 424.988414][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554183, location=33554183 [ 425.011023][ T9696] netlink: 156 bytes leftover after parsing attributes in process `syz.3.818'. [ 425.565675][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554291, location=33554291 [ 425.576877][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554035, location=33554035 [ 425.591968][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554289, location=33554289 [ 425.609370][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554033, location=33554033 [ 426.008233][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 426.018760][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 426.037394][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777220, location=16777220 [ 426.083596][ T29] audit: type=1400 audit(1736463942.754:810): avc: denied { append } for pid=9705 comm="syz.3.822" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 426.103594][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776964, location=16776964 [ 426.174478][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777219, location=16777219 [ 426.193421][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776963, location=16776963 [ 426.213974][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777218, location=16777218 [ 426.227423][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776962, location=16776962 [ 426.242361][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777070, location=16777070 [ 426.256590][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776814, location=16776814 [ 426.276665][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777068, location=16777068 [ 426.288690][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776812, location=16776812 [ 426.299638][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 426.310367][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 426.340006][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388609, location=8388609 [ 426.364851][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388353, location=8388353 [ 426.375688][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388608, location=8388608 [ 426.388175][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388352, location=8388352 [ 426.402176][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388607, location=8388607 [ 426.413492][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388351, location=8388351 [ 426.426291][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388459, location=8388459 [ 426.438947][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388203, location=8388203 [ 426.454467][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388457, location=8388457 [ 426.519743][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388201, location=8388201 [ 426.533436][ T9663] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 426.544323][ T9663] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 426.880157][ T9741] input: syz1 as /devices/virtual/input/input108 [ 427.030557][ T5864] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 427.286540][ T9754] misc userio: The device must be registered before sending interrupts [ 428.109240][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 428.128459][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.139888][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.488700][ T9756] input: syz1 as /devices/virtual/input/input110 [ 428.647555][ T5864] usb 2-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 428.656691][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.667017][ T5864] usb 2-1: config 0 descriptor?? [ 428.709723][ T9762] netlink: 52 bytes leftover after parsing attributes in process `syz.2.839'. [ 428.721668][ T9759] omfs: Invalid superblock (0) [ 428.739332][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 428.809359][ T9764] nbd2: detected capacity change from 0 to 67108884 [ 428.822557][ T9764] block nbd2: Send control failed (result -89) [ 428.828959][ T9764] block nbd2: Request send failed, requeueing [ 428.843052][ T10] block nbd2: Dead connection, failed to find a fallback [ 428.850545][ T10] block nbd2: shutting down sockets [ 428.855778][ T10] blk_print_req_error: 154 callbacks suppressed [ 428.855790][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.871869][ T10] buffer_io_error: 114 callbacks suppressed [ 428.871880][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 428.886218][ T9764] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.895465][ T9764] Buffer I/O error on dev nbd2, logical block 0, async page read [ 428.920633][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.931856][ T9764] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.941029][ T9764] Buffer I/O error on dev nbd2, logical block 0, async page read [ 428.948982][ T9764] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.967839][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 428.980809][ T8] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 428.983817][ T9764] Buffer I/O error on dev nbd2, logical block 0, async page read [ 428.989854][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.995105][ T8] usb 1-1: config 0 descriptor?? [ 429.002510][ T9764] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.019815][ T9764] Buffer I/O error on dev nbd2, logical block 0, async page read [ 429.027869][ T9764] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.037241][ T9764] Buffer I/O error on dev nbd2, logical block 0, async page read [ 429.045642][ T9764] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.054735][ T9764] Buffer I/O error on dev nbd2, logical block 0, async page read [ 429.062644][ T9764] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.071993][ T9764] Buffer I/O error on dev nbd2, logical block 0, async page read [ 429.080153][ T9764] ldm_validate_partition_table(): Disk read failed. [ 429.086786][ T9764] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.095888][ T9764] Buffer I/O error on dev nbd2, logical block 0, async page read [ 429.103799][ T9764] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.115053][ T9764] Buffer I/O error on dev nbd2, logical block 0, async page read [ 429.123083][ T9764] Dev nbd2: unable to read RDB block 0 [ 429.129474][ T9764] nbd2: unable to read partition table [ 429.135811][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 429.145805][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554441, location=33554441 [ 429.156392][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554185, location=33554185 [ 429.167017][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554440, location=33554440 [ 429.169893][ T5817] ldm_validate_partition_table(): Disk read failed. [ 429.177531][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554184, location=33554184 [ 429.194566][ T5897] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 429.198151][ T5817] Dev nbd2: unable to read RDB block 0 [ 429.202514][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554439, location=33554439 [ 429.219354][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554183, location=33554183 [ 429.221610][ T5864] hid_mf 0003:0079:1803.0001: unknown main item tag 0x0 [ 429.239307][ T5817] nbd2: unable to read partition table [ 429.244607][ T5864] hid_mf 0003:0079:1803.0001: unknown main item tag 0x0 [ 429.246139][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554291, location=33554291 [ 429.256937][ T5864] hid_mf 0003:0079:1803.0001: unknown main item tag 0x0 [ 429.262549][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554035, location=33554035 [ 429.272810][ T5864] hid_mf 0003:0079:1803.0001: unknown main item tag 0x0 [ 429.281829][ T5817] ldm_validate_partition_table(): Disk read failed. [ 429.286822][ T5864] hid_mf 0003:0079:1803.0001: unknown main item tag 0x0 [ 429.293170][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554289, location=33554289 [ 429.311833][ T5817] Dev nbd2: unable to read RDB block 0 [ 429.316377][ T5864] hid_mf 0003:0079:1803.0001: hidraw0: USB HID v0.00 Device [HID 0079:1803] on usb-dummy_hcd.1-1/input0 [ 429.318200][ T5817] nbd2: unable to read partition table [ 429.328649][ T5864] hid_mf 0003:0079:1803.0001: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 429.337120][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554033, location=33554033 [ 429.360343][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 429.373619][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 429.383346][ T46] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 429.391425][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777220, location=16777220 [ 429.402426][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776964, location=16776964 [ 429.413145][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777219, location=16777219 [ 429.423795][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776963, location=16776963 [ 429.434857][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777218, location=16777218 [ 429.445469][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776962, location=16776962 [ 429.456019][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777070, location=16777070 [ 429.466892][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776814, location=16776814 [ 429.472571][ T5864] usb 2-1: USB disconnect, device number 4 [ 429.477440][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777068, location=16777068 [ 429.494113][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776812, location=16776812 [ 429.504682][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 429.507501][ T8] ortek 0003:1223:3F07.0002: Fixing up logical maximum in report descriptor (Skycable) [ 429.515067][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 429.534029][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388609, location=8388609 [ 429.545007][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388353, location=8388353 [ 429.555862][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388608, location=8388608 [ 429.568826][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388352, location=8388352 [ 429.571587][ T8] ortek 0003:1223:3F07.0002: unknown main item tag 0x6 [ 429.579501][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388607, location=8388607 [ 429.596269][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388351, location=8388351 [ 429.606960][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388459, location=8388459 [ 429.609474][ T8] ortek 0003:1223:3F07.0002: report_id 29495 is invalid [ 429.619415][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388203, location=8388203 [ 429.627299][ T8] ortek 0003:1223:3F07.0002: item 0 2 1 8 parsing failed [ 429.634360][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388457, location=8388457 [ 429.645441][ T8] ortek 0003:1223:3F07.0002: probe with driver ortek failed with error -22 [ 429.652469][ T5897] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.670572][ T5897] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.679928][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388201, location=8388201 [ 429.690363][ T9764] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 429.700050][ T9764] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 429.719326][ T5897] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 429.728391][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 429.742632][ T5897] usb 4-1: SerialNumber: syz [ 429.747915][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 429.757042][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.768677][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.794416][ T9770] batadv_slave_1: entered promiscuous mode [ 429.803544][ T8] usb 1-1: USB disconnect, device number 10 [ 429.806310][ T9769] batadv_slave_1: left promiscuous mode [ 429.815591][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.828522][ T46] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 429.837625][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.848516][ T46] usb 5-1: config 0 descriptor?? [ 429.964899][ T5897] usb 4-1: 0:2 : does not exist [ 429.982986][ T5897] usb 4-1: USB disconnect, device number 10 [ 430.159354][ T5895] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 430.170260][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.261005][ T46] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 430.268441][ T46] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 430.275948][ T46] hid-u2fzero 0003:10C4:8ACF.0003: item fetching failed at offset 2/5 [ 430.284414][ T46] hid-u2fzero 0003:10C4:8ACF.0003: probe with driver hid-u2fzero failed with error -22 [ 430.309356][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 430.316445][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.327571][ T5895] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 430.341837][ T5895] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 430.355160][ T5895] usb 3-1: config 0 interface 0 has no altsetting 0 [ 430.365761][ T5895] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 430.377574][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.386720][ T5895] usb 3-1: Product: syz [ 430.391801][ T5895] usb 3-1: Manufacturer: syz [ 430.396463][ T5895] usb 3-1: SerialNumber: syz [ 430.403950][ T5895] usb 3-1: config 0 descriptor?? [ 430.449302][ T5897] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 430.464011][ T5864] usb 5-1: USB disconnect, device number 5 [ 430.527485][ T9784] input: syz1 as /devices/virtual/input/input111 [ 430.594208][ T9788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.851'. [ 430.600445][ T5897] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 430.606443][ T9788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.851'. [ 430.623264][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.640079][ T5897] usb 2-1: config 0 descriptor?? [ 430.815480][ T9794] input: syz1 as /devices/virtual/input/input113 [ 430.852662][ T5897] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 430.853171][ T5864] usb 3-1: USB disconnect, device number 5 [ 430.861833][ T5897] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 430.939326][ T5895] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 431.090187][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 431.117585][ T5897] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 431.124719][ T5897] [drm] Initialized udl on minor 2 [ 431.135007][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.163262][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.173262][ T5895] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 431.184019][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.205903][ T5895] usb 4-1: config 0 descriptor?? [ 431.705054][ T5897] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 431.718516][ T5897] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 431.728483][ T5823] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 431.766197][ T5895] corsair 0003:1B1C:1B02.0004: unknown main item tag 0x0 [ 431.776429][ T5897] usb 2-1: USB disconnect, device number 5 [ 431.790478][ T5823] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 431.799637][ T5895] corsair 0003:1B1C:1B02.0004: unknown main item tag 0x0 [ 431.809136][ T5895] corsair 0003:1B1C:1B02.0004: item fetching failed at offset 2/5 [ 431.833068][ T5895] corsair 0003:1B1C:1B02.0004: parse failed [ 431.860021][ T5895] corsair 0003:1B1C:1B02.0004: probe with driver corsair failed with error -22 [ 431.988781][ T5865] usb 4-1: USB disconnect, device number 11 [ 431.991858][ T9821] netlink: 'syz.4.864': attribute type 1 has an invalid length. [ 432.003605][ T9821] netlink: 224 bytes leftover after parsing attributes in process `syz.4.864'. [ 432.040359][ T5864] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 432.089520][ T9823] syzkaller1: entered promiscuous mode [ 432.095311][ T9823] syzkaller1: entered allmulticast mode [ 432.165988][ T54] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 432.206767][ T29] audit: type=1400 audit(1736463948.894:811): avc: denied { mounton } for pid=9828 comm="syz.1.868" path="/187/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1 [ 432.229476][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.259018][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 432.280482][ T5864] usb 1-1: config 2 has an invalid interface number: 1 but max is 0 [ 432.291600][ T5864] usb 1-1: config 2 has no interface number 0 [ 432.303945][ T5864] usb 1-1: config 2 interface 1 has no altsetting 0 [ 432.317366][ T5864] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 432.326811][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.338523][ T5864] usb 1-1: Product: syz [ 432.408140][ T5864] usb 1-1: Manufacturer: syz [ 432.439243][ T5864] usb 1-1: SerialNumber: syz [ 433.184120][ T5864] snd-usb-audio 1-1:2.1: probe with driver snd-usb-audio failed with error -22 [ 433.338006][ T29] audit: type=1400 audit(1736463950.024:812): avc: denied { map } for pid=9849 comm="syz.3.875" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 433.365677][ T29] audit: type=1326 audit(1736463950.054:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cae185d29 code=0x7ffc0000 [ 433.390251][ T29] audit: type=1326 audit(1736463950.054:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cae185d29 code=0x7ffc0000 [ 433.413826][ T29] audit: type=1326 audit(1736463950.054:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cae185d29 code=0x7ffc0000 [ 433.448256][ T29] audit: type=1326 audit(1736463950.054:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cae185d29 code=0x7ffc0000 [ 433.509124][ T29] audit: type=1326 audit(1736463950.054:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cae185d29 code=0x7ffc0000 [ 433.599563][ T29] audit: type=1326 audit(1736463950.054:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cae185d29 code=0x7ffc0000 [ 433.627201][ T29] audit: type=1326 audit(1736463950.054:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cae185d29 code=0x7ffc0000 [ 433.658667][ T5864] usb 1-1: us122l: couldn't allocate write buffer [ 433.666918][ T5864] snd-usb-us122l 1-1:2.1: probe with driver snd-usb-us122l failed with error -22 [ 433.680487][ T29] audit: type=1326 audit(1736463950.054:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9856 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cae185d29 code=0x7ffc0000 [ 433.726150][ T5864] usb 1-1: USB disconnect, device number 11 [ 434.057335][ T9876] netlink: 36 bytes leftover after parsing attributes in process `syz.2.882'. [ 434.074768][ T9855] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 434.074826][ T9848] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 434.170796][ T9848] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 434.279458][ T9855] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 434.290550][ T9848] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 434.296659][ T9848] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 434.332926][ T9855] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 434.365636][ T9848] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 434.374654][ T9848] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 434.459413][ T9848] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 434.477921][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.499718][ T9848] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 434.505517][ T9884] input: syz1 as /devices/virtual/input/input115 [ 434.889269][ T5895] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 435.042305][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.099340][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.133018][ T5895] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 435.156443][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.169300][ T5897] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 435.183723][ T5895] usb 3-1: config 0 descriptor?? [ 435.399312][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 435.456091][ T9905] syzkaller1: entered promiscuous mode [ 435.461762][ T9905] syzkaller1: entered allmulticast mode [ 435.484287][ T9905] netlink: 36 bytes leftover after parsing attributes in process `syz.0.893'. [ 435.523318][ T5897] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 435.604831][ T5897] usb 4-1: config 0 has no interface number 0 [ 435.803369][ T5897] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 435.812827][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.838726][ T5897] usb 4-1: Product: syz [ 435.852423][ T5897] usb 4-1: Manufacturer: syz [ 435.867598][ T5897] usb 4-1: SerialNumber: syz [ 435.893157][ T5897] usb 4-1: config 0 descriptor?? [ 435.911053][ T5897] smsc95xx v2.0.0 [ 436.008255][ T5895] steelseries 0003:1038:12B6.0005: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 436.075129][ T9907] input: syz1 as /devices/virtual/input/input116 [ 436.559611][ T5864] usb 3-1: USB disconnect, device number 6 [ 436.668130][ T9926] netlink: 32 bytes leftover after parsing attributes in process `syz.4.901'. [ 436.977108][ T9933] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 436.990240][ T5897] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 437.017618][ T5897] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 437.030620][ T5897] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 437.042450][ T5897] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 437.104593][ T5897] usb 4-1: USB disconnect, device number 12 [ 437.210163][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 437.210177][ T29] audit: type=1400 audit(1736463953.894:827): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 437.280497][ T9935] netlink: 52 bytes leftover after parsing attributes in process `syz.1.905'. [ 437.364129][ T29] audit: type=1400 audit(1736463954.054:828): avc: denied { write } for pid=9940 comm="syz.4.906" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 437.423048][ T9942] nbd1: detected capacity change from 0 to 67108884 [ 437.546877][ T9945] syzkaller1: entered promiscuous mode [ 437.552462][ T9945] syzkaller1: entered allmulticast mode [ 437.571285][ T9945] netlink: 36 bytes leftover after parsing attributes in process `syz.0.907'. [ 437.697273][ T9942] block nbd1: Send control failed (result -89) [ 437.704214][ T9942] block nbd1: Request send failed, requeueing [ 437.772717][ T39] block nbd1: Dead connection, failed to find a fallback [ 437.780477][ T39] block nbd1: shutting down sockets [ 437.785865][ T39] blk_print_req_error: 178 callbacks suppressed [ 437.785894][ T39] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.816036][ T39] buffer_io_error: 138 callbacks suppressed [ 437.816066][ T39] Buffer I/O error on dev nbd1, logical block 0, async page read [ 437.831695][ T9942] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.847530][ T9942] Buffer I/O error on dev nbd1, logical block 0, async page read [ 437.856354][ T9942] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.924793][ T9942] Buffer I/O error on dev nbd1, logical block 0, async page read [ 437.925126][ T29] audit: type=1400 audit(1736463954.614:829): avc: denied { bind } for pid=9940 comm="syz.4.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 437.939468][ T9942] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.264755][ T9942] Buffer I/O error on dev nbd1, logical block 0, async page read [ 438.272821][ T9942] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.283585][ T9942] Buffer I/O error on dev nbd1, logical block 0, async page read [ 438.293243][ T9942] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.318042][ T29] audit: type=1400 audit(1736463955.004:830): avc: denied { connect } for pid=9952 comm="syz.3.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 438.395538][ T9942] Buffer I/O error on dev nbd1, logical block 0, async page read [ 438.641950][ T9942] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.653653][ T9942] Buffer I/O error on dev nbd1, logical block 0, async page read [ 438.664671][ T9942] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.831331][ T9942] Buffer I/O error on dev nbd1, logical block 0, async page read [ 438.839872][ T9942] ldm_validate_partition_table(): Disk read failed. [ 438.846556][ T9942] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.887833][ T9957] input: syz1 as /devices/virtual/input/input118 [ 438.889836][ T9942] Buffer I/O error on dev nbd1, logical block 0, async page read [ 438.915835][ T9942] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.952932][ T9942] Buffer I/O error on dev nbd1, logical block 0, async page read [ 438.980514][ T9942] Dev nbd1: unable to read RDB block 0 [ 438.988325][ T9942] nbd1: unable to read partition table [ 438.995621][ T5813] ldm_validate_partition_table(): Disk read failed. [ 439.005140][ T5813] Dev nbd1: unable to read RDB block 0 [ 439.029521][ T5813] nbd1: unable to read partition table [ 439.056313][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 439.070273][ T5813] ldm_validate_partition_table(): Disk read failed. [ 439.089402][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554441, location=33554441 [ 439.107493][ T5813] Dev nbd1: unable to read RDB block 0 [ 439.117067][ T5813] nbd1: unable to read partition table [ 439.193580][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554185, location=33554185 [ 439.273617][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554440, location=33554440 [ 439.328168][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554184, location=33554184 [ 439.375505][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554439, location=33554439 [ 439.429140][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554183, location=33554183 [ 439.461369][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554291, location=33554291 [ 439.482390][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554035, location=33554035 [ 439.604746][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554289, location=33554289 [ 439.606831][ T9990] nbd: nbd2 already in use [ 439.621236][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554033, location=33554033 [ 439.633202][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.658172][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 439.706889][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 439.786402][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777220, location=16777220 [ 439.811553][ T5897] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 439.877318][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776964, location=16776964 [ 439.946074][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777219, location=16777219 [ 440.023638][ T5897] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 440.059870][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.079231][ T5897] usb 4-1: Product: syz [ 440.092422][ T5897] usb 4-1: Manufacturer: syz [ 440.097023][ T5897] usb 4-1: SerialNumber: syz [ 440.153093][ T5897] usb 4-1: config 0 descriptor?? [ 440.177903][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776963, location=16776963 [ 440.198484][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777218, location=16777218 [ 440.209000][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776962, location=16776962 [ 440.219693][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777070, location=16777070 [ 440.230300][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776814, location=16776814 [ 440.240826][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777068, location=16777068 [ 440.252094][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776812, location=16776812 [ 440.262751][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 440.291375][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 440.301153][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388609, location=8388609 [ 440.311576][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388353, location=8388353 [ 440.321942][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388608, location=8388608 [ 440.333330][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388352, location=8388352 [ 440.343760][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388607, location=8388607 [ 440.354186][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388351, location=8388351 [ 440.364600][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388459, location=8388459 [ 440.375118][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388203, location=8388203 [ 440.385477][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388457, location=8388457 [ 440.396132][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388201, location=8388201 [ 440.406812][ T9942] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 440.416458][ T9942] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 440.429324][ T5895] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 440.574724][ T29] audit: type=1400 audit(1736463957.264:831): avc: denied { create } for pid=10002 comm="syz.2.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 440.600911][ T29] audit: type=1400 audit(1736463957.294:832): avc: denied { write } for pid=10002 comm="syz.2.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 440.619513][T10003] netlink: 32 bytes leftover after parsing attributes in process `syz.2.928'. [ 440.704978][ T5895] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 440.714531][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.735420][ T5895] usb 1-1: config 0 descriptor?? [ 440.781137][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.929'. [ 441.029082][ T5895] kaweth 1-1:0.0: Firmware present in device. [ 441.268668][ T5897] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 441.278968][ T5895] kaweth 1-1:0.0: Statistics collection: 0 [ 441.284833][ T5897] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 441.296839][ T5895] kaweth 1-1:0.0: Multicast filter limit: 0 [ 441.302957][ T5895] kaweth 1-1:0.0: MTU: 0 [ 441.893166][ T5897] asix 4-1:0.0: probe with driver asix failed with error -71 [ 441.901778][ T5895] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 441.910506][T10011] netlink: 36 bytes leftover after parsing attributes in process `syz.2.931'. [ 441.918460][ T5897] usb 4-1: USB disconnect, device number 13 [ 442.169302][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 442.321445][ T5895] kaweth 1-1:0.0: kaweth interface created at eth1 [ 442.350130][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 442.383312][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 442.403567][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 442.417382][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 442.432092][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.466468][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 442.483975][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.526237][ T5864] usb 1-1: USB disconnect, device number 12 [ 442.719963][ T8] usb 2-1: GET_CAPABILITIES returned 0 [ 442.735657][ T8] usbtmc 2-1:16.0: can't read capabilities [ 442.941665][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.957146][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.966242][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.975300][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.984345][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.993383][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 443.002419][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 443.011452][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 443.020536][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.033002][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 443.042067][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 443.051132][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 443.060194][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 443.069243][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 443.078289][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 443.087344][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 443.096967][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.104478][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 443.162912][ T8] usb 2-1: USB disconnect, device number 6 [ 443.250992][T10063] netlink: 52 bytes leftover after parsing attributes in process `syz.2.941'. [ 443.349443][T10066] nbd2: detected capacity change from 0 to 67108884 [ 443.358755][ T5813] block nbd2: Send control failed (result -89) [ 443.365579][ T5813] block nbd2: Request send failed, requeueing [ 443.372052][ T26] block nbd2: Dead connection, failed to find a fallback [ 443.372162][ T5830] block nbd2: Receive control failed (result -32) [ 443.379136][ T26] block nbd2: shutting down sockets [ 443.390931][ T26] blk_print_req_error: 130 callbacks suppressed [ 443.390963][ T26] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 443.406394][ T26] buffer_io_error: 90 callbacks suppressed [ 443.406405][ T26] Buffer I/O error on dev nbd2, logical block 0, async page read [ 443.420197][ T5895] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 443.427905][ T5813] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 443.437427][ T5813] Buffer I/O error on dev nbd2, logical block 0, async page read [ 443.445375][ T5813] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 443.454692][ T5813] Buffer I/O error on dev nbd2, logical block 0, async page read [ 443.464847][ T5813] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 443.474115][ T5864] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 443.484495][ T5813] Buffer I/O error on dev nbd2, logical block 0, async page read [ 443.492907][ T5813] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 443.502113][ T5813] Buffer I/O error on dev nbd2, logical block 0, async page read [ 443.510912][ T5813] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 443.520497][ T5813] Buffer I/O error on dev nbd2, logical block 0, async page read [ 443.528321][ T5813] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 443.539287][ T5813] Buffer I/O error on dev nbd2, logical block 0, async page read [ 443.547435][ T5813] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 443.556757][ T5813] Buffer I/O error on dev nbd2, logical block 0, async page read [ 443.565429][ T5813] ldm_validate_partition_table(): Disk read failed. [ 443.572885][ T5813] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 443.582247][ T5813] Buffer I/O error on dev nbd2, logical block 0, async page read [ 443.591584][ T5813] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 443.601025][ T5813] Buffer I/O error on dev nbd2, logical block 0, async page read [ 443.608810][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.609425][ T5813] Dev nbd2: unable to read RDB block 0 [ 443.619595][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 443.625250][ T5813] nbd2: unable to read partition table [ 443.639604][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 443.644808][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.658905][T10066] ldm_validate_partition_table(): Disk read failed. [ 443.662564][ T5895] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 443.667198][T10066] Dev nbd2: unable to read RDB block 0 [ 443.676159][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.681361][T10066] nbd2: unable to read partition table [ 443.691977][ T5895] usb 1-1: Product: syz [ 443.694330][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.698216][ T5895] usb 1-1: Manufacturer: syz [ 443.708936][ T5864] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 443.722260][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.735228][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 443.744919][ T5813] ldm_validate_partition_table(): Disk read failed. [ 443.752932][ T5895] usb 1-1: SerialNumber: syz [ 443.753387][ T5864] usb 4-1: config 0 descriptor?? [ 443.763812][ T5813] Dev nbd2: unable to read RDB block 0 [ 443.767872][ T5895] usb 1-1: config 0 descriptor?? [ 443.770732][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554441, location=33554441 [ 443.786625][ T5813] nbd2: unable to read partition table [ 443.793893][ T5864] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 443.803452][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554185, location=33554185 [ 443.814651][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554440, location=33554440 [ 443.825243][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554184, location=33554184 [ 443.836253][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554439, location=33554439 [ 443.847036][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554183, location=33554183 [ 443.883121][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554291, location=33554291 [ 443.896238][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554035, location=33554035 [ 443.908337][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554289, location=33554289 [ 443.919068][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554033, location=33554033 [ 443.930056][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 443.941441][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 443.951275][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777220, location=16777220 [ 443.961997][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776964, location=16776964 [ 443.972854][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777219, location=16777219 [ 443.984681][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776963, location=16776963 [ 444.002788][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777218, location=16777218 [ 444.014740][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776962, location=16776962 [ 444.025770][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777070, location=16777070 [ 444.035779][ T5895] usb 1-1: USB disconnect, device number 13 [ 444.036823][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776814, location=16776814 [ 444.058843][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777068, location=16777068 [ 444.079057][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776812, location=16776812 [ 444.092042][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 444.102763][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 444.113994][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388609, location=8388609 [ 444.124646][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388353, location=8388353 [ 444.135002][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 444.143342][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388608, location=8388608 [ 444.153878][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388352, location=8388352 [ 444.164960][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388607, location=8388607 [ 444.175548][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388351, location=8388351 [ 444.186768][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388459, location=8388459 [ 444.197220][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388203, location=8388203 [ 444.207646][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388457, location=8388457 [ 444.218384][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388201, location=8388201 [ 444.228843][T10066] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 444.238424][T10066] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 444.241777][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.299707][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 444.307468][ T8] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 444.328345][ T8] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.349369][ T8] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 444.365020][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 444.376085][ T8] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 444.386677][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.401287][ T8] usb 2-1: config 0 descriptor?? [ 444.460470][ T1200] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 444.493724][ T1200] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 444.839498][ T8] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0007/input/input120 [ 444.879811][ T970] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 444.889308][ T1200] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 444.926075][ T8] sony 0003:054C:03D5.0007: input,hidraw1: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 445.039473][ T1200] usb 3-1: Using ep0 maxpacket: 32 [ 445.045059][ T5864] usb 2-1: USB disconnect, device number 7 [ 445.057804][ T970] usb 1-1: Using ep0 maxpacket: 8 [ 445.069726][ T1200] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 445.078788][ T1200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.093039][ T1200] usb 3-1: Product: syz [ 445.097367][ T1200] usb 3-1: Manufacturer: syz [ 445.102571][ T970] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 445.103879][ T1200] usb 3-1: SerialNumber: syz [ 445.116420][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.117597][ T1200] usb 3-1: config 0 descriptor?? [ 445.124525][ T970] usb 1-1: Product: syz [ 445.124543][ T970] usb 1-1: Manufacturer: syz [ 445.124557][ T970] usb 1-1: SerialNumber: syz [ 445.145709][ T970] usb 1-1: config 0 descriptor?? [ 445.152897][ T970] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 445.683181][T10089] input: syz1 as /devices/virtual/input/input121 [ 445.759387][ T970] gspca_sunplus: reg_w_riv err -71 [ 445.764606][ T970] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 445.783711][ T970] usb 1-1: USB disconnect, device number 14 [ 445.915795][ T29] audit: type=1804 audit(1736463962.604:833): pid=10093 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.953" name="/newroot/204/file0/file0" dev="ramfs" ino=21214 res=1 errno=0 [ 445.947235][ T1200] (unnamed net_device) (uninitialized): Assigned a random MAC address: f6:52:e7:92:6f:38 [ 445.966582][ T1200] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 445.975915][ T1200] usb 3-1: USB disconnect, device number 7 [ 446.149913][T10099] input: syz1 as /devices/virtual/input/input123 [ 446.255940][ T5864] usb 4-1: USB disconnect, device number 14 [ 446.742212][ T35] infiniband syz0: set active [ 446.748348][ T1200] wlan1 speed is unknown, defaulting to 1000 [ 446.897762][ T5827] syz_tun (unregistering): left allmulticast mode [ 447.196536][ T6245] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.270181][ T6245] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.518477][ T6245] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.528891][ T6245] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.773136][ T6245] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.784082][ T6245] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.115695][T10134] input: syz1 as /devices/virtual/input/input125 [ 448.185871][T10131] input: syz1 as /devices/virtual/input/input127 [ 448.769817][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 448.781605][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 448.801003][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 448.809261][ T5895] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 448.821445][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 448.829522][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 448.838496][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 448.852821][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 448.860431][ T6245] erspan0: left allmulticast mode [ 448.865642][ T6245] erspan0: left promiscuous mode [ 448.870792][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 448.878023][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 448.894863][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 448.908120][ T5830] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 448.910265][ T6245] bridge0: port 3(erspan0) entered disabled state [ 448.922600][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 448.933636][ T29] audit: type=1400 audit(1736463965.624:834): avc: denied { connect } for pid=10151 comm="syz.2.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 448.955452][ T6245] bridge_slave_1: left allmulticast mode [ 448.961566][ T6245] bridge_slave_1: left promiscuous mode [ 448.967191][ T29] audit: type=1400 audit(1736463965.624:835): avc: denied { read } for pid=10151 comm="syz.2.974" path="socket:[21414]" dev="sockfs" ino=21414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 448.973734][ T6245] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.990894][ T29] audit: type=1400 audit(1736463965.644:836): avc: denied { mounton } for pid=10149 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 449.019287][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 449.023514][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.036314][ T6245] bridge_slave_0: left allmulticast mode [ 449.042377][ T6245] bridge_slave_0: left promiscuous mode [ 449.044996][ T5895] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 449.048044][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.057700][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.075013][ T5895] usb 1-1: Product: syz [ 449.079219][ T5895] usb 1-1: Manufacturer: syz [ 449.083929][ T5895] usb 1-1: SerialNumber: syz [ 449.094077][ T5895] usb 1-1: config 0 descriptor?? [ 449.103746][ T5895] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 449.407629][ T6245] bond0 (unregistering): (slave 2@ÿ): Releasing backup interface [ 449.417465][ T6245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.427429][ T6245] bond0 (unregistering): Released all slaves [ 449.470627][T10149] wlan1 speed is unknown, defaulting to 1000 [ 449.490047][ T6245] tipc: Disabling bearer [ 449.514957][ T6245] tipc: Left network mode [ 449.740115][ T6245] infiniband syz0: set down [ 449.900618][ T5864] wlan1 speed is unknown, defaulting to 1000 [ 449.949048][ T5863] wlan1 speed is unknown, defaulting to 1000 [ 450.119694][T10149] sit0 speed is unknown, defaulting to 1000 [ 450.456943][ T7778] smc: removing ib device syz0 [ 450.723133][T10184] sit0 speed is unknown, defaulting to 1000 [ 450.979327][ T54] Bluetooth: hci4: command tx timeout [ 451.073678][T10149] chnl_net:caif_netlink_parms(): no params data found [ 451.218255][ T5895] gspca_sunplus: reg_r err -71 [ 451.223300][ T5895] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 451.456280][T10203] netlink: 36 bytes leftover after parsing attributes in process `syz.2.982'. [ 451.632772][ T5895] usb 1-1: USB disconnect, device number 15 [ 452.226353][T10149] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.248007][T10149] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.275856][T10149] bridge_slave_0: entered allmulticast mode [ 452.313238][T10149] bridge_slave_0: entered promiscuous mode [ 452.431306][T10149] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.437688][T10216] input: syz1 as /devices/virtual/input/input129 [ 452.469244][T10149] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.476776][T10149] bridge_slave_1: entered allmulticast mode [ 452.497162][T10149] bridge_slave_1: entered promiscuous mode [ 452.812994][T10149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.834575][T10149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.362646][ T54] Bluetooth: hci4: command tx timeout [ 453.616355][T10149] team0: Port device team_slave_0 added [ 453.655834][ T29] audit: type=1400 audit(1736463970.344:837): avc: denied { setattr } for pid=10248 comm="syz.0.991" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 453.679827][ T5863] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 453.771545][ T6245] hsr_slave_0: left promiscuous mode [ 454.029364][ T6245] hsr_slave_1: left promiscuous mode [ 454.063316][ T6245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.075204][ T6245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.092424][ T5863] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 454.092800][ T6245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.120846][ T6245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.131840][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.166504][ T6245] veth1_macvtap: left promiscuous mode [ 454.170190][ T5863] usb 4-1: config 0 descriptor?? [ 454.187112][ T6245] veth0_macvtap: left promiscuous mode [ 454.192765][ T6245] veth1_vlan: left promiscuous mode [ 454.198214][ T6245] veth0_vlan: left promiscuous mode [ 454.199945][ T5863] cp210x 4-1:0.0: cp210x converter detected [ 454.847653][ T5863] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 455.066941][ T5863] usb 4-1: cp210x converter now attached to ttyUSB0 [ 455.094363][ T29] audit: type=1326 audit(1736463971.784:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10270 comm="syz.2.995" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cae185d29 code=0x0 [ 455.282479][ T1200] usb 4-1: USB disconnect, device number 15 [ 455.291191][ T1200] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 455.317522][ T1200] cp210x 4-1:0.0: device disconnected [ 455.348517][ T6245] team0 (unregistering): Port device team_slave_1 removed [ 455.379091][ T6245] team0 (unregistering): Port device team_slave_0 removed [ 455.386310][ T54] Bluetooth: hci4: command tx timeout [ 455.655873][T10149] team0: Port device team_slave_1 added [ 455.869567][T10149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.893893][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.947280][T10149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.979092][T10149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.996105][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.030412][T10149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.077471][T10287] netlink: 'syz.3.997': attribute type 1 has an invalid length. [ 456.085433][ T5863] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 456.109917][T10287] netlink: 224 bytes leftover after parsing attributes in process `syz.3.997'. [ 456.133361][T10149] hsr_slave_0: entered promiscuous mode [ 456.145980][T10149] hsr_slave_1: entered promiscuous mode [ 456.154893][T10149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.172947][T10149] Cannot create hsr debugfs directory [ 456.215539][ T6245] IPVS: stop unused estimator thread 0... [ 456.272500][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 456.286420][ T5863] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 456.295593][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.314063][ T5863] usb 1-1: config 0 descriptor?? [ 456.419332][ T5864] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 456.441960][T10301] input: syz1 as /devices/virtual/input/input131 [ 456.486446][T10149] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 456.513881][T10149] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 456.523327][T10149] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 456.535770][ T5863] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 456.547372][ T5863] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 456.566630][ T5863] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 456.582894][T10149] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 456.590363][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 456.597059][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.608916][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.623716][ T5864] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 456.636310][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.652990][ T5864] usb 3-1: config 0 descriptor?? [ 456.660626][ T5864] hub 3-1:0.0: USB hub found [ 456.742618][T10149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.788211][T10149] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.807773][ T744] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.814889][ T744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.858437][ T6245] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.865628][ T6245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.883200][ T5864] hub 3-1:0.0: 1 port detected [ 456.916619][T10149] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 456.933760][T10149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 457.483104][ T54] Bluetooth: hci4: command tx timeout [ 457.512580][T10149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.668722][ T5864] hub 3-1:0.0: activate --> -90 [ 457.923806][T10149] veth0_vlan: entered promiscuous mode [ 457.961135][T10149] veth1_vlan: entered promiscuous mode [ 457.991758][T10149] veth0_macvtap: entered promiscuous mode [ 458.002584][T10149] veth1_macvtap: entered promiscuous mode [ 458.067316][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.097360][ T5865] usb 3-1: USB disconnect, device number 8 [ 458.134295][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.162771][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.194517][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.213973][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.225722][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.238959][T10149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.254251][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.267446][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.278972][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.291511][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.302323][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.314171][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.327743][T10149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.348436][T10367] input: syz1 as /devices/virtual/input/input133 [ 458.355119][ T5864] usb 3-1-port1: config error [ 458.361414][T10149] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.380160][T10149] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.394832][T10149] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.403813][T10149] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.529031][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.549622][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.742221][ T6245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.293784][ T6245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.325696][ T29] audit: type=1400 audit(1736463976.014:839): avc: denied { mounton } for pid=10149 comm="syz-executor" path="/root/syzkaller.JgX9r3/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 459.400786][ T29] audit: type=1400 audit(1736463976.044:840): avc: denied { mount } for pid=10149 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 459.519191][ T29] audit: type=1400 audit(1736463976.044:841): avc: denied { mounton } for pid=10149 comm="syz-executor" path="/root/syzkaller.JgX9r3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 459.867158][ T29] audit: type=1400 audit(1736463976.044:842): avc: denied { mounton } for pid=10149 comm="syz-executor" path="/root/syzkaller.JgX9r3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 459.894709][ C1] vkms_vblank_simulate: vblank timer overrun [ 459.912359][ T29] audit: type=1400 audit(1736463976.054:843): avc: denied { mounton } for pid=10149 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 460.031394][ T29] audit: type=1400 audit(1736463976.084:844): avc: denied { mounton } for pid=10149 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 460.085860][T10397] binder_alloc: 10395: binder_alloc_buf, no vma [ 460.135836][ T29] audit: type=1400 audit(1736463976.554:845): avc: denied { map } for pid=10382 comm="syz.0.1010" path="/dev/sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 460.192832][ T29] audit: type=1400 audit(1736463976.554:846): avc: denied { execute } for pid=10382 comm="syz.0.1010" path="/dev/sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 460.295491][ T29] audit: type=1400 audit(1736463976.774:847): avc: denied { call } for pid=10395 comm="syz.3.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 461.117068][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'. [ 461.126370][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'. [ 461.135954][T10421] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1016'. [ 461.229485][T10421] [ 461.231848][T10421] ====================================================== [ 461.238858][T10421] WARNING: possible circular locking dependency detected [ 461.245867][T10421] 6.13.0-rc6-syzkaller-00059-g643e2e259c2b #0 Not tainted [ 461.252963][T10421] ------------------------------------------------------ [ 461.259974][T10421] syz.0.1016/10421 is trying to acquire lock: [ 461.266025][T10421] ffff888143bbdf00 (&q->limits_lock){+.+.}-{4:4}, at: __nbd_set_size+0x2c0/0x730 [ 461.275141][T10421] [ 461.275141][T10421] but task is already holding lock: [ 461.282482][T10421] ffff888143bbd8b0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x8ef/0xd70 [ 461.292739][T10421] [ 461.292739][T10421] which lock already depends on the new lock. [ 461.292739][T10421] [ 461.303119][T10421] [ 461.303119][T10421] the existing dependency chain (in reverse order) is: [ 461.312118][T10421] [ 461.312118][T10421] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 461.320702][T10421] blk_mq_submit_bio+0x1fb6/0x24c0 [ 461.326319][T10421] __submit_bio+0x384/0x540 [ 461.331322][T10421] submit_bio_noacct_nocheck+0x698/0xd70 [ 461.337456][T10421] submit_bio_noacct+0x93a/0x1e20 [ 461.342982][T10421] mpage_readahead+0x41d/0x590 [ 461.348250][T10421] read_pages+0x1a8/0xdc0 [ 461.353079][T10421] page_cache_ra_unbounded+0x3dc/0x750 [ 461.359036][T10421] force_page_cache_ra+0x24b/0x340 [ 461.364645][T10421] page_cache_sync_ra+0x110/0x9c0 [ 461.370170][T10421] filemap_get_pages+0xd7b/0x1be0 [ 461.375710][T10421] filemap_read+0x3ca/0xd70 [ 461.380724][T10421] blkdev_read_iter+0x187/0x480 [ 461.386090][T10421] vfs_read+0x87f/0xbe0 [ 461.390755][T10421] ksys_read+0x12b/0x250 [ 461.395501][T10421] do_syscall_64+0xcd/0x250 [ 461.400510][T10421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.406915][T10421] [ 461.406915][T10421] -> #4 (mapping.invalidate_lock#2){++++}-{4:4}: [ 461.415422][T10421] down_read+0x9a/0x330 [ 461.420089][T10421] filemap_fault+0x2e0/0x2820 [ 461.425271][T10421] __do_fault+0x10a/0x490 [ 461.430120][T10421] do_pte_missing+0x99f/0x3e00 [ 461.435391][T10421] __handle_mm_fault+0x103c/0x2a40 [ 461.441010][T10421] handle_mm_fault+0x3fa/0xaa0 [ 461.446283][T10421] __get_user_pages+0x8d9/0x3b50 [ 461.451728][T10421] faultin_page_range+0x24a/0x980 [ 461.457256][T10421] do_madvise+0x504/0x770 [ 461.462094][T10421] __x64_sys_madvise+0xa9/0x110 [ 461.467449][T10421] do_syscall_64+0xcd/0x250 [ 461.472458][T10421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.478857][T10421] [ 461.478857][T10421] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 461.486394][T10421] __might_fault+0x11b/0x190 [ 461.491489][T10421] _copy_from_user+0x29/0xd0 [ 461.496580][T10421] __blk_trace_setup+0xa8/0x180 [ 461.501956][T10421] blk_trace_setup+0x47/0x70 [ 461.507049][T10421] sg_ioctl+0x65e/0x2750 [ 461.511796][T10421] __x64_sys_ioctl+0x190/0x200 [ 461.517064][T10421] do_syscall_64+0xcd/0x250 [ 461.522073][T10421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.528470][T10421] [ 461.528470][T10421] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 461.536267][T10421] __mutex_lock+0x19b/0xa60 [ 461.541274][T10421] blk_mq_init_sched+0x42b/0x640 [ 461.546717][T10421] elevator_init_mq+0x2cd/0x420 [ 461.552064][T10421] add_disk_fwnode+0x113/0x1300 [ 461.557414][T10421] sd_probe+0xa86/0x1000 [ 461.562164][T10421] really_probe+0x23e/0xa90 [ 461.567170][T10421] __driver_probe_device+0x1de/0x440 [ 461.572959][T10421] driver_probe_device+0x4c/0x1b0 [ 461.578487][T10421] __device_attach_driver+0x1df/0x310 [ 461.584360][T10421] bus_for_each_drv+0x157/0x1e0 [ 461.589711][T10421] __device_attach_async_helper+0x1d3/0x290 [ 461.596104][T10421] async_run_entry_fn+0x9c/0x530 [ 461.601544][T10421] process_one_work+0x9c5/0x1ba0 [ 461.606984][T10421] worker_thread+0x6c8/0xf00 [ 461.612075][T10421] kthread+0x2c1/0x3a0 [ 461.616650][T10421] ret_from_fork+0x45/0x80 [ 461.621569][T10421] ret_from_fork_asm+0x1a/0x30 [ 461.626838][T10421] [ 461.626838][T10421] -> #1 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 461.635681][T10421] blk_queue_enter+0x50f/0x640 [ 461.640953][T10421] blk_mq_alloc_request+0x59b/0x950 [ 461.646656][T10421] scsi_execute_cmd+0x1eb/0xf40 [ 461.652009][T10421] read_capacity_16+0x213/0xe10 [ 461.657372][T10421] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 461.663683][T10421] sd_probe+0x904/0x1000 [ 461.668429][T10421] really_probe+0x23e/0xa90 [ 461.673435][T10421] __driver_probe_device+0x1de/0x440 [ 461.679220][T10421] driver_probe_device+0x4c/0x1b0 [ 461.684748][T10421] __device_attach_driver+0x1df/0x310 [ 461.690622][T10421] bus_for_each_drv+0x157/0x1e0 [ 461.695977][T10421] __device_attach_async_helper+0x1d3/0x290 [ 461.702372][T10421] async_run_entry_fn+0x9c/0x530 [ 461.707812][T10421] process_one_work+0x9c5/0x1ba0 [ 461.713248][T10421] worker_thread+0x6c8/0xf00 [ 461.718338][T10421] kthread+0x2c1/0x3a0 [ 461.722910][T10421] ret_from_fork+0x45/0x80 [ 461.727828][T10421] ret_from_fork_asm+0x1a/0x30 [ 461.733096][T10421] [ 461.733096][T10421] -> #0 (&q->limits_lock){+.+.}-{4:4}: [ 461.740718][T10421] __lock_acquire+0x249e/0x3c40 [ 461.746068][T10421] lock_acquire.part.0+0x11b/0x380 [ 461.751679][T10421] __mutex_lock+0x19b/0xa60 [ 461.756687][T10421] __nbd_set_size+0x2c0/0x730 [ 461.761873][T10421] nbd_start_device+0x8fd/0xd70 [ 461.767222][T10421] nbd_genl_connect+0x1204/0x1c00 [ 461.772745][T10421] genl_family_rcv_msg_doit+0x202/0x2f0 [ 461.778799][T10421] genl_rcv_msg+0x565/0x800 [ 461.783799][T10421] netlink_rcv_skb+0x16b/0x440 [ 461.789065][T10421] genl_rcv+0x28/0x40 [ 461.793551][T10421] netlink_unicast+0x53c/0x7f0 [ 461.798822][T10421] netlink_sendmsg+0x8b8/0xd70 [ 461.804090][T10421] ____sys_sendmsg+0xaaf/0xc90 [ 461.809359][T10421] ___sys_sendmsg+0x135/0x1e0 [ 461.814533][T10421] __sys_sendmsg+0x16e/0x220 [ 461.819622][T10421] do_syscall_64+0xcd/0x250 [ 461.824628][T10421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.831029][T10421] [ 461.831029][T10421] other info that might help us debug this: [ 461.831029][T10421] [ 461.841230][T10421] Chain exists of: [ 461.841230][T10421] &q->limits_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#49 [ 461.841230][T10421] [ 461.856075][T10421] Possible unsafe locking scenario: [ 461.856075][T10421] [ 461.863500][T10421] CPU0 CPU1 [ 461.868839][T10421] ---- ---- [ 461.874181][T10421] lock(&q->q_usage_counter(io)#49); [ 461.879538][T10421] lock(mapping.invalidate_lock#2); [ 461.887325][T10421] lock(&q->q_usage_counter(io)#49); [ 461.895198][T10421] lock(&q->limits_lock); [ 461.899592][T10421] [ 461.899592][T10421] *** DEADLOCK *** [ 461.899592][T10421] [ 461.907708][T10421] 5 locks held by syz.0.1016/10421: [ 461.912879][T10421] #0: ffffffff8ff7bf10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.921045][T10421] #1: ffffffff8ff7bfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x580/0x800 [ 461.929979][T10421] #2: ffff888025bd6198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x433/0x1c00 [ 461.939967][T10421] #3: ffff888143bbd8b0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x8ef/0xd70 [ 461.950651][T10421] #4: ffff888143bbd8e8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: nbd_start_device+0x8ef/0xd70 [ 461.961592][T10421] [ 461.961592][T10421] stack backtrace: [ 461.967454][T10421] CPU: 1 UID: 0 PID: 10421 Comm: syz.0.1016 Not tainted 6.13.0-rc6-syzkaller-00059-g643e2e259c2b #0 [ 461.978188][T10421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 461.988222][T10421] Call Trace: [ 461.991484][T10421] [ 461.994396][T10421] dump_stack_lvl+0x116/0x1f0 [ 461.999063][T10421] print_circular_bug+0x419/0x5d0 [ 462.004070][T10421] check_noncircular+0x31a/0x400 [ 462.008987][T10421] ? __pfx_check_noncircular+0x10/0x10 [ 462.014428][T10421] ? lockdep_lock+0xc6/0x200 [ 462.019007][T10421] ? __pfx_lockdep_lock+0x10/0x10 [ 462.024025][T10421] __lock_acquire+0x249e/0x3c40 [ 462.028860][T10421] ? __pfx___lock_acquire+0x10/0x10 [ 462.034038][T10421] ? hlock_class+0x4e/0x130 [ 462.038525][T10421] ? mark_lock+0xb5/0xc60 [ 462.042835][T10421] ? __pfx___lock_acquire+0x10/0x10 [ 462.048015][T10421] lock_acquire.part.0+0x11b/0x380 [ 462.053115][T10421] ? __nbd_set_size+0x2c0/0x730 [ 462.057956][T10421] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 462.063568][T10421] ? rcu_is_watching+0x12/0xc0 [ 462.068315][T10421] ? trace_lock_acquire+0x14e/0x1f0 [ 462.073497][T10421] ? __nbd_set_size+0x2c0/0x730 [ 462.078333][T10421] ? lock_acquire+0x2f/0xb0 [ 462.082815][T10421] ? __nbd_set_size+0x2c0/0x730 [ 462.087655][T10421] __mutex_lock+0x19b/0xa60 [ 462.092146][T10421] ? __nbd_set_size+0x2c0/0x730 [ 462.096982][T10421] ? finish_task_switch.isra.0+0x217/0xcc0 [ 462.102771][T10421] ? lockdep_hardirqs_on+0x7c/0x110 [ 462.107951][T10421] ? __nbd_set_size+0x2c0/0x730 [ 462.112786][T10421] ? finish_task_switch.isra.0+0x217/0xcc0 [ 462.118573][T10421] ? __pfx___mutex_lock+0x10/0x10 [ 462.123581][T10421] ? __schedule+0xe60/0x5ad0 [ 462.128154][T10421] ? __nbd_set_size+0x2c0/0x730 [ 462.132990][T10421] __nbd_set_size+0x2c0/0x730 [ 462.137655][T10421] ? lock_acquire.part.0+0x11b/0x380 [ 462.142925][T10421] ? irqentry_exit+0x3b/0x90 [ 462.147498][T10421] ? lockdep_hardirqs_on+0x7c/0x110 [ 462.152678][T10421] ? preempt_schedule_thunk+0x1a/0x30 [ 462.158031][T10421] ? __pfx___nbd_set_size+0x10/0x10 [ 462.163220][T10421] ? __pfx_autoremove_wake_function+0x10/0x10 [ 462.169269][T10421] ? nbd_start_device+0x8ef/0xd70 [ 462.174278][T10421] nbd_start_device+0x8fd/0xd70 [ 462.179112][T10421] nbd_genl_connect+0x1204/0x1c00 [ 462.184124][T10421] ? __pfx_nbd_genl_connect+0x10/0x10 [ 462.189478][T10421] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 462.196836][T10421] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 462.204195][T10421] genl_family_rcv_msg_doit+0x202/0x2f0 [ 462.209732][T10421] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 462.215784][T10421] ? genl_get_cmd+0x195/0x580 [ 462.220448][T10421] ? __radix_tree_lookup+0x21f/0x2c0 [ 462.225717][T10421] genl_rcv_msg+0x565/0x800 [ 462.230202][T10421] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.235205][T10421] ? __pfx_nbd_genl_connect+0x10/0x10 [ 462.240560][T10421] ? __pfx___lock_acquire+0x10/0x10 [ 462.245740][T10421] netlink_rcv_skb+0x16b/0x440 [ 462.250487][T10421] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.255491][T10421] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.260765][T10421] ? down_read+0xc9/0x330 [ 462.265079][T10421] ? __pfx_down_read+0x10/0x10 [ 462.269831][T10421] ? netlink_deliver_tap+0x1ae/0xd30 [ 462.275100][T10421] genl_rcv+0x28/0x40 [ 462.279068][T10421] netlink_unicast+0x53c/0x7f0 [ 462.283816][T10421] ? __pfx_netlink_unicast+0x10/0x10 [ 462.289087][T10421] netlink_sendmsg+0x8b8/0xd70 [ 462.293836][T10421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.299112][T10421] ____sys_sendmsg+0xaaf/0xc90 [ 462.303859][T10421] ? copy_msghdr_from_user+0x10b/0x160 [ 462.309299][T10421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.314573][T10421] ___sys_sendmsg+0x135/0x1e0 [ 462.319227][T10421] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.324408][T10421] ? __pfx_lock_release+0x10/0x10 [ 462.329415][T10421] ? trace_lock_acquire+0x14e/0x1f0 [ 462.334601][T10421] ? __fget_files+0x206/0x3a0 [ 462.339259][T10421] __sys_sendmsg+0x16e/0x220 [ 462.343830][T10421] ? __pfx___sys_sendmsg+0x10/0x10 [ 462.348918][T10421] ? __x64_sys_futex+0x1e1/0x4c0 [ 462.353842][T10421] do_syscall_64+0xcd/0x250 [ 462.358334][T10421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.364212][T10421] RIP: 0033:0x7f6cad185d29 [ 462.368605][T10421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.388195][T10421] RSP: 002b:00007f6cadf7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.396586][T10421] RAX: ffffffffffffffda RBX: 00007f6cad375fa0 RCX: 00007f6cad185d29 [ 462.404547][T10421] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000007 [ 462.412506][T10421] RBP: 00007f6cad201b08 R08: 0000000000000000 R09: 0000000000000000 [ 462.420459][T10421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.428412][T10421] R13: 0000000000000000 R14: 00007f6cad375fa0 R15: 00007ffdcaa85a38 [ 462.436372][T10421] [ 462.439455][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.627783][T10423] input: syz1 as /devices/virtual/input/input135 [ 462.658663][ T54] block nbd0: Receive control failed (result -32)