last executing test programs: 8.788710975s ago: executing program 3 (id=361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a40300001e0a0501000000000000000007000007"], 0x428}}, 0x40088) 8.584574782s ago: executing program 3 (id=365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, 0x0, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x3, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 6.714620943s ago: executing program 3 (id=370): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) sched_setaffinity(r2, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000019340), 0x20200, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000019380)={0x2, "fa02790d2a69a2610f0200000000000000110001000000c642000000677c00", 0xffffffffffffffff}) ppoll(&(0x7f00000193c0)=[{r5, 0x8021}], 0x1, &(0x7f0000019400)={0x0, 0x3938700}, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x89, @empty, 0xff1}}, 0x3, 0x9, 0x3, 0xc, 0x7, 0x0, 0xf2}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.613069122s ago: executing program 4 (id=371): socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xaf123e30d406ff1, 0x2010, 0xffffffffffffffff, 0xe414c000) r2 = syz_open_dev$video4linux(0x0, 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014, 0x1, 0x8, 0x3, 0x2, 0x5}}) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_dev$video(&(0x7f0000000280), 0x4, 0x40) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000300)={0x1, @pix={0x280, 0x1e0, 0x42474752, 0x1, 0x280, 0x4b000, 0x8}}) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000600)=0x1) 6.04100274s ago: executing program 1 (id=372): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000500)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000540)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000600)={0x42, 0xfffffbfc, 0x2}, 0x2e) sendmsg$tipc(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x4814) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000680), 0x4) sendmsg$tipc(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x1) r2 = dup3(r0, r1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 5.871177039s ago: executing program 1 (id=373): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000380)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x3, 0x20000255}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x34f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x100, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x252, 0x0, r0}}], 0x1, &(0x7f00000006c0)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) 5.624596298s ago: executing program 4 (id=374): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 4.898411069s ago: executing program 2 (id=378): mount$9p_rdma(0x0, 0x0, &(0x7f0000001440), 0x1008840, 0x0) 4.884240183s ago: executing program 1 (id=379): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) io_uring_setup(0x103, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2642, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000d80)={0x0, 0x8, 0x2, 0x9, 0x6, 0x1, 0xfffffffffffffffa, 0x3}, &(0x7f0000000dc0)={0xff, 0x6, 0x18000000000, 0xfffffffffffffffc, 0x9, 0xffffffffffffbffe, 0x10, 0x3}, 0x0, 0x0, 0x0) 4.793685859s ago: executing program 1 (id=380): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.792708893s ago: executing program 2 (id=381): memfd_create(0x0, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4, 0x2, 0xfffffffe}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x5, 0x14, 0x0, &(0x7f00000002c0)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd13, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x41}, 0x4c) 4.488298967s ago: executing program 2 (id=383): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x35) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="cf6dcad1f5c5c712407a3f1d491539b627c8255f86be020a4f0ff8851dc6d8ab33ec6d10e619ed910e4811af9ee1581a1d0687020937fa7005f26bab6e9591923f5c1086ecd154e9bfbec5afd856afe3429448161089fab21bc7b9ab5158aa219761d845b8307b1fc87605dbaa4cf80fc74737d4d4cfc68fe06c16b87b759a91a368c70b2e05ee4acf0f9111df10f30c4e16b7ee3d1cf380273ab8e6ca382e06022f539c0c4e62b1ad827ff576249375b2231e47038c67b3353242c81baaf90b3645ed12504a4ccf4b0e6419804399f9fe7f60df022a12405093264d225e8003061dd690cd169f922da3507717ade8bfa8ae2c45eccd32e14ffc4e11ae939e90fceb53e0bde3916d9e4e36d1de07fbbdd2dbc24145e1e7bc8f3423f4c3426406fa499a6de404e6827db35840a726a1582be4457f0ce0cde1c414e2f497ff8ff4cb606962f6acac00230b2cbce10b09d2f6b33b9f4efb3839a222c4bc5bb3e552056f8c2b7bc84ab62434bcc61f64b74367a9ec857ec7f5a09ab6b16667bdc846434d22dd95f7b8a47a1246a39d135de1ffc2946cf36034ef8d753b7d692aa00c91fc1636c0be309ef4bf345918a386e76edc3680ee574528bf3369741c9104bd77e61aa72d8b82162bb150d4232e21c8c9453d89467f9e00fd5148bee49da206fbe6357bbc31b111e68f0b95c37063a6c5401a094819e28a2104c37db5624fe075d0b2cc50f7140f4f49396b43d14f93ab9f9649e2dc694cea520cc068a3869a3ea4ec599a995f69d936dd62e2b81499f3ed4879d25b90aff3eae74b28ae35f18f0b457a5af35e2ede43786958b127ef76723d6ffe0e7e3346d5a9f0aabcc0d93fc085316516ef79b3e2400ed2946a0d1b2ace13ea7ed39ac51cb9d98cf70feb30d5bad39f6b5903e8ab654f48bfd7e54dcb502b158f68bd96e6beb4392fa59d3e1048803e4749f3ad522414d3180de3a0da1227bfbb704b66ae6a85b1c2c51e484622eeb169760e9ec50e14c014a0cc05aebbee77f31b62834169cb49bec0c43090506c8f34ca6e108e6328ced7a9f11cb3d57398b0b1d84c9e75d5cdf17766d619dc2658aacb900ca0f93aa248d702039417b558b8ab4a41921154153cdc86d999b2e7932eabb55a4e6c8c03029c851a9e84ef84acd9affdff84ffc063bb1ab6c97e169071edbe524462fef9116edd9fbb5032478cd5ad2b2c5527fdf64223dbc952fb528f7b1d817ca787f8a57992b40202ca124cd27eadd6d70351379a6456b697b317d101514d1d5d61002e4f3bcf7555c6b36c4c1d18cba0fd4fd7b3a246b72d47d7c1908cc9c3a29fbf43019b5179b0975d7680ec15720f7fc8b96b13522d058ef009719580227489ea68062cc735cca0b6a60a10c44f2b75d2895be41a278c50e62f979674c9e507dfa7a0c087c4fd43ccc32357e34c0bcc526fe43bed33e99632c84ea59780f78e7954d8e5430c9acb7d9dd28ac3761515cba6064fe81d3b4541dacfd6fb916735833704a5cb1723f867322fa806a20d5029a608986b5019402035bebf3e099547702409815bd1d3c63072fb0fc216c2186048f1e4ae5288a12a5c9b25f7649899f84c8aedc3721334d7bcdb656f8e3c0f2b7e40b837a15c9d6472b6acb58a39babc65d08e529f2f690ea780f43c35698610351fde4615efafba129b2b619135f8af77c7291483262c5555f4d66173b34c5c7f1c415cd6ab15ae4cef34cf5680e11332c6863d2140f00cc3a337b23afb0080fa54360282086b0c0faaf2bc2a9f7335a96fa8af6a52a1e04eed2e7c337d1e378545ded0d0453b8a16b6d0a90860dfe560528515005ba852a314b4540206a8513e73212c65fb4b35f4ac7050d18bd62a6c720cfda30cb2385d3d5217655db1f344fc34361b83b22d31a040366acbdc28d397254b41c3b1f0d20e0a5db4df6338e78ae09b38f82c71fb0208afbb506461384bf578c607e05ad5a6ddb708b9add5d4d363877659a663827136b4dc1b4012c7035a56bb91e14a3d22b3ac3989f91d78808758d1b5bfdbfc66d3389e3362987e13bf9a9747373c90c0c658b7b832eff19aa2f3667f79bcd073765308fbabf2d612d0445fa1be6280cb9d0ba759d218ae971d3dd5d458c10d14f154109bfb2fd03523ac5748bcd8582dc3be5c28ef4be94cb55fdcb12a6271dbb7f11fd33d61382096588167a2b20b02cc43b88729985073a5b21b8e4bb2c43894d7c88bf111576b3b56f905b1f23f0570c07b475d5f86508c3489f4f2e2d0f3b11bfd6c3c58930483f9345f4f755089848c42361d4b0c0e855935d7f6793f78a68b554358b810cdcdec350376c94486c67fc5d11c0a68873312b40b49bb29aca16e1f3e3ce4da7a9e7aaa6ec1d9932b78d9c12c45e61b5f6faa6ffcb21608fc61bc4180f91d26f9db592c98e532d60c28e9fab794ab8a62c21122397193d8b5b72bf050b07f79df5e14069b56359835e3048f182629328e4a72a1fd0530182c802744611637e93deabc6c3ee30041025026be97ac314eaf7b399b0702cf73848e54f355d766121361398609078057473c2aa46b2fbd7e7a7d6d039615eea23fd223c49a9b5b5fd7b0c6f30c9b0e55fbebced3c90ceb668e6dbd5e6511c19d32c29b5fef7d06cf2ffff7872bd541d0fe70e5991ba3c19e72d5533e6fe9652c21338ced211c7d9e912486b4de29998ef4cca892fe94972b31fa33e781386b75b5d6980a9bfb887d7485d71f6744a6f87bc407ccd03281e10eb1bafd5d9bf279d362e2a49e54187e40abb06e21ed8425135a169ba5b8e1a806951352580ae135dfbbe3395e18ccf67fdb891903934739b56dc0e49e258552dc66d46eadfed9a7ceeabf20d02aee2c8ce4060382474252ccd9bab03d7e8eb77195bb712c19e066153bef5a212f2a450d4a1280d243928f3add450c2544c800b507c8b8ffc5d7f3cd9a4526505d05d04fbfdd0fc1f996ba3f4a797c96b24af37c15859b4bcda9234750fb6acef8dc20893ac5051b3d6aee60f01fc34e3b6753848fdca9b18e461c87f08fb8d67ddce234ca56bbe021f468f964ec1416ba6df0434440140090edd222cb9534830fec026788f43899737771e67552df68fb81d90aa90fcc1149149aaa96c1730829c6856407e5194dd2ec7cfe5fa419c2ea6127039ae188649b2cfccb9faf59f45dc9af76f3cb17c8224e68fb5f81b4556980542a928f9563bebcf3db248cff2183fffff15710432f8691041fa8aceb65b6454e9c375402b599503fb4881a3baa5ba58893cac154575ef0ec8efe35a6eeccb98d081f6d4cf2661b484765ce95bca5bda75fc90e630e355d0dd6d22a5d4c7990931ac160da14f211c33b668edb93cd9c87de3881c47e4b0fab746d0e931600478c9cc2e3cc08eab1ee7cb4e3749ab44e7ab4be15e5b031e58d59b294fbe794fb5760a2ceedd1cfc4343b1c2886b0721945a109384cb00fe6e9bdf09e5e406e757a6f24e659495a11a93382d5425d6fcab1d002303aa1531a120b8f30dd17cac7385bb8455503b2ff0daf8b4dc5353f88f34c894fc0b2fd2920c97432aded8b89fba9a9db4c4f3498043f936a1cb0dee7f5d902b1f6d909b637b8e2f05d31a2640eb1ac556ede22006466014d4a407e3486f94ca676ef39be6399ca24bff48b03ab1da71d1a5e3994d0a8723894bfbbc33969923970df3a9fd0b5084a6cbb41f79a0d3338bb61e7dc2cf795f2fa883aa61d7820c4e2215744dd9cf517cc5921850d1d9aaaaede5fb125e663c830c2414655d6af43a90f9b79eccbc2c009b963b503827c7614ab8824b3289ed8e559ed644a163db18fe66789037eb599be39fb66955a27a4831a59322d39b95b6d571d8fffb5352a0297b449719a5246247ec4c24f40b5ace1c8e76fa1029a47065af4adfc03b2732677f81bf9729ba06380a330cb388c9e4f50a0cf4ceb5ea8b6bdda8df0839de274c0c7a57f7a9173d21832b7f19ee8cfc340eea461ce7956f986f828c91697c5a241cb9efec40a1a0f34a2a63821dbd50a111b368a034823191dbd3b7a9fe8bee53cada1902f2a278efe3f10eecbf8279c2f9b2e7bf542076bf0bb41e9f21e766741f3ecfbd5a38158b1ce884255cc227a7b7196f966b631c228fea918d8dfee020dcf4c40231c0ab6fd7ccf4e7444fb360f2be3c1519a577dae770a14cd90df85490995fa8553fb255ee9807e0c7617c582f82ac56a0d902c8cd58244cddcec23cf2a05a79b474c716d9ea92bc28b0132ec48a3c5257dc7e1d9cc3f760d559b5c12ad75c95497962f9a564b0d9ed29f44f63b2c56169b2151d699e8d2d570d94f5f37898d3d8abde9253354fd146af62ccfd171d9014fd4d142e2e390f3ce2370165a01aff0fe566ec44e3084815cecc85540d84d8a11d0504fbd95f2c2709b87083b3cfffe36f611a4a6b9e4237a350d1ad4b1e0239946d86ce535e9f07def01a5e6d2e65ee59f380e55c9f295478c5589425852fd22eec2d6e555828ffb4212b33ad530c38b76254d2baac6bff5f94d3ba19ff4b35cb1c972c0b538e1adb5da70affc99c99c0613bea6111848054b416d26368c90784d845f0507f89fd058381dc7d6c6bb81dae94d11e3a0de778aca82814fec0b63780fb2b4f480da063411cd66356f87e68780448ed0c1f3836a46e536609d672d7cef1cffa0614a4f6286ab7f3fab0baf595b4c3c2e43f979f4f4a89165c24698f71406b4330a333f6c8ee018420b2b47735295043123459fafeb5886fc044a3805b162714a3436f58264c0713a4be82a7550f37f88cd7f61c0ec27d887285da7ecb4eb32963c8205eff6d5bf532b72976c5f0a24d6d4d2bf4030f04a47a15fb4de2631361fe0895aeacd2028401c5c183223647c1e765e6406542eeac4d979e6a493e389a649af7ddb35fadd32cf1edaeaaf0982ae8131084ae4759e2af1dbd007f7ce00900437be6d8d3559210b3011d1fe52e8485cc5c14ad4aab4c03c7dec4302e7f72abb7fcc799899cec17308151a758b810369c4d53c443cb1278709df6336f84fa39e51d208b4507a31e6f06352dbd99d7dadd86215e47ed645a9b89bdce630cf80fc1fe59dc31eae39010a930965b3b0e01096347158d683de6888f3284c1fd47b3e79e0fcc299cd4f519ce067a007ae7ee906d639789fedc850e60a7b4be9dc525e3e58b01f24b065c4b21b9011e74030aba77931bec74698557b4768ae41eeb4caa2f530578bf1f9379fb623a27561bba03c7623400ef975ca2e2d6881e0f96fe1e7f9ec0e8f6aeac30f70f848399c6dc9c4e58bf50aacbe566965b257943f6c9ffe210af0cb488488d67b09164d98f3254cc313f7cf8dab1f2e1ed3a7e4a86ad85707d4fe0e7fe483c7f311912e92bee9b17819b53a39c374cfbadf8c3641bae4177aafacf3394af12310f222dc0a67eba49c1475da8607c25f3ee7b1e1e0961c7d319b32ab549c002b93852af7146f5e74aab020446d9a446582a2bc19a730bafcca463fbe0cf2664e10746ddbf0966ec1e327e1f8fa6bb67e18cf849fa810c938695de5f8df98d3004065c787181f4bd8324c59b18972ac5ca92f96c51b4a63ea130712d70a51c49def99feb37312fa6a52e188de88f5446fa4688514bf96f195bfdae4b248445ef5a37e5c0169c7ee42a8e613e71793486bfb24e37bd0d9f0cfb3db61b45ed731edd5c4bd7b6b133f5f3f51fb3a12e9e43db5a23a4c6c787c803791341f10aa083760413724031ec83d5d5c03e9d3585e6a6c87f51ad4db6d678cae14936c09e24fba69e90fe4c2ebed615e254b1d2a25c12b07c1226c0e9fa9112a49cffc9238d3303d3a9a293c5bdec80545e76b911aec6f956d2122d0ee2bee424aee05e0a25a7ff72e3e1c10f590380f82f1e693fb45b1466cbc7e8ee741ca97775c2ae15c1ad0f4a8221c55e82b4e4ddbbb3d88516fdc26969707143e3175f56b07ea8a7d40660ee346a511e0985c6cde95b573dab7c53cb9d32eb18bdb67147b562dd99124d744703492a89dc8cf387ad17a992a6850ee683953c70547f2c70ac44ddc4563fb0c0c23ac7b806a0172a3a74db45378568306ab3036b5348f96ddec344a899b6058179c070cb5f3a478a02d94dbd836a0e2223194e406c2296ceb6dd39667ce62b4c191889ea052f382b9c051c272480111fe287b84c10cf7512a6dd0a601a1cb41545915925a63bd09f9d77a1bc156a7d822e204029363b3c713c5cbef590efd01c4ffe00b816745a37d83b27ab05c3a0c2d6ff800276f3fe502bb3bd7b60b38d32376246a3384554072fe63ec409a0182d588b839d319c680f830583db3e4f5071eaa066689e9e19539d9a12fefffe223288b77600dabde9b2bea871cc1ea2b3318a9699d736f02490d76c1e457aaf45ce318445ce10625b43059694e996ace387580589f9f37944b799337fa38ef9292d2276e0f659471134aaef911514212553779be2ba00816187465e278ba2d03e66cd633f9a274ce882ae971f2d07cb4fde38bf88327aea83d5303011b0263f24630916b796d532e5437179882b0470dbf8d693bbae4015ef28b3d57b5e3b643068dc1d1921291f4f1280a8183532298dffc2501cd3ff0bfb6b0e61d2a59c596f21b98db4d730e155936e98c95c96ac6231b1232e4ed89ce65311fe66199e113f9f69084c31444ae9f106e909bc070d83c1cffc514189c1e0b6763c2732a227a6229407af592772c2b843fb944896ff61161449b6df045ba618d117d8361733198f0963850df3e077aa538571efe279f9c7e006e2c882f5301706ee2bbbe769164cf7d9597d0142d0052641eb43a9ffe76d978384ea8c10050a80021d3c9177fcb29652b4906081d926ea23e749c9272731aff7fd0c271ac4859a5829c5b406a1c363752fecb1a76b201a0df467efd6ffe6adc0debe36ec6d1fc84ccebfa07cb136bbea0f1ef74983bdfc087e050430f5aa395cd8786b609941fbce55ab90e00000000000000685cab24847d85f8bc7a5784a4367ba06690cf1a88acfeddcb7cc44c9797f4f0e5daf9d301c6e702652268530c22df26d14da8768a8951f26849fa1e20015878cb6332d033531b8128233e61094cfc5dd71ba9af36ba6aa1c37b24805a45c3dd302bbc1dc8e9348f9a47540e14016bd5357e7978092497b800a97425363a42454eb04c32c9ac959fb37eb00ed6e31f81b2aa67d9f4930eb31dc2260151d845f9865d2b3a301ce3bef54a977492039eb908512a083087961f90ee568c5e5c60d6e726dda2c3f31c072979e09d8fd6f2365f65ef46399a183511904226d8ec72805582107ff5951d2e0d5c028d29e940fa068c0ca1c238420e53297c31d68f70fb543f347d91afb5d66ef1e8460a1431b638a6b0ae259f7fe8eb03aae9ef1ea4cfcfbac7e7b20b5c46ea8b0a2e88527bf54fd866362ab6a99e466bb029259f35711bc376b2f70edd738b48451f20ee404938821419ee5eace0171b3fd73d57bf0a723152933ccb84d567e79737b33e334dab955cdc03298215a2943ee493d815af83d48ee808a5e508903cc574ea4b52de645a18b0f43cd6b81a15a7f089cc7596adde2ea693381c7eaa2e246b9cbec98bb4e8ea3db8b47e57ef8d3a2eace3e2dcc083f6625f4e86bdbe2d6c57fa8ae4902ae9964c847eb292998d485d3326a7076360b85365edd5b733876abb5e26943481a52b10a1c95f34aed88568b873ef481798fbafe036d5d580c7437cb1a651e2a89d98d9002d0bf6418a271f9808df4b2ceaa8508e6c1d7d58e96d87f6db011395a0b74cb39e066411fef6c8ce7942ef8d8bb826be0b06ecada10e46f7ac25eb7ab0e3339752c8d0784659d72a287ea9a5e3a699977456695a6f9fe40eb8f7269b414cda403ba94f512c332fcea82f1927a5695ea2eb2ce7380ae74a0672ffe7fd2c4a19715a984d518b5be67543c31e42962b4c030fbdfedc5977b03d85294db2578d6561fdd9e0f9cfaf7eb1609bfab67105b227ec43189e449c4f2f17b8175b3afb0087f70786673353a3913cd03240761b5ff91a1e6510499c1f4152a759b1ca39ace773a1f27a5a88bb94a4201a91addf5c2c8587547e454d186b562cf89a41a02c36765565c3d753a2d8127d3908853f5ccc1c35346f22284573695c5695a520ace2d0cd13c1138b1fb10f74487b9a2c7a5e01195a1629d3e5d567a77a2aaee24d2936c2618c63eb5cdeb64f5592cb38175d416c05588f03b287c6e16329fee69c8294db5b5bbb81499d7ef18ddb93144c897253e8330cea3be31bab73de42284fce239597ab7cd5b68cfba057b01aaab0f0d4191c31b407fd8f9c7f04eaca31e5d240c7910663bde4ad478f134d09dca902e6acdd292f2745c73cecea2204a56d0098c32da73eeee41b348d5826109ccfd2397bb73a25ebb7e95537df71cce504f14c219ec525795d2fd5027cea9810aadc77e1b874f9fc4e33ed7b90a4007bbc341493302e4e2cbca2a8229fd2c3db7faecec2b8805bde9d92a29f6a7096cfc05ed5b678566e6c079dddfcc0b6c17541047beb477c4493a1588be177490db134d69a225aa6848b27494f17c3882ea2ee436ac1e981256ccaa70ba1f7a621385694b62bda8c4f6b04c61d6798afdc9cec019392d1242a35c3382b09aab4999e1b383714622f2ab80f275ecc8ea67694f020466aef6ed5a4535f32df47f0478e00194b44b9003f6dff232bdecbdf2a06da35246dfbc0d40becfdd5ecf971f0f408913bf094282fa2272cc5683604945e3eba52231f131c81b1035dcbb8a4292059ceaf92f36877aa15049bacc544d2c9bee4eb1bd01d76861557e646082f118454c37bbc7d08a311b4668f2777912cf882439b47e7d3c08bfdefe31e3effcbddf9e5bf175fd7c1ae85f6436cd817580970b3d8303e33ea128d222e8adb1de246fd9583c0385fe89bbf9af2cd82a38083069a997175fc7e96096052d55620554bd723b28de9a177b0aa0a5928d3d991c7da85a3513b1fffb8c75b5bc2874491ac6affc2a71ef1d639a90bb4c53624139ab8764f60e7470592608a520dfa0289c3be27e2a8f6525a31830aaf887213285eeb4286509c4904f2f5c6058e29c9c5c7886e107fc8b6411ea86bef63c88c863c7d7be52424a0126b8642d83946792de32c6150e9ce9be9d20eada4b47bd24fda102ee8cbc3a870743ab1839f979076b79cffac7d2234db5b345de7f994110bbb873a7058e5ad2fe9d9f0527a4a7b3799f81a06c9ee25c1a4a6317c3c454e9b9bb03360775184c37897db2e23dda4fc5cfbbdd477f564ad48416224ab75742d8d2375773c34325b36cead158372821e3db81a2dc99fc4293b39b183f1a71afbd4faa5e66a0d457f15424ca9c39969a85226b03b1ba8a98b0655a4581c7849bad2b1e5eb09236284779235ec2c0f44d547705298a9076bd32cdbb0a1169529a4780629e8cc291bbe25d98eaca72e934b7ef3a26d60dcebb509b8122d9d3de366b1c81c01e1a3f2ec0556d4759917612ba175b48f47534e592293e50e66dfbd0e1d0373cb3f58a43f3c32408ceba4c2614ff35b72a2cc03166f9866904f7ec19650edc06ca73ef63fc759094ae06a8405144dc22a0480155057169e59897eded975544a3e26dc0ba673a803fd35e16f6ef4695fc554e0c92fd97d3287f368b06ebb41e7d9a5956ceac39f27a82dda86f981519e31f544d844109d5ed58c159e7aa1805461149c604f262a1dd0c2f072f8f5b9b9bd4542cff3050c85b981dbf1731805fee07a4f92bb1828842f34395b90b76834a624690bfd431185026fd090c8dce10ac30ea68502dc8d2d85f836eb747c9bb8b6d16da1cb692f33b77f80c05b250496f3a880dca37c6514d5b5e2cf90d0b18bc31fd27a2c96110b9aacbe2afce417c415778e58e0b9ace5f209696980cc45e51bc292b3d5c247e2c8fffecd214d927aab0fecd0f50b359df4971944891fbefd40345e7f14e833486c126df0c1839032e64fa59280d699eed79f03acc206d6a5340cc1c5deb4204cb8780830497f23522b89fc503e6a8a01d11e83de680bbaed65fbd970c71e2087213c3ee64280bcc1f616a274c11d01f0d81f084c3873bc871d50395e05f658a75915118b0da8281a310fc905488ae03aa89726d74d6ed6da76d6dffcdafd7b4d2fa4a867e9b42cdf71db56c542ccf1270974f1efcd80f70fd463d2cfc03c8e111f2d1232bf6e228123c316ecb60eb6d8f650e9281381d540b29b520be3f921bd314eff9ca241b69d95e78256f1bfcbfe37a9f094716d36af6e1ce36184bc6a4dfb88320ee186f52db245dd50d8af51f489f792494c14efffdb88faa1d9ad1d633b327b7ff6523bbfdfe4274b856bbca9e2847499923738207a399dffb514bba855b75d12c9c57aa2e58db0000210f5ad375d3b697f3dda96f5f78c13bfd6d01a5050e01a2e55cc2695a3f2193820286a688cc144fb9043e7c6772bf2cbd7bb5a7a57fee1c18dbdfaadfa5be0d1adfa55dd3a8480807708ee6e11d9f9dfc5bc682e104795928e56af800b42c9c07a25237b092ba1e93a525ed5b5b39ad6e02ac6b41e136c904dd4592370c322f5eb595ed30fa00a277928dfc765930af1c2936f5ad2425c411980b5bb012e0e240c7d50f16ba990540a765cc1fef3809a0344ce6d083ab8705378fabe14a2e63e12eaef453273a78a7d3fabff1fe6a9ba07e208740ab8ed6e50abe2a85b649e1d3ec2f3191e010b50a7ddffdfb25e53e196775655a1ae707daafc4e9709927eb961faaeb1be21ddde0fab9665774086c34af3beac362a5cb712b786a5e1c8811ef574c5b269946939ed530c5bf42306016b69957dd57d83c88cc32a366c0aacc964c693fa7e03c1e89832f2076ec03995f1f9b2cde66acdffa3ca33776b61176369c78e87b2eeb0a14d7cbbaa597c0ae8e1014660baf06e22a6fc4974772975b7d7d003e6bc6a4cdf4cd5f2a95dcfc8194d93b273e59baeb350935aef906bdb94d1fd3c0781aa8fcb17f3f68c9afe090ba059acf599d2934481eae73717c4354c8c2b4d425ef7073968624c5d91e46322cc23091c58643316acff626f160b9cb770e0d9595d33cb6f44915d7efb6747973ffbf34119bba44d074472e661095012ad94af00463520deb45a6b6b7b6a173b23aef637e4cc0363d43c5ddb43c81936143f7db63f7f7771a611930f9f82a12f3c59b0f72de98bbc75ad33f1823fa872be154b19f16f0fba01ac3d64d46cbfc1850d1b4b5790cd86633b1880b86fc34a8b9f31100950ea0bda3abf2b037e21ee348418df67cc1d056d74125f9c73b42b104b6ad322ffebfe658dc3c0a06af44d73324b5ae59e2bd99d4782ec053ea07513a271ecf8651b25bc3e026bc88a4aa1513a2b4d4e173c1e21c77302ce64be8331c4d5b6203bbccd96dfbf9debb29a167753e06c55ca88550ec186bd20b3d94f7c2af719bc638cac3f8cc6c80220fd5f4be03bab9bb975e5effa4c5eac098c531590ec5eeaa90faec3630671d9e1a454577b01b73bfea67456ae187f0e61a9292612f428ab8c5780a3803b7dc2ec8221181db3876f2c00", 0x2000, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0xc, @loopback, 0x4}}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xacb, r3}, 0x38) 2.192700706s ago: executing program 3 (id=385): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000200)=0x3, 0x4) 2.137679619s ago: executing program 2 (id=386): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x8, &(0x7f0000000980)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r3, 0x0, 0xe, 0x0, &(0x7f0000000a80)='\x00'/14, 0x0, 0x4000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x48, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "000102030405060708090a0b0c0d0e0f"}]}, 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./dev\x00', &(0x7f0000000b40)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./dev/mapper/control\x00', 0x2001, 0x80) ioctl$FIONREAD(r6, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) r8 = syz_open_dev$sg(&(0x7f0000000800), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r8, 0x0) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800004000000053, 0x3) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000400)={'wpan1\x00'}) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000100)={0x2, @win={{0x4500005, 0x8, 0x2, 0x2}, 0x2, 0xc, 0x0, 0xd, 0x0, 0x8}}) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000200)={0x3, @raw_data="1bc61bd4096fcc8d4b1a0f311aac46fd9b9d616b2c2e35818ad325a7625ad37b118c20a988db255b921549053e8d9565b7c5ef8121d546753509fe8b1a9b03c1554f92ccf10c352b7bc706b314579c08954ab1aeaa7d341d499565a2426ca83e020df5b934ba2df3c8703abbf41e5165a3b259b5338892fc8bda8f94f7af1fd3f000e8f6f42b8a8a0eb03d58b6c0b5623f5347b52c449d61f7f8f93ca5afac0f272715f8e7b1efac5b82203f6fa30bf4f132f930354ab6771238eaa9dc3394b4897b133960ed8006"}) 1.884307099s ago: executing program 4 (id=387): r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000580)=0xf) 1.585155373s ago: executing program 4 (id=388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8030000"], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) 1.403519022s ago: executing program 1 (id=389): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000380)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e050847"], 0x8) 1.368923801s ago: executing program 4 (id=390): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="200e0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)={0x40, 0x14, 0x28, "281e0c8808c1bf7651ef4aaac994238ec99a995a1297c3afdf03d56d837fc0dc050a6128776dcaeb"}, 0x0, 0x0, 0x0, 0x0}) 972.757381ms ago: executing program 2 (id=392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$vcsa(0x0, 0x7, 0x80280) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r6, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) 972.513281ms ago: executing program 3 (id=393): r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000280), 0x2) preadv(r0, 0x0, 0x0, 0x5, 0x3) 845.038607ms ago: executing program 0 (id=395): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, 0x0, 0x0) 769.105907ms ago: executing program 0 (id=396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a40300001e0a05010000000000000000070000070900020073797a31000000000900010073797a300000"], 0x428}}, 0x40088) 768.925227ms ago: executing program 4 (id=397): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) landlock_create_ruleset(&(0x7f0000001bc0)={0x120, 0xd, 0x3}, 0x30, 0x0) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) 675.775472ms ago: executing program 1 (id=398): ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x5, 0x74, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003020000102505a1a440000102030109026200"], 0x0) syz_usb_disconnect(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x10000006, 0x1, 0x0, 0xb44, 0x4, 0x0, 0x9, 0x3}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000340)={r1, 0x0, 0x606000, &(0x7f0000000280)={@_ha_fsid={[0x1, 0xfffffff5]}, {0x1, 0x974, 0x6}}, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0xf}) openat(r3, &(0x7f0000000380)='./file0\x00', 0x40400, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1183}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d040}, 0x4048014) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) 585.171953ms ago: executing program 0 (id=399): r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000580)=0xf) 161.249134ms ago: executing program 0 (id=400): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8030000"], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 113.41531ms ago: executing program 0 (id=401): r0 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x20002) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x9, @raw_data="aa1d33c716d5b6c598bb846045a4bcde20fce0759b5c056dddb296fe6a83dba0fddded3748767a86464e2d891fd2233e2e34bc803b4b8da2533af7268e8114063e523749d15906dd6b2b142a27f2a2422a49a8d947ddcabfc37cb266e3ba7058137740598d04828e74eb7b413ec0847036eca4215e1f2e40b6ec95e1a190fb73954b3ada9faf3ef4d77d6cffe617982304db80ebb456edb8117402076cea30bccfc83eddbac4c369c3528b552ad400"}) 58.807801ms ago: executing program 2 (id=402): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x8, &(0x7f0000000980)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r3, 0x0, 0xe, 0x0, &(0x7f0000000a80)='\x00'/14, 0x0, 0x4000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x48, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "000102030405060708090a0b0c0d0e0f"}]}, 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./dev\x00', &(0x7f0000000b40)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./dev/mapper/control\x00', 0x2001, 0x80) ioctl$FIONREAD(r6, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) r8 = syz_open_dev$sg(&(0x7f0000000800), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r8, 0x0) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800004000000053, 0x3) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000400)={'wpan1\x00'}) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000100)={0x2, @win={{0x4500005, 0x8, 0x2, 0x2}, 0x2, 0xc, 0x0, 0xd, 0x0, 0x8}}) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000200)={0x3, @raw_data="1bc61bd4096fcc8d4b1a0f311aac46fd9b9d616b2c2e35818ad325a7625ad37b118c20a988db255b921549053e8d9565b7c5ef8121d546753509fe8b1a9b03c1554f92ccf10c352b7bc706b314579c08954ab1aeaa7d341d499565a2426ca83e020df5b934ba2df3c8703abbf41e5165a3b259b5338892fc8bda8f94f7af1fd3f000e8f6f42b8a8a0eb03d58b6c0b5623f5347b52c449d61f7f8f93ca5afac0f272715f8e7b1efac5b82203f6fa30bf4f132f930354ab6771238eaa9dc3394b4897b133960ed8006"}) 236.898µs ago: executing program 3 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/pppol2tp\x00', 0x0, 0x0) lseek(r0, 0x1ff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 0 (id=404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000040)="070000000000000001000000ffffffff0010a5") ioctl(r2, 0xc048aeca, &(0x7f00000000c0)='\a\x00'/38) kernel console output (not intermixed with test programs): 63.704641][ T5594] Cannot create hsr debugfs directory [ 63.705779][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.705789][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.705812][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.871509][ T5595] hsr_slave_0: entered promiscuous mode [ 63.871968][ T5595] hsr_slave_1: entered promiscuous mode [ 63.872291][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 63.872307][ T5595] Cannot create hsr debugfs directory [ 64.120938][ T5605] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.124335][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.124931][ T5605] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.144394][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.155391][ T5605] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.157580][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.181868][ T5605] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.184697][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.217775][ T5597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.222074][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.224305][ T5597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.249697][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.263209][ T5597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.266871][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.269272][ T5597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.276329][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.324331][ T5594] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.329128][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.329734][ T5594] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.333994][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.337073][ T5594] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.348740][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.359770][ T5594] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.373570][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.452735][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.464400][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.479722][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.483536][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.484143][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.506826][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.509570][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.511862][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.617923][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.619369][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.619527][ T5595] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.622340][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.623646][ T5595] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.628059][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.653217][ T5595] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.660819][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.661488][ T5595] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.668544][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.711187][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.727333][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.735297][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.735413][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.742325][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.772575][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.772624][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.773572][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.773613][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.807792][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.807872][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.813020][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.832660][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.832735][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.858558][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.858605][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.903187][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.957348][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.991705][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.991787][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.034652][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.034736][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.090285][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.188709][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.228886][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.228966][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.250438][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.250521][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.447611][ T5606] Bluetooth: hci3: command tx timeout [ 65.447644][ T5606] Bluetooth: hci4: command tx timeout [ 65.447664][ T5606] Bluetooth: hci2: command tx timeout [ 65.447684][ T5606] Bluetooth: hci1: command tx timeout [ 65.447853][ T5604] Bluetooth: hci0: command tx timeout [ 65.673220][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.800084][ T5597] veth0_vlan: entered promiscuous mode [ 65.819036][ T5597] veth1_vlan: entered promiscuous mode [ 65.903101][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.918308][ T5597] veth0_macvtap: entered promiscuous mode [ 65.929817][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.929868][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.952419][ T5597] veth1_macvtap: entered promiscuous mode [ 66.011304][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.044686][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.093851][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.097906][ T148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.098814][ T148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.101083][ T5594] veth0_vlan: entered promiscuous mode [ 66.116437][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.117394][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.180999][ T5594] veth1_vlan: entered promiscuous mode [ 66.263049][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.266594][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.323535][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.323556][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.367629][ T5594] veth0_macvtap: entered promiscuous mode [ 66.387815][ T5594] veth1_macvtap: entered promiscuous mode [ 66.431942][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.431963][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.451160][ T5595] veth0_vlan: entered promiscuous mode [ 66.472291][ T5595] veth1_vlan: entered promiscuous mode [ 66.473387][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 66.473402][ T31] audit: type=1400 audit(1791832157.871:154): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/root/syzkaller.oFscY4/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.473670][ T31] audit: type=1400 audit(1791832157.871:155): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.479503][ T31] audit: type=1400 audit(1791832157.881:156): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/root/syzkaller.oFscY4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.482436][ T31] audit: type=1400 audit(1791832157.881:157): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.502306][ T31] audit: type=1400 audit(1791832157.901:158): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/root/syzkaller.oFscY4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.504674][ T31] audit: type=1400 audit(1791832157.901:159): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/root/syzkaller.oFscY4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.524458][ T31] audit: type=1400 audit(1791832157.921:160): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.541043][ T31] audit: type=1400 audit(1791832157.941:161): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.560066][ T31] audit: type=1400 audit(1791832157.961:162): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="gadgetfs" ino=7937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.563982][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.586636][ T31] audit: type=1400 audit(1791832157.991:163): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 66.587798][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.635951][ T5596] veth0_vlan: entered promiscuous mode [ 66.686999][ T148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.687049][ T148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.687086][ T148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.687113][ T148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.699345][ T5596] veth1_vlan: entered promiscuous mode [ 66.723451][ T5595] veth0_macvtap: entered promiscuous mode [ 66.759935][ T5595] veth1_macvtap: entered promiscuous mode [ 66.782186][ T5597] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.839700][ T5605] veth0_vlan: entered promiscuous mode [ 66.880575][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.882066][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.882083][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.896233][ T5605] veth1_vlan: entered promiscuous mode [ 66.918157][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.945430][ T78] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.945473][ T78] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.945506][ T78] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.945537][ T78] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.960396][ T5596] veth0_macvtap: entered promiscuous mode [ 67.010969][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.010990][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.026830][ T5596] veth1_macvtap: entered promiscuous mode [ 67.130255][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.144281][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.148106][ T5605] veth0_macvtap: entered promiscuous mode [ 67.189806][ T5605] veth1_macvtap: entered promiscuous mode [ 67.208728][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.208747][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.237793][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.283682][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.328233][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.378635][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.378656][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.407423][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.409166][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.409439][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.409778][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.412773][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.412789][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.525870][ T5598] Bluetooth: hci1: command tx timeout [ 67.525898][ T5598] Bluetooth: hci2: command tx timeout [ 67.525916][ T5598] Bluetooth: hci4: command tx timeout [ 67.525933][ T5598] Bluetooth: hci3: command tx timeout [ 67.526530][ T5604] Bluetooth: hci0: command tx timeout [ 67.585464][ T5794] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.589786][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.589806][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.639123][ T148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.639454][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.639486][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.707856][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.708573][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.735522][ T5794] usb 4-1: Using ep0 maxpacket: 8 [ 67.737146][ T5794] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 67.753331][ T5794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 67.753363][ T5794] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 67.753395][ T5794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.808915][ T5794] usb 4-1: config 0 descriptor?? [ 67.844561][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.844582][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.023168][ T5807] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3'. [ 68.113636][ T5811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 68.113664][ T5811] block nbd0: Unsupported socket: should be TCP or UNIX. [ 68.781203][ T5794] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 68.784334][ T5794] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 68.784380][ T5794] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 68.784400][ T5794] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 68.784420][ T5794] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 68.784439][ T5794] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 68.784460][ T5794] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 68.784480][ T5794] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 68.784501][ T5794] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 68.784521][ T5794] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 68.807455][ T5794] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 69.648823][ T5604] Bluetooth: hci0: command tx timeout [ 69.653976][ T5604] Bluetooth: hci3: command tx timeout [ 69.659893][ T5604] Bluetooth: hci4: command tx timeout [ 69.659946][ T5604] Bluetooth: hci2: command tx timeout [ 69.659966][ T5604] Bluetooth: hci1: command tx timeout [ 70.215143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 70.585139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 71.025399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 71.375831][ T5794] lenovo 0003:17EF:6047.0001: Sensitivity setting failed: -71 [ 71.411064][ T5794] usb 4-1: USB disconnect, device number 2 [ 71.543014][ T31] kauditd_printk_skb: 45 callbacks suppressed [ 71.543032][ T31] audit: type=1400 audit(1791832162.941:209): avc: denied { ioctl } for pid=5852 comm="syz.3.21" path="/dev/dvb/adapter0/dvr0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 71.635776][ T5855] FAULT_INJECTION: forcing a failure. [ 71.635776][ T5855] name failslab, interval 1, probability 0, space 0, times 1 [ 71.635808][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: syz.1.23 Not tainted syzkaller #0 PREEMPT(full) [ 71.635830][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 71.635842][ T5855] Call Trace: [ 71.635849][ T5855] [ 71.635857][ T5855] dump_stack_lvl+0x100/0x190 [ 71.635894][ T5855] should_fail_ex.cold+0x5/0xa [ 71.635922][ T5855] should_failslab+0xc2/0x120 [ 71.635952][ T5855] __kmalloc_noprof+0xfc/0x840 [ 71.635977][ T5855] ? cache_create_net+0xa2/0x1f0 [ 71.636010][ T5855] cache_create_net+0xa2/0x1f0 [ 71.636042][ T5855] nfsd_idmap_init+0x11f/0x250 [ 71.636071][ T5855] ? __pfx_nfsd_net_init+0x10/0x10 [ 71.636102][ T5855] nfsd_net_init+0x85/0x480 [ 71.636130][ T5855] ? __pfx_nfsd_net_init+0x10/0x10 [ 71.636158][ T5855] ops_init+0x1e2/0x5f0 [ 71.636187][ T5855] setup_net+0x118/0x3a0 [ 71.636209][ T5855] ? __pfx_setup_net+0x10/0x10 [ 71.636235][ T5855] copy_net_ns+0x345/0x7a0 [ 71.636262][ T5855] create_new_namespaces+0x3ea/0xac0 [ 71.636294][ T5855] unshare_nsproxy_namespaces+0xf2/0x220 [ 71.636321][ T5855] ksys_unshare+0x4a2/0xb30 [ 71.636346][ T5855] ? __pfx_ksys_unshare+0x10/0x10 [ 71.636382][ T5855] __x64_sys_unshare+0x31/0x40 [ 71.636406][ T5855] do_syscall_64+0x123/0x790 [ 71.636436][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.636456][ T5855] RIP: 0033:0x7f9b4179e1d9 [ 71.636473][ T5855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.636491][ T5855] RSP: 002b:00007f9b426e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 71.636510][ T5855] RAX: ffffffffffffffda RBX: 00007f9b41a25fa0 RCX: 00007f9b4179e1d9 [ 71.636522][ T5855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 71.636533][ T5855] RBP: 00007f9b41835888 R08: 0000000000000000 R09: 0000000000000000 [ 71.636544][ T5855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.636555][ T5855] R13: 00007f9b41a26038 R14: 00007f9b41a25fa0 R15: 00007ffd05e197d8 [ 71.636582][ T5855] [ 72.128084][ T31] audit: type=1400 audit(1791832163.521:210): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 72.337770][ T5867] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 72.337867][ T5867] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 72.993867][ T31] audit: type=1400 audit(1791832164.391:211): avc: denied { create } for pid=5874 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.059436][ T5876] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 73.062564][ T5876] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 73.062898][ T5876] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 73.071935][ T31] audit: type=1400 audit(1791832164.451:212): avc: denied { mount } for pid=5874 comm="syz.3.29" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 74.685490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.271579][ T31] audit: type=1400 audit(1791832166.661:213): avc: denied { map_create } for pid=5874 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 75.456013][ T5876] tcpci 0-0002: probe with driver tcpci failed with error -5 [ 75.456235][ T5876] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 75.837020][ T30] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 75.841649][ T31] audit: type=1800 audit(1791832167.201:214): pid=5893 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.34" name="syzkaller0" dev="sda1" ino=2048 res=0 errno=0 [ 76.294221][ T31] audit: type=1400 audit(1791832167.691:215): avc: denied { setopt } for pid=5896 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.303196][ T31] audit: type=1400 audit(1791832167.701:216): avc: denied { bind } for pid=5896 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.427904][ T30] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 76.433299][ T30] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 76.434288][ T30] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.480224][ T30] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 76.480250][ T30] usb 3-1: Product: syz [ 76.480263][ T30] usb 3-1: Manufacturer: syz [ 76.535360][ T30] hub 3-1:4.0: USB hub found [ 77.259466][ T31] audit: type=1400 audit(1791832168.661:217): avc: denied { read write } for pid=5906 comm="syz.1.38" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 77.260054][ T31] audit: type=1400 audit(1791832168.661:218): avc: denied { open } for pid=5906 comm="syz.1.38" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 77.517828][ T30] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 77.595291][ T5794] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 77.604321][ T30] usb 3-1: USB disconnect, device number 2 [ 77.620074][ T31] audit: type=1400 audit(1791832169.021:219): avc: denied { write } for pid=5910 comm="syz.4.37" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 77.759161][ T5794] usb 2-1: unable to get BOS descriptor or descriptor too short [ 77.759619][ T5794] usb 2-1: not running at top speed; connect to a high speed hub [ 77.759648][ T5794] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 77.760930][ T5794] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 77.760952][ T5794] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 77.760968][ T5794] usb 2-1: config 5 has no interface number 0 [ 77.761001][ T5794] usb 2-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 77.761025][ T5794] usb 2-1: config 5 interface 246 has no altsetting 0 [ 77.764150][ T5794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.764173][ T5794] usb 2-1: Product: syz [ 77.764187][ T5794] usb 2-1: Manufacturer: syz [ 77.764201][ T5794] usb 2-1: SerialNumber: syz [ 77.852327][ T31] audit: type=1400 audit(1791832169.251:220): avc: denied { create } for pid=5915 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.896580][ T31] audit: type=1400 audit(1791832169.301:221): avc: denied { bind } for pid=5915 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.896977][ T31] audit: type=1400 audit(1791832169.301:222): avc: denied { listen } for pid=5915 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.898215][ T31] audit: type=1400 audit(1791832169.301:223): avc: denied { bpf } for pid=5917 comm="syz.4.42" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.898930][ T31] audit: type=1400 audit(1791832169.301:224): avc: denied { map_read map_write } for pid=5917 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.898968][ T31] audit: type=1400 audit(1791832169.301:225): avc: denied { create } for pid=5915 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.229922][ T5907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.232315][ T5907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.070212][ T78] usb 2-1: Failed to submit usb control message: -71 [ 79.070246][ T78] usb 2-1: unable to send the bmi data to the device: -71 [ 79.070261][ T78] usb 2-1: unable to get target info from device [ 79.070274][ T78] usb 2-1: could not get target info (-71) [ 79.070417][ T78] usb 2-1: could not probe fw (-71) [ 79.070452][ T5794] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 79.127349][ T5794] usb 2-1: USB disconnect, device number 2 [ 79.212834][ T31] audit: type=1400 audit(1791832170.611:226): avc: denied { read } for pid=5927 comm="syz.2.45" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 80.784971][ T5939] uprobe: syz.3.39:5939 failed to unregister, leaking uprobe [ 80.979143][ T5939] uprobe: syz.3.39:5939 failed to unregister, leaking uprobe [ 81.047667][ T5606] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 81.054116][ T5971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 81.069706][ T5606] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 81.069730][ T5606] CPU: 1 UID: 0 PID: 5606 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 81.069753][ T5606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 81.069765][ T5606] Workqueue: hci0 hci_rx_work [ 81.069793][ T5606] Call Trace: [ 81.069799][ T5606] [ 81.069806][ T5606] dump_stack_lvl+0x100/0x190 [ 81.069839][ T5606] sysfs_warn_dup.cold+0x1c/0x28 [ 81.069867][ T5606] sysfs_create_dir_ns+0x24b/0x2b0 [ 81.069886][ T5606] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 81.069913][ T5606] ? find_held_lock+0x2b/0x80 [ 81.069940][ T5606] ? kobject_add_internal+0x25f/0x930 [ 81.069960][ T5606] ? kobject_add_internal+0x25f/0x930 [ 81.069980][ T5606] ? do_raw_spin_unlock+0x145/0x1e0 [ 81.070008][ T5606] kobject_add_internal+0x2c8/0x930 [ 81.070032][ T5606] kobject_add+0x16a/0x1e0 [ 81.070052][ T5606] ? __pfx_kobject_add+0x10/0x10 [ 81.070070][ T5606] ? class_to_subsys+0x10f/0x150 [ 81.070097][ T5606] ? kobject_put+0xb9/0x640 [ 81.070114][ T5606] ? _raw_spin_unlock+0x28/0x50 [ 81.070144][ T5606] device_add+0x294/0x1970 [ 81.070171][ T5606] ? __pfx_dev_set_name+0x10/0x10 [ 81.070196][ T5606] ? __pfx_device_add+0x10/0x10 [ 81.070216][ T5606] ? find_held_lock+0x2b/0x80 [ 81.070245][ T5606] ? hci_find_link_key+0x1a4/0x3c0 [ 81.070267][ T5606] ? hci_find_link_key+0x1a4/0x3c0 [ 81.070293][ T5606] hci_conn_add_sysfs+0x1a3/0x260 [ 81.070317][ T5606] hci_conn_complete_evt+0x5bb/0x13f0 [ 81.070339][ T5606] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 81.070361][ T5606] ? __skb_clone+0x570/0x760 [ 81.070391][ T5606] ? skb_pull_data+0x15f/0x1e0 [ 81.070418][ T5606] hci_event_packet+0x8e9/0xcd0 [ 81.070439][ T5606] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 81.070459][ T5606] ? __pfx_hci_event_packet+0x10/0x10 [ 81.070486][ T5606] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.070518][ T5606] hci_rx_work+0x451/0xfc0 [ 81.070545][ T5606] process_one_work+0xac7/0x1b10 [ 81.070589][ T5606] ? __pfx_process_one_work+0x10/0x10 [ 81.070620][ T5606] ? lock_acquire+0x1d1/0x380 [ 81.070649][ T5606] ? __pfx_hci_rx_work+0x10/0x10 [ 81.070671][ T5606] worker_thread+0x5ef/0xe50 [ 81.070700][ T5606] ? kthread+0x13a/0x450 [ 81.070725][ T5606] ? __pfx_worker_thread+0x10/0x10 [ 81.070741][ T5606] kthread+0x373/0x450 [ 81.070767][ T5606] ? __pfx_kthread+0x10/0x10 [ 81.070796][ T5606] ret_from_fork+0x730/0xd60 [ 81.070820][ T5606] ? __pfx_ret_from_fork+0x10/0x10 [ 81.070844][ T5606] ? __switch_to+0x800/0x10f0 [ 81.070871][ T5606] ? __pfx_kthread+0x10/0x10 [ 81.070900][ T5606] ret_from_fork_asm+0x1a/0x30 [ 81.070936][ T5606] [ 81.070959][ T5606] kobject: kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 81.071945][ T5606] Bluetooth: hci0: failed to register connection device [ 81.292946][ T10] cfg80211: failed to load regulatory.db [ 81.734351][ T5980] netlink: 'syz.0.63': attribute type 6 has an invalid length. [ 81.734379][ T5980] netlink: 20 bytes leftover after parsing attributes in process `syz.0.63'. [ 81.834798][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.836135][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.392332][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 82.392350][ T31] audit: type=1400 audit(1791832173.791:252): avc: denied { setopt } for pid=5983 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.426198][ T31] audit: type=1400 audit(1791832173.831:253): avc: denied { setattr } for pid=5986 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 82.775519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 83.290357][ T31] audit: type=1400 audit(1791832174.261:254): avc: denied { name_bind } for pid=5986 comm="syz.3.67" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 83.339096][ T31] audit: type=1400 audit(1791832174.741:255): avc: denied { ioctl } for pid=5991 comm="syz.0.69" path="socket:[8976]" dev="sockfs" ino=8976 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.472484][ T5604] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 83.472997][ T31] audit: type=1400 audit(1791832174.871:256): avc: denied { read write } for pid=5989 comm="syz.4.66" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.473337][ T31] audit: type=1400 audit(1791832174.871:257): avc: denied { open } for pid=5989 comm="syz.4.66" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.483720][ T31] audit: type=1400 audit(1791832174.881:258): avc: denied { ioctl } for pid=5989 comm="syz.4.66" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.769186][ T6006] ======================================================= [ 83.769186][ T6006] WARNING: The mand mount option has been deprecated and [ 83.769186][ T6006] and is ignored by this kernel. Remove the mand [ 83.769186][ T6006] option from the mount to silence this warning. [ 83.769186][ T6006] ======================================================= [ 84.149644][ T50] IPVS: starting estimator thread 0... [ 84.245200][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.245641][ T6007] IPVS: using max 41 ests per chain, 98400 per kthread [ 84.409926][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 84.451696][ T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 84.478352][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 84.478413][ T10] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 84.478446][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.485190][ T5604] Bluetooth: hci0: command tx timeout [ 84.563985][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.564018][ T10] usb 1-1: Product: syz [ 84.564082][ T10] usb 1-1: Manufacturer: syz [ 84.564121][ T10] usb 1-1: SerialNumber: syz [ 84.796513][ T10] usb 1-1: config 0 descriptor?? [ 85.478823][ T31] audit: type=1400 audit(1791832176.801:259): avc: denied { mount } for pid=6011 comm="syz.2.75" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 85.479015][ T31] audit: type=1400 audit(1791832176.801:260): avc: denied { search } for pid=6011 comm="syz.2.75" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 85.479205][ T31] audit: type=1400 audit(1791832176.801:261): avc: denied { search } for pid=6011 comm="syz.2.75" name="events" dev="tracefs" ino=440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 85.879297][ T10] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 86.007521][ T984] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.269593][ T984] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 86.272638][ T984] usb 5-1: config 1 has an invalid descriptor of length 107, skipping remainder of the config [ 86.272783][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.565286][ T5604] Bluetooth: hci0: command tx timeout [ 86.574258][ T10] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EREMOTEIO) [ 86.597515][ T984] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 86.597635][ T984] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 86.672977][ T6035] usb 5-1: USB disconnect, device number 2 [ 86.703801][ T6035] hub 5-0:1.0: USB hub found [ 86.704303][ T6035] hub 5-0:1.0: 1 port detected [ 86.831590][ T30] usb 1-1: USB disconnect, device number 2 [ 86.845709][ T984] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.994147][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'. [ 87.062120][ T6044] loop8: detected capacity change from 0 to 8 [ 87.079971][ T6044] Dev loop8: unable to read RDB block 8 [ 87.080013][ T6044] loop8: unable to read partition table [ 87.080509][ T6044] loop8: partition table beyond EOD, truncated [ 87.080548][ T6044] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 88.126096][ T6066] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 88.126124][ T6066] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 88.127394][ T6066] vhci_hcd vhci_hcd.0: Device attached [ 88.151470][ T6070] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 88.151498][ T6070] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 88.151545][ T6070] vhci_hcd vhci_hcd.0: Device attached [ 88.169642][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 88.169658][ T31] audit: type=1400 audit(1791832179.561:274): avc: denied { write } for pid=6039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.169692][ T31] audit: type=1400 audit(1791832179.561:275): avc: denied { add_name } for pid=6039 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.555415][ T30] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 88.581758][ T6076] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 88.694580][ T31] audit: type=1400 audit(1791832180.091:276): avc: denied { write } for pid=6080 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.695674][ T31] audit: type=1400 audit(1791832180.091:277): avc: denied { remove_name } for pid=6080 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=1944 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.756293][ T6071] vhci_hcd: connection closed [ 88.764556][ T6067] vhci_hcd: connection reset by peer [ 88.764933][ T5895] vhci_hcd vhci_hcd.0: stop threads [ 88.765307][ T5895] vhci_hcd vhci_hcd.0: release socket [ 88.791558][ T5895] vhci_hcd vhci_hcd.0: disconnect device [ 88.791781][ T5895] vhci_hcd vhci_hcd.0: stop threads [ 88.791799][ T5895] vhci_hcd vhci_hcd.0: release socket [ 88.792093][ T5895] vhci_hcd vhci_hcd.0: disconnect device [ 88.875266][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.975657][ T31] audit: type=1400 audit(1791832180.381:278): avc: denied { name_bind } for pid=6093 comm="syz.4.99" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 88.975943][ T31] audit: type=1400 audit(1791832180.381:279): avc: denied { node_bind } for pid=6093 comm="syz.4.99" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 89.111785][ T31] audit: type=1400 audit(1791832180.481:280): avc: denied { bind } for pid=6089 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.111964][ T31] audit: type=1400 audit(1791832180.491:281): avc: denied { name_bind } for pid=6089 comm="syz.3.98" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 89.112012][ T31] audit: type=1400 audit(1791832180.491:282): avc: denied { node_bind } for pid=6089 comm="syz.3.98" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 89.584130][ T10] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 89.598643][ T10] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 89.599547][ T10] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 89.601611][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.601635][ T10] usb 3-1: Product: syz [ 89.601647][ T10] usb 3-1: Manufacturer: syz [ 89.601660][ T10] usb 3-1: SerialNumber: syz [ 89.656035][ T10] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 89.664214][ T6105] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 89.664268][ T6105] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 89.664557][ T10] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 89.709319][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.712621][ T6108] netlink: 60 bytes leftover after parsing attributes in process `syz.4.101'. [ 89.734325][ T10] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 89.829340][ T31] audit: type=1400 audit(1791832181.231:283): avc: denied { write } for pid=6085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.976131][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 90.400959][ T9] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 90.417816][ T5609] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 90.436750][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.436779][ T9] usb 2-1: Product: syz [ 90.436793][ T9] usb 2-1: Manufacturer: syz [ 90.436806][ T9] usb 2-1: SerialNumber: syz [ 90.444418][ T9] usb 2-1: config 0 descriptor?? [ 90.480138][ T6115] kAFS: unable to lookup cell '(G' [ 90.726035][ T6127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.765237][ T984] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.892722][ T5609] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 90.921949][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 91.034176][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.066367][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 91.072444][ T9] usb 2-1: media controller created [ 91.141020][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.178400][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 91.178415][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 91.285192][ T984] usb 4-1: Using ep0 maxpacket: 32 [ 91.285672][ T984] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 91.286506][ T984] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 91.286528][ T984] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 91.286564][ T984] usb 4-1: config 0 interface 0 has no altsetting 0 [ 91.288286][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.288305][ T984] usb 4-1: Product: syz [ 91.288317][ T984] usb 4-1: Manufacturer: syz [ 91.288330][ T984] usb 4-1: SerialNumber: syz [ 91.289970][ T984] usb 4-1: config 0 descriptor?? [ 91.384220][ T5789] usb 2-1: USB disconnect, device number 3 [ 91.395191][ T5609] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.446558][ T6081] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 91.446849][ T6081] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 91.446881][ T6081] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 91.447152][ T6081] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 91.470302][ T5794] usb 3-1: USB disconnect, device number 3 [ 91.524344][ T5794] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 91.568061][ T5794] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 91.573498][ T5794] ti_usb_3410_5052 3-1:2.0: device disconnected [ 91.597291][ T5789] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 91.666242][ T5609] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 91.667098][ T5609] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.667137][ T5609] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 91.667157][ T5609] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 91.667178][ T5609] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.667210][ T5609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.814670][ T6134] can0: slcan on ttyS3. [ 92.116322][ T984] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 92.273393][ T6142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.356671][ T5609] gud 5-1:1.0: Failed to add properties (error=-71) [ 92.356706][ T5609] gud 5-1:1.0: probe with driver gud failed with error -71 [ 92.393978][ T5609] usb 5-1: USB disconnect, device number 4 [ 92.468122][ T6131] can0 (unregistered): slcan off ttyS3. 8[ 92.587629][ T5789] usb 4-1: USB disconnect, device number 3 [ 92.705207][ T984] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 92.761155][ T6166] netlink: 'syz.2.117': attribute type 12 has an invalid length. [ 92.856488][ T984] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 92.861095][ T984] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 92.861121][ T984] usb 2-1: config 0 has no interface number 0 [ 92.861152][ T984] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 92.861175][ T984] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 92.861198][ T984] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 92.862693][ T984] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 92.862714][ T984] usb 2-1: Product: syz [ 92.862727][ T984] usb 2-1: SerialNumber: syz [ 92.953995][ T984] usb 2-1: config 0 descriptor?? [ 92.964021][ T984] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 92.976230][ T984] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input5 [ 93.389298][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 93.389315][ T31] audit: type=1400 audit(1791832184.791:313): avc: denied { write } for pid=6171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.452140][ T984] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 93.546966][ T31] audit: type=1400 audit(1791832184.851:314): avc: denied { create } for pid=6175 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 93.626189][ T984] usb 5-1: Using ep0 maxpacket: 8 [ 93.653782][ T984] usb 5-1: unable to get BOS descriptor or descriptor too short [ 93.654081][ T984] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 93.680538][ T30] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 93.705028][ T984] usb 5-1: too many endpoints for config 4 interface 0 altsetting 48: 49, using maximum allowed: 30 [ 93.705067][ T984] usb 5-1: config 4 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 93.705188][ T984] usb 5-1: config 4 interface 0 has no altsetting 0 [ 93.742090][ T984] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 93.742114][ T984] usb 5-1: Manufacturer: syz [ 93.742127][ T984] usb 5-1: SerialNumber: syz [ 93.745641][ T5609] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.779855][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.780057][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.780248][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.780440][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.780633][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.780815][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.781001][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.781051][ T9] usb 2-1: USB disconnect, device number 4 [ 93.781189][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.781207][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 93.835356][ T9] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 93.895398][ T6192] FAULT_INJECTION: forcing a failure. [ 93.895398][ T6192] name failslab, interval 1, probability 0, space 0, times 0 [ 93.895488][ T6192] CPU: 0 UID: 0 PID: 6192 Comm: syz.0.121 Not tainted syzkaller #0 PREEMPT(full) [ 93.895511][ T6192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 93.895522][ T6192] Call Trace: [ 93.895529][ T6192] [ 93.895537][ T6192] dump_stack_lvl+0x100/0x190 [ 93.895570][ T6192] should_fail_ex.cold+0x5/0xa [ 93.895601][ T6192] should_failslab+0xc2/0x120 [ 93.895628][ T6192] __kmalloc_cache_noprof+0x91/0x6d0 [ 93.895649][ T6192] ? trace_parse_run_command+0x58/0x3b0 [ 93.895679][ T6192] trace_parse_run_command+0x58/0x3b0 [ 93.895701][ T6192] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 93.895732][ T6192] vfs_write+0x2aa/0x1050 [ 93.895755][ T6192] ? __pfx_probes_write+0x10/0x10 [ 93.895778][ T6192] ? lock_acquire+0x1d1/0x380 syzkaller syzkaller login: [ 93.895799][ T6192] ? __fget_files+0x34/0x3d0 [ 93.895825][ T6192] ? __pfx_vfs_write+0x10/0x10 [ 93.895846][ T6192] ? find_held_lock+0x2b/0x80 [ 93.895872][ T6192] ? __fget_files+0x215/0x3d0 [ 93.895901][ T6192] ? __fget_files+0x21f/0x3d0 [ 93.895933][ T6192] ksys_write+0x12a/0x250 [ 93.895962][ T6192] ? __pfx_ksys_write+0x10/0x10 [ 93.895993][ T6192] do_syscall_64+0x123/0x790 [ 93.896022][ T6192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.896042][ T6192] RIP: 0033:0x7f0b3df9e1d9 [ 93.896058][ T6192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.896073][ T6192] RSP: 002b:00007f0b3ee85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.896091][ T6192] RAX: ffffffffffffffda RBX: 00007f0b3e225fa0 RCX: 00007f0b3df9e1d9 [ 93.896104][ T6192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 93.896114][ T6192] RBP: 00007f0b3e035888 R08: 0000000000000000 R09: 0000000000000000 [ 93.896124][ T6192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.896134][ T6192] R13: 00007f0b3e226038 R14: 00007f0b3e225fa0 R15: 00007ffdc09f8e08 [ 93.896159][ T6192] [ 93.896687][ T5609] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 93.900233][ T31] audit: type=1400 audit(1791832185.301:315): avc: denied { read write } for pid=6190 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 93.900596][ T5609] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 93.902029][ T31] audit: type=1400 audit(1791832185.301:316): avc: denied { open } for pid=6190 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 93.902069][ T31] audit: type=1400 audit(1791832185.301:317): avc: denied { lock } for pid=6190 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 93.902120][ T5609] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 93.902173][ T31] audit: type=1400 audit(1791832185.301:318): avc: denied { read } for pid=6190 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 93.910689][ T5609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.910710][ T5609] usb 4-1: Product: syz [ 93.910723][ T5609] usb 4-1: Manufacturer: syz [ 93.910735][ T5609] usb 4-1: SerialNumber: syz [ 93.931138][ T5609] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 93.949360][ T5609] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 93.966010][ T5609] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 94.515133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 94.525158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.075127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.125128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.165462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 95.540043][ T6180] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 95.541142][ T6180] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 95.541175][ T6180] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 95.542222][ T6180] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 95.645637][ T5794] usb 4-1: USB disconnect, device number 4 [ 95.705074][ T984] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 95.755579][ T31] audit: type=1400 audit(1791832187.161:319): avc: denied { create } for pid=6200 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 95.756231][ T984] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 95.756479][ T984] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 95.756510][ T984] usb 5-1: media controller created [ 95.764040][ T5794] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 95.771701][ T31] audit: type=1400 audit(1791832187.171:320): avc: denied { write } for pid=6193 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.785030][ T5794] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 95.787511][ T5794] ti_usb_3410_5052 4-1:2.0: device disconnected [ 95.848961][ T984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.864452][ T31] audit: type=1400 audit(1791832187.271:321): avc: denied { sys_admin } for pid=6200 comm="syz.0.122" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 95.962362][ T984] zl10353_read_register: readreg error (reg=127, ret==0) [ 96.013911][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 96.038304][ T31] audit: type=1400 audit(1791832187.441:322): avc: denied { map_create } for pid=6206 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 96.610538][ T984] usb 5-1: USB disconnect, device number 5 [ 96.652228][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 96.728600][ T6213] FAULT_INJECTION: forcing a failure. [ 96.728600][ T6213] name failslab, interval 1, probability 0, space 0, times 0 [ 96.728636][ T6213] CPU: 1 UID: 0 PID: 6213 Comm: syz.3.128 Not tainted syzkaller #0 PREEMPT(full) [ 96.728662][ T6213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 96.728674][ T6213] Call Trace: [ 96.728683][ T6213] [ 96.728692][ T6213] dump_stack_lvl+0x100/0x190 [ 96.728726][ T6213] should_fail_ex.cold+0x5/0xa [ 96.728757][ T6213] should_failslab+0xc2/0x120 [ 96.728788][ T6213] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 96.728817][ T6213] ? kstrdup_const+0x63/0x80 [ 96.728844][ T6213] kstrdup+0x51/0xe0 [ 96.728866][ T6213] kstrdup_const+0x63/0x80 [ 96.728886][ T6213] __kernfs_new_node+0x9b/0xa10 [ 96.728910][ T6213] ? lock_acquire+0x1d1/0x380 [ 96.728939][ T6213] ? kernfs_add_one+0x4cb/0xaa0 [ 96.728962][ T6213] ? __pfx___kernfs_new_node+0x10/0x10 [ 96.728986][ T6213] ? lock_acquire+0x1d1/0x380 [ 96.729009][ T6213] ? kernfs_root+0x23/0x2a0 [ 96.729029][ T6213] ? find_held_lock+0x2b/0x80 [ 96.729059][ T6213] ? kernfs_root+0xee/0x2a0 [ 96.729078][ T6213] ? kernfs_root+0xee/0x2a0 [ 96.729104][ T6213] kernfs_new_node+0x117/0x150 [ 96.729132][ T6213] __kernfs_create_file+0x53/0x350 [ 96.729163][ T6213] cgroup_addrm_files+0x4ef/0xdb0 [ 96.729203][ T6213] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 96.729239][ T6213] ? css_next_child+0xcf/0x2e0 [ 96.729261][ T6213] ? css_next_descendant_pre+0x58/0x1a0 [ 96.729285][ T6213] css_populate_dir+0x343/0x590 [ 96.729315][ T6213] cgroup_mkdir+0x563/0x1330 [ 96.729340][ T6213] ? __pfx_cgroup_mkdir+0x10/0x10 [ 96.729365][ T6213] kernfs_iop_mkdir+0x111/0x190 [ 96.729384][ T6213] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 96.729409][ T6213] vfs_mkdir+0x364/0x850 [ 96.729434][ T6213] filename_mkdirat+0x48b/0x5e0 [ 96.729467][ T6213] ? __pfx_filename_mkdirat+0x10/0x10 [ 96.729496][ T6213] ? strncpy_from_user+0x19d/0x2d0 [ 96.729527][ T6213] ? do_getname+0x191/0x390 [ 96.729548][ T6213] __x64_sys_mkdirat+0x89/0xc0 [ 96.729576][ T6213] do_syscall_64+0x123/0x790 [ 96.729607][ T6213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.729626][ T6213] RIP: 0033:0x7eff1f19e1d9 [ 96.729644][ T6213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.729662][ T6213] RSP: 002b:00007eff1ffd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 96.729681][ T6213] RAX: ffffffffffffffda RBX: 00007eff1f425fa0 RCX: 00007eff1f19e1d9 [ 96.729692][ T6213] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 96.729703][ T6213] RBP: 00007eff1f235888 R08: 0000000000000000 R09: 0000000000000000 [ 96.729714][ T6213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.729725][ T6213] R13: 00007eff1f426038 R14: 00007eff1f425fa0 R15: 00007ffdf4995c18 [ 96.729753][ T6213] [ 96.734647][ T6213] cgroup: cgroup_addrm_files: failed to add notify_on_release, err=-12 [ 97.037022][ T6219] syz.0.130 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 97.325856][ T984] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 97.515199][ T984] usb 5-1: Using ep0 maxpacket: 32 [ 97.515885][ T984] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 97.516728][ T984] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 97.516748][ T984] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 97.516766][ T984] usb 5-1: config 0 interface 0 has no altsetting 0 [ 97.529248][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.529270][ T984] usb 5-1: Product: syz [ 97.529282][ T984] usb 5-1: Manufacturer: syz [ 97.529295][ T984] usb 5-1: SerialNumber: syz [ 97.537380][ T984] usb 5-1: config 0 descriptor?? [ 97.858733][ T6230] qnx4: no qnx4 filesystem (no root dir). [ 98.051579][ T984] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 98.231279][ T5609] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 98.447840][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 98.447859][ T31] audit: type=1400 audit(1791832189.841:336): avc: denied { write } for pid=6233 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.453636][ T984] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 98.507805][ T984] usb 5-1: USB disconnect, device number 6 [ 98.619012][ T31] audit: type=1400 audit(1791832190.021:337): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 98.675280][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.746295][ T31] audit: type=1400 audit(1791832190.151:338): avc: denied { read } for pid=6247 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.785855][ T5609] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.791493][ T31] audit: type=1400 audit(1791832190.191:339): avc: denied { recv } for pid=5594 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.90 dest=60494 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 98.825209][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 98.840849][ T10] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 98.857156][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.857182][ T10] usb 3-1: Product: syz [ 98.857195][ T10] usb 3-1: Manufacturer: syz [ 98.857208][ T10] usb 3-1: SerialNumber: syz [ 98.858930][ T10] usb 3-1: config 0 descriptor?? [ 98.864031][ T10] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 98.864235][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 98.864245][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 98.864293][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 98.864300][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 98.881224][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 98.882835][ T10] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 98.882871][ T10] usb 3-1: media controller created [ 98.901556][ T31] audit: type=1400 audit(1791832190.301:340): avc: denied { mount } for pid=6249 comm="syz.0.142" name="/" dev="ramfs" ino=10360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 98.911749][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.934186][ T31] audit: type=1804 audit(1791832190.331:341): pid=6250 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.142" name="bus" dev="ramfs" ino=10361 res=1 errno=0 [ 98.935808][ T5609] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 98.936811][ T5609] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 98.937640][ T5609] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 98.943417][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.943440][ T5609] usb 2-1: Product: syz [ 98.943454][ T5609] usb 2-1: Manufacturer: syz [ 98.943467][ T5609] usb 2-1: SerialNumber: syz [ 98.950440][ T10] usb 3-1: selecting invalid altsetting 3 [ 98.950458][ T10] ttusb2: set interface to alts=3 failed [ 98.971814][ T5609] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 99.003721][ T5609] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 99.017451][ T5609] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 99.089260][ T10] DVB: Unable to find symbol tda10086_attach() [ 99.089274][ T10] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 99.093987][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 99.094005][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 99.094083][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 99.094094][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 99.094137][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 99.141910][ T10] usb 3-1: USB disconnect, device number 4 [ 99.323713][ T31] audit: type=1400 audit(1791832190.721:342): avc: denied { create } for pid=6252 comm="syz.4.143" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.341062][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 99.427323][ T31] audit: type=1400 audit(1791832190.821:343): avc: denied { read write } for pid=6254 comm="syz.0.144" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 99.430008][ T31] audit: type=1400 audit(1791832190.821:344): avc: denied { open } for pid=6254 comm="syz.0.144" path="/31/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 99.430056][ T31] audit: type=1400 audit(1791832190.821:345): avc: denied { ioctl } for pid=6254 comm="syz.0.144" path="/31/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 99.551776][ T50] IPVS: starting estimator thread 0... [ 99.655338][ T6259] IPVS: using max 47 ests per chain, 112800 per kthread [ 101.360686][ T6244] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 101.367681][ T6244] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 101.367719][ T6244] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 101.380680][ T6244] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 101.386875][ T5794] usb 2-1: USB disconnect, device number 5 [ 101.399257][ T5794] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 101.438712][ T5794] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 101.439373][ T5794] ti_usb_3410_5052 2-1:2.0: device disconnected [ 101.693238][ T6279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 101.771475][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 101.867613][ T6276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.150'. [ 104.937919][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 104.937937][ T31] audit: type=1400 audit(1791832196.261:354): avc: denied { read write } for pid=6326 comm="syz.0.162" name="sg0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.937977][ T31] audit: type=1400 audit(1791832196.261:355): avc: denied { open } for pid=6326 comm="syz.0.162" path="/dev/sg0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.938011][ T31] audit: type=1400 audit(1791832196.271:356): avc: denied { ioctl } for pid=6326 comm="syz.0.162" path="/dev/sg0" dev="devtmpfs" ino=915 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.938046][ T31] audit: type=1400 audit(1791832196.271:357): avc: denied { create } for pid=6326 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.938080][ T31] audit: type=1400 audit(1791832196.271:358): avc: denied { bind } for pid=6326 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.938112][ T31] audit: type=1400 audit(1791832196.281:359): avc: denied { setopt } for pid=6326 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.938146][ T31] audit: type=1400 audit(1791832196.281:360): avc: denied { accept } for pid=6326 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.938178][ T31] audit: type=1400 audit(1791832196.291:361): avc: denied { read } for pid=6326 comm="syz.0.162" path="socket:[10161]" dev="sockfs" ino=10161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.943856][ T31] audit: type=1400 audit(1791832196.341:362): avc: denied { write } for pid=6326 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.978456][ T984] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.005212][ T31] audit: type=1400 audit(1791832196.401:363): avc: denied { ioctl } for pid=6331 comm="syz.3.164" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 105.119010][ T6330] sg_read: process 99 (syz.0.162) changed security contexts after opening file descriptor, this is not allowed. [ 105.125227][ T984] usb 3-1: Using ep0 maxpacket: 32 [ 105.127222][ T984] usb 3-1: unable to get BOS descriptor or descriptor too short [ 105.127255][ T984] usb 3-1: New USB device found, idVendor=0582, idProduct=0004, bcdDevice=79.ed [ 105.128061][ T984] usb 3-1: config 7 has an invalid interface number: 148 but max is 1 [ 105.128079][ T984] usb 3-1: config 7 has an invalid interface number: 242 but max is 1 [ 105.128095][ T984] usb 3-1: config 7 has no interface number 0 [ 105.128108][ T984] usb 3-1: config 7 has no interface number 1 [ 105.128141][ T984] usb 3-1: config 7 interface 148 altsetting 5 endpoint 0xC has an invalid bInterval 166, changing to 7 [ 105.128164][ T984] usb 3-1: config 7 interface 148 has no altsetting 0 [ 105.128178][ T984] usb 3-1: config 7 interface 242 has no altsetting 0 [ 105.129843][ T984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.129864][ T984] usb 3-1: Product: syz [ 105.129877][ T984] usb 3-1: Manufacturer: syz [ 105.129888][ T984] usb 3-1: SerialNumber: syz [ 105.155279][ T30] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 106.323206][ T30] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 106.324465][ T30] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.324494][ T30] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 106.324519][ T30] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 106.324544][ T30] usb 2-1: config 0 interface 0 has no altsetting 0 [ 106.699678][ T30] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 106.699704][ T30] usb 2-1: Product: syz [ 106.699718][ T30] usb 2-1: Manufacturer: syz [ 106.699731][ T30] usb 2-1: SerialNumber: syz [ 106.703873][ T30] usb 2-1: config 0 descriptor?? [ 106.704470][ T6329] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 106.742977][ T30] usb 2-1: selecting invalid altsetting 0 [ 106.953313][ T984] usb 3-1: USB disconnect, device number 5 [ 107.000068][ T5609] usb 2-1: USB disconnect, device number 6 [ 107.064212][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.148/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.121203][ T6365] WARNING! power/level is deprecated; use power/control instead [ 107.528093][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 107.643667][ T5604] Bluetooth: hci2: link tx timeout [ 107.643687][ T5604] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 107.688985][ T6379] netlink: 60 bytes leftover after parsing attributes in process `syz.2.179'. [ 107.805522][ T6381] netlink: 60 bytes leftover after parsing attributes in process `syz.2.179'. [ 107.925547][ T5606] Bluetooth: hci2: link tx timeout [ 107.925565][ T5606] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 108.087811][ T5787] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 108.235702][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 108.253367][ T5787] usb 2-1: Using ep0 maxpacket: 16 [ 108.270915][ T5787] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.287586][ T5787] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 108.287658][ T5787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.317445][ T5606] Bluetooth: hci2: link tx timeout [ 108.317462][ T5606] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 108.568966][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.600191][ T5787] usb 2-1: Product: syz [ 108.600211][ T5787] usb 2-1: Manufacturer: syz [ 108.600224][ T5787] usb 2-1: SerialNumber: syz [ 108.603450][ T5787] usb 2-1: config 0 descriptor?? [ 108.625623][ T5787] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 108.625653][ T5787] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 108.675185][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 108.910592][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 108.910633][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.911292][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 108.911367][ T10] usb 5-1: can't read configurations, error -71 [ 109.029746][ T6409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.189'. [ 109.047146][ T6409] hsr_slave_1 (unregistering): left promiscuous mode [ 109.914416][ T5606] Bluetooth: hci2: command 0x0406 tx timeout [ 109.930751][ T5787] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 109.950693][ T5787] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 110.000735][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.193'. [ 110.052859][ T6420] loop0: detected capacity change from 0 to 4096 [ 110.053236][ T31] kauditd_printk_skb: 88 callbacks suppressed [ 110.053267][ T31] audit: type=1400 audit(1791832201.451:452): avc: denied { write } for pid=6419 comm="syz.2.194" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.141647][ T6420] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 110.141666][ T6420] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 110.141674][ T6420] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 110.141701][ T6420] loop0: [ 110.254290][ T31] audit: type=1400 audit(1791832201.651:453): avc: denied { ioctl } for pid=6425 comm="syz.3.196" path="socket:[11423]" dev="sockfs" ino=11423 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 111.418056][ T5787] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 111.418078][ T5787] em28xx 2-1:0.0: No AC97 audio processor [ 111.509393][ T5789] usb 2-1: USB disconnect, device number 7 [ 111.510615][ T5789] em28xx 2-1:0.0: Disconnecting em28xx [ 111.583654][ T5789] em28xx: Freeing device [ 112.036309][ T5895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 112.779934][ T31] audit: type=1400 audit(1791832204.151:454): avc: denied { create } for pid=6454 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.780090][ T31] audit: type=1400 audit(1791832204.151:455): avc: denied { bind } for pid=6454 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.780176][ T31] audit: type=1400 audit(1791832204.161:456): avc: denied { write } for pid=6454 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.842297][ T31] audit: type=1400 audit(1791832204.241:457): avc: denied { create } for pid=6454 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 112.870101][ T31] audit: type=1400 audit(1791832204.271:458): avc: denied { setopt } for pid=6454 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 113.473961][ T6260] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 115.124210][ T31] audit: type=1400 audit(1791832206.521:459): avc: denied { create } for pid=6496 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 115.126211][ T31] audit: type=1400 audit(1791832206.531:460): avc: denied { getopt } for pid=6496 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 115.305718][ T5789] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.455157][ T5789] usb 3-1: Using ep0 maxpacket: 16 [ 115.455872][ T5789] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 115.456958][ T5789] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.456985][ T5789] usb 3-1: config 0 interface 0 has no altsetting 0 [ 115.458677][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.458696][ T5789] usb 3-1: Product: syz [ 115.458710][ T5789] usb 3-1: Manufacturer: syz [ 115.458723][ T5789] usb 3-1: SerialNumber: syz [ 115.462717][ T5789] usb 3-1: config 0 descriptor?? [ 115.673653][ T6463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.674704][ T6500] netlink: 'syz.3.218': attribute type 1 has an invalid length. [ 115.674727][ T6500] netlink: 220 bytes leftover after parsing attributes in process `syz.3.218'. [ 115.721154][ T5789] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 115.915645][ T6508] capability: warning: `syz.4.222' uses 32-bit capabilities (legacy support in use) [ 115.918795][ T6508] program syz.4.222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.065204][ T5789] rc_core: IR keymap rc-imon-pad not found [ 116.065224][ T5789] Registered IR keymap rc-empty [ 116.065278][ T5789] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 116.065294][ T5789] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 116.131106][ T5789] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 116.166455][ T5789] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 116.169665][ T5789] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:6> initialized [ 116.190972][ T31] audit: type=1400 audit(1791832207.591:461): avc: denied { read } for pid=6514 comm="syz.1.227" name="uprobe_events" dev="tracefs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 116.281454][ T31] audit: type=1400 audit(1791832207.681:462): avc: denied { unlink } for pid=6516 comm="syz.4.228" name="#1" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 116.541679][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 116.543424][ T5789] usb 3-1: USB disconnect, device number 6 [ 116.601001][ T6531] netlink: 60 bytes leftover after parsing attributes in process `syz.4.231'. [ 116.601534][ T6531] netlink: 60 bytes leftover after parsing attributes in process `syz.4.231'. [ 116.638838][ T5604] Bluetooth: hci4: link tx timeout [ 116.638856][ T5604] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 116.731697][ T5604] Bluetooth: hci4: link tx timeout [ 116.731715][ T5604] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 116.889007][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 116.889032][ T6536] block nbd0: Unsupported socket: should be TCP or UNIX. [ 117.138783][ T1153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 117.657376][ T5604] Bluetooth: hci4: link tx timeout [ 117.657395][ T5604] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 117.784088][ T5604] Bluetooth: hci4: link tx timeout [ 117.784108][ T5604] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 117.808091][ T5604] Bluetooth: hci4: link tx timeout [ 117.808138][ T5604] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 118.305511][ T5604] Bluetooth: hci4: link tx timeout [ 118.305530][ T5604] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 118.473909][ T31] audit: type=1400 audit(1791832209.871:463): avc: denied { append } for pid=6547 comm="syz.4.241" name="sg0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.477030][ T31] audit: type=1400 audit(1791832209.881:464): avc: denied { map } for pid=6547 comm="syz.4.241" path="/dev/sg0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.477322][ T31] audit: type=1400 audit(1791832209.881:465): avc: denied { execute } for pid=6547 comm="syz.4.241" path="/dev/sg0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.482709][ T31] audit: type=1400 audit(1791832209.881:466): avc: denied { mounton } for pid=6554 comm="syz.1.242" path="/sys" dev="proc" ino=4026531854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_t tclass=dir permissive=1 [ 118.645416][ T5604] Bluetooth: hci4: command 0x0406 tx timeout [ 119.045452][ T1153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 119.265426][ T31] audit: type=1326 audit(1791832210.671:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.0.244" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3df9e1d9 code=0x7ffc0000 [ 119.265476][ T31] audit: type=1326 audit(1791832210.671:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.0.244" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3df9e1d9 code=0x7ffc0000 [ 119.401651][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.245'. [ 119.401677][ T6570] block nbd0: Unsupported socket: should be TCP or UNIX. [ 119.595247][ T5787] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.646716][ T5789] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.759455][ T5787] usb 1-1: Using ep0 maxpacket: 16 [ 119.818165][ T5789] usb 3-1: Using ep0 maxpacket: 16 [ 119.818988][ T5789] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 119.819908][ T5789] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 119.819935][ T5789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 119.821735][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.821756][ T5789] usb 3-1: Product: syz [ 119.821771][ T5789] usb 3-1: Manufacturer: syz [ 119.821784][ T5789] usb 3-1: SerialNumber: syz [ 119.857498][ T5789] usb 3-1: config 0 descriptor?? [ 119.967041][ T5789] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 119.967754][ T5789] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 120.214584][ T31] kauditd_printk_skb: 54 callbacks suppressed [ 120.214603][ T31] audit: type=1326 audit(1791832211.611:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.0.244" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3df9e1d9 code=0x7ffc0000 [ 120.252229][ T5787] usb 1-1: unable to get BOS descriptor or descriptor too short [ 120.252293][ T5787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.263105][ T31] audit: type=1326 audit(1791832211.661:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.0.244" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3df9e1d9 code=0x7ffc0000 [ 120.274172][ T5787] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 120.274206][ T5787] usb 1-1: can't read configurations, error -71 [ 120.324351][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'. [ 120.324376][ T6603] block nbd0: Unsupported socket: should be TCP or UNIX. [ 121.576404][ T5789] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 121.577006][ T5789] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 121.961173][ T31] audit: type=1400 audit(1791832213.361:525): avc: denied { connect } for pid=6621 comm="syz.4.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.432804][ T5789] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 122.450413][ T5789] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 122.453199][ T5789] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 122.454820][ T5789] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 122.455723][ T5789] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 122.457024][ T5789] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 122.720702][ T5789] usb 3-1: USB disconnect, device number 7 [ 122.886127][ T5895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 123.644715][ T6646] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 123.645949][ T6646] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 123.862769][ T5789] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 124.791712][ T31] audit: type=1400 audit(1791832215.771:526): avc: denied { ioctl } for pid=6645 comm="syz.0.274" path="socket:[11022]" dev="sockfs" ino=11022 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.791762][ T31] audit: type=1400 audit(1791832215.771:527): avc: denied { connect } for pid=6645 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.791793][ T31] audit: type=1400 audit(1791832215.781:528): avc: denied { write } for pid=6645 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.823523][ T5895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 124.921116][ T31] audit: type=1326 audit(1791832216.291:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 124.921161][ T31] audit: type=1326 audit(1791832216.291:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 124.940114][ T31] audit: type=1326 audit(1791832216.341:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 124.940157][ T31] audit: type=1326 audit(1791832216.341:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 124.991392][ T5789] usb 4-1: Using ep0 maxpacket: 32 [ 125.050886][ T5789] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 125.070228][ T5789] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 125.070271][ T5789] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 125.070296][ T5789] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.070319][ T5789] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 125.072158][ T5789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.072180][ T5789] usb 4-1: Product: syz [ 125.072193][ T5789] usb 4-1: Manufacturer: syz [ 125.072207][ T5789] usb 4-1: SerialNumber: syz [ 125.155794][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 125.157502][ T5789] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input8 [ 125.275706][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 125.277337][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 125.277354][ T31] audit: type=1326 audit(1791832216.681:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b4179de6b code=0x7ffc0000 [ 125.277678][ T31] audit: type=1326 audit(1791832216.681:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b4179de6b code=0x7ffc0000 [ 125.279271][ T31] audit: type=1326 audit(1791832216.681:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b4179de6b code=0x7ffc0000 [ 125.392302][ T31] audit: type=1326 audit(1791832216.801:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b4179de6b code=0x7ffc0000 [ 125.435350][ T5789] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 125.435371][ T5789] (id 0x00) [ 125.449240][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 125.452026][ T31] audit: type=1326 audit(1791832216.851:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b4179de6b code=0x7ffc0000 [ 125.452348][ T31] audit: type=1326 audit(1791832216.851:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b4179de6b code=0x7ffc0000 [ 125.452651][ T31] audit: type=1326 audit(1791832216.851:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 125.454254][ T31] audit: type=1326 audit(1791832216.851:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b4175ea0e code=0x7ffc0000 [ 125.455834][ T31] audit: type=1326 audit(1791832216.851:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b4175ea0e code=0x7ffc0000 [ 125.655159][ T5789] rc_core: IR keymap rc-imon-pad not found [ 125.655181][ T5789] Registered IR keymap rc-empty [ 125.655247][ T5789] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 125.655269][ T5789] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 125.657876][ T31] audit: type=1326 audit(1791832217.061:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 125.702775][ T5789] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 125.749771][ T5789] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input9 [ 125.773498][ T5789] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:5> initialized [ 125.805647][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.805689][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.806422][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 125.806452][ T10] usb 2-1: can't read configurations, error -71 [ 125.940139][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 125.941407][ T6666] block nbd0: Unsupported socket: should be TCP or UNIX. [ 126.205289][ T30] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 126.326570][ T6681] Zero length message leads to an empty skb [ 126.743268][ T30] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 126.758197][ T30] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 126.760973][ T30] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 126.799563][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.799581][ T30] usb 5-1: Product: syz [ 126.799589][ T30] usb 5-1: Manufacturer: syz [ 126.799598][ T30] usb 5-1: SerialNumber: syz [ 126.855964][ T30] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 126.887431][ T30] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 126.952216][ T30] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 127.110961][ T30] usb 4-1: USB disconnect, device number 5 [ 127.369087][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.403631][ T6696] misc userio: Invalid payload size [ 127.415143][ T6696] misc userio: No port type given on /dev/userio [ 127.485607][ T6702] loop0: detected capacity change from 0 to 4096 [ 127.516098][ T6702] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 127.516144][ T6702] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 127.516156][ T6702] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 127.516207][ T6702] loop0: [ 127.521316][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.295'. [ 127.521341][ T6704] block nbd0: Unsupported socket: should be TCP or UNIX. [ 127.987241][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 128.230277][ T10] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 128.232914][ T10] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 128.232942][ T10] usb 4-1: config 1 has no interface number 0 [ 128.234815][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.234837][ T10] usb 4-1: Product: syz [ 128.234850][ T10] usb 4-1: Manufacturer: syz [ 128.234864][ T10] usb 4-1: SerialNumber: syz [ 128.303308][ T10] usb 4-1: 3:0 : does not exist [ 128.303333][ T10] usb 4-1: 3:0 : does not exist [ 128.337843][ T6668] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -110 [ 128.340332][ T5789] usb 5-1: USB disconnect, device number 9 [ 128.395991][ T5789] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 128.420648][ T5789] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 128.429145][ T5789] ti_usb_3410_5052 5-1:2.0: device disconnected [ 128.646949][ T5895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 128.870027][ T5794] usb 4-1: USB disconnect, device number 6 [ 128.980796][ T6733] netlink: 20 bytes leftover after parsing attributes in process `syz.1.306'. [ 129.038760][ T6737] loop0: detected capacity change from 0 to 4096 [ 129.094931][ T6737] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 129.094950][ T6737] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 129.094957][ T6737] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 129.094982][ T6737] loop0: [ 129.296881][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 129.936698][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 130.173929][ T5794] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 130.417846][ T6764] netlink: 20 bytes leftover after parsing attributes in process `syz.1.319'. [ 130.578167][ T5609] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 130.737162][ T5609] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 130.740465][ T5609] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.773092][ T5609] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.800797][ T5609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.800825][ T5609] usb 5-1: Product: syz [ 130.800839][ T5609] usb 5-1: Manufacturer: syz [ 130.800853][ T5609] usb 5-1: SerialNumber: syz [ 130.832835][ T5794] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 130.834113][ T5794] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 130.834143][ T5794] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 130.834161][ T5794] usb 1-1: config 4 has no interface number 0 [ 130.834194][ T5794] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 130.837875][ T5794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.837897][ T5794] usb 1-1: Product: syz [ 130.837909][ T5794] usb 1-1: Manufacturer: syz [ 130.837921][ T5794] usb 1-1: SerialNumber: syz [ 130.889081][ T1216] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 130.910385][ T31] kauditd_printk_skb: 42 callbacks suppressed [ 130.910425][ T31] audit: type=1326 audit(1791832222.271:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6766 comm="syz.1.320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 130.910470][ T31] audit: type=1326 audit(1791832222.271:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6766 comm="syz.1.320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 130.910506][ T31] audit: type=1326 audit(1791832222.271:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6766 comm="syz.1.320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 130.910541][ T31] audit: type=1326 audit(1791832222.271:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6766 comm="syz.1.320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 130.910595][ T31] audit: type=1326 audit(1791832222.271:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6766 comm="syz.1.320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 130.910637][ T31] audit: type=1326 audit(1791832222.271:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6766 comm="syz.1.320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 130.910674][ T31] audit: type=1326 audit(1791832222.271:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6766 comm="syz.1.320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 130.910732][ T31] audit: type=1326 audit(1791832222.271:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6766 comm="syz.1.320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 130.910770][ T31] audit: type=1326 audit(1791832222.271:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6766 comm="syz.1.320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 130.910807][ T31] audit: type=1326 audit(1791832222.271:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6766 comm="syz.1.320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 131.054723][ T5609] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 131.246261][ T5609] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 131.249710][ T5609] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 131.264876][ T6771] loop0: detected capacity change from 0 to 4096 [ 131.302841][ T6771] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 131.302867][ T6771] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 131.302879][ T6771] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 131.302923][ T6771] loop0: [ 132.475172][ T5794] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 132.507685][ T5794] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 132.508278][ T5794] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 132.508318][ T5794] usb 1-1: media controller created [ 132.531629][ T5794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.699301][ T5794] DVB: Unable to find symbol dib7000p_attach() [ 132.699319][ T5794] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 132.806785][ T5794] rc_core: IR keymap rc-dib0700-rc5 not found [ 132.806804][ T5794] Registered IR keymap rc-empty [ 132.807007][ T5794] dvb-usb: could not initialize remote control. [ 132.807015][ T5794] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 133.035661][ T30] usb 1-1: USB disconnect, device number 5 [ 133.072631][ T30] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 133.175763][ T5794] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 133.281615][ T30] usb 5-1: USB disconnect, device number 10 [ 133.318555][ T30] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 133.325217][ T5794] usb 2-1: Using ep0 maxpacket: 16 [ 133.357818][ T30] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 133.358775][ T30] ti_usb_3410_5052 5-1:2.0: device disconnected [ 133.503592][ T6789] netlink: 80 bytes leftover after parsing attributes in process `syz.3.324'. [ 133.579462][ T5794] usb 2-1: unable to get BOS descriptor or descriptor too short [ 133.579488][ T5794] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.581153][ T5794] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 133.581171][ T5794] usb 2-1: can't read configurations, error -71 [ 133.644117][ T6789] netlink: 80 bytes leftover after parsing attributes in process `syz.3.324'. [ 133.661694][ T6789] netlink: 80 bytes leftover after parsing attributes in process `syz.3.324'. [ 133.661801][ T6789] netlink: 80 bytes leftover after parsing attributes in process `syz.3.324'. [ 133.661894][ T6789] netlink: 80 bytes leftover after parsing attributes in process `syz.3.324'. [ 133.661988][ T6789] netlink: 80 bytes leftover after parsing attributes in process `syz.3.324'. [ 133.662084][ T6789] netlink: 80 bytes leftover after parsing attributes in process `syz.3.324'. [ 133.662188][ T6789] netlink: 80 bytes leftover after parsing attributes in process `syz.3.324'. [ 133.662284][ T6789] netlink: 80 bytes leftover after parsing attributes in process `syz.3.324'. [ 133.662379][ T6789] netlink: 80 bytes leftover after parsing attributes in process `syz.3.324'. [ 133.766852][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 134.395195][ T5789] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 134.555224][ T5789] usb 3-1: Using ep0 maxpacket: 32 [ 134.557036][ T5789] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 134.558317][ T5789] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.558344][ T5789] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 134.558366][ T5789] usb 3-1: config 0 interface 0 has no altsetting 0 [ 134.562790][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.562813][ T5789] usb 3-1: Product: syz [ 134.562827][ T5789] usb 3-1: Manufacturer: syz [ 134.562840][ T5789] usb 3-1: SerialNumber: syz [ 134.571039][ T5789] usb 3-1: config 0 descriptor?? [ 136.081621][ T5789] gs_usb 3-1:0.0: Couldn't get device config: (err=-110) [ 136.081654][ T5789] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110 [ 136.104860][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.437680][ T6834] FAULT_INJECTION: forcing a failure. [ 136.437680][ T6834] name failslab, interval 1, probability 0, space 0, times 0 [ 136.437718][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.3.346 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.437742][ T6834] Tainted: [L]=SOFTLOCKUP [ 136.437750][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 136.437762][ T6834] Call Trace: [ 136.437768][ T6834] [ 136.437776][ T6834] dump_stack_lvl+0x100/0x190 [ 136.437808][ T6834] should_fail_ex.cold+0x5/0xa [ 136.437838][ T6834] should_failslab+0xc2/0x120 [ 136.437865][ T6834] __kmalloc_cache_noprof+0x91/0x6d0 [ 136.437886][ T6834] ? bpf_lsm_inode_init_security_anon+0x9/0x10 [ 136.437913][ T6834] ? __do_sys_memfd_secret+0x130/0x570 [ 136.437947][ T6834] __do_sys_memfd_secret+0x130/0x570 [ 136.437977][ T6834] do_syscall_64+0x123/0x790 [ 136.438013][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.438030][ T6834] RIP: 0033:0x7eff1f19e1d9 [ 136.438046][ T6834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.438063][ T6834] RSP: 002b:00007eff1ffd3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 136.438082][ T6834] RAX: ffffffffffffffda RBX: 00007eff1f425fa0 RCX: 00007eff1f19e1d9 [ 136.438094][ T6834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 136.438105][ T6834] RBP: 00007eff1f235888 R08: 0000000000000000 R09: 0000000000000000 [ 136.438117][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.438127][ T6834] R13: 00007eff1f426038 R14: 00007eff1f425fa0 R15: 00007ffdf4995c18 [ 136.438151][ T6834] [ 136.664709][ T31] kauditd_printk_skb: 68 callbacks suppressed [ 136.664727][ T31] audit: type=1400 audit(1791832228.061:686): avc: denied { mount } for pid=6842 comm="syz.1.349" name="/" dev="hugetlbfs" ino=12229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 136.670786][ T31] audit: type=1400 audit(1791832228.071:687): avc: denied { create } for pid=6842 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 136.686440][ T31] audit: type=1400 audit(1791832228.091:688): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 136.752693][ T31] audit: type=1326 audit(1791832228.141:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6844 comm="syz.3.347" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1f19e1d9 code=0x7ffc0000 [ 136.752907][ T31] audit: type=1326 audit(1791832228.151:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6844 comm="syz.3.347" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1f19e1d9 code=0x7ffc0000 [ 136.768933][ T31] audit: type=1326 audit(1791832228.171:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6844 comm="syz.3.347" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7eff1f19e1d9 code=0x7ffc0000 [ 136.768983][ T31] audit: type=1326 audit(1791832228.171:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6844 comm="syz.3.347" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1f19e1d9 code=0x7ffc0000 [ 136.769016][ T31] audit: type=1326 audit(1791832228.171:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6844 comm="syz.3.347" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1f19e1d9 code=0x7ffc0000 [ 136.769930][ T31] audit: type=1326 audit(1791832228.171:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6844 comm="syz.3.347" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7eff1f19e1d9 code=0x7ffc0000 [ 136.772196][ T31] audit: type=1326 audit(1791832228.171:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6844 comm="syz.3.347" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1f19e1d9 code=0x7ffc0000 [ 137.015167][ T5787] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 137.165258][ T5787] usb 4-1: Using ep0 maxpacket: 16 [ 137.414076][ T5787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 137.414113][ T5787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.414216][ T6837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.416345][ T5787] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 137.416374][ T5787] usb 4-1: can't read configurations, error -71 [ 137.511559][ T5794] usb 3-1: USB disconnect, device number 8 [ 137.604393][ T6862] openvswitch: netlink: Flow actions attr not present in new flow. [ 138.500589][ T6872] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 138.500614][ T6872] device-mapper: ioctl: error adding target to table [ 138.676548][ T6875] jffs2: notice: (6875) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 138.732263][ T6879] Bluetooth: MGMT ver 1.23 [ 138.753752][ T6883] __nla_validate_parse: 1115 callbacks suppressed [ 138.753772][ T6883] netlink: 912 bytes leftover after parsing attributes in process `syz.3.361'. [ 138.887999][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 141.029472][ T6919] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 141.030526][ T6919] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 141.446516][ T83] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 141.982417][ T6932] netlink: 912 bytes leftover after parsing attributes in process `syz.2.376'. [ 142.059491][ T6934] JFS: discard option not supported on device [ 142.061584][ T6934] Mount JFS Failure: -22 [ 142.061624][ T6934] jfs_mount failed w/return code = -22 [ 142.075301][ T31] kauditd_printk_skb: 238 callbacks suppressed [ 142.075331][ T31] audit: type=1400 audit(1791832233.451:934): avc: denied { mounton } for pid=6929 comm="syz.0.375" path="/80/bus" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.524291][ T6937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.377'. [ 142.524316][ T6937] openvswitch: netlink: Flow actions attr not present in new flow. [ 142.697962][ T31] audit: type=1400 audit(1791832234.101:935): avc: denied { setopt } for pid=6944 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.886348][ T5787] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 142.982344][ T31] audit: type=1400 audit(1791832234.381:936): avc: denied { read write } for pid=6950 comm="syz.2.383" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 142.982683][ T31] audit: type=1400 audit(1791832234.381:937): avc: denied { open } for pid=6950 comm="syz.2.383" path="/dev/uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 142.983810][ T31] audit: type=1400 audit(1791832234.381:938): avc: denied { ioctl } for pid=6950 comm="syz.2.383" path="/dev/uinput" dev="devtmpfs" ino=914 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 143.087440][ T5787] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 143.091041][ T5787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.091168][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.205026][ T5787] usb 2-1: config 0 descriptor?? [ 143.340275][ T5787] pwc: Askey VC010 type 2 USB webcam detected. [ 143.535358][ T5794] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 143.687826][ T5794] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 143.691596][ T5794] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.691656][ T5794] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 143.691686][ T5794] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 143.691752][ T5794] usb 1-1: config 0 interface 0 has no altsetting 0 [ 143.775722][ T5794] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 143.775756][ T5794] usb 1-1: Product: syz [ 143.775791][ T5794] usb 1-1: Manufacturer: syz [ 143.775857][ T5794] usb 1-1: SerialNumber: syz [ 143.833792][ T5787] pwc: recv_control_msg error -32 req 02 val 2b00 [ 143.864932][ T5787] pwc: recv_control_msg error -32 req 02 val 2700 [ 143.930450][ T5787] pwc: recv_control_msg error -32 req 02 val 2c00 [ 143.953596][ T5794] usb 1-1: config 0 descriptor?? [ 143.968984][ T5787] pwc: recv_control_msg error -32 req 04 val 1000 [ 144.029612][ T5787] pwc: recv_control_msg error -32 req 04 val 1300 [ 144.058306][ T6954] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 144.089340][ T5787] pwc: recv_control_msg error -32 req 04 val 1400 [ 144.119859][ T5787] pwc: recv_control_msg error -32 req 02 val 2000 [ 144.120767][ T5787] pwc: recv_control_msg error -32 req 02 val 2100 [ 144.140705][ T5787] pwc: recv_control_msg error -32 req 04 val 1500 [ 144.144317][ T5794] usb 1-1: selecting invalid altsetting 0 [ 145.207412][ T5787] pwc: recv_control_msg error -32 req 02 val 2500 [ 145.209698][ T5787] pwc: recv_control_msg error -32 req 02 val 2400 [ 145.234869][ T5787] pwc: recv_control_msg error -32 req 02 val 2600 [ 145.246591][ T1171] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 145.431786][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.439726][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.440019][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.440260][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.440482][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.440716][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.453536][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.453824][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.454055][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.454299][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.454553][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.454782][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.464799][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.467100][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.467373][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.467594][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.467856][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.479798][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.482862][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.483172][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.483395][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.483631][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.483854][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.484077][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.494426][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.494652][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.494877][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.495179][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.495398][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.506684][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.506924][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.507143][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.507374][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.507592][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.507810][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.508041][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.520222][ T5787] pwc: recv_control_msg error -71 req 02 val 2800 [ 145.522276][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.522533][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.522769][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.523014][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.523232][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.523457][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.539815][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.540079][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.540298][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.540517][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.540744][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.540966][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.554476][ T6967] netlink: 128 bytes leftover after parsing attributes in process `syz.0.384'. [ 145.556589][ T5787] pwc: recv_control_msg error -71 req 04 val 1100 [ 145.562903][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.563152][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.563372][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.563591][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.563821][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.564071][ T6954] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 145.565605][ T5787] pwc: recv_control_msg error -71 req 04 val 1200 [ 145.577925][ T10] usb 1-1: USB disconnect, device number 6 [ 145.944308][ T5787] pwc: Registered as video103. [ 145.951410][ T5787] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 145.969202][ T5787] usb 2-1: USB disconnect, device number 12 [ 146.324383][ T31] audit: type=1400 audit(1791832237.721:939): avc: denied { create } for pid=6983 comm="syz.3.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 146.387426][ T31] audit: type=1400 audit(1791832237.791:940): avc: denied { setopt } for pid=6983 comm="syz.3.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 146.486217][ T6260] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 146.643702][ T6998] netlink: 888 bytes leftover after parsing attributes in process `syz.0.396'. [ 147.118087][ T31] audit: type=1326 audit(1791832238.521:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.1.398" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 147.118270][ T31] audit: type=1326 audit(1791832238.521:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.1.398" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 147.119748][ T31] audit: type=1326 audit(1791832238.521:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.1.398" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 147.119801][ T31] audit: type=1326 audit(1791832238.521:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.1.398" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 147.119837][ T31] audit: type=1326 audit(1791832238.521:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.1.398" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 147.120093][ T31] audit: type=1326 audit(1791832238.521:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.1.398" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 147.121232][ T31] audit: type=1326 audit(1791832238.521:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.1.398" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 147.122205][ T31] audit: type=1326 audit(1791832238.521:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.1.398" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 147.122545][ T31] audit: type=1326 audit(1791832238.521:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.1.398" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 147.122843][ T31] audit: type=1326 audit(1791832238.521:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.1.398" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f9b4179e1d9 code=0x7ffc0000 [ 147.375201][ T1216] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 147.542531][ T7015] ------------[ cut here ]------------ [ 147.542545][ T7015] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 147.542554][ T7015] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1a9e/0x22d0, CPU#1: syz.0.404/7015 [ 147.570153][ T7015] Modules linked in: [ 147.574452][ T7015] CPU: 1 UID: 0 PID: 7015 Comm: syz.0.404 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.586360][ T7015] Tainted: [L]=SOFTLOCKUP [ 147.591116][ T7015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 147.595197][ T1216] usb 2-1: Using ep0 maxpacket: 16 [ 147.609913][ T7015] RIP: 0010:__kvm_gpc_refresh+0x1a9e/0x22d0 [ 147.616800][ T7015] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 31 07 00 00 48 8b 04 24 31 db 48 8b a8 08 01 00 00 e9 28 f6 ff ff e8 43 53 88 00 90 <0f> 0b 90 e9 52 f8 ff ff e8 35 53 88 00 48 c7 c6 c0 bb e2 8b 48 89 [ 147.638528][ T7015] RSP: 0018:ffffc900054375f8 EFLAGS: 00010287 [ 147.645293][ T7015] RAX: 0000000000000755 RBX: ffffffffffffffff RCX: ffffc90006229000 [ 147.654099][ T7015] RDX: 0000000000080000 RSI: ffffffff8183f34d RDI: ffff88802ae94b00 [ 147.662936][ T7015] RBP: ffff888000000000 R08: 0000000000000000 R09: 0000000000000001 [ 147.671787][ T7015] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000001001 [ 147.681214][ T7015] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90005437818 [ 147.690074][ T7015] FS: 00007f0b3ee856c0(0000) GS:ffff888122a46000(0000) knlGS:0000000000000000 [ 147.700920][ T7015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.710646][ T7015] CR2: 000000110c377080 CR3: 0000000040c43000 CR4: 00000000003526f0 [ 147.719497][ T7015] Call Trace: [ 147.723105][ T7015] [ 147.726393][ T7015] ? find_held_lock+0x2b/0x80 [ 147.731556][ T7015] ? __pfx___mutex_lock+0x10/0x10 [ 147.737176][ T7015] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 147.743191][ T7015] ? lock_acquire+0x1d1/0x380 [ 147.748406][ T7015] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 147.754808][ T7015] kvm_gpc_refresh+0xc9/0x160 [ 147.760078][ T7015] kvm_xen_set_evtchn.part.0+0x168/0x230 [ 147.766310][ T7015] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 147.772708][ T7015] kvm_xen_inject_timer_irqs+0x1e9/0x2b0 [ 147.778942][ T7015] ? __pfx_kvm_xen_inject_timer_irqs+0x10/0x10 [ 147.785802][ T7015] kvm_xen_vcpu_get_attr+0x933/0xa50 [ 147.791641][ T7015] ? _copy_from_user+0x59/0xd0 [ 147.797269][ T7015] kvm_arch_vcpu_ioctl+0x1b67/0x3a10 [ 147.804046][ T7015] ? tomoyo_path_number_perm+0x46d/0x580 [ 147.811533][ T7015] ? stack_trace_save+0x8e/0xc0 [ 147.817917][ T7015] ? __pfx_stack_trace_save+0x10/0x10 [ 147.824488][ T7015] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 147.830743][ T7015] ? stack_depot_save_flags+0x27/0x9f0 [ 147.836802][ T7015] ? __lock_acquire+0x5c0/0x1f40 [ 147.844077][ T7015] ? tomoyo_path_number_perm+0x46d/0x580 [ 147.851373][ T7015] ? kasan_save_stack+0x3f/0x50 [ 147.856786][ T7015] ? __lock_acquire+0x5c0/0x1f40 [ 147.862612][ T7015] ? lock_acquire+0x1d1/0x380 [ 147.867818][ T7015] ? kvm_vcpu_ioctl+0x322/0x1700 [ 147.873316][ T7015] ? trace_contention_end+0x126/0x160 [ 147.879317][ T7015] ? __mutex_lock+0x26c/0x1bd0 [ 147.884580][ T7015] ? kvm_vcpu_ioctl+0x322/0x1700 [ 147.890162][ T7015] ? __pfx___mutex_lock+0x10/0x10 [ 147.898502][ T7015] ? kasan_quarantine_put+0x104/0x240 [ 147.905396][ T7015] ? lockdep_hardirqs_on+0x7d/0x110 [ 147.911843][ T7015] ? tomoyo_path_number_perm+0x28f/0x580 [ 147.918187][ T7015] ? tomoyo_path_number_perm+0x188/0x580 [ 147.924408][ T7015] ? kvm_vcpu_ioctl+0x8a0/0x1700 [ 147.931407][ T7015] kvm_vcpu_ioctl+0x8a0/0x1700 [ 147.936734][ T7015] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 147.942647][ T7015] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 147.949222][ T7015] ? do_vfs_ioctl+0x226/0x13e0 [ 147.954465][ T7015] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 147.960159][ T7015] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 147.967345][ T7015] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 147.975251][ T7015] ? __fget_files+0x34/0x3d0 [ 147.980350][ T7015] ? selinux_file_ioctl+0x13b/0x290 [ 147.986166][ T7015] ? selinux_file_ioctl+0xb6/0x290 [ 147.991798][ T7015] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 147.997602][ T7015] __x64_sys_ioctl+0x18e/0x210 [ 148.002852][ T7015] do_syscall_64+0x123/0x790 [ 148.008884][ T7015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.016152][ T7015] RIP: 0033:0x7f0b3df9e1d9 [ 148.021017][ T7015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.042667][ T7015] RSP: 002b:00007f0b3ee85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.051982][ T7015] RAX: ffffffffffffffda RBX: 00007f0b3e225fa0 RCX: 00007f0b3df9e1d9 [ 148.060814][ T7015] RDX: 00002000000000c0 RSI: 00000000c048aeca RDI: 0000000000000005 [ 148.069723][ T7015] RBP: 00007f0b3e035888 R08: 0000000000000000 R09: 0000000000000000 [ 148.078547][ T7015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.087356][ T7015] R13: 00007f0b3e226038 R14: 00007f0b3e225fa0 R15: 00007ffdc09f8e08 [ 148.096192][ T7015] [ 148.099504][ T7015] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 148.107508][ T7015] CPU: 1 UID: 0 PID: 7015 Comm: syz.0.404 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.119337][ T7015] Tainted: [L]=SOFTLOCKUP [ 148.124082][ T7015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 148.135128][ T7015] Call Trace: [ 148.138722][ T7015] [ 148.141934][ T7015] dump_stack_lvl+0x100/0x190 [ 148.147089][ T7015] vpanic+0x553/0x970 [ 148.151475][ T7015] ? __pfx_vpanic+0x10/0x10 [ 148.156425][ T7015] panic+0xd1/0xe0 [ 148.160512][ T7015] ? __pfx_panic+0x10/0x10 [ 148.165379][ T7015] check_panic_on_warn.cold+0x19/0x34 [ 148.171280][ T7015] ? __kvm_gpc_refresh+0x1a9e/0x22d0 [ 148.177083][ T7015] __warn.cold+0x191/0x318 [ 148.181937][ T7015] __report_bug+0x30f/0x440 [ 148.186890][ T7015] ? __kvm_gpc_refresh+0x1a9e/0x22d0 [ 148.192727][ T7015] ? __pfx___report_bug+0x10/0x10 [ 148.198251][ T7015] ? register_lock_class+0x3f/0x7b0 [ 148.203974][ T7015] ? __lock_acquire+0x5c0/0x1f40 [ 148.209406][ T7015] ? __kvm_gpc_refresh+0x1a9e/0x22d0 [ 148.215225][ T7015] report_bug+0xb3/0x220 [ 148.219901][ T7015] ? __kvm_gpc_refresh+0x1a9e/0x22d0 [ 148.225732][ T7015] handle_bug+0x16a/0x2a0 [ 148.230506][ T7015] exc_invalid_op+0x17/0x50 [ 148.235467][ T7015] asm_exc_invalid_op+0x1a/0x20 [ 148.240803][ T7015] RIP: 0010:__kvm_gpc_refresh+0x1a9e/0x22d0 [ 148.247286][ T7015] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 31 07 00 00 48 8b 04 24 31 db 48 8b a8 08 01 00 00 e9 28 f6 ff ff e8 43 53 88 00 90 <0f> 0b 90 e9 52 f8 ff ff e8 35 53 88 00 48 c7 c6 c0 bb e2 8b 48 89 [ 148.268853][ T7015] RSP: 0018:ffffc900054375f8 EFLAGS: 00010287 [ 148.275517][ T7015] RAX: 0000000000000755 RBX: ffffffffffffffff RCX: ffffc90006229000 [ 148.284272][ T7015] RDX: 0000000000080000 RSI: ffffffff8183f34d RDI: ffff88802ae94b00 [ 148.293029][ T7015] RBP: ffff888000000000 R08: 0000000000000000 R09: 0000000000000001 [ 148.301784][ T7015] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000001001 [ 148.310544][ T7015] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90005437818 [ 148.319321][ T7015] ? __kvm_gpc_refresh+0x1a9d/0x22d0 [ 148.325132][ T7015] ? __kvm_gpc_refresh+0x1a9d/0x22d0 [ 148.330955][ T7015] ? find_held_lock+0x2b/0x80 [ 148.336102][ T7015] ? __pfx___mutex_lock+0x10/0x10 [ 148.341618][ T7015] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 148.347621][ T7015] ? lock_acquire+0x1d1/0x380 [ 148.352767][ T7015] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 148.359164][ T7015] kvm_gpc_refresh+0xc9/0x160 [ 148.364320][ T7015] kvm_xen_set_evtchn.part.0+0x168/0x230 [ 148.370525][ T7015] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 148.376927][ T7015] kvm_xen_inject_timer_irqs+0x1e9/0x2b0 [ 148.383119][ T7015] ? __pfx_kvm_xen_inject_timer_irqs+0x10/0x10 [ 148.389897][ T7015] kvm_xen_vcpu_get_attr+0x933/0xa50 [ 148.395699][ T7015] ? _copy_from_user+0x59/0xd0 [ 148.400948][ T7015] kvm_arch_vcpu_ioctl+0x1b67/0x3a10 [ 148.406758][ T7015] ? tomoyo_path_number_perm+0x46d/0x580 [ 148.412965][ T7015] ? stack_trace_save+0x8e/0xc0 [ 148.418322][ T7015] ? __pfx_stack_trace_save+0x10/0x10 [ 148.424216][ T7015] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 148.430395][ T7015] ? stack_depot_save_flags+0x27/0x9f0 [ 148.436386][ T7015] ? __lock_acquire+0x5c0/0x1f40 [ 148.441801][ T7015] ? tomoyo_path_number_perm+0x46d/0x580 [ 148.447982][ T7015] ? kasan_save_stack+0x3f/0x50 [ 148.453304][ T7015] ? __lock_acquire+0x5c0/0x1f40 [ 148.458731][ T7015] ? lock_acquire+0x1d1/0x380 [ 148.463863][ T7015] ? kvm_vcpu_ioctl+0x322/0x1700 [ 148.469295][ T7015] ? trace_contention_end+0x126/0x160 [ 148.475185][ T7015] ? __mutex_lock+0x26c/0x1bd0 [ 148.480407][ T7015] ? kvm_vcpu_ioctl+0x322/0x1700 [ 148.485827][ T7015] ? __pfx___mutex_lock+0x10/0x10 [ 148.491345][ T7015] ? kasan_quarantine_put+0x104/0x240 [ 148.497240][ T7015] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.502946][ T7015] ? tomoyo_path_number_perm+0x28f/0x580 [ 148.509137][ T7015] ? tomoyo_path_number_perm+0x188/0x580 [ 148.515330][ T7015] ? kvm_vcpu_ioctl+0x8a0/0x1700 [ 148.520765][ T7015] kvm_vcpu_ioctl+0x8a0/0x1700 [ 148.525999][ T7015] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 148.531703][ T7015] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.538168][ T7015] ? do_vfs_ioctl+0x226/0x13e0 [ 148.543392][ T7015] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 148.548899][ T7015] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 148.556042][ T7015] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 148.563563][ T7015] ? __fget_files+0x34/0x3d0 [ 148.568609][ T7015] ? selinux_file_ioctl+0x13b/0x290 [ 148.574315][ T7015] ? selinux_file_ioctl+0xb6/0x290 [ 148.579941][ T7015] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 148.585660][ T7015] __x64_sys_ioctl+0x18e/0x210 [ 148.590891][ T7015] do_syscall_64+0x123/0x790 [ 148.595933][ T7015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.602397][ T7015] RIP: 0033:0x7f0b3df9e1d9 [ 148.607274][ T7015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.628837][ T7015] RSP: 002b:00007f0b3ee85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.638083][ T7015] RAX: ffffffffffffffda RBX: 00007f0b3e225fa0 RCX: 00007f0b3df9e1d9 [ 148.646834][ T7015] RDX: 00002000000000c0 RSI: 00000000c048aeca RDI: 0000000000000005 [ 148.655587][ T7015] RBP: 00007f0b3e035888 R08: 0000000000000000 R09: 0000000000000000 [ 148.664347][ T7015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.673111][ T7015] R13: 00007f0b3e226038 R14: 00007f0b3e225fa0 R15: 00007ffdc09f8e08 [ 148.681895][ T7015] [ 148.685423][ T7015] Kernel Offset: disabled [ 148.690156][ T7015] Rebooting in 86400 seconds..