last executing test programs: 10.438291189s ago: executing program 0 (id=715): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="400d12"], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_MCE_KILL(0x23, 0x8, 0x7fffffffeffe) syz_usb_ep_write(r0, 0x81, 0x56, &(0x7f0000000040)="b9425b44651dd20000963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fcea00080000000000004cd9f5d3969890522c7715531d459db3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3") 9.220656313s ago: executing program 2 (id=721): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x10000, @loopback, 0x29}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x7) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) read(r3, &(0x7f0000000180)=""/200, 0xc8) shutdown(r0, 0x1) 9.093359249s ago: executing program 1 (id=722): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0xb, 0xdd, 0x8}, {0x6, 0x13, 0x3, 0x80}]}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x14}, {0x7, 0x0, 0x1}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xffffff81}, 0x0) 8.273013068s ago: executing program 3 (id=724): close(0x3) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) unshare(0x20000400) r4 = epoll_create1(0x80000) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="11"], 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r2, r3, 0x11, 0x0, r2}, 0x11) ftruncate(r0, 0x2000009) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) pipe2$watch_queue(&(0x7f0000001080), 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newlink={0x28, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x401}]}, 0xffffffffffffffa4}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x8010, r8, 0xb134a000) pwritev(r7, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001340)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000001040)="99d3c9f30f09b993080000b800000000ba000000800f30660f38dfb1e4000000f4cfc4e1fe12230f01c3b9800000c00f3235010000000f30", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 8.007167911s ago: executing program 1 (id=726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005080), 0x0, 0x8000) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8) close(0xffffffffffffffff) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 7.323090786s ago: executing program 3 (id=729): socket(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r4}, &(0x7f00000000c0)=""/61, 0xfffffffffffffd7e, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000012}) syz_open_dev$media(0x0, 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000200)) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, 0x0}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 7.256812552s ago: executing program 0 (id=730): keyctl$update(0x2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000a00)='FFFFFFFF FFFFFFFF FFF', 0x15) 6.608318449s ago: executing program 1 (id=731): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c000101008032090400"], 0x0) mkdir(&(0x7f00000000c0)='mnt\x00', 0x10d) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 6.557397833s ago: executing program 4 (id=732): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x109082) recvfrom(r3, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) connect$unix(r4, 0x0, 0x0) 6.550032702s ago: executing program 2 (id=733): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) dup(0xffffffffffffffff) 6.264399058s ago: executing program 3 (id=734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) memfd_create(0x0, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x24}}, 0x0) 6.263542787s ago: executing program 0 (id=735): sched_setscheduler(0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c000280050001000000000008000740000000001000170000"], 0x84}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) 4.628778048s ago: executing program 2 (id=736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x248}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[], 0xbc}}, 0x0) shutdown(r0, 0x1) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.561145675s ago: executing program 3 (id=737): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000d3ec66ecc053c543da2e", @ANYRES32], 0x48) 4.255797947s ago: executing program 4 (id=738): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, 0x0, 0x0) 4.255207447s ago: executing program 2 (id=739): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='127.0.0.1', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='7', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='1', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='4', 0x1) 4.254555503s ago: executing program 4 (id=740): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r1, &(0x7f0000000180)='nullb1\x00', 0x1ff) unlinkat(r1, &(0x7f0000000680)='nullb1\x00', 0x200) write(0xffffffffffffffff, &(0x7f0000000300), 0x0) 3.961049545s ago: executing program 0 (id=741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}}, 0x0) 3.481593458s ago: executing program 2 (id=742): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) unshare(0x400) bind$alg(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.261000735s ago: executing program 1 (id=743): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.260182455s ago: executing program 0 (id=744): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x10000, @loopback, 0x29}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x7) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) shutdown(r0, 0x1) 3.192269632s ago: executing program 4 (id=745): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4", 0x85}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32", 0x2b}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4", 0x57}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f", 0x1b}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.489637718s ago: executing program 4 (id=746): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2", 0x95}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e6", 0xae}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.320586607s ago: executing program 1 (id=747): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x2, 0x3, 0x0, 0x9}, 0x20) preadv(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0xf73, 0xfc000000) timer_create(0x0, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, 0x0, 0x129942, 0x18) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='udf\x00', 0x1000040, 0x0) 2.320094615s ago: executing program 3 (id=748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000800000000000000500010007000000"], 0x5c}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000700)=@in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x1, 0x40480d0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x20000800) socket$netlink(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x1c0, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0xa8, 0xd8, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x4c, r4, 0x1, 0x70bd25, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd0}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000000}]}, 0x4c}}, 0x80) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gretap0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) 1.657260716s ago: executing program 4 (id=749): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x7ff, 0x80, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x4, 0xfffffffd, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401f, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff6, 0x0, 0x20000004, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x5], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0xffffffdc, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x1ffffc) 1.311952827s ago: executing program 3 (id=750): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='6', 0x23) 1.310414061s ago: executing program 1 (id=751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r9) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)='v', 0x1}], 0x1}, 0x804) 7.313559ms ago: executing program 2 (id=752): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='127.0.0.1', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='7', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='1', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='4', 0x1) 0s ago: executing program 0 (id=753): mknod(0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x163882, 0x6d) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8010}}, 0xffffff20) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/175, 0xaf}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000900)=[{0x0}], 0x1) r1 = io_uring_setup(0x7625, &(0x7f00000002c0)={0x0, 0xdfe4, 0x40, 0x4000, 0x1c9}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) bind$802154_dgram(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): oint descriptor, different from the interface descriptor's value: 11 [ 125.755105][ T5789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.800754][ T5695] usb 1-1: No union descriptors [ 125.812317][ T5695] usb 1-1: USB disconnect, device number 4 [ 125.854428][ T5789] usb 4-1: Product: syz [ 125.863334][ T5789] usb 4-1: Manufacturer: syz [ 125.873716][ T5789] usb 4-1: SerialNumber: syz [ 125.892147][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 125.927573][ T5789] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input9 [ 126.103108][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 126.113124][ T5789] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 126.122901][ T5789] (id 0x00) [ 126.223066][ T5789] rc_core: IR keymap rc-imon-pad not found [ 126.232953][ T5789] Registered IR keymap rc-empty [ 126.233358][ T10] usb 3-1: device descriptor read/64, error -71 [ 126.244762][ T5789] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 126.266992][ T5789] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 126.273121][ T5695] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 126.316547][ T5789] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 126.335672][ T5789] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input10 [ 126.378980][ T5789] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:18> initialized [ 126.442527][ T5695] usb 2-1: unable to get BOS descriptor or descriptor too short [ 126.473114][ T5695] usb 2-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 126.493121][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 126.517726][ T5695] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 126.570090][ T5695] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 126.620477][ T5695] usb 2-1: string descriptor 0 read error: -22 [ 126.633995][ T30] kauditd_printk_skb: 192 callbacks suppressed [ 126.634011][ T30] audit: type=1400 audit(1786878005.218:692): avc: denied { accept } for pid=6446 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.661397][ T10] usb 3-1: device descriptor read/64, error -71 [ 126.679999][ T9] usb 4-1: USB disconnect, device number 18 [ 126.708669][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.754294][ T5789] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.767782][ T5695] usb 2-1: low speed audio streaming not supported [ 126.793498][ T10] usb usb3-port1: attempt power cycle [ 126.801858][ T5695] usb 2-1: low speed audio streaming not supported [ 126.916146][ T5789] usb 1-1: Using ep0 maxpacket: 16 [ 126.922357][ T5789] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 126.935876][ T5789] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 126.945811][ T5789] usb 1-1: Product: syz [ 126.950638][ T5789] usb 1-1: Manufacturer: syz [ 126.955861][ T5789] usb 1-1: SerialNumber: syz [ 126.964882][ T5789] usb 1-1: config 0 descriptor?? [ 126.980062][ T30] audit: type=1400 audit(1786878005.558:693): avc: denied { ioctl } for pid=6457 comm="syz.1.171" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 127.006079][ T30] audit: type=1400 audit(1786878005.558:694): avc: denied { set_context_mgr } for pid=6457 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 127.033161][ T30] audit: type=1400 audit(1786878005.558:695): avc: denied { map } for pid=6457 comm="syz.1.171" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 127.063619][ T6470] binder_alloc: 6457: binder_alloc_buf, no vma [ 127.082258][ T30] audit: type=1400 audit(1786878005.568:696): avc: denied { call } for pid=6457 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 127.119867][ T6458] syz.1.171 uses obsolete (PF_INET,SOCK_PACKET) [ 127.133268][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 127.133708][ T30] audit: type=1400 audit(1786878005.718:697): avc: denied { ioctl } for pid=6457 comm="syz.1.171" path="socket:[11210]" dev="sockfs" ino=11210 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.194972][ T10] usb 3-1: device descriptor read/8, error -71 [ 127.236393][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.242848][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.257308][ T5789] usb 2-1: USB disconnect, device number 7 [ 127.262974][ T30] audit: type=1400 audit(1786878005.838:698): avc: denied { write } for pid=6460 comm="syz.0.172" name="functions" dev="configfs" ino=9196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.291146][ T5695] usb 1-1: USB disconnect, device number 5 [ 127.313740][ T30] audit: type=1400 audit(1786878005.838:699): avc: denied { write } for pid=6460 comm="syz.0.172" name="c.1" dev="configfs" ino=11108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.337294][ T30] audit: type=1400 audit(1786878005.838:700): avc: denied { write } for pid=6460 comm="syz.0.172" name="c.1" dev="configfs" ino=11108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 128.075852][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 128.085932][ T30] audit: type=1400 audit(1786878006.138:701): avc: denied { watch } for pid=6473 comm="syz.3.176" path="/31/bus" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 128.128186][ T10] usb 3-1: device descriptor read/8, error -71 [ 128.244579][ T10] usb usb3-port1: unable to enumerate USB device [ 128.813751][ T5789] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 129.069391][ T5789] usb 5-1: device descriptor read/64, error -71 [ 129.415409][ T5789] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 130.765644][ T5789] usb 5-1: device descriptor read/64, error -71 [ 130.873617][ T5789] usb usb5-port1: attempt power cycle [ 130.953270][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 131.139711][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 131.166808][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 131.233434][ T5789] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 131.247465][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 131.286855][ T10] usb 3-1: config 0 has no interface number 0 [ 131.328264][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.369548][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 131.408094][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 131.453280][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 59256, setting to 1024 [ 131.499971][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 131.560260][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.599333][ T10] usb 3-1: config 0 descriptor?? [ 131.632730][ T6483] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 131.655290][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 132.136430][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 132.136445][ T30] audit: type=1326 audit(1786878010.708:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.1.186" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4a839e0d9 code=0x0 [ 132.354768][ T1220] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 132.523155][ T1220] usb 4-1: device descriptor read/64, error -71 [ 132.560793][ T5789] usb 5-1: device descriptor read/8, error -71 [ 133.668906][ T6509] nvme_fabrics: unknown parameter or missing value '#! »›¦1ÝÖæ³R¹Û?¾Ó&nâ¶õ%²ßõƒºë“~ˆÜì[6=pÍŠyz\UÔj@5NãfåWÎrs„)ìq²‰' in ctrl creation request [ 133.713207][ T1220] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 133.883286][ T1220] usb 4-1: device descriptor read/64, error -71 [ 134.014460][ T1220] usb usb4-port1: attempt power cycle [ 134.064185][ T10] usb 3-1: USB disconnect, device number 19 [ 134.095123][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 134.463429][ T1220] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 134.503516][ T1220] usb 4-1: device descriptor read/8, error -71 [ 134.523088][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 134.653068][ T10] usb 3-1: device descriptor read/64, error -71 [ 134.783177][ T1220] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 134.903096][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 135.072505][ T1220] usb 4-1: device not accepting address 22, error -71 [ 135.104415][ T1220] usb usb4-port1: unable to enumerate USB device [ 136.614428][ T10] usb 3-1: device descriptor read/64, error -71 [ 136.733569][ T10] usb usb3-port1: attempt power cycle [ 137.973970][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 138.024231][ T10] usb 3-1: device descriptor read/8, error -71 [ 139.341868][ T6556] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 139.357724][ T6542] qnx6: unable to read the first superblock [ 139.703148][ T5688] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 140.813735][ T5688] usb 5-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 140.850297][ T5688] usb 5-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 140.896537][ T5688] usb 5-1: config 1 interface 0 has no altsetting 0 [ 141.726040][ T1220] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 141.856964][ T6576] Illegal XDP return value 1363514215 on prog (id 21) dev N/A, expect packet loss! [ 141.920783][ T30] audit: type=1400 audit(1786878020.318:707): avc: denied { read write } for pid=6572 comm="syz.0.205" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 142.132089][ T30] audit: type=1400 audit(1786878020.328:708): avc: denied { open } for pid=6572 comm="syz.0.205" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 142.196713][ T1220] usb 4-1: Using ep0 maxpacket: 32 [ 142.216250][ T1220] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 142.639153][ T1220] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 142.684403][ T30] audit: type=1400 audit(1786878020.338:709): avc: denied { create } for pid=6572 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 142.739436][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.747783][ T1220] usb 4-1: config 0 has no interface number 0 [ 142.788396][ T1220] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 142.804879][ T5688] usb 5-1: can't set config #1, error -71 [ 142.817575][ T30] audit: type=1400 audit(1786878020.358:710): avc: denied { sys_admin } for pid=6572 comm="syz.0.205" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 142.844391][ T5688] usb 5-1: USB disconnect, device number 17 [ 142.850420][ T1220] usb 4-1: config 0 interface 196 has no altsetting 0 [ 142.869308][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.885990][ T1220] usb 4-1: Product: syz [ 142.892889][ T30] audit: type=1400 audit(1786878020.828:711): avc: denied { sqpoll } for pid=6579 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 142.915312][ T1220] usb 4-1: Manufacturer: syz [ 142.924577][ T1220] usb 4-1: SerialNumber: syz [ 142.942866][ T1220] usb 4-1: config 0 descriptor?? [ 142.956823][ T6568] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 143.251982][ T6587] netlink: 116 bytes leftover after parsing attributes in process `syz.2.201'. [ 143.311836][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 143.417568][ T1220] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 143.475704][ T1220] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 143.498389][ T1220] usb 4-1: USB disconnect, device number 23 [ 143.513672][ T10] usb 5-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 143.563239][ T10] usb 5-1: too many endpoints for config 118 interface 0 altsetting 104: 211, using maximum allowed: 30 [ 143.613374][ T5695] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 143.886058][ T10] usb 5-1: config 118 interface 0 altsetting 104 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 143.902125][ T1220] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 143.928308][ T10] usb 5-1: config 118 interface 0 has no altsetting 0 [ 143.971194][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.983630][ T5695] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 144.008864][ T5695] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.026949][ T10] usb 5-1: Product: syz [ 144.044079][ T10] usb 5-1: Manufacturer: syz [ 144.050148][ T5695] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 144.078576][ T10] usb 5-1: SerialNumber: syz [ 144.094529][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.142161][ T5695] mos7720 1-1:1.0: required endpoints missing [ 144.316065][ T6589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.352542][ T1220] usb 1-1: USB disconnect, device number 6 [ 144.354434][ T6589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.416791][ T30] audit: type=1400 audit(1786878022.998:712): avc: denied { read write } for pid=6588 comm="syz.4.207" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 145.053017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 145.555718][ T30] audit: type=1400 audit(1786878022.998:713): avc: denied { open } for pid=6588 comm="syz.4.207" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 145.604221][ T10] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 145.624176][ T30] audit: type=1400 audit(1786878023.008:714): avc: denied { ioctl } for pid=6588 comm="syz.4.207" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 145.669167][ T10] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 145.760229][ T10] usb 5-1: USB disconnect, device number 18 [ 145.989652][ T6614] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 146.174623][ T6616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.215'. [ 146.806703][ T6623] netlink: 'syz.4.216': attribute type 11 has an invalid length. [ 147.000780][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.216'. [ 147.272608][ T6629] netlink: 32 bytes leftover after parsing attributes in process `syz.4.216'. [ 147.324789][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.213'. [ 147.537450][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.217'. [ 149.060956][ T6624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.069662][ T6624] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.082313][ T6624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.144338][ T6624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.167589][ T6624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.179219][ T6624] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 149.190381][ T6624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.211298][ T6624] veth1_vlan: left promiscuous mode [ 149.219429][ T6624] veth0_vlan: left promiscuous mode [ 149.226333][ T6624] veth0_vlan: entered promiscuous mode [ 149.234643][ T6624] veth1_vlan: entered promiscuous mode [ 149.242426][ T6624] veth1_macvtap: left promiscuous mode [ 149.249520][ T6624] veth0_macvtap: left promiscuous mode [ 149.255618][ T6624] veth0_macvtap: entered promiscuous mode [ 149.261876][ T6624] veth1_macvtap: entered promiscuous mode [ 149.268862][ T6624] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 149.290178][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'. [ 149.320630][ T6640] batadv_slave_0: entered promiscuous mode [ 149.327909][ T6640] batadv_slave_0: left promiscuous mode [ 149.341714][ T6637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.366699][ T6637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.505908][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.513536][ T5914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.696821][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.704126][ T5914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.888885][ T6655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.383286][ T1220] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 151.860339][ T1220] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 151.905151][ T1220] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 151.946690][ T1220] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 151.984901][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.015257][ T6673] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 152.054861][ T1220] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.288486][ T30] audit: type=1400 audit(1786878030.868:715): avc: denied { block_suspend } for pid=6672 comm="syz.3.228" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 152.657895][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.231'. [ 152.713666][ T6691] qnx6: unable to read the first superblock [ 156.151133][ T30] audit: type=1400 audit(1786878030.978:716): avc: denied { bind } for pid=6670 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.151399][ T5724] usb 4-1: USB disconnect, device number 24 [ 156.290112][ T30] audit: type=1400 audit(1786878030.978:717): avc: denied { name_bind } for pid=6670 comm="syz.4.226" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 156.314204][ T30] audit: type=1400 audit(1786878030.978:718): avc: denied { node_bind } for pid=6670 comm="syz.4.226" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 157.793090][ T30] audit: type=1400 audit(1786878036.358:719): avc: denied { name_connect } for pid=6714 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 157.923130][ T5724] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 159.365678][ T30] audit: type=1400 audit(1786878037.938:720): avc: denied { read } for pid=6726 comm="syz.3.240" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 159.425207][ T5724] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 159.447269][ T5724] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.474757][ T5724] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 159.497324][ T6730] comedi comedi3: pcl818: I/O base address not correctly aligned [ 159.509187][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.521934][ T1220] IPVS: starting estimator thread 0... [ 159.532623][ T30] audit: type=1400 audit(1786878037.938:721): avc: denied { read open } for pid=6726 comm="syz.3.240" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 159.623355][ T6732] IPVS: using max 41 ests per chain, 98400 per kthread [ 159.655460][ T5724] mos7720 1-1:1.0: required endpoints missing [ 159.708825][ T30] audit: type=1400 audit(1786878038.138:722): avc: denied { create } for pid=6731 comm="syz.4.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 159.897038][ T10] usb 1-1: USB disconnect, device number 7 [ 159.954830][ T30] audit: type=1400 audit(1786878038.148:723): avc: denied { setopt } for pid=6731 comm="syz.4.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 160.148423][ T1220] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 160.194456][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.243'. [ 160.197301][ T30] audit: type=1400 audit(1786878038.298:724): avc: denied { mount } for pid=6735 comm="syz.2.243" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 160.303898][ T1220] usb 4-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 160.314437][ T1220] usb 4-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 160.325662][ T1220] usb 4-1: config 1 interface 0 has no altsetting 0 [ 160.610574][ T30] audit: type=1400 audit(1786878039.188:725): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 161.873548][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 162.033609][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 162.048959][ T10] usb 1-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=1e.c2 [ 162.082853][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.122668][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.169785][ T10] usb 1-1: config 0 descriptor?? [ 162.202100][ T10] gspca_main: benq-2.14.0 probing 04a5:3035 [ 162.423102][ T5789] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 162.693069][ T10] usb 1-1: USB disconnect, device number 8 [ 162.751943][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.801785][ T1220] usb 4-1: can't set config #1, error -71 [ 162.815688][ T1220] usb 4-1: USB disconnect, device number 25 [ 162.853069][ T5789] usb 2-1: Using ep0 maxpacket: 16 [ 162.858801][ T5789] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 162.878363][ T5789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.892134][ T5789] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.916423][ T5789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.933968][ T6774] misc userio: Can't change port extra on an already running userio instance [ 162.941502][ T5789] usb 2-1: config 0 descriptor?? [ 163.266684][ T30] audit: type=1400 audit(1786878041.848:726): avc: denied { ioctl } for pid=6784 comm="syz.4.255" path="socket:[12884]" dev="sockfs" ino=12884 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 163.321048][ T6785] afs: Unknown parameter '' [ 163.334458][ T30] audit: type=1400 audit(1786878041.918:727): avc: denied { connect } for pid=6784 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 163.553852][ T187] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 163.592938][ T6795] fuse: Bad value for 'fd' [ 163.775483][ T187] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 163.852774][ T187] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.925990][ T187] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 164.019370][ T187] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 164.240712][ T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.416634][ T6788] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 164.603628][ T187] mos7720 1-1:1.0: required endpoints missing [ 164.934966][ T187] usb 1-1: USB disconnect, device number 9 [ 165.549393][ T5789] usbhid 2-1:0.0: can't add hid device: -71 [ 165.555490][ T5789] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 165.575588][ T5789] usb 2-1: USB disconnect, device number 8 [ 165.659465][ T6799] qnx6: unable to read the first superblock [ 165.947413][ T30] audit: type=1400 audit(1786878044.528:728): avc: denied { bind } for pid=6823 comm="syz.4.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 166.073060][ T30] audit: type=1400 audit(1786878044.558:729): avc: denied { write } for pid=6823 comm="syz.4.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 166.102211][ T30] audit: type=1400 audit(1786878044.568:730): avc: denied { getopt } for pid=6823 comm="syz.4.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 166.379998][ T30] audit: type=1400 audit(1786878044.958:731): avc: denied { append } for pid=6830 comm="syz.0.268" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 166.405712][ T6833] random: crng reseeded on system resumption [ 166.418528][ T5724] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 167.223174][ T5724] usb 2-1: device descriptor read/64, error -71 [ 167.423211][ T5789] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 167.463996][ T5724] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 167.574772][ T5789] usb 5-1: Using ep0 maxpacket: 8 [ 167.580781][ T5789] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.659688][ T5724] usb 2-1: device descriptor read/64, error -71 [ 167.696463][ T5789] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 167.719202][ T5789] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.200622][ T5724] usb usb2-port1: attempt power cycle [ 168.238010][ T5789] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.263413][ T5789] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.273643][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.271'. [ 168.292820][ T5789] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.339485][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.553069][ T5724] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 168.570886][ T5789] usb 5-1: usb_control_msg returned -32 [ 168.588004][ T5789] usbtmc 5-1:16.0: can't read capabilities [ 168.626112][ T5724] usb 2-1: device descriptor read/8, error -71 [ 168.947024][ T5789] usb 5-1: USB disconnect, device number 19 [ 168.994137][ T5724] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 169.223075][ T5724] usb 2-1: device not accepting address 12, error -71 [ 169.946535][ T5724] usb usb2-port1: unable to enumerate USB device [ 169.952910][ T6869] qnx6: unable to read the first superblock [ 170.429263][ T6886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.280'. [ 170.493858][ T6886] kvm: kvm [6885]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 170.588619][ T6888] qnx6: unable to read the first superblock [ 170.698616][ T30] audit: type=1400 audit(1786878049.278:732): avc: denied { read append } for pid=6890 comm="syz.1.281" name="sg0" dev="devtmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 170.745074][ T6877] qnx6: unable to read the first superblock [ 170.845005][ T30] audit: type=1400 audit(1786878049.278:733): avc: denied { ioctl open } for pid=6890 comm="syz.1.281" path="/dev/sg0" dev="devtmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 171.030899][ T6902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 171.953170][ T5724] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 172.233715][ T5724] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 172.269553][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.316487][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.351954][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.389739][ T5724] usb 3-1: config 0 descriptor?? [ 172.433872][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 172.443117][ T5688] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 172.593598][ T5688] usb 2-1: device descriptor read/64, error -71 [ 172.601496][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 172.609258][ T10] usb 4-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 172.618944][ T5789] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 172.685271][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 172.696655][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024 [ 172.711082][ T10] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.724835][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 172.731807][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.745543][ T10] usb 4-1: config 0 descriptor?? [ 172.833079][ T5789] usb 1-1: Using ep0 maxpacket: 8 [ 172.835433][ T5724] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 172.846651][ T5789] usb 1-1: New USB device found, idVendor=2799, idProduct=500a, bcdDevice=e7.b7 [ 172.846907][ T5724] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 172.856387][ T5789] usb 1-1: config 0 has no interfaces? [ 172.869390][ T5724] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 172.870871][ T5789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.876848][ T5688] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 172.892860][ T5789] usb 1-1: Product: syz [ 172.893884][ T5724] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 172.905381][ T5724] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 172.906882][ T5789] usb 1-1: Manufacturer: syz [ 172.913884][ T5724] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 172.927906][ T5724] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 172.927984][ T5789] usb 1-1: SerialNumber: syz [ 172.985209][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 172.992465][ T5724] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 172.994638][ T5789] usb 1-1: config 0 descriptor?? [ 173.009015][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 173.028175][ T10] usb 4-1: USB disconnect, device number 26 [ 173.033700][ T5688] usb 2-1: device descriptor read/64, error -71 [ 173.075125][ T5724] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 173.154196][ T5688] usb usb2-port1: attempt power cycle [ 173.241561][ T5695] usb 1-1: USB disconnect, device number 10 [ 173.275576][ T5724] cp2112 0003:10C4:EA90.0003: error requesting SMBus config [ 173.288765][ T5724] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -5 [ 173.486835][ T5695] usb 3-1: USB disconnect, device number 24 [ 173.493780][ T5688] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 173.526723][ T5688] usb 2-1: device descriptor read/8, error -71 [ 173.578346][ T6936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.291'. [ 173.609698][ T6936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.291'. [ 173.623866][ T48] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.637353][ T48] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.637793][ T30] audit: type=1400 audit(1786878052.218:734): avc: denied { node_bind } for pid=6935 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 173.681290][ T48] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.691613][ T48] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.656419][ T5688] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 174.684588][ T30] audit: type=1400 audit(1786878053.268:735): avc: denied { getopt } for pid=6931 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 174.686018][ T6934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.747382][ T5688] usb 2-1: device descriptor read/8, error -71 [ 174.873348][ T5688] usb usb2-port1: unable to enumerate USB device [ 175.146198][ T57] rpcbind: server 127.0.0.1 not responding, timed out [ 175.158300][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 175.372227][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 175.398334][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 175.726994][ T6960] netlink: 'syz.4.297': attribute type 11 has an invalid length. [ 175.739000][ T6965] syz.4.297 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 175.756713][ T6960] netlink: 'syz.4.297': attribute type 12 has an invalid length. [ 175.966915][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 176.018777][ T6973] netlink: 56 bytes leftover after parsing attributes in process `syz.3.294'. [ 176.181319][ T6973] kvm: pic: single mode not supported [ 176.191554][ T6973] kvm: pic: single mode not supported [ 176.203687][ T5695] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 176.310831][ T6973] kvm: pic: single mode not supported [ 176.311427][ T6973] kvm: pic: level sensitive irq not supported [ 176.325252][ T6973] kvm: pic: single mode not supported [ 176.331957][ T6973] kvm: pic: level sensitive irq not supported [ 176.354110][ T6973] kvm: pic: single mode not supported [ 176.360197][ T6973] kvm: pic: level sensitive irq not supported [ 176.396815][ T5695] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 176.438905][ T5695] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 176.461285][ T5695] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 176.506452][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.522900][ T6973] kvm: pic: single mode not supported [ 176.527463][ T6973] kvm: pic: level sensitive irq not supported [ 176.574901][ T5695] usb 1-1: Product: syz [ 176.575905][ T6973] kvm: pic: level sensitive irq not supported [ 176.588693][ T5695] usb 1-1: Manufacturer: syz [ 176.588714][ T5695] usb 1-1: SerialNumber: syz [ 176.621226][ T6973] kvm: pic: single mode not supported [ 176.624465][ T6973] kvm: pic: single mode not supported [ 176.629891][ T6973] kvm: pic: level sensitive irq not supported [ 176.676944][ T6973] kvm: pic: level sensitive irq not supported [ 176.696030][ T6973] kvm: pic: single mode not supported [ 176.727343][ T6973] kvm: pic: level sensitive irq not supported [ 176.736928][ T6973] kvm: pic: single mode not supported [ 176.743187][ T6973] kvm: pic: level sensitive irq not supported [ 176.759725][ T6973] kvm: pic: level sensitive irq not supported [ 177.023596][ T5695] usb 1-1: Limiting number of CPorts to U8_MAX [ 177.144230][ T30] audit: type=1400 audit(1786878055.708:736): avc: denied { mounton } for pid=6991 comm="syz.3.303" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 177.189029][ T30] audit: type=1400 audit(1786878055.768:737): avc: denied { create } for pid=6991 comm="syz.3.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 177.213069][ T30] audit: type=1400 audit(1786878055.768:738): avc: denied { bind } for pid=6991 comm="syz.3.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 177.255333][ T6976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.311432][ T5789] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 177.333499][ T6993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.383481][ T6993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.403875][ T30] audit: type=1400 audit(1786878055.978:739): avc: denied { open } for pid=6991 comm="syz.3.303" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 177.458820][ T5789] usb 2-1: device descriptor read/64, error -71 [ 177.467292][ T30] audit: type=1400 audit(1786878056.028:740): avc: denied { ioctl } for pid=6991 comm="syz.3.303" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 177.723510][ T5789] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 177.863083][ T5789] usb 2-1: device descriptor read/64, error -71 [ 177.887659][ C1] usb 1-1: check_urb_status: overflow actual length is 128 [ 177.894886][ C1] usb 1-1: arpc in-urb error -75 (dropped) [ 179.024601][ T5695] usb 1-1: failed to execute ARPC: -110 [ 179.024940][ T5789] usb usb2-port1: attempt power cycle [ 179.066268][ T5695] usb 1-1: failed to set connected state for cport 0: -110 [ 179.117295][ T5695] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 179.164450][ T187] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 179.189220][ T5695] usb 1-1: failed to send ARPC request 3: -71 [ 179.228668][ T5695] usb 1-1: failed to execute ARPC: -71 [ 179.263177][ T5695] usb 1-1: failed to clear cport 0: -71 [ 179.292444][ T5695] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 179.333513][ T187] usb 4-1: device descriptor read/64, error -71 [ 179.394444][ T5789] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 179.450803][ T5695] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 179.465058][ T5789] usb 2-1: device descriptor read/8, error -71 [ 179.501392][ T5695] usb 1-1: USB disconnect, device number 11 [ 179.593259][ T187] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 179.743083][ T5789] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 179.755069][ T187] usb 4-1: device descriptor read/64, error -71 [ 179.873519][ T187] usb usb4-port1: attempt power cycle [ 179.887322][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.309'. [ 179.998916][ T5789] usb 2-1: device not accepting address 20, error -71 [ 180.012567][ T5789] usb usb2-port1: unable to enumerate USB device [ 180.593218][ T187] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 180.656624][ T7023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.311'. [ 180.813462][ T187] usb 4-1: device descriptor read/8, error -71 [ 181.741777][ T30] audit: type=1400 audit(1786878060.318:741): avc: denied { write } for pid=7030 comm="syz.3.312" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 182.096193][ T30] audit: type=1400 audit(1786878060.318:742): avc: denied { open } for pid=7030 comm="syz.3.312" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 182.151620][ T30] audit: type=1400 audit(1786878060.348:743): avc: denied { ioctl } for pid=7030 comm="syz.3.312" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 182.220039][ T30] audit: type=1400 audit(1786878060.718:744): avc: denied { write } for pid=7030 comm="syz.3.312" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 182.363729][ T7030] syz.3.312 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 182.388401][ T30] audit: type=1400 audit(1786878060.728:745): avc: denied { map } for pid=7030 comm="syz.3.312" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 182.443325][ T7030] CPU: 0 UID: 0 PID: 7030 Comm: syz.3.312 Not tainted syzkaller #0 PREEMPT(full) [ 182.443350][ T7030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 182.443360][ T7030] Call Trace: [ 182.443366][ T7030] [ 182.443373][ T7030] dump_stack_lvl+0x100/0x190 [ 182.443400][ T7030] dump_header+0xfb/0x606 [ 182.443420][ T7030] oom_kill_process.cold+0xd/0x330 [ 182.443442][ T7030] out_of_memory+0x340/0x14f0 [ 182.443474][ T7030] ? __pfx_out_of_memory+0x10/0x10 [ 182.443508][ T7030] mem_cgroup_out_of_memory+0xc6/0x130 [ 182.443527][ T7030] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 182.443544][ T7030] ? find_held_lock+0x2b/0x80 [ 182.443566][ T7030] ? do_raw_spin_unlock+0x145/0x1e0 [ 182.443593][ T7030] ? _raw_spin_unlock+0x28/0x50 [ 182.443612][ T7030] try_charge_memcg+0x6e5/0xdf0 [ 182.443642][ T7030] ? __pfx_try_charge_memcg+0x10/0x10 [ 182.443665][ T7030] ? find_held_lock+0x2b/0x80 [ 182.443680][ T7030] ? rcu_read_unlock+0x17/0x60 [ 182.443705][ T7030] ? rcu_read_unlock+0x17/0x60 [ 182.443730][ T7030] ? find_held_lock+0x2b/0x80 [ 182.443747][ T7030] ? rcu_read_unlock+0x17/0x60 [ 182.443780][ T7030] charge_memcg+0x187/0x1e0 [ 182.443806][ T7030] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 182.443836][ T7030] swap_cache_alloc_folio+0x548/0xc50 [ 182.443861][ T7030] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 182.443880][ T7030] ? swap_cache_get_folio+0x28d/0x360 [ 182.443899][ T7030] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 182.443916][ T7030] ? debug_object_activate+0x343/0x4b0 [ 182.443943][ T7030] ? __pfx_debug_object_activate+0x10/0x10 [ 182.443970][ T7030] swap_cache_read_folio+0x47/0x140 [ 182.443993][ T7030] swap_cluster_readahead+0x387/0x5f0 [ 182.444018][ T7030] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 182.444047][ T7030] ? find_held_lock+0x2b/0x80 [ 182.444069][ T7030] ? __lock_acquire+0x49f/0x1a40 [ 182.444090][ T7030] ? get_vma_policy+0x23d/0x3b0 [ 182.444115][ T7030] swapin_readahead+0x159/0x1200 [ 182.444127][ T7030] ? trace_sched_exit_tp+0x120/0x160 [ 182.444150][ T7030] ? __pfx_swapin_readahead+0x10/0x10 [ 182.444166][ T7030] ? swap_table_get+0x10d/0x2c0 [ 182.444178][ T7030] ? swap_cache_get_folio+0x28d/0x360 [ 182.444190][ T7030] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 182.444202][ T7030] ? __pfx_softleaf_type+0x10/0x10 [ 182.444217][ T7030] ? do_swap_page+0xf98/0x5780 [ 182.444234][ T7030] do_swap_page+0xf98/0x5780 [ 182.444254][ T7030] ? __free_object+0x2a8/0x3f0 [ 182.444269][ T7030] ? lockdep_hardirqs_on+0x78/0x100 [ 182.444285][ T7030] ? __pfx_do_swap_page+0x10/0x10 [ 182.444303][ T7030] ? __lock_acquire+0x49f/0x1a40 [ 182.444319][ T7030] ? rcu_is_watching+0x12/0xc0 [ 182.444337][ T7030] ? __pte_offset_map+0x179/0x310 [ 182.444353][ T7030] __handle_mm_fault+0x192f/0x2a00 [ 182.444367][ T7030] ? reacquire_held_locks+0xce/0x1e0 [ 182.444382][ T7030] ? __pfx___handle_mm_fault+0x10/0x10 [ 182.444395][ T7030] ? lock_vma_under_rcu+0x17c/0x590 [ 182.444417][ T7030] ? lockdep_hardirqs_on+0x78/0x100 [ 182.444433][ T7030] handle_mm_fault+0x37b/0xa30 [ 182.444447][ T7030] do_user_addr_fault+0x5a3/0x12f0 [ 182.444469][ T7030] exc_page_fault+0x6f/0xd0 [ 182.444482][ T7030] asm_exc_page_fault+0x26/0x30 [ 182.444493][ T7030] RIP: 0033:0x7fcbcea6b498 [ 182.444503][ T7030] Code: 25 00 00 00 00 48 8d b8 d8 fe ff ff 4c 89 74 24 50 e8 bc 3c 0d 00 85 c0 75 13 48 8b 84 24 80 00 00 00 48 8b b4 24 c0 00 00 00 <48> 89 30 64 f0 83 2c 25 a0 ff ff ff 01 4c 8b 74 24 50 e9 71 f5 ff [ 182.444514][ T7030] RSP: 002b:00007ffccdb1c7d0 EFLAGS: 00010246 [ 182.444523][ T7030] RAX: 0000200000000040 RBX: 0000000000000002 RCX: 000000000000002a [ 182.444531][ T7030] RDX: d3839ec72891746f RSI: 0000000000000000 RDI: 00005555729de3d8 [ 182.444538][ T7030] RBP: fffffffffffffffe R08: 0000001b31820000 R09: 000000000000000f [ 182.444545][ T7030] R10: 00001fffffffffff R11: 0000000000000006 R12: 00007ffccdb1c8f0 [ 182.444551][ T7030] R13: 00007fcbcee2609c R14: 000000000002c4d0 R15: 00007fcbcee26090 [ 182.444565][ T7030] [ 182.444921][ T7030] memory: usage 96kB, limit 96kB, failcnt 56 [ 182.594162][ T7046] qnx6: unable to read the first superblock [ 182.873047][ T7030] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 182.893491][ T7030] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 182.911322][ T7030] Memory cgroup stats for /syz3/test: [ 182.911555][ T7030] cache 0 [ 182.933157][ T7030] rss 0 [ 182.950687][ T7030] rss_huge 0 [ 182.958994][ T7030] shmem 0 [ 182.963091][ T7030] mapped_file 0 [ 182.966572][ T7030] dirty 0 [ 182.969501][ T7030] writeback 0 [ 182.972775][ T7030] workingset_refault_anon 0 [ 182.981077][ T7030] workingset_refault_file 0 [ 182.985683][ T7030] swap 0 [ 182.989506][ T7030] swapcached 0 [ 182.992872][ T7030] pgpgin 0 [ 182.995891][ T7030] pgpgout 0 [ 182.998978][ T7030] pgfault 16 [ 183.002142][ T7030] pgmajfault 0 [ 183.005506][ T7030] inactive_anon 0 [ 183.009106][ T7030] active_anon 0 [ 183.012533][ T7030] inactive_file 0 [ 183.016190][ T7030] active_file 0 [ 183.019638][ T7030] unevictable 0 [ 183.023372][ T7030] hierarchical_memory_limit 98304 [ 183.028642][ T7030] hierarchical_memsw_limit 9223372036854771712 [ 183.034839][ T7030] total_cache 0 [ 183.038279][ T7030] total_rss 0 [ 183.041532][ T7030] total_rss_huge 0 [ 183.045801][ T7030] total_shmem 0 [ 183.049272][ T7030] total_mapped_file 0 [ 183.053297][ T7030] total_dirty 0 [ 183.056737][ T7030] total_writeback 0 [ 183.060511][ T7030] total_workingset_refault_anon 0 [ 183.065525][ T7030] total_workingset_refault_file 0 [ 183.070550][ T7030] total_swap 0 [ 183.074084][ T7030] total_swapcached 0 [ 183.078060][ T7030] total_pgpgin 0 [ 183.081576][ T7030] total_pgpgout 0 [ 183.085209][ T7030] total_pgfault 16 [ 183.088903][ T7030] total_pgmajfault 0 [ 183.092761][ T7030] total_inactive_anon 0 [ 183.099831][ T7030] total_active_anon 0 [ 183.119733][ T7030] total_inactive_file 0 [ 183.141932][ T7030] total_active_file 0 [ 183.155999][ T7030] total_unevictable 0 [ 183.183485][ T7030] anon_cost 0 [ 183.201194][ T7030] file_cost 0 [ 183.207738][ T7030] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.312,pid=7030,uid=0 [ 183.257931][ T7030] Memory cgroup out of memory: Killed process 7030 (syz.3.312) total-vm:102516kB, anon-rss:1436kB, file-rss:23504kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 184.269639][ T5724] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 184.595360][ T5724] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 184.747613][ T60] Bluetooth: hci5: Frame reassembly failed (-84) [ 184.792241][ T30] audit: type=1400 audit(1786878063.368:746): avc: denied { mount } for pid=7067 comm="syz.0.320" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 184.842581][ T30] audit: type=1400 audit(1786878063.418:747): avc: denied { search } for pid=7067 comm="syz.0.320" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 184.896031][ T30] audit: type=1400 audit(1786878063.418:748): avc: denied { search } for pid=7067 comm="syz.0.320" name="events" dev="tracefs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 184.954097][ T30] audit: type=1400 audit(1786878063.508:749): avc: denied { search } for pid=7067 comm="syz.0.320" name="sched" dev="tracefs" ino=13695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 185.005809][ T30] audit: type=1400 audit(1786878063.508:750): avc: denied { search } for pid=7067 comm="syz.0.320" name="sched_switch" dev="tracefs" ino=13697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 185.057718][ T30] audit: type=1400 audit(1786878063.508:751): avc: denied { write } for pid=7067 comm="syz.0.320" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 185.116600][ T30] audit: type=1400 audit(1786878063.518:752): avc: denied { open } for pid=7067 comm="syz.0.320" path="/69/trace/events/sched/sched_switch/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 185.155906][ T5724] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 185.210393][ T30] audit: type=1400 audit(1786878063.788:753): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 185.314750][ T7048] ceph: No mds server is up or the cluster is laggy [ 185.436807][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.321'. [ 185.561318][ T7084] /dev/nullb0: Can't open blockdev [ 185.743096][ T5724] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 185.883089][ T5724] usb 1-1: device descriptor read/64, error -71 [ 186.123150][ T5724] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 186.193893][ T5597] Bluetooth: hci0: command 0x0406 tx timeout [ 186.202376][ T5597] Bluetooth: hci2: command 0x0406 tx timeout [ 186.212842][ T5597] Bluetooth: hci1: command 0x0406 tx timeout [ 186.214576][ T4915] Bluetooth: hci3: command 0x0406 tx timeout [ 186.266329][ T7093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.313707][ T5724] usb 1-1: device descriptor read/64, error -71 [ 186.433740][ T5724] usb usb1-port1: attempt power cycle [ 186.754815][ T5599] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 186.754961][ T5612] Bluetooth: hci5: command 0xfc11 tx timeout [ 186.773568][ T5724] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 186.803811][ T5724] usb 1-1: device descriptor read/8, error -71 [ 187.043169][ T5724] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 188.099357][ T5724] usb 1-1: device descriptor read/8, error -71 [ 188.223436][ T5724] usb usb1-port1: unable to enumerate USB device [ 188.342439][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 188.342455][ T30] audit: type=1326 audit(1786878066.918:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.0.336" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb8b9e0d9 code=0x7ffc0000 [ 188.375281][ T5789] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 188.378890][ T30] audit: type=1326 audit(1786878066.918:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.0.336" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb8b9e0d9 code=0x7ffc0000 [ 188.425436][ T7124] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 188.426522][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.337'. [ 188.449564][ T30] audit: type=1326 audit(1786878066.958:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.0.336" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb8b9e0d9 code=0x7ffc0000 [ 188.483087][ T30] audit: type=1326 audit(1786878066.958:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.0.336" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb8b9e0d9 code=0x7ffc0000 [ 188.523368][ T30] audit: type=1326 audit(1786878066.968:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.0.336" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fbdb8b9e0d9 code=0x7ffc0000 [ 188.534679][ T5789] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 188.549882][ T5724] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 188.596382][ T5789] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.604320][ T30] audit: type=1326 audit(1786878066.968:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.0.336" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb8b9e0d9 code=0x7ffc0000 [ 188.632965][ T5789] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 188.642791][ T30] audit: type=1326 audit(1786878066.968:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.0.336" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb8b9e0d9 code=0x7ffc0000 [ 188.646549][ T5789] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 188.676383][ T30] audit: type=1326 audit(1786878066.988:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.0.336" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb8b9e0d9 code=0x7ffc0000 [ 188.694611][ T5789] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 188.716733][ T30] audit: type=1326 audit(1786878066.988:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.0.336" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb8b9e0d9 code=0x7ffc0000 [ 188.750569][ T5789] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 188.753506][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.770287][ T5724] usb 4-1: Using ep0 maxpacket: 8 [ 188.776383][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.782379][ T5789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.783164][ T30] audit: type=1326 audit(1786878067.008:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.0.336" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbdb8b9e0d9 code=0x7ffc0000 [ 188.817612][ T5724] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 188.834191][ T7118] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 188.841658][ T7118] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 188.845703][ T5724] usb 4-1: too many endpoints for config 0 interface 0 altsetting 88: 203, using maximum allowed: 30 [ 188.882449][ T5789] mos7720 2-1:1.0: required endpoints missing [ 188.884495][ T5724] usb 4-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 203 [ 188.923094][ T5724] usb 4-1: config 0 interface 0 has no altsetting 0 [ 188.938847][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.922713][ T5724] usb 4-1: config 0 descriptor?? [ 190.156665][ T5789] usb 2-1: USB disconnect, device number 21 [ 190.209559][ T7152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.519319][ T5696] usb 4-1: USB disconnect, device number 31 [ 190.526364][ T7161] fuse: Unknown parameter 'user_id00000000000000000000' [ 190.828534][ T7172] FAULT_INJECTION: forcing a failure. [ 190.828534][ T7172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.865729][ T7172] CPU: 1 UID: 0 PID: 7172 Comm: syz.0.349 Not tainted syzkaller #0 PREEMPT(full) [ 190.865756][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 190.865766][ T7172] Call Trace: [ 190.865772][ T7172] [ 190.865780][ T7172] dump_stack_lvl+0x100/0x190 [ 190.865807][ T7172] should_fail_ex.cold+0x5/0xa [ 190.865831][ T7172] _copy_to_user+0x32/0xd0 [ 190.865858][ T7172] simple_read_from_buffer+0xcb/0x170 [ 190.865880][ T7172] proc_fail_nth_read+0x1af/0x230 [ 190.865908][ T7172] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.865948][ T7172] ? rw_verify_area+0xce/0x6d0 [ 190.865967][ T7172] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.865986][ T7172] vfs_read+0x1e4/0xb40 [ 190.866005][ T7172] ? __pfx_vfs_read+0x10/0x10 [ 190.866023][ T7172] ? __fget_files+0x215/0x3d0 [ 190.866055][ T7172] ? __fget_files+0x21f/0x3d0 [ 190.866071][ T7172] ksys_read+0x12a/0x250 [ 190.866081][ T7172] ? __pfx_ksys_read+0x10/0x10 [ 190.866095][ T7172] do_syscall_64+0x115/0x870 [ 190.866108][ T7172] ? clear_bhb_loop+0x70/0xc0 [ 190.866123][ T7172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.866135][ T7172] RIP: 0033:0x7fbdb8b5e90e [ 190.866145][ T7172] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 190.866156][ T7172] RSP: 002b:00007fbdb99b9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.866167][ T7172] RAX: ffffffffffffffda RBX: 00007fbdb99ba6c0 RCX: 00007fbdb8b5e90e [ 190.866174][ T7172] RDX: 000000000000000f RSI: 00007fbdb99ba0a0 RDI: 0000000000000003 [ 190.866180][ T7172] RBP: 00007fbdb99ba090 R08: 0000000000000000 R09: 0000000000000000 [ 190.866186][ T7172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.866193][ T7172] R13: 00007fbdb8e26038 R14: 00007fbdb8e25fa0 R15: 00007fff880e0068 [ 190.866215][ T7172] [ 191.344884][ T7180] xt_hashlimit: size too large, truncated to 1048576 [ 191.483618][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 191.624099][ T10] usb 4-1: device descriptor read/64, error -71 [ 192.143307][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 192.413036][ T10] usb 4-1: device descriptor read/64, error -71 [ 192.523058][ T5724] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 192.525091][ T10] usb usb4-port1: attempt power cycle [ 192.673598][ T5724] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 192.696023][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.715584][ T5724] usb 5-1: Product: syz [ 192.739633][ T5724] usb 5-1: Manufacturer: syz [ 192.759211][ T5724] usb 5-1: SerialNumber: syz [ 192.776663][ T5724] usb 5-1: config 0 descriptor?? [ 192.807482][ T7202] /dev/nullb0: Can't open blockdev [ 192.883184][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 192.915845][ T10] usb 4-1: device descriptor read/8, error -71 [ 192.991532][ T5724] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 193.020699][ T7201] /dev/nullb0: Can't open blockdev [ 193.273069][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 193.304232][ T10] usb 4-1: device descriptor read/8, error -71 [ 193.423398][ T10] usb usb4-port1: unable to enumerate USB device [ 193.471250][ T7211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.358'. [ 193.913548][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 193.913564][ T30] audit: type=1400 audit(1786878072.498:898): avc: denied { bind } for pid=7216 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 193.968544][ T30] audit: type=1400 audit(1786878072.528:899): avc: denied { map } for pid=7216 comm="syz.0.360" path="socket:[13978]" dev="sockfs" ino=13978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 194.023459][ T30] audit: type=1400 audit(1786878072.528:900): avc: denied { read } for pid=7216 comm="syz.0.360" path="socket:[13978]" dev="sockfs" ino=13978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 194.058577][ T30] audit: type=1400 audit(1786878072.638:901): avc: denied { getopt } for pid=7216 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.225586][ T7193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.234249][ T7193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.401728][ T7224] fuse: Unknown parameter 'user_id00000000000000000000' [ 194.613619][ T5696] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 195.015253][ T5696] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 195.037478][ T5696] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 195.056377][ T5696] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 195.069992][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.079087][ T5696] usb 1-1: Product: syz [ 195.083735][ T5696] usb 1-1: Manufacturer: syz [ 195.089181][ T5696] usb 1-1: SerialNumber: syz [ 195.123120][ T5789] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 195.287849][ T5789] usb 3-1: unable to get BOS descriptor or descriptor too short [ 195.312939][ T5789] usb 3-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 195.321799][ T5724] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 195.348106][ T5789] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 195.389778][ T5789] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 195.417557][ T5789] usb 3-1: string descriptor 0 read error: -22 [ 195.427768][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.467554][ T5789] usb 3-1: low speed audio streaming not supported [ 195.482302][ T5789] usb 3-1: low speed audio streaming not supported [ 195.512937][ T5696] usb 1-1: Limiting number of CPorts to U8_MAX [ 195.780250][ T7223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.889744][ T30] audit: type=1800 audit(1786878074.438:902): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.354" name="bus" dev="ramfs" ino=14061 res=0 errno=0 [ 196.058993][ T9] usb 5-1: USB disconnect, device number 20 [ 196.114451][ T7239] binder_alloc: 7226: binder_alloc_buf, no vma [ 196.122719][ T7238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.414555][ T5696] usb 1-1: failed to set cport flags for port 0 [ 196.464136][ T5789] usb 3-1: USB disconnect, device number 25 [ 196.566413][ T7238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.609218][ T5696] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 196.729353][ T5696] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 196.804171][ T7242] netlink: 'syz.3.367': attribute type 1 has an invalid length. [ 196.859161][ T7244] netlink: 'syz.3.367': attribute type 1 has an invalid length. [ 196.900024][ T30] audit: type=1400 audit(1786878075.478:903): avc: denied { mount } for pid=7245 comm="syz.4.369" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 196.969469][ T7242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.367'. [ 196.984283][ T7242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.061976][ T30] audit: type=1400 audit(1786878075.638:904): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 197.892907][ T5696] usb 1-1: USB disconnect, device number 16 [ 198.059871][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'. [ 198.116991][ T7271] fuse: Bad value for 'fd' [ 198.236138][ T7265] /dev/nullb0: Can't open blockdev [ 198.363148][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 198.503106][ T9] usb 5-1: device descriptor read/64, error -71 [ 198.763089][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 198.943118][ T9] usb 5-1: device descriptor read/64, error -71 [ 199.133983][ T9] usb usb5-port1: attempt power cycle [ 199.953066][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 199.993693][ T9] usb 5-1: device descriptor read/8, error -71 [ 200.277483][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 200.318303][ T9] usb 5-1: device descriptor read/8, error -71 [ 200.423070][ T5789] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 200.434292][ T9] usb usb5-port1: unable to enumerate USB device [ 200.573067][ T5789] usb 3-1: Using ep0 maxpacket: 16 [ 200.578870][ T5789] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 200.603933][ T5789] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.618385][ T5789] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 200.656538][ T5789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.693099][ T5789] usb 3-1: config 0 descriptor?? [ 200.704476][ T5789] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 202.505340][ T30] audit: type=1400 audit(1786878081.078:905): avc: denied { create } for pid=7340 comm="syz.0.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 202.541435][ T30] audit: type=1400 audit(1786878081.088:906): avc: denied { connect } for pid=7340 comm="syz.0.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 202.561477][ T30] audit: type=1400 audit(1786878081.088:907): avc: denied { ioctl } for pid=7340 comm="syz.0.396" path="socket:[15542]" dev="sockfs" ino=15542 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 202.635505][ T30] audit: type=1400 audit(1786878081.088:908): avc: denied { read write } for pid=7340 comm="syz.0.396" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 202.679914][ T30] audit: type=1400 audit(1786878081.088:909): avc: denied { open } for pid=7340 comm="syz.0.396" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 202.759448][ T30] audit: type=1400 audit(1786878081.088:910): avc: denied { ioctl } for pid=7340 comm="syz.0.396" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 203.939816][ T30] audit: type=1400 audit(1786878082.038:911): avc: denied { ioctl } for pid=7343 comm="syz.1.397" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 204.181326][ T5696] usb 3-1: USB disconnect, device number 26 [ 205.175274][ T7363] netlink: 24 bytes leftover after parsing attributes in process `syz.4.403'. [ 205.208871][ T7365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.406'. [ 205.676928][ T30] audit: type=1400 audit(1786878084.248:912): avc: denied { bind } for pid=7376 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.699468][ T7380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.412'. [ 205.890455][ T30] audit: type=1400 audit(1786878084.248:913): avc: denied { setopt } for pid=7376 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 206.102139][ T30] audit: type=1400 audit(1786878084.248:914): avc: denied { setopt } for pid=7378 comm="syz.2.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.818470][ T7387] block device autoloading is deprecated and will be removed. [ 207.709821][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 207.709837][ T30] audit: type=1400 audit(1786878086.288:917): avc: denied { create } for pid=7402 comm="syz.2.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 207.892364][ T7403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.420'. [ 208.045620][ T7405] jffs2: notice: (7405) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 208.088212][ T30] audit: type=1400 audit(1786878086.668:918): avc: denied { mount } for pid=7404 comm="syz.3.421" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 208.134243][ T30] audit: type=1400 audit(1786878086.708:919): avc: denied { write } for pid=7404 comm="syz.3.421" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.258653][ T30] audit: type=1400 audit(1786878086.838:920): avc: denied { add_name } for pid=7404 comm="syz.3.421" name="test2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.310007][ T30] audit: type=1400 audit(1786878086.838:921): avc: denied { create } for pid=7404 comm="syz.3.421" name="test2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 208.356341][ T30] audit: type=1400 audit(1786878086.918:922): avc: denied { read write open } for pid=7404 comm="syz.3.421" path="/83/mnt/test2" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 208.631488][ T30] audit: type=1326 audit(1786878087.208:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.2.423" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7c99e0d9 code=0x7ffc0000 [ 208.660726][ T30] audit: type=1326 audit(1786878087.238:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.2.423" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7c99e0d9 code=0x7ffc0000 [ 208.688689][ T30] audit: type=1326 audit(1786878087.238:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.2.423" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f7c99e0d9 code=0x7ffc0000 [ 208.717068][ T30] audit: type=1326 audit(1786878087.238:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.2.423" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7c99e0d9 code=0x7ffc0000 [ 209.214628][ T7428] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 210.133690][ T5724] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 210.354175][ T5724] usb 2-1: Using ep0 maxpacket: 16 [ 210.396314][ T5724] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 210.586133][ T5724] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.716925][ T5724] usb 2-1: config 0 interface 0 has no altsetting 0 [ 210.778778][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.961267][ T5724] usb 2-1: config 0 descriptor?? [ 212.507246][ T5724] mcp2221 0003:04D8:00DD.0004: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 212.542891][ T7445] nvmet: adding nsid 1 to subsystem subsys1 [ 212.737029][ T5724] usb 2-1: USB disconnect, device number 22 [ 213.329049][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 213.329066][ T30] audit: type=1400 audit(1786878091.908:966): avc: denied { ioctl } for pid=7454 comm="syz.1.437" path="socket:[16528]" dev="sockfs" ino=16528 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.390158][ T30] audit: type=1400 audit(1786878091.948:967): avc: denied { write } for pid=7457 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 213.411834][ T30] audit: type=1400 audit(1786878091.958:968): avc: denied { connect } for pid=7454 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.440855][ T30] audit: type=1400 audit(1786878091.958:969): avc: denied { write } for pid=7454 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.520322][ T7461] xt_TCPMSS: Only works on TCP SYN packets [ 213.576007][ T30] audit: type=1400 audit(1786878092.158:970): avc: denied { create } for pid=7462 comm="syz.4.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 213.694170][ T30] audit: type=1400 audit(1786878092.188:971): avc: denied { connect } for pid=7462 comm="syz.4.440" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 213.773477][ T7468] usb usb8: usbfs: process 7468 (syz.1.441) did not claim interface 0 before use [ 213.783634][ T30] audit: type=1400 audit(1786878092.348:972): avc: denied { append } for pid=7466 comm="syz.1.441" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 213.975171][ T30] audit: type=1400 audit(1786878092.558:973): avc: denied { setopt } for pid=7469 comm="syz.0.442" laddr=::1 lport=1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 214.003943][ T30] audit: type=1400 audit(1786878092.558:974): avc: denied { write } for pid=7469 comm="syz.0.442" laddr=::1 lport=1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 214.076892][ T30] audit: type=1400 audit(1786878092.658:975): avc: denied { ioctl } for pid=7477 comm="syz.3.445" path="socket:[16648]" dev="sockfs" ino=16648 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 214.393932][ T5724] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 214.593333][ T5724] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 214.721347][ T5724] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.794497][ T5724] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.919836][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.945825][ T5724] usb 4-1: Product: syz [ 214.959157][ T5724] usb 4-1: Manufacturer: syz [ 214.981779][ T5724] usb 4-1: SerialNumber: syz [ 215.044120][ T7504] syzkaller0: entered promiscuous mode [ 215.066989][ T7504] syzkaller0: entered allmulticast mode [ 215.106587][ T7504] tipc: Started in network mode [ 215.113908][ T7504] tipc: Node identity e201a69922d3, cluster identity 4711 [ 215.131575][ T7504] tipc: Enabled bearer , priority 0 [ 215.145002][ T7503] tipc: Resetting bearer [ 215.481097][ T7503] tipc: Disabling bearer [ 215.602525][ T5789] usb 4-1: USB disconnect, device number 36 [ 216.384835][ T7527] jffs2: notice: (7527) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 216.741284][ T7542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.465'. [ 216.750395][ T7542] netlink: 288 bytes leftover after parsing attributes in process `syz.1.465'. [ 218.647292][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 218.647305][ T30] audit: type=1400 audit(1786878096.848:991): avc: denied { setopt } for pid=7555 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 220.058253][ T30] audit: type=1400 audit(1786878098.638:992): avc: denied { read } for pid=7576 comm="syz.3.480" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 220.141743][ T30] audit: type=1400 audit(1786878098.638:993): avc: denied { open } for pid=7576 comm="syz.3.480" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 220.584783][ T30] audit: type=1400 audit(1786878099.168:994): avc: denied { append } for pid=7579 comm="syz.4.481" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 221.636708][ T30] audit: type=1400 audit(1786878099.778:995): avc: denied { connect } for pid=7601 comm="syz.2.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 221.687186][ T30] audit: type=1400 audit(1786878099.778:996): avc: denied { write } for pid=7601 comm="syz.2.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 221.830690][ T7611] input: syz1 as /devices/virtual/input/input12 [ 221.866485][ T30] audit: type=1400 audit(1786878100.448:997): avc: denied { read } for pid=4950 comm="acpid" name="event4" dev="devtmpfs" ino=2961 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.902927][ T30] audit: type=1400 audit(1786878100.448:998): avc: denied { open } for pid=4950 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2961 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.935022][ T30] audit: type=1400 audit(1786878100.448:999): avc: denied { ioctl } for pid=4950 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2961 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.257876][ T7621] vlan0: entered promiscuous mode [ 222.716635][ T7635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.498'. [ 223.641393][ T7642] syzkaller0: entered promiscuous mode [ 223.666905][ T7642] syzkaller0: entered allmulticast mode [ 223.706461][ T30] audit: type=1400 audit(1786878102.278:1000): avc: denied { bind } for pid=7636 comm="syz.1.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 224.046297][ T30] audit: type=1400 audit(1786878102.628:1001): avc: denied { read write } for pid=7645 comm="syz.3.502" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 224.078223][ T30] audit: type=1400 audit(1786878102.658:1002): avc: denied { open } for pid=7645 comm="syz.3.502" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 224.221791][ T30] audit: type=1400 audit(1786878102.798:1003): avc: denied { write } for pid=7654 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 224.383127][ T10] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 225.434519][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 225.445512][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 225.453518][ T10] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 225.465925][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.478681][ T10] usb 4-1: Product: syz [ 225.482906][ T10] usb 4-1: Manufacturer: syz [ 225.488048][ T10] usb 4-1: SerialNumber: syz [ 225.733959][ T7674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.511'. [ 225.850475][ T30] audit: type=1400 audit(1786878104.378:1004): avc: denied { read } for pid=7669 comm="syz.2.510" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 226.424173][ T10] usb 4-1: 1:1: cannot set freq 44100 to ep 0x1 [ 226.430603][ T30] audit: type=1400 audit(1786878104.378:1005): avc: denied { open } for pid=7669 comm="syz.2.510" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 226.495935][ T10] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 226.503040][ T30] audit: type=1400 audit(1786878104.398:1006): avc: denied { ioctl } for pid=7669 comm="syz.2.510" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 226.559466][ T10] usb 4-1: USB disconnect, device number 37 [ 226.565428][ T30] audit: type=1400 audit(1786878104.458:1007): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 226.646709][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 228.092072][ T30] audit: type=1400 audit(1786878106.668:1008): avc: denied { relabelfrom } for pid=7701 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 228.185228][ T30] audit: type=1400 audit(1786878106.688:1009): avc: denied { relabelto } for pid=7701 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 229.537401][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 229.717673][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 229.733393][ T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 229.762099][ T10] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 229.773181][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 229.786026][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.807795][ T10] usb 5-1: config 0 descriptor?? [ 230.224477][ T10] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 230.235808][ T10] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 230.245128][ T10] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 230.252681][ T10] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 230.260677][ T10] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 230.288838][ T10] corsair-psu 0003:1B1C:1C09.0005: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 230.421078][ T10] corsair-psu 0003:1B1C:1C09.0005: unable to initialize device (-71) [ 230.443183][ T10] corsair-psu 0003:1B1C:1C09.0005: probe with driver corsair-psu failed with error -71 [ 230.476050][ T10] usb 5-1: USB disconnect, device number 25 [ 230.901685][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.527'. [ 230.929715][ T7736] batadv_slave_0: entered promiscuous mode [ 230.938453][ T7739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.966982][ T7739] batadv_slave_0 (unregistering): left promiscuous mode [ 231.018386][ T7739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.981932][ T7757] block device autoloading is deprecated and will be removed. [ 233.851162][ T30] audit: type=1400 audit(1786878112.428:1010): avc: denied { read } for pid=7772 comm="syz.2.540" name="mode" dev="configfs" ino=17575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 233.911273][ T30] audit: type=1800 audit(1786878112.428:1011): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.540" name="mode" dev="configfs" ino=17575 res=0 errno=0 [ 234.310825][ T30] audit: type=1400 audit(1786878112.888:1012): avc: denied { listen } for pid=7783 comm="syz.4.543" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 235.268356][ T30] audit: type=1400 audit(1786878113.348:1013): avc: denied { bind } for pid=7786 comm="syz.3.545" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 235.503832][ T30] audit: type=1400 audit(1786878113.348:1014): avc: denied { name_bind } for pid=7786 comm="syz.3.545" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 235.525848][ T30] audit: type=1400 audit(1786878113.348:1015): avc: denied { node_bind } for pid=7786 comm="syz.3.545" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 236.619949][ T7814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.552'. [ 236.629006][ T7814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.552'. [ 236.790721][ T30] audit: type=1400 audit(1786878115.348:1016): avc: denied { read } for pid=7815 comm="syz.2.551" name="trace" dev="tracefs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 240.287241][ T30] audit: type=1400 audit(1786878118.868:1017): avc: denied { write } for pid=7844 comm="syz.3.563" name="usb_gadget" dev="configfs" ino=3666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 240.313918][ T10] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 241.062364][ T30] audit: type=1400 audit(1786878118.978:1018): avc: denied { create } for pid=7846 comm="syz.1.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 241.084245][ T30] audit: type=1400 audit(1786878118.978:1019): avc: denied { setopt } for pid=7846 comm="syz.1.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 241.116312][ T30] audit: type=1400 audit(1786878119.088:1020): avc: denied { nlmsg_write } for pid=7846 comm="syz.1.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 241.139143][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 241.151656][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.218319][ T10] usb 5-1: Product: syz [ 241.233080][ T10] usb 5-1: Manufacturer: syz [ 241.254701][ T10] usb 5-1: SerialNumber: syz [ 241.289125][ T10] usb 5-1: config 0 descriptor?? [ 242.422004][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 243.484494][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 243.489474][ T30] audit: type=1400 audit(1786878121.328:1021): avc: denied { setopt } for pid=7871 comm="syz.1.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 243.549638][ T10] usb 5-1: USB disconnect, device number 26 [ 243.576894][ T30] audit: type=1400 audit(1786878121.368:1022): avc: denied { getopt } for pid=7871 comm="syz.1.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 244.621688][ T30] audit: type=1400 audit(1786878122.858:1023): avc: denied { getopt } for pid=7874 comm="syz.2.571" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 246.124593][ T30] audit: type=1400 audit(1786878124.468:1024): avc: denied { kexec_image_load } for pid=7892 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 246.790504][ T7913] netlink: 24 bytes leftover after parsing attributes in process `syz.3.583'. [ 247.381922][ T30] audit: type=1400 audit(1786878125.668:1025): avc: denied { write } for pid=7910 comm="syz.2.582" name="strings" dev="configfs" ino=9198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 247.486763][ T30] audit: type=1400 audit(1786878125.668:1026): avc: denied { write } for pid=7910 comm="syz.2.582" name="0x409" dev="configfs" ino=18854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 247.700618][ T30] audit: type=1400 audit(1786878125.668:1027): avc: denied { create } for pid=7910 comm="syz.2.582" name="serialnumber" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 248.155324][ T30] audit: type=1400 audit(1786878125.688:1028): avc: denied { write } for pid=7910 comm="syz.2.582" name="uncompressed" dev="configfs" ino=11099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 248.182880][ T30] audit: type=1400 audit(1786878125.688:1029): avc: denied { write } for pid=7910 comm="syz.2.582" name="yuyv" dev="configfs" ino=18856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 248.298173][ T30] audit: type=1400 audit(1786878126.878:1030): avc: denied { getopt } for pid=7930 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 248.341716][ T7937] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 248.473373][ T7939] jffs2: notice: (7939) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 251.427239][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 251.433619][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.675972][ T30] audit: type=1400 audit(1786878130.258:1031): avc: denied { create } for pid=7952 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 251.734364][ T30] audit: type=1400 audit(1786878130.288:1032): avc: denied { listen } for pid=7952 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 252.130606][ T30] audit: type=1400 audit(1786878130.708:1033): avc: denied { ioctl } for pid=7994 comm="syz.1.614" path="socket:[19038]" dev="sockfs" ino=19038 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 252.212508][ T30] audit: type=1400 audit(1786878130.708:1034): avc: denied { write } for pid=7994 comm="syz.1.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 252.323157][ T5789] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 252.474681][ T5789] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 252.491854][ T5789] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 252.498035][ T30] audit: type=1400 audit(1786878131.068:1035): avc: denied { name_bind } for pid=7998 comm="syz.4.604" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 252.559278][ T5789] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 252.588924][ T5789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.643288][ T5789] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 252.789762][ T5789] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 253.446630][ T7993] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 253.514421][ T5695] usb 3-1: USB disconnect, device number 27 [ 253.627924][ T5695] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 253.641771][ T5695] spcp8x5 3-1:1.0: device disconnected [ 253.720229][ T8017] kvm: kvm [8016]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 253.736044][ T8017] kvm: kvm [8016]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 253.748563][ T8017] kvm: kvm [8016]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 253.827760][ T8027] futex_wake_op: syz.1.622 tries to shift op by 144; fix this program [ 253.914011][ T8017] kvm: kvm [8016]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 254.240841][ T30] audit: type=1400 audit(1786878132.808:1037): avc: denied { write } for pid=8024 comm="syz.4.624" name="0x409" dev="configfs" ino=18854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 254.273782][ T30] audit: type=1400 audit(1786878132.708:1036): avc: denied { write } for pid=8024 comm="syz.4.624" name="720p" dev="configfs" ino=18857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 254.277108][ T8017] kvm: kvm [8016]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 254.324600][ T8017] kvm: kvm [8016]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 254.338386][ T8017] kvm: kvm [8016]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 254.348989][ T8017] kvm: kvm [8016]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 254.372428][ T8017] kvm: kvm [8016]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 254.396143][ T8017] kvm: kvm [8016]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 254.512261][ T8035] CacheFiles: No cache directory specified [ 255.410546][ T30] audit: type=1400 audit(1786878133.988:1038): avc: denied { setopt } for pid=8036 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 255.591866][ T30] audit: type=1400 audit(1786878133.988:1039): avc: denied { bind } for pid=8036 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 255.753123][ T5695] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 255.790501][ T30] audit: type=1400 audit(1786878133.988:1040): avc: denied { write } for pid=8036 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 256.187197][ T5695] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 256.230498][ T5695] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.312722][ T5695] usb 2-1: config 0 has no interface number 0 [ 256.493745][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.508211][ T8058] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 256.554980][ T5695] usb 2-1: Product: syz [ 256.614170][ T5695] usb 2-1: Manufacturer: syz [ 256.677284][ T5695] usb 2-1: SerialNumber: syz [ 256.822785][ T5695] usb 2-1: config 0 descriptor?? [ 256.997033][ T5695] usb 2-1: selecting invalid altsetting 1 [ 257.217802][ T5695] dvb_ttusb_budget: ttusb_init_controller: error [ 257.256189][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 257.256233][ T30] audit: type=1400 audit(1786878135.838:1044): avc: denied { name_bind } for pid=8059 comm="syz.4.634" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 257.800534][ T30] audit: type=1400 audit(1786878135.838:1045): avc: denied { write } for pid=8059 comm="syz.4.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 257.922262][ T5695] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 257.967409][ T30] audit: type=1400 audit(1786878136.038:1046): avc: denied { shutdown } for pid=8037 comm="syz.1.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 257.980795][ T5695] DVB: Unable to find symbol stv0299_attach() [ 258.138675][ T30] audit: type=1400 audit(1786878136.038:1047): avc: denied { getopt } for pid=8037 comm="syz.1.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 258.152084][ T5695] DVB: Unable to find symbol tda8083_attach() [ 258.239474][ T5695] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 258.400555][ T5695] usb 2-1: USB disconnect, device number 23 [ 258.653272][ T30] audit: type=1400 audit(1786878137.128:1048): avc: denied { mount } for pid=8073 comm="syz.2.638" name="/" dev="hugetlbfs" ino=18217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 259.058688][ T30] audit: type=1400 audit(1786878137.638:1049): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 259.135534][ T30] audit: type=1400 audit(1786878137.718:1050): avc: denied { create } for pid=8095 comm="syz.2.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 259.252181][ T30] audit: type=1400 audit(1786878137.828:1051): avc: denied { write } for pid=8095 comm="syz.2.646" path="socket:[19235]" dev="sockfs" ino=19235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 259.397092][ T8094] trusted_key: encrypted_key: master key parameter 'vr sted:syz' is invalid [ 259.528764][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.640'. [ 260.249537][ T5922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.259329][ T5922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.729023][ T8130] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 260.760620][ T8130] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 261.565194][ T30] audit: type=1400 audit(1786878140.138:1052): avc: denied { connect } for pid=8138 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 261.680186][ T8116] orangefs_mount: mount request failed with -4 [ 262.617580][ T30] audit: type=1400 audit(1786878141.198:1053): avc: denied { setattr } for pid=8163 comm="syz.4.666" name="/" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 262.799579][ T8171] file system registered [ 262.810944][ T30] audit: type=1400 audit(1786878141.378:1054): avc: denied { write } for pid=8166 comm="syz.4.667" name="functions" dev="configfs" ino=9196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 262.893683][ T5688] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 263.057793][ T5688] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 263.097650][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.124532][ T5688] usb 4-1: Product: syz [ 263.160267][ T5688] usb 4-1: Manufacturer: syz [ 263.234483][ T5688] usb 4-1: SerialNumber: syz [ 263.252390][ T5688] usb 4-1: config 0 descriptor?? [ 263.477768][ T5688] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 263.627790][ T8180] can: request_module (can-proto-4) failed. [ 264.836651][ T30] audit: type=1400 audit(1786878143.418:1055): avc: denied { remount } for pid=8194 comm="syz.0.676" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 265.243015][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 265.271588][ T30] audit: type=1400 audit(1786878143.848:1056): avc: denied { read } for pid=8205 comm="syz.2.679" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 265.309144][ T30] audit: type=1400 audit(1786878143.848:1057): avc: denied { open } for pid=8205 comm="syz.2.679" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 265.423651][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 265.431214][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 265.458828][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 265.475963][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.497327][ T10] usb 5-1: config 0 has no interface number 0 [ 265.505313][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 265.532682][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 265.548101][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.574467][ T10] usb 5-1: config 0 descriptor?? [ 265.600066][ T10] ldusb 5-1:0.55: Interrupt in endpoint not found [ 265.802561][ T10] usb 5-1: USB disconnect, device number 27 [ 265.905860][ T5688] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 265.938099][ T5688] usb 4-1: USB disconnect, device number 38 [ 267.563366][ T5789] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 267.599790][ T30] audit: type=1400 audit(1786878146.178:1058): avc: denied { ioctl } for pid=8245 comm="syz.3.694" path="socket:[19543]" dev="sockfs" ino=19543 ioctlcmd=0x89a3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 267.754416][ T30] audit: type=1400 audit(1786878146.328:1059): avc: denied { setopt } for pid=8249 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 267.798965][ T30] audit: type=1400 audit(1786878146.338:1060): avc: denied { read } for pid=8249 comm="syz.3.696" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 267.825240][ T5789] usb 3-1: Using ep0 maxpacket: 16 [ 267.918789][ T5789] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 268.931220][ T8248] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 269.217640][ T30] audit: type=1400 audit(1786878146.338:1061): avc: denied { open } for pid=8249 comm="syz.3.696" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 269.247062][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.255111][ T5789] usb 3-1: Product: syz [ 269.259268][ T5789] usb 3-1: Manufacturer: syz [ 269.263879][ T5789] usb 3-1: SerialNumber: syz [ 269.271270][ T5789] usb 3-1: config 0 descriptor?? [ 269.653202][ T10] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 269.703558][ T5789] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 269.762729][ T5789] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 269.774867][ T5789] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 269.784461][ T5789] usb 3-1: media controller created [ 269.802863][ T5789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.824821][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 269.839865][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 269.864312][ T10] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 269.895925][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.913007][ T10] usb 2-1: Product: syz [ 269.921264][ T10] usb 2-1: Manufacturer: syz [ 269.931045][ T10] usb 2-1: SerialNumber: syz [ 270.030517][ T8271] syz.4.701: vmalloc error: size 4096, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 270.060531][ T8271] CPU: 0 UID: 0 PID: 8271 Comm: syz.4.701 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.060553][ T8271] Tainted: [L]=SOFTLOCKUP [ 270.060558][ T8271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 270.060564][ T8271] Call Trace: [ 270.060568][ T8271] [ 270.060573][ T8271] dump_stack_lvl+0x100/0x190 [ 270.060592][ T8271] warn_alloc.cold+0x94/0xa8 [ 270.060603][ T8271] ? __pfx_warn_alloc+0x10/0x10 [ 270.060615][ T8271] ? policy_nodemask+0xed/0x4f0 [ 270.060632][ T8271] ? alloc_pages_mpol+0x25a/0x540 [ 270.060649][ T8271] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 270.060665][ T8271] ? __kmalloc_node_noprof+0x357/0x830 [ 270.060678][ T8271] ? __get_vm_area_node+0x130/0x330 [ 270.060694][ T8271] ? __get_vm_area_node+0x208/0x330 [ 270.060712][ T8271] __vmalloc_node_range_noprof+0x13f6/0x1630 [ 270.060731][ T8271] ? register_lock_class+0x40/0x560 [ 270.060750][ T8271] ? __vcalloc_noprof+0x4d/0x80 [ 270.060768][ T8271] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 270.060794][ T8271] ? lock_acquire+0x1b9/0x370 [ 270.060822][ T8271] ? __vcalloc_noprof+0x4d/0x80 [ 270.060837][ T8271] __vmalloc_node_noprof+0xad/0xf0 [ 270.060854][ T8271] ? __vcalloc_noprof+0x4d/0x80 [ 270.060869][ T8271] __vmalloc_noprof+0xa3/0x120 [ 270.060885][ T8271] ? __pfx___vmalloc_noprof+0x10/0x10 [ 270.060903][ T8271] ? __pfx___mutex_lock+0x10/0x10 [ 270.060921][ T8271] __vcalloc_noprof+0x4d/0x80 [ 270.060935][ T8271] kvm_arch_prepare_memory_region+0x35c/0x8d0 [ 270.060959][ T8271] kvm_set_memslot+0x139/0x1740 [ 270.060972][ T8271] ? kvm_set_memory_region+0xc43/0x15e0 [ 270.060987][ T8271] kvm_set_memory_region+0xe78/0x15e0 [ 270.061007][ T8271] kvm_vm_ioctl+0x1e00/0x4180 [ 270.061024][ T8271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.061042][ T8271] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 270.061069][ T8271] ? kasan_quarantine_put+0x104/0x240 [ 270.061083][ T8271] ? lockdep_hardirqs_on+0x78/0x100 [ 270.061096][ T8271] ? find_held_lock+0x2b/0x80 [ 270.061106][ T8271] ? tomoyo_path_number_perm+0x28f/0x580 [ 270.061123][ T8271] ? tomoyo_path_number_perm+0x28f/0x580 [ 270.061142][ T8271] ? tomoyo_path_number_perm+0x188/0x580 [ 270.061159][ T8271] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 270.061177][ T8271] ? __pfx_futex_wait+0x10/0x10 [ 270.061192][ T8271] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 270.061215][ T8271] ? __fget_files+0x215/0x3d0 [ 270.061227][ T8271] ? hook_file_ioctl_common+0x140/0x440 [ 270.061243][ T8271] ? selinux_file_ioctl+0x13b/0x290 [ 270.061261][ T8271] ? selinux_file_ioctl+0xb6/0x290 [ 270.061279][ T8271] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 270.061297][ T8271] __x64_sys_ioctl+0x18e/0x210 [ 270.061315][ T8271] do_syscall_64+0x115/0x870 [ 270.061328][ T8271] ? clear_bhb_loop+0x70/0xc0 [ 270.061342][ T8271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.061353][ T8271] RIP: 0033:0x7f6c72b9e0d9 [ 270.061363][ T8271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.061374][ T8271] RSP: 002b:00007f6c739a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.061386][ T8271] RAX: ffffffffffffffda RBX: 00007f6c72e25fa0 RCX: 00007f6c72b9e0d9 [ 270.061393][ T8271] RDX: 00002000000001c0 RSI: 000000004020ae46 RDI: 0000000000000006 [ 270.061400][ T8271] RBP: 00007f6c72c35024 R08: 0000000000000000 R09: 0000000000000000 [ 270.061406][ T8271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.061412][ T8271] R13: 00007f6c72e26038 R14: 00007f6c72e25fa0 R15: 00007ffc55060178 [ 270.061426][ T8271] [ 270.407278][ T8271] Mem-Info: [ 270.410812][ T8271] active_anon:37613 inactive_anon:0 isolated_anon:0 [ 270.410812][ T8271] active_file:0 inactive_file:63922 isolated_file:0 [ 270.410812][ T8271] unevictable:0 dirty:127 writeback:0 [ 270.410812][ T8271] slab_reclaimable:11718 slab_unreclaimable:98631 [ 270.410812][ T8271] mapped:33040 shmem:28407 pagetables:1341 [ 270.410812][ T8271] sec_pagetables:0 bounce:0 [ 270.410812][ T8271] kernel_misc_reclaimable:0 [ 270.410812][ T8271] free:1252726 free_pcp:18368 free_cma:0 [ 270.456009][ T8271] Node 0 active_anon:150452kB inactive_anon:0kB active_file:0kB inactive_file:255488kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132160kB dirty:508kB writeback:0kB shmem:113628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12664kB pagetables:5200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 270.490806][ T8271] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 270.523715][ T8271] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 270.553623][ T8271] lowmem_reserve[]: 0 2472 2472 2472 2472 [ 270.559375][ T8271] Node 0 DMA32 free:1052740kB boost:0kB min:33996kB low:42492kB high:50988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:150452kB inactive_anon:0kB active_file:0kB inactive_file:255488kB unevictable:0kB writepending:508kB zspages:0kB present:3129332kB managed:2532076kB mlocked:0kB bounce:0kB free_pcp:72580kB local_pcp:56068kB free_cma:0kB [ 270.593168][ T8271] lowmem_reserve[]: 0 0 0 0 0 [ 270.599309][ T8271] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:124kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 270.628611][ T8271] lowmem_reserve[]: 0 0 0 0 0 [ 270.633350][ T8271] Node 1 Normal free:3942804kB boost:0kB min:55900kB low:69872kB high:83844kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 270.664674][ T8271] lowmem_reserve[]: 0 0 0 0 0 [ 270.669373][ T8271] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 270.682766][ T8271] Node 0 DMA32: 41*4kB (UE) 4*8kB (UE) 2*16kB (UE) 1*32kB (U) 3*64kB (UE) 101*128kB (UM) 108*256kB (UM) 52*512kB (ME) 30*1024kB (UM) 10*2048kB (UM) 228*4096kB (M) = 1052740kB [ 270.700305][ T8271] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 270.711852][ T8271] Node 1 Normal: 1*4kB (U) 6*8kB (UM) 10*16kB (UM) 4*32kB (UM) 5*64kB (UM) 4*128kB (UM) 5*256kB (UM) 2*512kB (M) 3*1024kB (UM) 0*2048kB 961*4096kB (M) = 3942804kB [ 270.728243][ T8271] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.737783][ T8271] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.747073][ T8271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.756622][ T8271] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.768782][ T5789] zl10353_read_register: readreg error (reg=127, ret==0) [ 270.776248][ T5789] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 270.789875][ T5789] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 270.795989][ T8271] 91601 total pagecache pages [ 270.826168][ T10] usb 2-1: 1:1: cannot set freq 44100 to ep 0x1 [ 270.836088][ T8271] 0 pages in swap cache [ 270.842091][ T8271] Free swap = 124996kB [ 270.854937][ T10] usb 2-1: 2:1: cannot set freq 44100 to ep 0x82 [ 270.895278][ T8271] Total swap = 124996kB [ 270.914833][ T8271] 2097051 pages RAM [ 270.919691][ T5789] usb 3-1: USB disconnect, device number 28 [ 270.942403][ T8271] 0 pages HighMem/MovableOnly [ 270.973287][ T8271] 432386 pages reserved [ 270.979129][ T8271] 0 pages cma reserved [ 271.130052][ T10] usb 2-1: USB disconnect, device number 24 [ 271.640176][ T5789] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 271.953647][ T5688] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 272.082698][ T8289] random: crng reseeded on system resumption [ 272.143672][ T5688] usb 5-1: Using ep0 maxpacket: 32 [ 272.511685][ T5688] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 272.536792][ T5688] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 272.550624][ T5688] usb 5-1: config 0 has no interface number 0 [ 272.570098][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.583254][ T5688] usb 5-1: Product: syz [ 272.591572][ T5688] usb 5-1: Manufacturer: syz [ 272.602891][ T5688] usb 5-1: SerialNumber: syz [ 272.612404][ T5688] usb 5-1: config 0 descriptor?? [ 272.714143][ T8292] jffs2: notice: (8292) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 272.734908][ T30] audit: type=1400 audit(1786878151.318:1062): avc: denied { mount } for pid=8291 comm="syz.1.709" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 272.756855][ T30] audit: type=1400 audit(1786878151.318:1063): avc: denied { write } for pid=8291 comm="syz.1.709" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 273.095459][ T8299] tc action pedit offset must be on 32 bit boundaries [ 273.411625][ T30] audit: type=1400 audit(1786878151.988:1064): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 273.997766][ T5688] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM is busy [ 274.536771][ T5688] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 274.549330][ T5688] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 274.569493][ T5688] usb 5-1: USB disconnect, device number 28 [ 275.019389][ T5696] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 275.654492][ T5696] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 275.688857][ T5696] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 275.705520][ T5696] usb 3-1: config 0 has no interface number 0 [ 275.720852][ T30] audit: type=1400 audit(1786878154.298:1065): avc: denied { map } for pid=8333 comm="syz.3.724" path="socket:[20740]" dev="sockfs" ino=20740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 275.725271][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.754730][ T5696] usb 3-1: Product: syz [ 275.757224][ T30] audit: type=1400 audit(1786878154.338:1066): avc: denied { ioctl } for pid=8331 comm="syz.4.723" path="socket:[20741]" dev="sockfs" ino=20741 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 275.760734][ T5696] usb 3-1: Manufacturer: syz [ 275.790170][ T5696] usb 3-1: SerialNumber: syz [ 275.824779][ T5696] usb 3-1: config 0 descriptor?? [ 275.827075][ T8334] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 275.841832][ T5696] usb 3-1: selecting invalid altsetting 1 [ 275.848657][ T5696] dvb_ttusb_budget: ttusb_init_controller: error [ 275.861487][ T5696] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 275.873672][ T8334] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 276.045627][ T5696] DVB: Unable to find symbol stv0299_attach() [ 276.432521][ T5696] DVB: Unable to find symbol tda8083_attach() [ 276.440132][ T5696] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 276.490381][ T5696] usb 3-1: USB disconnect, device number 29 [ 278.222004][ T5696] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 279.333108][ T8376] netlink: 16 bytes leftover after parsing attributes in process `syz.0.735'. [ 279.502915][ T5696] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 279.599016][ T30] audit: type=1400 audit(1786878158.178:1067): avc: denied { shutdown } for pid=8377 comm="syz.2.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 279.599903][ T5696] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.691500][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.807854][ T30] audit: type=1400 audit(1786878158.378:1068): avc: denied { read } for pid=8381 comm="syz.4.740" name="nullb" dev="configfs" ino=3376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 279.877841][ T5696] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 280.102322][ T30] audit: type=1400 audit(1786878158.378:1069): avc: denied { read open } for pid=8381 comm="syz.4.740" path="/147/my_configfs/nullb" dev="configfs" ino=3376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 280.142533][ T5696] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 280.252868][ T5696] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 280.452770][ T30] audit: type=1400 audit(1786878158.378:1070): avc: denied { write } for pid=8381 comm="syz.4.740" name="nullb" dev="configfs" ino=3376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 280.596469][ T5696] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 280.632224][ T5696] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 280.676903][ T30] audit: type=1400 audit(1786878158.378:1071): avc: denied { write } for pid=8381 comm="syz.4.740" name="nullb" dev="configfs" ino=3376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 280.716386][ T5696] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 280.755199][ T5696] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 280.784235][ T5696] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 280.792503][ T30] audit: type=1400 audit(1786878158.378:1072): avc: denied { remove_name } for pid=8381 comm="syz.4.740" name="nullb1" dev="configfs" ino=19970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 280.908837][ T5688] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 280.929195][ T5696] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 281.012870][ T30] audit: type=1400 audit(1786878158.378:1073): avc: denied { rmdir } for pid=8381 comm="syz.4.740" name="nullb1" dev="configfs" ino=19970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 281.103831][ T5696] usb 2-1: USB disconnect, device number 25 [ 281.126597][ T5688] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 281.222697][ T5688] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 281.245336][ T5696] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 281.268851][ T5688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.295989][ T5696] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 281.315214][ T5688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.327580][ T5696] keyspan 2-1:1.0: device disconnected [ 281.340950][ T5688] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 281.368008][ T5688] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 281.376721][ T5688] usb 3-1: Manufacturer: syz [ 281.391936][ T5688] usb 3-1: config 0 descriptor?? [ 281.645153][ T8409] netlink: 64 bytes leftover after parsing attributes in process `syz.3.748'. [ 281.677969][ T8409] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 281.694474][ T8409] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 281.729237][ T8411] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 281.740298][ T8411] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 281.749916][ T8411] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 281.757577][ T8411] UDF-fs: Scanning with blocksize 512 failed [ 281.764698][ T8411] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 281.774449][ T8411] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 281.785393][ T8411] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 281.793059][ T8411] UDF-fs: Scanning with blocksize 1024 failed [ 281.799818][ T8411] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 281.809474][ T8411] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 281.819036][ T8411] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 281.826674][ T8411] UDF-fs: Scanning with blocksize 2048 failed [ 281.833201][ T8411] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 281.843450][ T8411] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 281.853430][ T8411] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 281.861076][ T8411] UDF-fs: Scanning with blocksize 4096 failed [ 281.867153][ T8411] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 281.934342][ T8409] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 282.015062][ T5688] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 282.255662][ T8409] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 282.275339][ T8409] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 282.307650][ T5688] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 283.858266][ T187] usb 3-1: USB disconnect, device number 30 [ 283.890764][ T30] audit: type=1400 audit(1786878162.468:1074): avc: denied { write } for pid=8417 comm="syz.3.750" name="uncompressed" dev="configfs" ino=11099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 283.929887][ T8418] [ 283.932217][ T8418] ====================================================== [ 283.939204][ T8418] WARNING: possible circular locking dependency detected [ 283.946193][ T8418] syzkaller #0 Tainted: G L [ 283.952138][ T8418] ------------------------------------------------------ [ 283.959121][ T8418] syz.3.750/8418 is trying to acquire lock: [ 283.964986][ T8418] ffffffff903ca328 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 283.976391][ T8418] [ 283.976391][ T8418] but task is already holding lock: [ 283.983732][ T8418] ffff888029b84f70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 283.993029][ T8418] [ 283.993029][ T8418] which lock already depends on the new lock. [ 283.993029][ T8418] [ 284.003418][ T8418] [ 284.003418][ T8418] the existing dependency chain (in reverse order) is: [ 284.012408][ T8418] [ 284.012408][ T8418] -> #3 (&p->frag_sem){++++}-{4:4}: [ 284.019784][ T8418] lock_acquire+0x1b9/0x370 [ 284.024794][ T8418] down_write_killable+0x93/0x250 [ 284.030327][ T8418] configfs_rmdir+0x3fa/0x950 [ 284.035511][ T8418] vfs_rmdir+0x328/0x8a0 [ 284.040259][ T8418] filename_rmdir+0x31a/0x5c0 [ 284.045435][ T8418] __x64_sys_unlinkat+0xf5/0x130 [ 284.050874][ T8418] do_syscall_64+0x115/0x870 [ 284.055963][ T8418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.062356][ T8418] [ 284.062356][ T8418] -> #2 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 284.071026][ T8418] lock_acquire+0x1b9/0x370 [ 284.076032][ T8418] down_write+0x8b/0x1f0 [ 284.080778][ T8418] configfs_depend_item_unlocked+0xf3/0x6a0 [ 284.087176][ T8418] usbg_make_tpg+0x261/0x620 [ 284.092269][ T8418] target_fabric_make_tpg+0xab/0x8c0 [ 284.098058][ T8418] configfs_mkdir+0x51e/0xb70 [ 284.103244][ T8418] vfs_mkdir+0x361/0x850 [ 284.107997][ T8418] filename_mkdirat+0x48b/0x5e0 [ 284.113350][ T8418] __x64_sys_mkdir+0x6b/0x90 [ 284.118447][ T8418] do_syscall_64+0x115/0x870 [ 284.123554][ T8418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.129948][ T8418] [ 284.129948][ T8418] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 284.137569][ T8418] lock_acquire+0x1b9/0x370 [ 284.142593][ T8418] __mutex_lock+0x1a4/0x1bd0 [ 284.147685][ T8418] tcm_set_name+0x29/0xb0 [ 284.152514][ T8418] function_make+0x21c/0x3f0 [ 284.157618][ T8418] configfs_mkdir+0x51e/0xb70 [ 284.162803][ T8418] vfs_mkdir+0x361/0x850 [ 284.167554][ T8418] filename_mkdirat+0x48b/0x5e0 [ 284.172903][ T8418] __x64_sys_mkdir+0x6b/0x90 [ 284.178006][ T8418] do_syscall_64+0x115/0x870 [ 284.183099][ T8418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.189498][ T8418] [ 284.189498][ T8418] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 284.197725][ T8418] check_prev_add+0xeb/0xe60 [ 284.202817][ T8418] __lock_acquire+0x136c/0x1a40 [ 284.208170][ T8418] lock_acquire+0x1b9/0x370 [ 284.213175][ T8418] __mutex_lock+0x1a4/0x1bd0 [ 284.218273][ T8418] uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 284.225101][ T8418] configfs_write_iter+0x302/0x4e0 [ 284.230727][ T8418] vfs_write+0x6ac/0x1050 [ 284.235555][ T8418] ksys_write+0x12a/0x250 [ 284.240380][ T8418] do_syscall_64+0x115/0x870 [ 284.245480][ T8418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.251872][ T8418] [ 284.251872][ T8418] other info that might help us debug this: [ 284.251872][ T8418] [ 284.262073][ T8418] Chain exists of: [ 284.262073][ T8418] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#26 --> &p->frag_sem [ 284.262073][ T8418] [ 284.276478][ T8418] Possible unsafe locking scenario: [ 284.276478][ T8418] [ 284.283902][ T8418] CPU0 CPU1 [ 284.289241][ T8418] ---- ---- [ 284.294579][ T8418] rlock(&p->frag_sem); [ 284.298806][ T8418] lock(&sb->s_type->i_mutex_key#26); [ 284.306787][ T8418] lock(&p->frag_sem); [ 284.313450][ T8418] lock(gadget_subsys.su_mutex); [ 284.318454][ T8418] [ 284.318454][ T8418] *** DEADLOCK *** [ 284.318454][ T8418] [ 284.326586][ T8418] 4 locks held by syz.3.750/8418: [ 284.331583][ T8418] #0: ffff8880763895f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 284.340615][ T8418] #1: ffff88801ef18450 (sb_writers#16){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 284.349641][ T8418] #2: ffff88802b943280 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 284.359449][ T8418] #3: ffff888029b84f70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 284.369169][ T8418] [ 284.369169][ T8418] stack backtrace: [ 284.375036][ T8418] CPU: 0 UID: 0 PID: 8418 Comm: syz.3.750 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.375056][ T8418] Tainted: [L]=SOFTLOCKUP [ 284.375061][ T8418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 284.375070][ T8418] Call Trace: [ 284.375077][ T8418] [ 284.375082][ T8418] dump_stack_lvl+0x100/0x190 [ 284.375100][ T8418] print_circular_bug.cold+0x178/0x1c7 [ 284.375123][ T8418] check_noncircular+0x146/0x160 [ 284.375143][ T8418] check_prev_add+0xeb/0xe60 [ 284.375159][ T8418] __lock_acquire+0x136c/0x1a40 [ 284.375179][ T8418] lock_acquire+0x1b9/0x370 [ 284.375195][ T8418] ? uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 284.375216][ T8418] ? __pfx___might_resched+0x10/0x10 [ 284.375235][ T8418] __mutex_lock+0x1a4/0x1bd0 [ 284.375252][ T8418] ? uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 284.375271][ T8418] ? uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 284.375291][ T8418] ? __pfx___mutex_lock+0x10/0x10 [ 284.375307][ T8418] ? find_held_lock+0x2b/0x80 [ 284.375319][ T8418] ? __might_fault+0xc5/0x140 [ 284.375333][ T8418] ? __might_fault+0xc5/0x140 [ 284.375350][ T8418] ? uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 284.375369][ T8418] uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 284.375388][ T8418] ? __pfx_uvcg_frame_dw_frame_interval_store+0x10/0x10 [ 284.375409][ T8418] ? configfs_write_iter+0x388/0x4e0 [ 284.375427][ T8418] configfs_write_iter+0x302/0x4e0 [ 284.375444][ T8418] vfs_write+0x6ac/0x1050 [ 284.375457][ T8418] ? __pfx_configfs_write_iter+0x10/0x10 [ 284.375474][ T8418] ? __pfx_vfs_write+0x10/0x10 [ 284.375491][ T8418] ksys_write+0x12a/0x250 [ 284.375503][ T8418] ? __pfx_ksys_write+0x10/0x10 [ 284.375517][ T8418] do_syscall_64+0x115/0x870 [ 284.375532][ T8418] ? clear_bhb_loop+0x70/0xc0 [ 284.375548][ T8418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.375562][ T8418] RIP: 0033:0x7fcbceb9e0d9 [ 284.375574][ T8418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.375588][ T8418] RSP: 002b:00007fcbcfb0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 284.375601][ T8418] RAX: ffffffffffffffda RBX: 00007fcbcee25fa0 RCX: 00007fcbceb9e0d9 [ 284.375610][ T8418] RDX: 0000000000000023 RSI: 0000200000000a00 RDI: 0000000000000003 [ 284.375618][ T8418] RBP: 00007fcbcec35024 R08: 0000000000000000 R09: 0000000000000000 [ 284.375627][ T8418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.375635][ T8418] R13: 00007fcbcee26038 R14: 00007fcbcee25fa0 R15: 00007ffccdb1c668 [ 284.375648][ T8418] [ 284.637010][ T8420] syzkaller0: entered promiscuous mode [ 284.642478][ T8420] syzkaller0: entered allmulticast mode [ 285.160212][ T8415] fido_id[8415]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 285.412213][ T30] audit: type=1400 audit(1786878162.508:1075): avc: denied { write } for pid=8417 comm="syz.3.750" name="u" dev="configfs" ino=20950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1