last executing test programs: 8.447436815s ago: executing program 2 (id=383): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x397c) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0', 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 8.3255583s ago: executing program 1 (id=384): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) syz_emit_ethernet(0x56, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() openat$comedi(0xffffffffffffff9c, 0x0, 0x202, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x2000000d, 0x0, 0x0, 0x51, 0x0, 0x4, 0x2000000, 0xffffffffffff2190, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x0, 0x8000000000000001, 0x1fff, 0xffffffffffffff7c, 0x4, 0x0, 0x1, 0x0, 0x3, 0x1ff, 0x18ab}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mmap(&(0x7f0000728000/0x1000)=nil, 0x1000, 0x5, 0x12, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(r4) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x2710, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x11, @loopback, 0x2710, 0x0, 'rr\x00'}, {@loopback=0x7f000002, 0x4e20, 0x0, 0x1}}, 0x44) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x7530, @loopback=0x7f000003}, 0x10) connect$inet(r5, &(0x7f0000000210)={0x2, 0x2710, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000000220)='hello', 0x5, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r6, &(0x7f0000000300)="450000380000000040017cc07f0000027f000003030339a4000000004500001c0000000040117ccc7f0000037f00000275304e20000800", 0x37, 0x24000000, &(0x7f0000000400)={0x2, 0x0, @empty}, 0x10) 8.268094592s ago: executing program 3 (id=385): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) syz_emit_ethernet(0x56, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() openat$comedi(0xffffffffffffff9c, 0x0, 0x202, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x2000000d, 0x0, 0x0, 0x51, 0x0, 0x4, 0x2000000, 0xffffffffffff2190, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x0, 0x8000000000000001, 0x1fff, 0xffffffffffffff7c, 0x4, 0x0, 0x1, 0x0, 0x3, 0x1ff, 0x18ab}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mmap(&(0x7f0000728000/0x1000)=nil, 0x1000, 0x5, 0x12, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(r4) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x2710, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x11, @loopback, 0x2710, 0x0, 'rr\x00'}, {@loopback=0x7f000002, 0x4e20, 0x0, 0x1}}, 0x44) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x7530, @loopback=0x7f000003}, 0x10) connect$inet(r5, &(0x7f0000000210)={0x2, 0x2710, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000000220)='hello', 0x5, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r6, &(0x7f0000000300)="450000380000000040017cc07f0000027f000003030339a4000000004500001c0000000040117ccc7f0000037f00000275304e20000800", 0x37, 0x24000000, &(0x7f0000000400)={0x2, 0x0, @empty}, 0x10) 7.103189358s ago: executing program 1 (id=386): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}]}}]}, 0x40}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES8=r2], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000300)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e20, 0xfac, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x100, @void}, "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"}}}}, 0xfce) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r8, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8c, 0x74}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}]}, 0x30}}, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1e, 0x1, 0x0) connect$tipc(r10, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r10, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000500)=""/27, 0x1b}, 0x8000}], 0x1, 0x2102, 0x0) write$binfmt_misc(r10, &(0x7f0000000340), 0x2000011a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000380)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 6.933844597s ago: executing program 2 (id=387): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000300)="12345678", 0x8, 0x0, &(0x7f0000000400)={0x2, 0x1234, @loopback}, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x5, &(0x7f0000000300)='|', 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000197305e07af0300000000000000", @ANYBLOB="04"], 0x1c}], 0x1}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 5.957858263s ago: executing program 3 (id=388): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x510, 0x1b8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x440, 0xffffffff, 0xffffffff, 0x440, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x190, 0x1b8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xff000000], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xff0000ff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x570) 5.349453449s ago: executing program 0 (id=390): syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 5.34876251s ago: executing program 3 (id=391): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) mremap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0xe3a6d00, 0x0, 0xdf49e1ea4be316f7, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000019280)='net/kcm\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000100)='pagemap\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000019200)={0xb, 0x1, 0x2, 0x0, 0xf}) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f00000007c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x11c) writev(r4, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) pread64(r3, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES8=r4], 0x38}, 0x1, 0x0, 0x0, 0x8815}, 0x800c000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000193c0)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmmsg$inet6(r6, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000019380)=[{&(0x7f0000019240)="d95b2bb483f855fff4ed91", 0xb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='\x00', 0x1}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x11, r5, 0x397f2000) io_setup(0x1, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, 0x0) 5.287927173s ago: executing program 2 (id=392): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5.204644824s ago: executing program 1 (id=393): r0 = socket$packet(0x11, 0x2, 0x300) shutdown(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x0, &(0x7f0000001080)) keyctl$KEYCTL_MOVE(0x3, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES64=r3, @ANYRES8=r5], 0x6c}}, 0x20000080) clock_gettime(0x4, &(0x7f00000001c0)={0x0, 0x0}) io_getevents(0x0, 0x8, 0x2, &(0x7f0000000180)=[{}, {}], &(0x7f0000000280)={r6, r7+10000000}) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) mount$tmpfs(0x0, &(0x7f0000005dc0)='.\x00', 0x0, 0x1000000, &(0x7f0000005e40)) 5.08253212s ago: executing program 0 (id=394): r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x0) 4.519006711s ago: executing program 0 (id=395): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80441, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) 4.379229886s ago: executing program 0 (id=396): openat$ptmx(0xffffffffffffff9c, 0x0, 0x28100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioprio_set$pid(0x2, 0x0, 0x2000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x84242, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1, 0x3, 0x4, {0x1, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x2, 0x7}}, {0x0, 0x13}}}, 0xa0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8800000010000d040400fdf20000000000000000", @ANYRES32=0x0, @ANYBLOB="0010000019500000540012800c0001006d6163766c616e0044000280080009000800000008000700d1ae0000080001000200000008000300020000000800010002000000080007000600000008000700060000000600020001000000140035006d6163766c616e30"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='vegas', 0x5) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000080)={0x0, 'batadv0\x00', {0x5}}) 4.330432673s ago: executing program 2 (id=397): openat$sndseq(0xffffffffffffff9c, 0x0, 0x400800) syz_open_dev$video4linux(0x0, 0x5, 0x40) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setgroups(0x0, 0x0) setgroups(0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0xffffffd3) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 3.512474219s ago: executing program 1 (id=398): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="780200003f61391a223b364df4ba61eb7e9585ec8f0b4e285d141cfec6976424d60f1b2db3f17e2f4b9369479cf3b95c4829a208f7091b0e1dbd1a025358876f5c753b84298d026efaa537daccc42eceb552575ff12affdfeb957d4dc498cc21d0b3002f208911658352437e9871ae788f4038e8c2832aeda22e838f0dc3586df0139f1d3c0d1fb942fec3be", @ANYRES64, @ANYBLOB="01000000000000000000010000000000000007410013c4daaf180000009495c64d2b1ecc910000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055baeee9cbaa507a49b01cf230c41fdb87"], 0x68}}, 0x0) r1 = fsopen(&(0x7f0000001080)='hugetlbfs\x00', 0x0) fcntl$dupfd(r1, 0x0, r1) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 1.901042108s ago: executing program 4 (id=399): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0xfffe}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 1.734751466s ago: executing program 4 (id=400): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x19, 0xd4a, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x0, 0x5, 0x500}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x2, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0xc}]}}}]}, 0x3c}}, 0x404c840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r3, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) 1.705567964s ago: executing program 3 (id=401): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x8, 0x100, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)) syz_open_dev$ublk_chdev(0x0, r7, 0x2) r8 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) read$FUSE(r0, &(0x7f0000002040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc2) ptrace$getenv(0x4201, r9, 0x1, &(0x7f0000004080)) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_pidfd_open(0x0, 0x0) wait4(0x0, 0x0, 0x2, 0x0) ptrace$peekuser(0x3, 0x0, 0x81) lseek(r10, 0x851, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write$binfmt_register(r11, &(0x7f0000000200)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x8, 0x3a, '\x00', 0x3a, '\x00', 0x3a, './sys/class/net/bonding_masters'}, 0x41) 1.623162171s ago: executing program 2 (id=402): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) (async) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r1 = socket$unix(0x1, 0x5, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, 0x0, 0x3e}, 0x80, 0x0}, 0x60000084) (async) sendmmsg(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 1.566566949s ago: executing program 4 (id=403): r0 = syz_open_dev$vim2m(&(0x7f0000000480), 0x200000001003, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a80)=@newlink={0x44, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x51042}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000380)={0x0, 0x1, @stop_pts=0x8}) 1.436650464s ago: executing program 4 (id=404): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x74}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x1, 0x0, 0x0, 0x0, "f21a810183bdfbff"}}, 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) 1.307388854s ago: executing program 4 (id=405): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2) r1 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x8d12, 0x80, 0x3, 0x4}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x6516, 0x6d93, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000200)={0x1, 0xffffffffffffffff, 0x20, {0x7, 0x7}, 0xb}, 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8500, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000080)="650fbae8e0b9a20a00000f8dc744240000380000c744240200000000c7442406000000000f011c240f01cbb9800000c00f3235000100000f300f3266b821008ed80f78b1fc3700000f01cac4e17c29b10f000000", 0x54}], 0x1, 0x91, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0xd18, 0x5, 0x0, 0xfffffffffffffffb, 0x1000007ff, 0x9]}, &(0x7f0000000080)=0x78) unshare(0x2c020400) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010000000000000400000000000000000000000000000000000008c9000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r13 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r13, 0x808c563d, &(0x7f0000000380)) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x141800, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r6, &(0x7f0000000240)='1', 0x1) 1.154524387s ago: executing program 1 (id=406): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af25, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() openat$comedi(0xffffffffffffff9c, 0x0, 0x202, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x2000000d, 0x0, 0x0, 0x51, 0x0, 0x4, 0x2000000, 0xffffffffffff2190, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x0, 0x8000000000000001, 0x1fff, 0xffffffffffffff7c, 0x4, 0x0, 0x1, 0x0, 0x3, 0x1ff, 0x18ab}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mmap(&(0x7f0000728000/0x1000)=nil, 0x1000, 0x5, 0x12, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(r4) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x2710, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x11, @loopback, 0x2710, 0x0, 'rr\x00'}, {@loopback=0x7f000002, 0x4e20, 0x0, 0x1}}, 0x44) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x7530, @loopback=0x7f000003}, 0x10) connect$inet(r5, &(0x7f0000000210)={0x2, 0x2710, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000000220)='hello', 0x5, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r6, &(0x7f0000000300)="450000380000000040017cc07f0000027f000003030339a4000000004500001c0000000040117ccc7f0000037f00000275304e20000800", 0x37, 0x24000000, &(0x7f0000000400)={0x2, 0x0, @empty}, 0x10) 1.130096921s ago: executing program 0 (id=407): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) write$mtd(r2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002840), 0x0, &(0x7f0000002900)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x92, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @local]}, @noop, @lsrr={0x83, 0xf, 0xd4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @broadcast]}, @end, @noop, @timestamp_prespec={0x44, 0xc, 0x90, 0x3, 0x7, [{@empty, 0x7}]}]}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@noop, @end, @end, @timestamp={0x44, 0x18, 0x11, 0x0, 0x0, [0x5, 0xb, 0x5, 0x1ac, 0x1ff]}, @rr={0x7, 0x17, 0x7c, [@rand_addr=0x64010102, @multicast1, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x2b, 0x5b, [@dev={0xac, 0x14, 0x14, 0x42}, @broadcast, @empty, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x44}, @empty, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast2, @broadcast]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@cipso={0x86, 0x37, 0x3, [{0x6, 0xa, "11f97ab53428b0e0"}, {0x2, 0x11, "dae3e5a591259dcce24e0c01f668e6"}, {0x5, 0x5, "70e33e"}, {0x6, 0xf, "01cdbe0030c2c048e877ee6353"}, {0x5, 0x2}]}, @ssrr={0x89, 0x13, 0x4d, [@dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010101, @private=0xa010102, @multicast2]}, @noop, @ssrr={0x89, 0x17, 0x8a, [@broadcast, @multicast1, @local, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @ssrr={0x89, 0x13, 0x1d, [@broadcast, @empty, @broadcast, @empty]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x11, 0x0, 0x6, [0x9, 0x2]}, @timestamp={0x44, 0x8, 0xe1, 0x0, 0x9, [0x4]}, @end, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x1a8}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002ac0)="6ce636b41332502fda7c0ffc76c4f574357dba5d2b2dfa5c7ec0e20395b0ce8bb4be48c86e09224dbbd6b68454577a943853367c56ad277f71085c111ef82f2c3d0ffd7a588ed83e2f5467375f5349f7aecb3313d385ad47561a4b8f1127445fad4b462fa4936b7944c190ccbe5c6f5130c93d95a413d81ab6e253dc7606013275125c68b90e56a7ac8aeace50a439967a93711a36de5988bdbd02b73965", 0x9e}, {&(0x7f0000002b80)="70c17b3b079052cd887b8c0936f62fd4d435a8852fbbfd2bb9a4f6fec1439676f8d1d34647d83a9864af58246d12b60707b056f17bb0adad18f41c23e9b37789585836f57a94bfe6cac206840058c7a9a937adb4de8a6c77502fdb50e8bf5e32c576db682235", 0x66}, {&(0x7f0000002c00)="2f1398ea97c329b89afe7808fb29e7605b9b339c7713c9697f63", 0x1a}, {&(0x7f0000002c40)="82bbf7b10d6bc4d02adbd536013ee5c018830758984053a7ba8b15d1f2e82fd9fdc01d674e048610c191d2357fb98e4e6cbeae923104d4c679e901c72463e1d13592d158dd83a322a533f3f87e899a52e53539af67af1e89f2dc3309110ecd491fde58bad74987007be7aa3b0c48d88280f3d46888a9338adf279f303efc84ea5a7e25a4fec904d9d753ade0a5ba4777fea65f4f6a8dd7f5f65f97947d90fc1d1e511e95cd7687f673d5", 0xaa}, {&(0x7f0000002d00)="6dbc4ee9928a2f794a65cc7cf17b4ae9b335743456cf9176b50252f067f7a7649708ce1a9f02de09800945e6a632bdb4a9b5fddd1de507c03d49073da74ed2eb930c13854bb6cc3aa816fccab35b610aa95bb3e834839d123e289ad5a2eab191c6b9b93d8163571731acccef3dd68d8d1f3ec68dd1527b4895c3e9", 0x7b}, {&(0x7f0000002d80)}, {&(0x7f0000002dc0)="8a2e622f2bfeb4cd62257da8c78648b20abe29e9cdab08f6f949fbf7a35ff2515e", 0x21}, {&(0x7f0000002e00)="74d5ed8d512ed7647cbb6787ace80ebbecbe03be2ab3c14612b060bf354cba283b6ad9cf79b43d8ae524939a2016b1d45b0cc8dcf32b38aa5bb204c3a9cb4175c9b4b5260e6386229add843826c0bcbf372b0ec6fd4825c09d2d39906917d301a4fa0cd377b96b863184ae89c463fa737d597f1d83fb460f629681c70cbe31f25981cbdb41e8b8602873e36b275a9ca31b8ee83f763819badcda42e364b32896c2dc068281e07d36782219336c46abeafb0ff0a7bacc04d163b2528659096001289fc0fbf1a0242dfa20a70c5a79a008436adb178a7476987584416baaab3edd002ecc3155211ca30b00c4a1565c6e7c5e3f969f64", 0xf5}], 0x8, &(0x7f0000002f80)}}], 0x5, 0x240080e4) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) listen(r0, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000580)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec", 0x20}], 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x8, 0x100}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'nq\x00', 0x6, 0x5, 0x2d}, 0x2c) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee9, 0x48033, 0xffffffffffffffff, 0x1b5cb000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x16) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r7, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000000)={0x600, 0x20000}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012dbd7000fedbdf25010000000e0001006e050064657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) 468.499941ms ago: executing program 3 (id=408): r0 = socket$rds(0x15, 0x5, 0x0) (async) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async) accept4(r1, 0x0, 0x0, 0x800) (async) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(cast6-generic)\x00'}, 0x58) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x2) (rerun: 64) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40) (async) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271b, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 246.109855ms ago: executing program 3 (id=409): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4008005}, 0x24004000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002a80)={0x1, 0x0, [{0x0, 0x106, &(0x7f0000002700)=""/262}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/96}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 229.454243ms ago: executing program 2 (id=410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) epoll_create1(0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xc800, 0x0) socket(0x1e, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) shutdown(0xffffffffffffffff, 0x1) 143.445573ms ago: executing program 1 (id=411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000640)={0x81, 0x0, 0x5}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)={0x1, 0x0, @auto=[0x36, 0x2e, 0x2c, 0x26]}, 0xc, 0xfffffffffffffffd) r6 = syz_io_uring_complete(0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x9f) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x2000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgrcv(0x0, 0x0, 0x8, 0x0, 0x4800) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000015}, 0x8000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) 82.465782ms ago: executing program 0 (id=412): openat$sndseq(0xffffffffffffff9c, 0x0, 0x400800) syz_open_dev$video4linux(0x0, 0x5, 0x40) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setgroups(0x0, 0x0) setgroups(0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0xffffffd3) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 0s ago: executing program 4 (id=413): syz_usb_connect(0x1, 0x371, &(0x7f0000000280)=ANY=[], 0x0) (async) r0 = syz_usb_connect(0x1, 0x371, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000040)="b8", 0x1) syz_usb_disconnect(r0) pread64(r1, &(0x7f0000000080)=""/89, 0x59, 0x8) (async) pread64(r1, &(0x7f0000000080)=""/89, 0x59, 0x8) kernel console output (not intermixed with test programs): medi_parport [ 86.124872][ T6013] comedi: valid board names for comedi_test driver are: [ 86.150476][ T6013] comedi_test [ 86.162355][ T6013] comedi: valid board names for comedi_bond driver are: [ 86.179578][ T6013] comedi_bond [ 86.202761][ T6012] comedi: valid board names for 8255 driver are: [ 86.210128][ T6012] 8255 [ 86.213888][ T6012] comedi: valid board names for vmk80xx driver are: [ 86.230703][ T6012] vmk80xx [ 86.239633][ T6012] comedi: valid board names for usbduxsigma driver are: [ 86.249680][ T6012] usbduxsigma [ 86.253144][ T6012] comedi: valid board names for usbduxfast driver are: [ 86.260139][ T6012] usbduxfast [ 86.263955][ T6012] comedi: valid board names for usbdux driver are: [ 86.270617][ T6012] usbdux [ 86.274619][ T6012] comedi: valid board names for ni6501 driver are: [ 86.281312][ T6012] ni6501 [ 86.284387][ T6012] comedi: valid board names for dt9812 driver are: [ 86.290930][ T6012] dt9812 [ 86.296391][ T6012] comedi: valid board names for ni_labpc_cs driver are: [ 86.304240][ T6012] ni_labpc_cs [ 86.307769][ T6012] comedi: valid board names for ni_daq_700 driver are: [ 86.348898][ T6012] ni_daq_700 [ 86.353413][ T3096] usb 5-1: USB disconnect, device number 3 [ 86.357981][ T6012] comedi: valid board names for labpc_pci driver are: [ 86.393111][ T6012] labpc_pci [ 86.712366][ T6012] comedi: valid board names for adl_pci9118 driver are: [ 86.795466][ T6012] pci9118dg [ 86.827677][ T6012] pci9118hg [ 86.849350][ T6012] pci9118hr [ 86.871012][ T6012] comedi: valid board names for 8255_pci driver are: [ 86.894936][ T6012] 8255_pci [ 86.908245][ T6012] comedi: valid board names for s526 driver are: [ 86.986681][ T6012] s526 [ 86.993804][ T6012] comedi: valid board names for multiq3 driver are: [ 87.000596][ T6012] multiq3 [ 87.010321][ T6012] comedi: valid board names for pcmuio driver are: [ 87.017336][ T6012] pcmuio48 [ 87.020542][ T6012] pcmuio96 [ 87.023996][ T6012] comedi: valid board names for pcmmio driver are: [ 87.030887][ T6012] pcmmio [ 87.034230][ T6012] comedi: valid board names for pcmda12 driver are: [ 87.041017][ T6012] pcmda12 [ 87.048796][ T6012] comedi: valid board names for pcmad driver are: [ 87.063470][ T6012] pcmad12 [ 87.067831][ T6012] pcmad16 [ 87.070920][ T6012] comedi: valid board names for ni_labpc driver are: [ 87.078158][ T6012] lab-pc-1200 [ 87.081621][ T6012] lab-pc-1200ai [ 87.089049][ T6012] lab-pc+ [ 87.092138][ T6012] comedi: valid board names for atmio16 driver are: [ 87.106912][ T6012] atmio16 [ 87.131539][ T6012] atmio16d [ 87.151812][ T6012] comedi: valid board names for ni_at_ao driver are: [ 87.182152][ T6012] at-ao-6 [ 87.195899][ T6012] at-ao-10 [ 87.207299][ T6012] comedi: valid board names for ni_at_a2150 driver are: [ 87.226630][ T6012] ni_at_a2150 [ 87.230805][ T6067] ima: policy update failed [ 87.235447][ T6012] comedi: valid board names for adq12b driver are: [ 87.253004][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 87.260529][ T6012] adq12b [ 87.270360][ T6012] comedi: valid board names for mpc624 driver are: [ 87.296354][ T6012] mpc624 [ 87.306665][ T6012] comedi: valid board names for c6xdigio driver are: [ 87.325546][ T6012] c6xdigio [ 87.346626][ T6012] comedi: valid board names for aio_iiro_16 driver are: [ 87.387116][ T6012] aio_iiro_16 [ 87.406301][ T6012] comedi: valid board names for aio_aio12_8 driver are: [ 87.437070][ T6012] aio_aio12_8 [ 87.448405][ T6012] aio_ai12_8 [ 87.458003][ T6012] aio_ao12_4 [ 87.467533][ T6012] comedi: valid board names for fl512 driver are: [ 87.483306][ T6012] fl512 [ 87.489720][ T6012] comedi: valid board names for dmm32at driver are: [ 87.505691][ T6012] dmm32at [ 87.513022][ T6012] comedi: valid board names for dt282x driver are: [ 87.528261][ T6012] dt2821 [ 87.534942][ T6012] dt2821-f [ 87.542389][ T6012] dt2821-g [ 87.549567][ T6012] dt2823 [ 87.557451][ T6012] dt2824-pgh [ 87.561622][ T6012] dt2824-pgl [ 87.566084][ T6012] dt2825 [ 87.570593][ T6012] dt2827 [ 87.573804][ T6012] dt2828 [ 87.578142][ T6012] dt2829 [ 87.581209][ T6012] dt21-ez [ 87.584484][ T6012] dt23-ez [ 87.587608][ T6012] dt24-ez [ 87.590791][ T6012] dt24-ez-pgl [ 87.594544][ T6012] comedi: valid board names for dt2817 driver are: [ 87.598614][ T6044] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 87.601465][ T6012] dt2817 [ 87.610476][ T6044] nci: nci_start_poll: failed to set local general bytes [ 87.621425][ T6012] comedi: valid board names for dt2815 driver are: [ 87.623614][ T10] usb 4-1: USB disconnect, device number 4 [ 87.628442][ T6012] dt2815 [ 87.638238][ T6012] comedi: valid board names for dt2814 driver are: [ 87.645254][ T6012] dt2814 [ 87.648919][ T6012] comedi: valid board names for dt2811 driver are: [ 87.649450][ T6033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 87.665784][ T6012] dt2811-pgh [ 87.670514][ T6012] dt2811-pgl [ 87.674307][ T6012] comedi: valid board names for dt2801 driver are: [ 87.688084][ T6012] dt2801 [ 87.702852][ T6012] comedi: valid board names for das6402 driver are: [ 87.714162][ T6012] das6402-12 [ 87.745653][ T6012] das6402-16 [ 87.749346][ T6012] comedi: valid board names for das1800 driver are: [ 87.757376][ T6012] das-1701st [ 87.760893][ T6012] das-1701st-da [ 87.769440][ T6012] das-1702st [ 87.785422][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 87.785434][ T30] audit: type=1400 audit(1787100636.840:314): avc: denied { setopt } for pid=6073 comm="syz.0.87" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.790256][ T6012] das-1702st-da [ 87.819341][ T6012] das-1702hr [ 87.824422][ T6012] das-1702hr-da [ 87.828747][ T6012] das-1701ao [ 87.832427][ T6012] das-1702ao [ 87.835933][ T6012] das-1801st [ 87.852313][ T6012] das-1801st-da [ 87.859060][ T6075] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 87.869640][ T6012] das-1802st [ 87.874105][ T6012] das-1802st-da [ 87.878397][ T6012] das-1802hr [ 87.884420][ T6012] das-1802hr-da [ 87.888150][ T6012] das-1801hc [ 87.891528][ T6012] das-1802hc [ 87.896159][ T6012] das-1801ao [ 87.903141][ T6012] das-1802ao [ 87.906602][ T6012] comedi: valid board names for das800 driver are: [ 87.913657][ T6012] das-800 [ 87.922348][ T6012] cio-das800 [ 87.925943][ T6012] das-801 [ 87.929281][ T6012] cio-das801 [ 87.932860][ T6012] das-802 [ 87.936008][ T6012] cio-das802 [ 87.939671][ T6012] cio-das802/16 [ 87.943665][ T6012] comedi: valid board names for isa-das08 driver are: [ 87.951077][ T6012] isa-das08 [ 87.954881][ T6012] das08-pgm [ 87.958224][ T6012] das08-pgh [ 87.962474][ T6012] das08-pgl [ 87.965964][ T6012] das08-aoh [ 87.969459][ T6012] das08-aol [ 87.973357][ T6012] das08-aom [ 88.002755][ T6012] das08/jr-ao [ 88.006661][ T6012] das08jr-16-ao [ 88.010495][ T6012] pc104-das08 [ 88.055413][ T6012] das08jr/16 [ 88.059185][ T6012] comedi: valid board names for das16m1 driver are: [ 88.068858][ T6012] das16m1 [ 88.072949][ T6012] comedi: valid board names for dac02 driver are: [ 88.081559][ T6012] dac02 [ 88.085368][ T6012] comedi: valid board names for rti802 driver are: [ 88.096311][ T6012] rti802 [ 88.100736][ T6012] comedi: valid board names for rti800 driver are: [ 88.108956][ T30] audit: type=1400 audit(1787100637.170:315): avc: denied { write } for pid=6076 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 88.108993][ T6012] rti800 [ 88.165349][ T6012] rti815 [ 88.168658][ T6012] comedi: valid board names for pcm3724 driver are: [ 88.189928][ T30] audit: type=1400 audit(1787100637.190:316): avc: denied { write } for pid=6076 comm="syz.1.89" name="kcm" dev="proc" ino=4026532929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 88.211369][ T6012] pcm3724 [ 88.221983][ T6012] comedi: valid board names for pcl818 driver are: [ 88.250563][ T6012] pcl818l [ 88.265629][ T6012] pcl818h [ 88.274538][ T6012] pcl818hd [ 88.281780][ T6012] pcl818hg [ 88.293589][ T6083] capability: warning: `syz.0.91' uses 32-bit capabilities (legacy support in use) [ 88.294098][ T6012] pcl818 [ 88.308129][ T6012] pcl718 [ 88.332322][ T6012] pcm3718 [ 88.337596][ T6012] comedi: valid board names for pcl816 driver are: [ 88.360074][ T6012] pcl816 [ 88.370069][ T6012] pcl814b [ 88.380842][ T6012] comedi: valid board names for pcl812 driver are: [ 88.414700][ T6012] pcl812 [ 88.427542][ T6012] pcl812pg [ 88.439832][ T6012] acl8112pg [ 88.468963][ T6012] acl8112dg [ 88.485566][ T6012] acl8112hg [ 88.498356][ T6012] a821pgl [ 88.501703][ T6012] a821pglnda [ 88.505824][ T6012] a821pgh [ 88.509130][ T6012] a822pgl [ 88.512995][ T6012] a822pgh [ 88.518211][ T6012] a823pgl [ 88.521841][ T6012] a823pgh [ 88.525916][ T6012] pcl813 [ 88.531523][ T6012] pcl813b [ 88.539026][ T6012] acl8113 [ 88.547274][ T6012] iso813 [ 88.554545][ T6012] acl8216 [ 88.565533][ T6012] a826pg [ 88.578408][ T6012] comedi: valid board names for pcl730 driver are: [ 88.593588][ T6012] pcl730 [ 88.601683][ T6012] iso730 [ 88.609308][ T6012] acl7130 [ 88.619337][ T6012] pcm3730 [ 88.623141][ T6012] pcl725 [ 88.628087][ T6012] p8r8dio [ 88.628953][ T30] audit: type=1400 audit(1787100637.670:317): avc: denied { mount } for pid=6086 comm="syz.4.93" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 88.634178][ T6012] acl7225b [ 88.666854][ T6012] p16r16dio [ 88.676805][ T6012] pcl733 [ 88.684291][ T6012] pcl734 [ 88.691762][ T6012] opmm-1616-xt [ 88.705386][ T6012] pearl-mm-p [ 88.706713][ T6092] syz.0.94 (6092): drop_caches: 1 [ 88.717649][ T6012] ir104-pbf [ 88.722308][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 88.723610][ T6012] comedi: valid board names for pcl726 driver are: [ 88.737436][ T6012] pcl726 [ 88.741692][ T6012] pcl727 [ 88.745719][ T6012] pcl728 [ 88.749041][ T6012] acl6126 [ 88.753062][ T6012] acl6128 [ 88.756404][ T6012] comedi: valid board names for pcl724 driver are: [ 88.764275][ T6012] pcl724 [ 88.767550][ T6012] pcl722 [ 88.770791][ T6012] pcl731 [ 88.776472][ T6012] acl7122 [ 88.779808][ T6012] acl7124 [ 88.783766][ T6012] pet48dio [ 88.787281][ T6012] pcmio48 [ 88.790596][ T6012] onyx-mm-dio [ 88.795899][ T6012] comedi: valid board names for pcl711 driver are: [ 88.810535][ T6012] pcl711 [ 88.814123][ T6012] pcl711b [ 88.819662][ T6012] acl8112hg [ 88.826428][ T6012] acl8112dg [ 88.834143][ T6012] comedi: valid board names for amplc_pc263 driver are: [ 88.839088][ T6092] syz.0.94 (6092): drop_caches: 1 [ 88.846896][ T6012] pc263 [ 88.849757][ T6012] comedi: valid board names for amplc_pc236 driver are: [ 88.850269][ T6100] jffs2: notice: (6100) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 88.856841][ T6012] pc36at [ 88.856851][ T6012] comedi: valid board names for amplc_dio200 driver are: [ 88.856859][ T6012] pc212e [ 88.856865][ T6012] pc214e [ 88.856872][ T6012] pc215e [ 88.856878][ T6012] pc218e [ 88.856884][ T6012] pc272e [ 88.856890][ T6012] comedi: valid board names for comedi_parport driver are: [ 88.856898][ T6012] comedi_parport [ 88.856905][ T6012] comedi: valid board names for comedi_test driver are: [ 88.856912][ T6012] comedi_test [ 88.856919][ T6012] comedi: valid board names for comedi_bond driver are: [ 88.856927][ T6012] comedi_bond [ 88.907187][ T10] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 88.957383][ T30] audit: type=1400 audit(1787100638.010:318): avc: denied { mount } for pid=6099 comm="syz.4.97" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 88.981166][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.014861][ T5331] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 89.025034][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 89.034113][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.046198][ T10] usb 4-1: config 0 descriptor?? [ 89.055305][ T10] gspca_main: spca561-2.14.0 probing abcd:cdee [ 89.102621][ T30] audit: type=1400 audit(1787100638.160:319): avc: denied { connect } for pid=6105 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.125295][ T30] audit: type=1400 audit(1787100638.180:320): avc: denied { getopt } for pid=6105 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.146366][ T5694] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.155399][ T30] audit: type=1400 audit(1787100638.210:321): avc: denied { name_bind } for pid=6105 comm="syz.0.99" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 89.175573][ T5331] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.188469][ T30] audit: type=1400 audit(1787100638.210:322): avc: denied { ioctl } for pid=6101 comm="syz.2.98" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.189426][ T5331] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 89.215834][ T30] audit: type=1400 audit(1787100638.240:323): avc: denied { name_connect } for pid=6105 comm="syz.0.99" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 89.224382][ T5695] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.274473][ T5331] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.288804][ T5331] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.310581][ T5331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.320879][ T5331] usb 2-1: Product: syz [ 89.327848][ T5331] usb 2-1: Manufacturer: syz [ 89.333538][ T5694] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 89.344242][ T10] spca561 4-1:0.0: probe with driver spca561 failed with error -22 [ 89.352875][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.364515][ T5331] usb 2-1: SerialNumber: syz [ 89.374611][ T10] usb 4-1: USB disconnect, device number 5 [ 89.386480][ T5331] usb 2-1: selecting invalid altsetting 1 [ 89.394527][ T5694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.407340][ T5331] usb 2-1: unit 6 not found! [ 89.416519][ T5694] usb 3-1: config 0 descriptor?? [ 89.463135][ T5695] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 89.478747][ T5695] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 89.488978][ T5695] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 89.501103][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.509546][ T5695] usb 5-1: Product: syz [ 89.513933][ T5695] usb 5-1: Manufacturer: syz [ 89.518544][ T5695] usb 5-1: SerialNumber: syz [ 89.530261][ T5695] etas_es58x 5-1:1.0: Starting syz syz (Serial Number syz) [ 89.638615][ T5694] usbhid 3-1:0.0: can't add hid device: -71 [ 89.644836][ T5694] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 89.656989][ T5694] usb 3-1: USB disconnect, device number 3 [ 89.766726][ T5695] etas_es58x 5-1:1.0: could not retrieve the product info string [ 89.805989][ T5695] usb 5-1: USB disconnect, device number 4 [ 89.813986][ T5695] etas_es58x 5-1:1.0: Disconnecting syz syz [ 89.998154][ T6098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.028509][ T6098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.692376][ T5711] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 90.693994][ T5331] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 90.733816][ T5331] usb 2-1: USB disconnect, device number 5 [ 90.859595][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.862336][ T5711] usb 4-1: Using ep0 maxpacket: 8 [ 90.924697][ T5711] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 90.957002][ T5711] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 90.990018][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.000699][ T5711] usb 4-1: Product: syz [ 91.007965][ T5711] usb 4-1: Manufacturer: ࠁ [ 91.020314][ T5711] usb 4-1: SerialNumber: syz [ 91.053783][ T6110] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 91.115788][ T6127] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 91.136585][ T6127] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 91.671303][ T6139] CUSE: info not properly terminated [ 92.432236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 92.492232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 92.502227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 92.552232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 92.612233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 92.672240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #106!!! [ 96.138508][ T5711] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 96.169284][ T5711] usb 4-1: MIDIStreaming interface descriptor not found [ 96.342313][ T5694] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 96.429048][ T6160] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 96.439335][ T6160] overlayfs: missing 'lowerdir' [ 96.550087][ T6160] netlink: 'syz.1.114': attribute type 10 has an invalid length. [ 96.581878][ T6160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.639315][ T6160] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 98.451026][ T5694] usb 1-1: device descriptor read/all, error -71 [ 98.466508][ T5711] usb 4-1: USB disconnect, device number 6 [ 98.500558][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 98.500571][ T30] audit: type=1400 audit(1787100647.520:349): avc: denied { kexec_image_load } for pid=6162 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 98.701488][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.045750][ T6177] bad cache= option: none_mlock 0 [ 99.045750][ T6177] nr_zspages 0 [ 99.045750][ T6177] nr_free_cma 0 [ 99.045750][ T6177] numa_hit 544238 [ 99.045750][ T6177] numa_miss 0 [ 99.045750][ T6177] numa_foreign 0 [ 99.045750][ T6177] numa_interleave 5821 [ 99.045750][ T6177] numa_local 541232 [ 99.045750][ T6177] numa_other 3006 [ 99.045750][ T6177] nr_inactive_anon 6 [ 99.045750][ T6177] nr_active_anon 18566 [ 99.045750][ T6177] nr_inactive_file 15915 [ 99.045750][ T6177] nr_active_file 25 [ 99.045750][ T6177] nr_unevictable 0 [ 99.045750][ T6177] nr_slab_reclaimable 11597 [ 99.045750][ T6177] nr_slab_unreclaimable 96432 [ 99.045750][ T6177] nr_isolated_anon 0 [ 99.045750][ T6177] nr_isolated_file 0 [ 99.045750][ T6177] workingset_nodes 0 [ 99.045750][ T6177] workingset_refault_anon 0 [ 99.045750][ T6177] workingset_refault_file 278 [ 99.045750][ T6177] workingset_activate_anon 0 [ 99.045750][ T6177] workingset_activate_file 0 [ 99.045750][ T6177] workingset_restore_anon 0 [ 99.045750][ T6177] workingset_restore_file 0 [ 99.045750][ T6177] workingset_nodereclaim 0 [ 99.045750][ T6177] nr_anon_pages 8298 [ 99.045750][ T6177] nr_mapped 32637 [ 99.045750][ T6177] nr_file_pages 26268 [ 99.045750][ T6177] nr_dirty 495 [ 99.045750][ T6177] nr_writeback 0 [ 99.045750][ T6177] nr_shmem 10332 [ 99.045750][ T6177] nr_shmem_hugepages 0 [ 99.045750][ T6177] nr_shmem_pmdmapped 0 [ 99.045750][ T6177] nr_file_hugepages 0 [ 99.045750][ T6177] nr_file_pmdmapped 0 [ 99.045750][ T6177] nr_anon_transparent_hugepages 0 [ 99.045750][ T6177] nr_vmscan_write 1 [ 99.045750][ T6177] nr_vmscan_immediate_reclaim 22 [ 99.045750][ T6177] nr_dirtied 6971 [ 99.045750][ T6177] nr_written 6476 [ 99.045750][ T6177] nr_throttled_written 314 [ 99.045750][ T6177] nr_kernel_misc_reclaimable 0 [ 99.045750][ T6177] nr_foll_pin_acquired 1 [ 99.045750][ T6177] nr_foll_pin_released 1 [ 99.045750][ T6177] nr_vmalloc 97344 [ 99.046159][ T6177] CIFS: VFS: bad cache= option: none_mlock 0 [ 99.046159][ T6177] nr_zspages 0 [ 99.046159][ T6177] nr_free_cma 0 [ 99.046159][ T6177] numa_hit 544238 [ 99.046159][ T6177] numa_miss 0 [ 99.046159][ T6177] numa_foreign 0 [ 99.046159][ T6177] numa_interleave 5821 [ 99.046159][ T6177] numa_local 541232 [ 99.046159][ T6177] numa_other 3006 [ 99.046159][ T6177] nr_inactive_anon 6 [ 99.046159][ T6177] nr_active_anon 18566 [ 99.046159][ T6177] nr_inactive_file 15915 [ 99.046159][ T6177] nr_active_file 25 [ 99.046159][ T6177] nr_unevictable 0 [ 99.046159][ T6177] nr_slab_reclaimable 11597 [ 99.046159][ T6177] nr_slab_unreclaimable 96432 [ 99.046159][ T6177] nr_isolated_anon 0 [ 99.046159][ T6177] nr_isolated_file 0 [ 99.046159][ T6177] workingset_nodes 0 [ 99.046159][ T6177] workingset_refault_anon 0 [ 99.046159][ T6177] workingset_refault_file 278 [ 99.046159][ T6177] workingset_activate_anon 0 [ 99.046159][ T6177] workingset_activate_file 0 [ 99.046159][ T6177] workingset_restore_anon 0 [ 99.046159][ T6177] workingset_restore_file 0 [ 99.046159][ T6177] workingset_nodereclaim 0 [ 99.046159][ T6177] nr_anon_pages 8298 [ 99.046159][ T6177] nr_mapped 32637 [ 99.046159][ T6177] nr_file_pages 26268 [ 99.046159][ T6177] nr_dirty 495 [ 99.046159][ T6177] nr_writeback 0 [ 99.046159][ T6177] nr_shmem 10332 [ 99.046159][ T6177] nr_shmem_hugepages 0 [ 99.046159][ T6177] nr_shmem_pmdmapped 0 [ 99.046159][ T6177] nr_file_hugepages 0 [ 99.046159][ T6177] nr_file_pmdmapped 0 [ 99.046159][ T6177] nr_anon_transparent_hugepages 0 [ 99.046159][ T6177] nr_vmscan_write 1 [ 99.046159][ T6177] nr_vmscan_immediate_reclaim 22 [ 99.046159][ T6177] nr_dirtied 6971 [ 99.046159][ T6177] nr_written 6476 [ 99.046159][ T6177] nr_throttled_written 314 [ 99.046159][ T6177] nr_kernel_misc_reclaimable 0 [ 99.046159][ T6177] nr_foll_pin_acquired 1 [ 99.046159][ T6177] nr_foll_pin_released 1 [ 99.046159][ T6177] nr_vmalloc 97344 [ 99.446297][ T6181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6181 comm=syz.2.113 [ 99.795205][ T30] audit: type=1400 audit(1787100648.850:350): avc: denied { mount } for pid=6187 comm="syz.3.119" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 99.855004][ T30] audit: type=1400 audit(1787100648.850:351): avc: denied { append } for pid=6187 comm="syz.3.119" name="sda" dev="devtmpfs" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.943769][ T3096] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.952516][ T30] audit: type=1400 audit(1787100649.000:352): avc: denied { block_suspend } for pid=6189 comm="syz.1.120" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.029019][ T30] audit: type=1400 audit(1787100649.060:353): avc: denied { map } for pid=6165 comm="syz.0.117" path="/dev/full" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 100.096558][ T30] audit: type=1326 audit(1787100649.130:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.121" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d40d9e0d9 code=0x7ffc0000 [ 100.123070][ T30] audit: type=1326 audit(1787100649.130:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.121" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d40d9e0d9 code=0x7ffc0000 [ 100.150579][ T30] audit: type=1326 audit(1787100649.150:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.121" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f5d40d9e0d9 code=0x7ffc0000 [ 100.178482][ T3096] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 100.195600][ T30] audit: type=1326 audit(1787100649.150:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.121" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d40d9e0d9 code=0x7ffc0000 [ 100.223310][ T6201] process 'syz.3.121' launched './file2' with NULL argv: empty string added [ 100.244836][ T3096] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.256617][ T3096] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.263766][ T6184] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 100.290974][ T3096] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.311591][ T30] audit: type=1326 audit(1787100649.150:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.121" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d40d9e0d9 code=0x7ffc0000 [ 100.339158][ T6184] SELinux: failed to load policy [ 100.349167][ T3096] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.384361][ T3096] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.483034][ T878] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 100.803544][ T5711] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.112293][ T878] usb 2-1: Using ep0 maxpacket: 16 [ 101.127476][ T5711] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 101.147221][ T878] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 101.165379][ T5711] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 101.191658][ T878] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.212368][ T5711] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.232325][ T878] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.255614][ T5711] usb 1-1: config 2 interface 0 has no altsetting 0 [ 101.265345][ T878] usb 2-1: config 0 interface 0 has no altsetting 0 [ 101.287409][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.297663][ T878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.318072][ T5711] usb 1-1: Product: syz [ 101.335120][ T5711] usb 1-1: Manufacturer: syz [ 101.343994][ T878] usb 2-1: config 0 descriptor?? [ 101.357632][ T5711] usb 1-1: SerialNumber: syz [ 101.590214][ T6168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.775137][ T5711] usb 1-1: USB disconnect, device number 5 [ 101.837294][ T878] mcp2221 0003:04D8:00DD.0003: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 101.886635][ T3096] [drm] Initialized gud 1.0.0 for 3-1:1.0 on minor 1 [ 102.043738][ T878] usb 2-1: USB disconnect, device number 6 [ 103.896763][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 103.896793][ T30] audit: type=1400 audit(1787100652.910:407): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 104.080803][ T30] audit: type=1400 audit(1787100653.090:408): avc: denied { unlink } for pid=6233 comm="syz.0.130" name="#1" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.088309][ T3096] Console: switching to colour frame buffer device 128x48 [ 104.171403][ T30] audit: type=1400 audit(1787100653.220:409): avc: denied { create } for pid=6239 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 104.188151][ T30] audit: type=1400 audit(1787100653.240:410): avc: denied { ioctl } for pid=6239 comm="syz.1.132" path="socket:[11281]" dev="sockfs" ino=11281 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.290959][ T3096] gud 3-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 104.308986][ T3096] usb 3-1: USB disconnect, device number 4 [ 104.467763][ T3096] Console: switching to colour VGA+ 80x25 [ 104.483039][ T6246] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 104.483073][ T6246] overlayfs: missing 'lowerdir' [ 104.508625][ T6246] netlink: 'syz.4.134': attribute type 10 has an invalid length. [ 104.531514][ T6246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.533382][ T6246] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 104.650377][ T30] audit: type=1400 audit(1787100653.700:411): avc: denied { create } for pid=6248 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.937796][ T30] audit: type=1400 audit(1787100653.990:412): avc: denied { create } for pid=6256 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.010217][ T30] audit: type=1400 audit(1787100654.040:413): avc: denied { ioctl } for pid=6256 comm="syz.3.138" path="socket:[11387]" dev="sockfs" ino=11387 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.051498][ T3096] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 105.133176][ T30] audit: type=1400 audit(1787100654.190:414): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 105.222519][ T6249] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 105.255090][ T3096] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 105.288096][ T3096] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 105.320529][ T3096] usb 3-1: config 0 has an invalid descriptor of length 159, skipping remainder of the config [ 105.364594][ T3096] usb 3-1: config 0 has no interface number 0 [ 105.406214][ T3096] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 105.485690][ T3096] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 105.524880][ T3096] usb 3-1: Product: syz [ 105.534945][ T3096] usb 3-1: SerialNumber: syz [ 105.566250][ T3096] usb 3-1: config 0 descriptor?? [ 105.589239][ T3096] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 105.672110][ T6249] netlink: 'syz.0.136': attribute type 21 has an invalid length. [ 105.690548][ T6249] netlink: 128 bytes leftover after parsing attributes in process `syz.0.136'. [ 105.734040][ T6249] netlink: 'syz.0.136': attribute type 4 has an invalid length. [ 105.752562][ T6249] netlink: 'syz.0.136': attribute type 3 has an invalid length. [ 105.777906][ T6249] netlink: 3 bytes leftover after parsing attributes in process `syz.0.136'. [ 105.822731][ T30] audit: type=1400 audit(1787100654.880:415): avc: denied { watch watch_reads } for pid=6272 comm="syz.4.144" path="/29" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 105.855507][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 105.927710][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 106.742094][ T30] audit: type=1400 audit(1787100655.780:416): avc: denied { ioctl } for pid=6283 comm="syz.4.147" path="/30/tracing/uprobe_events" dev="tracefs" ino=18 ioctlcmd=0x610a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 106.911257][ T6285] netlink: 68 bytes leftover after parsing attributes in process `syz.4.147'. [ 107.032186][ T6288] ubi0: attaching mtd0 [ 107.050899][ T6288] ubi0: scanning is finished [ 107.055848][ T6288] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 107.216642][ T6288] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 107.282905][ T3096] usb 3-1: USB disconnect, device number 5 [ 108.516023][ T6294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.150'. [ 108.723167][ T6306] futex_wake_op: syz.2.154 tries to shift op by 144; fix this program [ 108.900365][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'. [ 109.733023][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 109.733051][ T30] audit: type=1400 audit(1787100658.790:422): avc: denied { sqpoll } for pid=6287 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 109.904008][ T6314] fuse: Bad value for 'fd' [ 109.926359][ T6314] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 109.966008][ T30] audit: type=1400 audit(1787100659.010:423): avc: denied { read write } for pid=6313 comm="syz.0.156" name="sg0" dev="devtmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 109.970360][ T6314] sg_write: data in/out 92/42 bytes for SCSI command 0x0-- guessing data in; [ 109.970360][ T6314] program syz.0.156 not setting count and/or reply_len properly [ 110.507117][ T30] audit: type=1400 audit(1787100659.010:424): avc: denied { open } for pid=6313 comm="syz.0.156" path="/dev/sg0" dev="devtmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 110.543043][ T30] audit: type=1400 audit(1787100659.020:425): avc: denied { ioctl } for pid=6313 comm="syz.0.156" path="/dev/sg0" dev="devtmpfs" ino=803 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 110.544480][ T6318] syz.2.157 uses obsolete (PF_INET,SOCK_PACKET) [ 110.845067][ T6314] sctp: [Deprecated]: syz.0.156 (pid 6314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.845067][ T6314] Use struct sctp_sack_info instead [ 110.863651][ T30] audit: type=1400 audit(1787100659.920:426): avc: denied { read } for pid=6317 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.940446][ T6320] sctp: [Deprecated]: syz.0.156 (pid 6320) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.940446][ T6320] Use struct sctp_sack_info instead [ 110.969688][ T30] audit: type=1400 audit(1787100660.020:427): avc: denied { getopt } for pid=6317 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.063346][ T6316] mmap: syz.4.155 (6316) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.080250][ T30] audit: type=1400 audit(1787100660.050:428): avc: denied { write } for pid=6315 comm="syz.4.155" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 111.470766][ T6330] netlink: 'syz.2.159': attribute type 10 has an invalid length. [ 111.511267][ T6330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.538261][ T6330] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 113.952312][ T30] audit: type=1400 audit(1787100663.000:429): avc: denied { listen } for pid=6353 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.162384][ T5694] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 114.266471][ T30] audit: type=1400 audit(1787100663.320:430): avc: denied { name_bind } for pid=6345 comm="syz.2.168" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 114.344228][ T5694] usb 2-1: Using ep0 maxpacket: 8 [ 114.355103][ T5694] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 114.391521][ T5694] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 114.414252][ T5694] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 114.456011][ T5694] usb 2-1: config 127 has no interface number 1 [ 114.480835][ T5694] usb 2-1: config 127 interface 171 has no altsetting 0 [ 114.517772][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.557558][ T5694] usb 2-1: Product: syz [ 114.573771][ T5694] usb 2-1: Manufacturer: syz [ 114.589110][ T5694] usb 2-1: SerialNumber: syz [ 114.876387][ T6344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.930300][ T6344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.955962][ T6358] netlink: 'syz.3.166': attribute type 21 has an invalid length. [ 114.988777][ T6366] FAULT_INJECTION: forcing a failure. [ 114.988777][ T6366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.996867][ T30] audit: type=1400 audit(1787100664.040:431): avc: denied { ioctl } for pid=6365 comm="syz.0.171" path="socket:[11639]" dev="sockfs" ino=11639 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.029628][ T6358] netlink: 128 bytes leftover after parsing attributes in process `syz.3.166'. [ 115.040936][ T6358] netlink: 'syz.3.166': attribute type 4 has an invalid length. [ 115.059338][ T6358] netlink: 'syz.3.166': attribute type 3 has an invalid length. [ 115.067220][ T6366] CPU: 1 UID: 0 PID: 6366 Comm: syz.0.171 Not tainted syzkaller #0 PREEMPT(full) [ 115.067242][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 115.067251][ T6366] Call Trace: [ 115.067256][ T6366] [ 115.067263][ T6366] dump_stack_lvl+0x100/0x190 [ 115.067289][ T6366] should_fail_ex.cold+0x5/0xa [ 115.067310][ T6366] _copy_from_user+0x2e/0xd0 [ 115.067336][ T6366] copy_msghdr_from_user+0x9f/0x4c0 [ 115.067359][ T6366] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 115.067383][ T6366] ? __pfx__kstrtoull+0x10/0x10 [ 115.067407][ T6366] ___sys_sendmsg+0x106/0x1e0 [ 115.067431][ T6366] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.067463][ T6366] ? find_held_lock+0x2b/0x80 [ 115.067493][ T6366] __sys_sendmmsg+0x20c/0x440 [ 115.067513][ T6366] ? __pfx___sys_sendmmsg+0x10/0x10 [ 115.067528][ T6366] ? ksys_write+0x190/0x250 [ 115.067555][ T6366] ? fput+0x79/0x100 [ 115.067568][ T6366] ? ksys_write+0x1ac/0x250 [ 115.067577][ T6366] ? __pfx_ksys_write+0x10/0x10 [ 115.067594][ T6366] __x64_sys_sendmmsg+0x9c/0x100 [ 115.067611][ T6366] ? lockdep_hardirqs_on+0x78/0x100 [ 115.067634][ T6366] do_syscall_64+0x115/0x870 [ 115.067656][ T6366] ? clear_bhb_loop+0x70/0xc0 [ 115.067674][ T6366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.067685][ T6366] RIP: 0033:0x7efc26d9e0d9 [ 115.067694][ T6366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.067704][ T6366] RSP: 002b:00007efc27ba8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 115.067715][ T6366] RAX: ffffffffffffffda RBX: 00007efc27025fa0 RCX: 00007efc26d9e0d9 [ 115.067721][ T6366] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 115.067727][ T6366] RBP: 00007efc27ba8090 R08: 0000000000000000 R09: 0000000000000000 [ 115.067734][ T6366] R10: 000000000000f0ff R11: 0000000000000246 R12: 0000000000000001 [ 115.067744][ T6366] R13: 00007efc27026038 R14: 00007efc27025fa0 R15: 00007ffe171fba08 [ 115.067766][ T6366] [ 115.070957][ T6358] netlink: 3 bytes leftover after parsing attributes in process `syz.3.166'. [ 115.308187][ T5694] xr_serial 2-1:127.171: xr_serial converter detected [ 115.339503][ T5694] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 115.370956][ T5694] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 115.436824][ T30] audit: type=1400 audit(1787100664.440:432): avc: denied { node_bind } for pid=6367 comm="syz.2.172" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 115.472505][ T5694] usb 2-1: USB disconnect, device number 7 [ 115.513147][ T5694] xr_serial 2-1:127.171: device disconnected [ 117.613577][ T30] audit: type=1400 audit(1787100666.670:433): avc: denied { accept } for pid=6381 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 118.467225][ T30] audit: type=1400 audit(1787100667.520:434): avc: denied { mounton } for pid=6386 comm="syz.2.179" path="/32/file0" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 118.524695][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 118.546362][ T30] audit: type=1400 audit(1787100667.570:435): avc: denied { remount } for pid=6386 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 118.608074][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.178'. [ 118.872376][ T3096] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 119.052289][ T3096] usb 2-1: Using ep0 maxpacket: 8 [ 119.089780][ T3096] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.122994][ T3096] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 119.158680][ T6400] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 119.217108][ T3096] usb 2-1: config 4 interface 0 has no altsetting 0 [ 119.293079][ T3096] usb 2-1: string descriptor 0 read error: -22 [ 119.315445][ T3096] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 119.391737][ T3096] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 119.443526][ T878] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.478138][ T3096] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 119.521591][ T3096] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 119.556317][ T3096] usb 2-1: media controller created [ 119.646783][ T6397] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 119.702299][ T3096] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.733781][ T878] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 119.792825][ T878] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 119.874645][ T3096] zl10353_read_register: readreg error (reg=127, ret==0) [ 119.907076][ T878] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 119.994899][ T878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.037847][ T878] usb 5-1: Product: syz [ 120.081636][ T878] usb 5-1: Manufacturer: syz [ 120.121195][ T3096] usb 2-1: USB disconnect, device number 8 [ 120.146049][ T878] usb 5-1: SerialNumber: syz [ 120.156565][ T30] audit: type=1400 audit(1787100669.210:436): avc: denied { create } for pid=6406 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 120.239598][ T878] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 120.302652][ T878] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 120.336772][ T878] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 120.442265][ T5331] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.649150][ T5331] usb 1-1: Using ep0 maxpacket: 32 [ 120.670932][ T5331] usb 1-1: New USB device found, idVendor=0db0, idProduct=5580, bcdDevice=d1.95 [ 120.702452][ T5331] usb 1-1: config 9 has an invalid interface number: 215 but max is 1 [ 120.919031][ T5331] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 121.685914][ T30] audit: type=1400 audit(1787100670.220:437): avc: denied { write } for pid=6410 comm="syz.2.184" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 121.751888][ T5331] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 121.819241][ T5331] usb 1-1: config 9 has no interface number 0 [ 121.860237][ T5331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.884385][ T5331] usb 1-1: Product: syz [ 121.892395][ T5331] usb 1-1: Manufacturer: syz [ 121.907986][ T5331] usb 1-1: SerialNumber: syz [ 122.234854][ T30] audit: type=1400 audit(1787100671.290:438): avc: denied { bind } for pid=6406 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 122.382067][ T5331] usb 1-1: USB disconnect, device number 6 [ 122.393672][ T30] audit: type=1400 audit(1787100671.440:439): avc: denied { create } for pid=6426 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 123.197702][ T6403] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 123.365865][ T29] usb 5-1: USB disconnect, device number 5 [ 123.393852][ T29] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 123.854620][ T29] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 124.346056][ T29] ti_usb_3410_5052 5-1:2.0: device disconnected [ 125.156517][ T30] audit: type=1400 audit(1787100674.110:440): avc: denied { nlmsg_read } for pid=6445 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 125.202275][ T6449] netlink: 'syz.3.197': attribute type 1 has an invalid length. [ 125.210851][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 125.222911][ T30] audit: type=1400 audit(1787100674.280:441): avc: denied { ioctl } for pid=6445 comm="syz.3.197" path="socket:[12615]" dev="sockfs" ino=12615 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.514049][ T30] audit: type=1400 audit(1787100675.570:442): avc: denied { read } for pid=6457 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.649566][ T6442] openvswitch: netlink: Flow key attr not present in new flow. [ 127.007427][ T6473] overlayfs: upper fs does not support file handles, falling back to index=off. [ 127.042525][ T5694] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.082568][ T6472] netlink: 'syz.0.204': attribute type 11 has an invalid length. [ 127.128772][ T6474] syz.4.203 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 127.166437][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.187481][ T30] audit: type=1400 audit(1787100676.240:443): avc: denied { open } for pid=6469 comm="syz.0.204" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 127.219686][ T6475] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 127.248266][ T5694] usb 3-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=c8.51 [ 127.274939][ T5694] usb 3-1: config 2 has an invalid interface number: 48 but max is 0 [ 127.304544][ T30] audit: type=1400 audit(1787100676.270:444): avc: denied { ioctl } for pid=6469 comm="syz.0.204" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x540b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 127.371907][ T5694] usb 3-1: config 2 has no interface number 0 [ 127.405243][ T5694] usb 3-1: too many endpoints for config 2 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 127.425371][ T5694] usb 3-1: config 2 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 127.457358][ T6485] netlink: 'syz.3.201': attribute type 21 has an invalid length. [ 127.479808][ T5694] usb 3-1: config 2 interface 48 has no altsetting 0 [ 127.522109][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.542721][ T6485] netlink: 128 bytes leftover after parsing attributes in process `syz.3.201'. [ 127.551778][ T5694] usb 3-1: Product: syz [ 127.561860][ T5694] usb 3-1: Manufacturer: syz [ 127.570036][ T5694] usb 3-1: SerialNumber: syz [ 128.636460][ T6485] netlink: 'syz.3.201': attribute type 4 has an invalid length. [ 128.717696][ T6485] netlink: 'syz.3.201': attribute type 3 has an invalid length. [ 128.734016][ T6485] netlink: 3 bytes leftover after parsing attributes in process `syz.3.201'. [ 128.922936][ T30] audit: type=1400 audit(1787100677.970:445): avc: denied { connect } for pid=6464 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.001737][ T30] audit: type=1400 audit(1787100678.000:446): avc: denied { write } for pid=6464 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.076220][ T30] audit: type=1400 audit(1787100678.080:447): avc: denied { setopt } for pid=6498 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.210898][ T30] audit: type=1400 audit(1787100678.250:448): avc: denied { read } for pid=6464 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.336584][ T30] audit: type=1400 audit(1787100678.300:449): avc: denied { listen } for pid=6464 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.352328][ T5711] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 129.433132][ T30] audit: type=1400 audit(1787100678.440:450): avc: denied { write } for pid=6484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.572575][ T5711] usb 1-1: Using ep0 maxpacket: 8 [ 129.592082][ T5711] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 129.625639][ T5711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.671313][ T5711] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 129.728567][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.801398][ T5711] mdc800 1-1:1.0: probe fails -> wrong Interface [ 130.659374][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 130.659401][ T30] audit: type=1400 audit(1787100679.710:456): avc: denied { write } for pid=6521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.871899][ T5694] usb 3-1: USB disconnect, device number 6 [ 130.891231][ T30] audit: type=1400 audit(1787100679.940:457): avc: denied { write } for pid=6539 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.975911][ T6538] pimreg: entered allmulticast mode [ 131.337027][ T30] audit: type=1400 audit(1787100680.390:458): avc: denied { getopt } for pid=6542 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.552993][ T30] audit: type=1400 audit(1787100680.390:459): avc: denied { bind } for pid=6542 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.803612][ T5595] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.812589][ T6499] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 131.820686][ T6499] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 131.878641][ T6499] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 131.884613][ T6499] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 131.897159][ T30] audit: type=1400 audit(1787100680.927:460): avc: denied { mount } for pid=6545 comm="syz.3.217" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 131.968516][ T6499] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.988528][ T5711] IPVS: starting estimator thread 0... [ 131.989216][ T6499] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 132.111984][ T6559] netlink: 'syz.1.218': attribute type 10 has an invalid length. [ 132.320354][ T6556] IPVS: using max 53 ests per chain, 127200 per kthread [ 133.910121][ T5595] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.954355][ T6499] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.978939][ T30] audit: type=1400 audit(1787100683.082:461): avc: denied { write } for pid=6545 comm="syz.3.217" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.987842][ T6499] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 134.108891][ T6499] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 134.129035][ T6499] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 134.185317][ T30] audit: type=1400 audit(1787100683.281:462): avc: denied { write } for pid=6548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.255547][ T5694] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 134.426881][ T30] audit: type=1400 audit(1787100683.529:463): avc: denied { write } for pid=6573 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.464942][ T5694] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 134.486590][ T5694] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.503490][ T5694] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 134.520943][ T5694] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.549679][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 134.563905][ T5694] usb 3-1: Product: syz [ 134.569571][ T5694] usb 3-1: Manufacturer: syz [ 134.579657][ T5694] usb 3-1: SerialNumber: syz [ 134.679025][ T5711] usb 1-1: USB disconnect, device number 7 [ 134.847835][ T6580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.222'. [ 134.884999][ T6563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.906021][ T30] audit: type=1326 audit(1787100684.006:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.0.223" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc26d9e0d9 code=0x7ffc0000 [ 134.909396][ T6563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.974960][ T30] audit: type=1326 audit(1787100684.016:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.0.223" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc26d9e0d9 code=0x7ffc0000 [ 135.204709][ T6589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 135.251200][ T5694] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 135.293166][ T6586] hub 1-0:1.0: USB hub found [ 135.325073][ T6586] hub 1-0:1.0: 1 port detected [ 135.626294][ T5711] usb 3-1: USB disconnect, device number 7 [ 135.647562][ T30] kauditd_printk_skb: 452 callbacks suppressed [ 135.647575][ T30] audit: type=1400 audit(1787100684.738:918): avc: denied { write } for pid=6605 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.734132][ T5711] usblp0: removed [ 135.775950][ T30] audit: type=1326 audit(1787100684.738:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.0.223" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efc26d9e0d9 code=0x7ffc0000 [ 135.886860][ T30] audit: type=1326 audit(1787100684.738:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.0.223" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efc26d9e0d9 code=0x7ffc0000 [ 135.988412][ T30] audit: type=1326 audit(1787100684.738:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.0.223" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efc26d9e0d9 code=0x7ffc0000 [ 136.097078][ T30] audit: type=1326 audit(1787100684.738:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.0.223" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efc26d9e0d9 code=0x7ffc0000 [ 136.156155][ T30] audit: type=1326 audit(1787100684.738:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.0.223" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efc26d9e0d9 code=0x7ffc0000 [ 136.183351][ T30] audit: type=1326 audit(1787100684.738:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.0.223" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efc26d9e0d9 code=0x7ffc0000 [ 136.209979][ T30] audit: type=1326 audit(1787100684.738:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.0.223" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efc26d9e0d9 code=0x7ffc0000 [ 136.287186][ T30] audit: type=1326 audit(1787100684.738:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.0.223" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efc26d9e0d9 code=0x7ffc0000 [ 136.313597][ T5331] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 137.280063][ T5331] usb 5-1: unable to get BOS descriptor or descriptor too short [ 137.935436][ T5331] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 137.946865][ T5331] usb 5-1: config 114 has an invalid interface number: 240 but max is 0 [ 137.956415][ T30] audit: type=1326 audit(1787100684.787:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.0.223" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efc26d9e0d9 code=0x7ffc0000 [ 137.982709][ T5331] usb 5-1: config 114 has no interface number 0 [ 137.989018][ T5331] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 138.000075][ T5331] usb 5-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 138.012438][ T5331] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 138.022864][ T5331] usb 5-1: config 114 interface 240 has no altsetting 0 [ 138.060144][ T5331] usb 5-1: string descriptor 0 read error: -22 [ 138.068623][ T5331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.081116][ T6600] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.097224][ T6600] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.126973][ T5331] ir_usb 5-1:114.240: IR Dongle converter detected [ 138.385173][ T6628] netlink: 'syz.3.232': attribute type 10 has an invalid length. [ 138.425459][ T6628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.490197][ T6628] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 139.523749][ T5331] usb 5-1: IRDA class descriptor not found, device not bound [ 140.704707][ T5331] usb 5-1: USB disconnect, device number 6 [ 141.159258][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 141.159276][ T30] audit: type=1400 audit(1787100689.966:947): avc: denied { write } for pid=6641 comm="syz.4.234" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 141.429770][ T6655] Illegal XDP return value 4294967274 on prog (id 30) dev N/A, expect packet loss! [ 141.439701][ T30] audit: type=1400 audit(1787100690.218:948): avc: denied { write } for pid=6612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.480735][ T30] audit: type=1400 audit(1787100690.246:949): avc: denied { getopt } for pid=6654 comm="syz.4.238" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.536319][ T30] audit: type=1400 audit(1787100690.302:950): avc: denied { create } for pid=6656 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.573336][ T30] audit: type=1400 audit(1787100690.330:951): avc: denied { connect } for pid=6656 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.595975][ T5331] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 141.630283][ T30] audit: type=1400 audit(1787100690.330:952): avc: denied { read } for pid=6656 comm="syz.4.239" name="/" dev="configfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.666367][ T30] audit: type=1400 audit(1787100690.330:953): avc: denied { watch watch_reads } for pid=6656 comm="syz.4.239" path="/" dev="configfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.716353][ T30] audit: type=1400 audit(1787100690.330:954): avc: denied { read } for pid=6656 comm="syz.4.239" name="/" dev="configfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.761562][ T30] audit: type=1400 audit(1787100690.330:955): avc: denied { read open } for pid=6656 comm="syz.4.239" path="/" dev="configfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.831955][ T5331] usb 3-1: Using ep0 maxpacket: 8 [ 141.839518][ T5331] usb 3-1: unable to get BOS descriptor or descriptor too short [ 141.848455][ T6663] 0x000000006f6c-0x000000020000 : "" [ 141.940056][ T6664] netlink: 'syz.3.240': attribute type 1 has an invalid length. [ 141.949090][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'. [ 142.065783][ T6663] ftl_cs: FTL header corrupt! [ 142.659349][ T3096] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 142.770216][ T5331] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 142.779699][ T30] audit: type=1400 audit(1787100690.395:956): avc: denied { write } for pid=6656 comm="syz.4.239" name="/" dev="configfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.856479][ T5331] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 142.870364][ T5331] usb 3-1: SerialNumber: ᠶ谠풏 挲墺䢣 䬾⡡鵩൷ [ 142.978621][ T3096] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 143.000532][ T3096] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.090612][ T3096] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 143.147877][ T3096] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.188598][ T5331] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 143.225644][ T3096] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 143.253380][ T5331] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 143.273461][ T3096] usb 5-1: Product: syz [ 143.286671][ T3096] usb 5-1: Manufacturer: syz [ 143.319638][ T5331] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 143.332192][ T6658] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 143.345344][ T5331] usb 3-1: media controller created [ 143.372794][ T3096] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 143.398477][ T5331] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.429223][ T3096] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 143.668743][ T5331] zl10353_read_register: readreg error (reg=127, ret==0) [ 143.950061][ T5331] usb 3-1: USB disconnect, device number 8 [ 144.226021][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 144.295841][ T6696] syz_tun: entered allmulticast mode [ 144.703391][ T6692] syz_tun: left allmulticast mode [ 144.908613][ T3096] usb 5-1: USB disconnect, device number 7 [ 145.241603][ T3096] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 145.359099][ T3096] garmin_gps 5-1:1.0: device disconnected [ 145.592691][ T6719] netlink: 'syz.2.250': attribute type 10 has an invalid length. [ 145.685683][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 145.858558][ T3096] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 145.895367][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 145.923533][ T5331] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 145.947068][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 146.009050][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.052853][ T3096] usb 5-1: Using ep0 maxpacket: 32 [ 146.090544][ T3096] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0109, bcdDevice=ae.ff [ 146.108921][ T10] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 146.141498][ T3096] usb 5-1: config 247 has an invalid interface number: 92 but max is 0 [ 146.162337][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.179553][ T3096] usb 5-1: config 247 has an invalid descriptor of length 0, skipping remainder of the config [ 146.214941][ T5331] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 146.236065][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.269448][ T3096] usb 5-1: config 247 has no interface number 0 [ 146.283241][ T10] usb 1-1: Product: syz [ 146.299301][ T5331] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 146.321749][ T3096] usb 5-1: config 247 interface 92 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 146.340039][ T10] usb 1-1: Manufacturer: syz [ 146.377264][ T10] usb 1-1: SerialNumber: syz [ 146.384901][ T5331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.441926][ T3096] usb 5-1: config 247 interface 92 has no altsetting 0 [ 146.473282][ T10] usb 1-1: config 0 descriptor?? [ 146.489692][ T5331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.530051][ T3096] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.596592][ T5331] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 146.618582][ T10] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 146.634450][ T3096] usb 5-1: Product: syz [ 146.668010][ T3096] usb 5-1: Manufacturer: syz [ 146.710954][ T3096] usb 5-1: SerialNumber: syz [ 146.744858][ T5331] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 146.838699][ T5331] usb 2-1: Manufacturer: syz [ 146.928265][ T3096] kvaser_usb 5-1:247.92: error -ENODEV: Cannot get usb endpoint(s) [ 146.971659][ T10] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 146.990881][ T5331] usb 2-1: config 0 descriptor?? [ 147.048011][ T10] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 147.191939][ T3096] usb 5-1: USB disconnect, device number 8 [ 147.219299][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 147.219314][ T30] audit: type=1400 audit(1787100695.584:963): avc: denied { mount } for pid=6707 comm="syz.0.249" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 147.312548][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.332122][ T10] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 147.537617][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.601315][ T10] usb 1-1: USB disconnect, device number 8 [ 148.100534][ T5331] hid_parser_main: 4 callbacks suppressed [ 148.100984][ T5331] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 148.207976][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.314274][ T30] audit: type=1400 audit(1787100696.601:964): avc: denied { write } for pid=6709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.350043][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.547186][ T5331] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 148.655560][ T5331] usb 2-1: USB disconnect, device number 9 [ 148.752698][ T6741] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 148.759442][ T6741] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 148.768446][ T6741] vhci_hcd vhci_hcd.0: Device attached [ 149.308612][ T10] usb 42-1: SetAddress Request (2) to port 0 [ 149.338155][ T10] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 149.564950][ T30] audit: type=1400 audit(1787100697.600:965): avc: denied { write } for pid=6749 comm="syz.3.257" name="ip6_flowlabel" dev="proc" ino=4026533307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 149.785046][ T30] audit: type=1400 audit(1787100697.757:966): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 149.824933][ T6742] vhci_hcd: connection reset by peer [ 150.026951][ T30] audit: type=1400 audit(1787100698.053:967): avc: denied { write } for pid=6748 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.069742][ T13] vhci_hcd vhci_hcd.4: stop threads [ 150.257510][ T13] vhci_hcd vhci_hcd.4: release socket [ 150.392405][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 150.838237][ T6751] fido_id[6751]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 150.974683][ T30] audit: type=1400 audit(1787100699.060:968): avc: denied { append } for pid=6765 comm="syz.0.258" name="001" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 150.991329][ T6770] netlink: 48 bytes leftover after parsing attributes in process `syz.3.262'. [ 151.005023][ T6767] usb usb3: usbfs: process 6767 (syz.0.258) did not claim interface 0 before use [ 151.827440][ T30] audit: type=1400 audit(1787100699.781:969): avc: denied { ioctl } for pid=6745 comm="syz.1.256" path="socket:[13887]" dev="sockfs" ino=13887 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 152.287422][ T30] audit: type=1400 audit(1787100700.271:970): avc: denied { write } for pid=6762 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.394555][ T6786] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 152.450346][ T6786] sg_write: data in/out 92/42 bytes for SCSI command 0x0-- guessing data in; [ 152.450346][ T6786] program syz.0.264 not setting count and/or reply_len properly [ 152.551449][ T5331] IPVS: starting estimator thread 0... [ 152.688930][ T30] audit: type=1400 audit(1787100700.640:971): avc: denied { write } for pid=6787 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.746709][ T6786] sctp: [Deprecated]: syz.0.264 (pid 6786) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.746709][ T6786] Use struct sctp_sack_info instead [ 152.801855][ T6790] IPVS: using max 48 ests per chain, 115200 per kthread [ 152.817255][ T6792] sctp: [Deprecated]: syz.0.264 (pid 6792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.817255][ T6792] Use struct sctp_sack_info instead [ 153.122039][ T5602] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 153.231863][ T6802] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 153.263705][ T6802] block device autoloading is deprecated and will be removed. [ 153.282341][ T5602] usb 4-1: device descriptor read/64, error -71 [ 153.351762][ T6811] xt_connbytes: Forcing CT accounting to be enabled [ 153.383400][ T6811] Cannot find set identified by id 0 to match [ 153.425816][ T6813] vlan2: entered promiscuous mode [ 153.451200][ T6813] macvlan0: entered promiscuous mode [ 153.468663][ T30] audit: type=1400 audit(1787100701.408:972): avc: denied { write } for pid=6796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.512864][ T5602] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 153.546386][ T30] audit: type=1400 audit(1787100701.492:973): avc: denied { open } for pid=6820 comm="syz.0.270" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 153.579042][ T6821] 9p: Bad value for 'rfdno' [ 153.610719][ T30] audit: type=1400 audit(1787100701.544:974): avc: denied { map } for pid=6820 comm="syz.0.270" path="/dev/radio3" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 153.665861][ T5602] usb 4-1: device descriptor read/64, error -71 [ 153.692091][ T30] audit: type=1400 audit(1787100701.565:975): avc: denied { mounton } for pid=6823 comm="syz.1.271" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 153.780219][ T5602] usb usb4-port1: attempt power cycle [ 153.792092][ T30] audit: type=1400 audit(1787100701.639:976): avc: denied { write } for pid=6824 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.967133][ T6835] dummy0: entered promiscuous mode [ 154.028478][ T6835] dummy0: left promiscuous mode [ 154.106427][ T5602] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 154.158528][ T5602] usb 4-1: device descriptor read/8, error -71 [ 154.250146][ T30] audit: type=1400 audit(1787100702.219:977): avc: denied { create } for pid=6843 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 154.305237][ T6836] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.331511][ T30] audit: type=1400 audit(1787100702.260:978): avc: denied { write } for pid=6843 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 154.410954][ T5602] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 154.429298][ T6825] Can't find ip_set type has,mac [ 154.454556][ T30] audit: type=1400 audit(1787100702.402:979): avc: denied { write } for pid=6843 comm="syz.2.275" name="functions" dev="configfs" ino=10919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.495738][ T6845] netlink: 'syz.0.273': attribute type 21 has an invalid length. [ 154.505502][ T5602] usb 4-1: device descriptor read/8, error -71 [ 154.512390][ T6845] netlink: 128 bytes leftover after parsing attributes in process `syz.0.273'. [ 154.625833][ T30] audit: type=1400 audit(1787100702.606:980): avc: denied { write } for pid=6843 comm="syz.2.275" name="header" dev="configfs" ino=14016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.651915][ T5602] usb usb4-port1: unable to enumerate USB device [ 154.778027][ T6845] netlink: 'syz.0.273': attribute type 4 has an invalid length. [ 154.793458][ T10] usb 42-1: device descriptor read/8, error -110 [ 154.802744][ T6845] netlink: 'syz.0.273': attribute type 3 has an invalid length. [ 154.834656][ T6845] netlink: 3 bytes leftover after parsing attributes in process `syz.0.273'. [ 154.945134][ T5331] IPVS: starting estimator thread 0... [ 155.050643][ T6869] IPVS: using max 42 ests per chain, 100800 per kthread [ 155.211872][ T10] usb usb42-port1: attempt power cycle [ 155.800095][ T10] usb usb42-port1: unable to enumerate USB device [ 156.070796][ T6853] vivid-000: disconnect [ 156.093521][ T6852] vivid-000: reconnect [ 156.136742][ T6905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.279'. [ 156.258050][ T6905] vlan0: entered promiscuous mode [ 156.333905][ T5602] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 156.528700][ T5602] usb 4-1: Using ep0 maxpacket: 16 [ 156.560925][ T5602] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 157.793126][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 157.793150][ T30] audit: type=1326 audit(1787100705.787:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.280" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d40d9dd6b code=0x7ffc0000 [ 157.801640][ T5602] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 157.848650][ T5602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.879704][ T5602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12336, setting to 1024 [ 157.911210][ T5602] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 157.943003][ T5602] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.988636][ T30] audit: type=1326 audit(1787100705.997:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.280" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d40d9dd6b code=0x7ffc0000 [ 157.989867][ T5602] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 158.105196][ T5602] usb 4-1: Manufacturer: syz [ 158.108095][ T30] audit: type=1326 audit(1787100705.997:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.280" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d40d9dd6b code=0x7ffc0000 [ 158.161129][ T5602] usb 4-1: config 0 descriptor?? [ 158.197541][ T30] audit: type=1326 audit(1787100705.997:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.280" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d40d9dd6b code=0x7ffc0000 [ 158.251438][ T30] audit: type=1326 audit(1787100705.997:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.280" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d40d9dd6b code=0x7ffc0000 [ 158.330198][ T30] audit: type=1326 audit(1787100706.181:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.280" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d40d9dd6b code=0x7ffc0000 [ 158.412087][ T30] audit: type=1326 audit(1787100706.181:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.280" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d40d9dd6b code=0x7ffc0000 [ 158.633869][ T30] audit: type=1326 audit(1787100706.191:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.280" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d40d9dd6b code=0x7ffc0000 [ 159.557677][ T30] audit: type=1326 audit(1787100706.191:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.280" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d40d9dd6b code=0x7ffc0000 [ 159.586262][ T30] audit: type=1326 audit(1787100706.191:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.3.280" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5d40d5e90e code=0x7ffc0000 [ 159.836651][ T5602] rc_core: IR keymap rc-hauppauge not found [ 159.849534][ T5602] Registered IR keymap rc-empty [ 159.907279][ T5602] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 159.965100][ T5602] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 160.000699][ T5602] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 160.000950][ T6927] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 160.024655][ T5602] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 160.047100][ T6933] syzkaller0: entered promiscuous mode [ 160.060529][ T6933] syzkaller0: entered allmulticast mode [ 160.153837][ T5602] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 160.205922][ T5602] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 160.235894][ T6938] netlink: 'syz.0.285': attribute type 21 has an invalid length. [ 160.246610][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 160.274251][ T5602] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 160.302249][ T5602] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 160.349088][ T6938] netlink: 128 bytes leftover after parsing attributes in process `syz.0.285'. [ 160.380817][ T6938] netlink: 'syz.0.285': attribute type 4 has an invalid length. [ 160.389887][ T5602] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 160.417208][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.289'. [ 160.429765][ T5602] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 160.438774][ T6938] netlink: 'syz.0.285': attribute type 3 has an invalid length. [ 160.447025][ T6938] netlink: 3 bytes leftover after parsing attributes in process `syz.0.285'. [ 160.458174][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 160.466095][ T5602] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 160.486795][ T5602] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 160.494072][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 160.507044][ T5602] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 160.530297][ T5602] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 160.548265][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 160.570825][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.586715][ T5602] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 160.597557][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.606450][ T5602] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 160.624549][ T5602] usb 4-1: USB disconnect, device number 11 [ 160.633773][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.643259][ T24] usb 2-1: Product: syz [ 160.656350][ T24] usb 2-1: Manufacturer: syz [ 160.674589][ T24] usb 2-1: SerialNumber: syz [ 161.412295][ T6960] FAULT_INJECTION: forcing a failure. [ 161.412295][ T6960] name failslab, interval 1, probability 0, space 0, times 1 [ 161.444797][ T6960] CPU: 0 UID: 0 PID: 6960 Comm: syz.2.293 Not tainted syzkaller #0 PREEMPT(full) [ 161.444820][ T6960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 161.444830][ T6960] Call Trace: [ 161.444836][ T6960] [ 161.444843][ T6960] dump_stack_lvl+0x100/0x190 [ 161.444869][ T6960] should_fail_ex.cold+0x5/0xa [ 161.444891][ T6960] should_failslab+0xc2/0x120 [ 161.444915][ T6960] __kvmalloc_node_noprof+0x116/0x970 [ 161.444936][ T6960] ? find_held_lock+0x2b/0x80 [ 161.444953][ T6960] ? __do_semtimedop+0x260a/0x4d50 [ 161.444984][ T6960] ? __do_semtimedop+0x2674/0x4d50 [ 161.445010][ T6960] __do_semtimedop+0x2674/0x4d50 [ 161.445043][ T6960] ? __pfx___do_semtimedop+0x10/0x10 [ 161.445083][ T6960] ? do_semtimedop+0x1b6/0x2e0 [ 161.445104][ T6960] do_semtimedop+0x1b6/0x2e0 [ 161.445127][ T6960] ? __pfx_do_semtimedop+0x10/0x10 [ 161.445174][ T6960] ? __pfx_ksys_write+0x10/0x10 [ 161.445197][ T6960] do_syscall_64+0x115/0x870 [ 161.445221][ T6960] ? clear_bhb_loop+0x70/0xc0 [ 161.445242][ T6960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.445260][ T6960] RIP: 0033:0x7f4dd899e0d9 [ 161.445275][ T6960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.445291][ T6960] RSP: 002b:00007f4dd98ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 161.445309][ T6960] RAX: ffffffffffffffda RBX: 00007f4dd8c25fa0 RCX: 00007f4dd899e0d9 [ 161.445319][ T6960] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000000 [ 161.445330][ T6960] RBP: 00007f4dd98ea090 R08: 0000000000000000 R09: 0000000000000000 [ 161.445340][ T6960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.445350][ T6960] R13: 00007f4dd8c26038 R14: 00007f4dd8c25fa0 R15: 00007ffe6eb73ac8 [ 161.445374][ T6960] [ 162.415511][ T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 162.506057][ T6953] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 162.556452][ T6953] SELinux: failed to load policy [ 162.626566][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 162.650989][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice= 1.00 [ 162.714115][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.754146][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.798359][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.848053][ T9] hub 5-1:1.0: USB hub found [ 163.064029][ T9] hub 5-1:1.0: config failed, can't read hub descriptor (err -22) [ 163.101369][ T24] usb 2-1: 0:1 : does not exist [ 163.130872][ T9] usb 5-1: USB disconnect, device number 9 [ 163.403120][ T6977] nbd: socks must be embedded in a SOCK_ITEM attr [ 163.415006][ T6977] block nbd0: shutting down sockets [ 164.595215][ T24] usb 2-1: USB disconnect, device number 10 [ 164.778548][ T5588] udevd[5588]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.931814][ T5711] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 165.011371][ T6997] netlink: 60 bytes leftover after parsing attributes in process `syz.2.303'. [ 165.060968][ T6997] netlink: 60 bytes leftover after parsing attributes in process `syz.2.303'. [ 165.071150][ T6997] netlink: 500 bytes leftover after parsing attributes in process `syz.2.303'. [ 165.084762][ T6997] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 165.114640][ T5711] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 165.132662][ T5711] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.148628][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.162761][ T5711] usb 1-1: Product: syz [ 165.168025][ T5711] usb 1-1: Manufacturer: syz [ 165.173175][ T5711] usb 1-1: SerialNumber: syz [ 165.184408][ T5711] usb 1-1: config 0 descriptor?? [ 165.219551][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 165.285256][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 165.285271][ T30] audit: type=1400 audit(1787100713.066:1131): avc: denied { getopt } for pid=7000 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 165.295037][ T5602] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 165.391171][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 165.408498][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=79.32 [ 165.432649][ T24] usb 2-1: config 5 has an invalid interface number: 231 but max is 3 [ 165.443156][ T24] usb 2-1: config 5 has an invalid interface number: 197 but max is 3 [ 165.449233][ T30] audit: type=1400 audit(1787100713.234:1132): avc: denied { read } for pid=6983 comm="syz.0.299" path="socket:[14297]" dev="sockfs" ino=14297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 165.463482][ T24] usb 2-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 165.510309][ T24] usb 2-1: config 5 has an invalid interface number: 169 but max is 3 [ 165.515233][ T30] audit: type=1400 audit(1787100713.307:1133): avc: denied { write } for pid=6983 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 165.520215][ T5602] usb 5-1: not running at top speed; connect to a high speed hub [ 165.547454][ T7005] loop0: detected capacity change from 0 to 3904 [ 165.555076][ T24] usb 2-1: config 5 has an invalid interface number: 54 but max is 3 [ 165.576345][ T5602] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 165.586408][ T24] usb 2-1: config 5 has an invalid interface number: 198 but max is 3 [ 165.594672][ T24] usb 2-1: config 5 has 5 interfaces, different from the descriptor's value: 4 [ 165.619569][ T5602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.628541][ T5602] usb 5-1: Product: syz [ 165.644304][ T7005] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 10.32779. Aborting. [ 165.654668][ T24] usb 2-1: config 5 has no interface number 0 [ 165.661337][ T5602] usb 5-1: Manufacturer: syz [ 165.666121][ T24] usb 2-1: config 5 has no interface number 1 [ 165.672758][ T5602] usb 5-1: SerialNumber: syz [ 165.678652][ T24] usb 2-1: config 5 has no interface number 2 [ 165.687257][ T7005] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 165.697675][ T5602] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 165.705582][ T7005] loop0: [ 165.708799][ T24] usb 2-1: config 5 has no interface number 3 [ 165.719303][ T24] usb 2-1: config 5 has no interface number 4 [ 165.726122][ T5602] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 165.735125][ T24] usb 2-1: config 5 interface 231 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 165.752257][ T5602] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 165.761249][ T24] usb 2-1: config 5 interface 231 altsetting 127 endpoint 0x2 has an invalid bInterval 42, changing to 9 [ 165.776516][ T24] usb 2-1: config 5 interface 231 altsetting 127 has a duplicate endpoint with address 0x5, skipping [ 165.788785][ T5602] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 165.804018][ T24] usb 2-1: config 5 interface 231 altsetting 127 has a duplicate endpoint with address 0x1, skipping [ 165.816513][ T5602] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 165.833564][ T24] usb 2-1: config 5 interface 197 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 165.847789][ T24] usb 2-1: config 5 interface 197 altsetting 3 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 165.861486][ T24] usb 2-1: config 5 interface 197 altsetting 3 endpoint 0x8C has invalid maxpacket 21265, setting to 64 [ 165.874585][ T24] usb 2-1: config 5 interface 197 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 165.886186][ T24] usb 2-1: config 5 interface 197 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 165.927411][ T24] usb 2-1: config 5 interface 197 altsetting 3 bulk endpoint 0xF has invalid maxpacket 1024 [ 165.951230][ T24] usb 2-1: config 5 interface 197 altsetting 3 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 166.010599][ T24] usb 2-1: config 5 interface 197 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 166.047521][ T24] usb 2-1: config 5 interface 197 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 166.067372][ T24] usb 2-1: config 5 interface 197 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 166.083195][ T24] usb 2-1: config 5 interface 197 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 166.095763][ T24] usb 2-1: config 5 interface 197 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 166.108568][ T24] usb 2-1: config 5 interface 197 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 166.130831][ T24] usb 2-1: config 5 interface 197 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 166.178918][ T24] usb 2-1: config 5 interface 197 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 166.208169][ T24] usb 2-1: config 5 interface 197 altsetting 3 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 166.235615][ T5711] usb 5-1: USB disconnect, device number 10 [ 166.250566][ T5711] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 166.280012][ T24] usb 2-1: config 5 interface 169 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 166.296236][ T5711] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 166.307210][ T24] usb 2-1: config 5 interface 169 altsetting 13 has a duplicate endpoint with address 0xE, skipping [ 166.322451][ T5711] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 166.343635][ T24] usb 2-1: config 5 interface 169 altsetting 13 has a duplicate endpoint with address 0xC, skipping [ 166.373402][ T5711] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 166.402597][ T24] usb 2-1: config 5 interface 169 altsetting 13 has a duplicate endpoint with address 0x2, skipping [ 166.421642][ T5711] keyspan 5-1:1.0: device disconnected [ 166.459054][ T24] usb 2-1: config 5 interface 169 altsetting 13 has a duplicate endpoint with address 0xE, skipping [ 166.477150][ C0] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 166.496360][ T24] usb 2-1: config 5 interface 169 altsetting 13 has 5 endpoint descriptors, different from the interface descriptor's value: 16 [ 166.511443][ T24] usb 2-1: too many endpoints for config 5 interface 54 altsetting 34: 183, using maximum allowed: 30 [ 166.533356][ T24] usb 2-1: config 5 interface 54 altsetting 34 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 166.546631][ T24] usb 2-1: config 5 interface 54 altsetting 34 has a duplicate endpoint with address 0xF, skipping [ 166.560942][ T24] usb 2-1: config 5 interface 54 altsetting 34 has a duplicate endpoint with address 0xE, skipping [ 166.574020][ T24] usb 2-1: config 5 interface 54 altsetting 34 has a duplicate endpoint with address 0x2, skipping [ 166.586704][ T24] usb 2-1: config 5 interface 54 altsetting 34 has an invalid descriptor for endpoint zero, skipping [ 166.600442][ T24] usb 2-1: config 5 interface 54 altsetting 34 has a duplicate endpoint with address 0x84, skipping [ 166.614041][ T24] usb 2-1: config 5 interface 54 altsetting 34 has a duplicate endpoint with address 0x8, skipping [ 166.650252][ T24] usb 2-1: config 5 interface 54 altsetting 34 has a duplicate endpoint with address 0x9, skipping [ 166.666750][ T24] usb 2-1: config 5 interface 54 altsetting 34 has a duplicate endpoint with address 0xC, skipping [ 166.698908][ T24] usb 2-1: config 5 interface 54 altsetting 34 has 11 endpoint descriptors, different from the interface descriptor's value: 183 [ 166.715096][ T24] usb 2-1: config 5 interface 198 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 166.727783][ T24] usb 2-1: config 5 interface 231 has no altsetting 0 [ 166.736034][ T24] usb 2-1: config 5 interface 197 has no altsetting 0 [ 166.744475][ T24] usb 2-1: config 5 interface 169 has no altsetting 0 [ 166.751762][ T24] usb 2-1: config 5 interface 54 has no altsetting 0 [ 166.782888][ T24] usb 2-1: config 5 interface 198 has no altsetting 0 [ 166.826553][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.843915][ T24] usb 2-1: Product: 㐁 [ 166.876210][ T24] usb 2-1: SerialNumber: 舙곶쏼柷톀蠮ذ쁛゙ᣰ嗁絈ꚉ‗럤ᐡ狤㷚볧뉵ᱬ冃㌅欿託㥦鞇㣆矌蜔㼉ꅮ倴悬몎베煰쪥ꘟ떞⓫膎깃첎豊ꪝ鷰ᙱ礸亏㹿中 [ 167.160329][ T24] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.231/input/input6 [ 167.193294][ T4950] bcm5974 2-1:5.231: could not read from device [ 167.219992][ T4950] bcm5974 2-1:5.231: could not read from device [ 167.252397][ T4950] bcm5974 2-1:5.231: could not read from device [ 167.265652][ T4950] bcm5974 2-1:5.231: could not read from device [ 167.299867][ T30] audit: type=1400 audit(1787100715.146:1134): avc: denied { ioctl } for pid=7019 comm="syz.3.310" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 167.337445][ T30] audit: type=1400 audit(1787100715.175:1135): avc: denied { write } for pid=7019 comm="syz.3.310" name="functions" dev="configfs" ino=10919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 167.361491][ T30] audit: type=1400 audit(1787100715.175:1136): avc: denied { write } for pid=7019 comm="syz.3.310" name="p_volume_present" dev="configfs" ino=15385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 167.389635][ T30] audit: type=1400 audit(1787100715.175:1137): avc: denied { open } for pid=7019 comm="syz.3.310" path="/71/my_config/usb_gadget/g1/functions/uac2.usb0/p_volume_present" dev="configfs" ino=15385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 167.434583][ T30] audit: type=1400 audit(1787100715.175:1138): avc: denied { view } for pid=7019 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 167.516645][ T24] usb 2-1: USB disconnect, device number 11 [ 167.573967][ T6984] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 167.605338][ T9] usb 1-1: USB disconnect, device number 9 [ 167.701451][ T4965] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 10.32779. Aborting. [ 167.741003][ T4965] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 167.766435][ T4965] loop0: [ 168.020474][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 168.109168][ T7039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.314'. [ 168.479866][ T48] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.507338][ T48] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.509690][ T30] audit: type=1400 audit(1787100716.332:1139): avc: denied { append } for pid=7036 comm="syz.4.314" name="sg0" dev="devtmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 168.582200][ T48] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.650714][ T6894] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.424842][ T30] audit: type=1400 audit(1787100716.352:1140): avc: denied { map } for pid=7036 comm="syz.4.314" path="/dev/virtual_nci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.716149][ T24] IPVS: starting estimator thread 0... [ 169.810939][ T7059] IPVS: using max 83 ests per chain, 199200 per kthread [ 169.825339][ T7060] binder: 7054:7060 ioctl c0306201 2000000001c0 returned -22 [ 170.163995][ T7068] Bluetooth: MGMT ver 1.23 [ 170.173692][ T5331] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 170.231002][ T9] libceph: connect (1)[c::]:6789 error -97 [ 170.253474][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 170.294029][ T7069] ceph: No mds server is up or the cluster is laggy [ 170.308458][ T9] libceph: connect (1)[c::]:6789 error -97 [ 170.335482][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 170.369054][ T5331] usb 3-1: Using ep0 maxpacket: 32 [ 170.396637][ T5331] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 170.456013][ T5331] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 170.511216][ T5331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.564766][ T5331] usb 3-1: Product: syz [ 170.579094][ T5331] usb 3-1: Manufacturer: syz [ 170.596149][ T5331] usb 3-1: SerialNumber: syz [ 170.675073][ T5331] snd-ua101 3-1:1.1: sample format descriptor not found [ 170.710556][ T5331] snd-ua101 3-1:1.0: invalid num_altsetting [ 170.839428][ T5331] usb 3-1: USB disconnect, device number 9 [ 172.326706][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 172.326732][ T30] audit: type=1400 audit(1787100719.196:1144): avc: denied { name_bind } for pid=7086 comm="syz.4.325" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 172.818021][ T10] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 172.924655][ T4965] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 10.32779. Aborting. [ 172.955695][ T4965] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 172.974828][ T4965] loop0: [ 173.001309][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 173.031125][ T10] usb 2-1: New USB device found, idVendor=12d1, idProduct=16c7, bcdDevice=8c.0f [ 173.043384][ T30] audit: type=1400 audit(1787100720.874:1145): avc: denied { read append } for pid=7100 comm="syz.0.331" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 173.053135][ T10] usb 2-1: config 6 has an invalid interface number: 214 but max is 0 [ 173.108073][ T10] usb 2-1: config 6 has no interface number 0 [ 173.124759][ T10] usb 2-1: config 6 interface 214 altsetting 3 endpoint 0xB is Bulk; changing to Interrupt [ 173.143015][ T10] usb 2-1: config 6 interface 214 has no altsetting 0 [ 173.165883][ T10] usb 2-1: string descriptor 0 read error: -22 [ 173.176323][ T30] audit: type=1400 audit(1787100720.874:1146): avc: denied { ioctl open } for pid=7100 comm="syz.0.331" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 173.178020][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.284273][ T30] audit: type=1400 audit(1787100721.071:1147): avc: denied { mounton } for pid=7105 comm="syz.2.332" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 173.287864][ T7094] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.330026][ T7106] exFAT-fs (loop2): unable to read boot sector [ 173.429669][ T7106] exFAT-fs (loop2): failed to read boot sector [ 173.442662][ T10] uvcvideo 2-1:6.214: Found UVC 0.00 device (12d1:16c7) [ 173.462240][ T30] audit: type=1400 audit(1787100721.286:1148): avc: denied { shutdown } for pid=7105 comm="syz.2.332" laddr=::1 lport=48460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.464259][ T10] uvcvideo 2-1:6.214: No valid video chain found. [ 173.492961][ T7106] exFAT-fs (loop2): failed to recognize exfat type [ 173.627741][ T7094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.675703][ T7094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.714881][ T7094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.760939][ T4965] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 10.32779. Aborting. [ 173.775563][ T7094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.876548][ T4965] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 173.884500][ T4965] loop0: [ 174.011698][ T7094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.172236][ T7094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.448482][ T7094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.480107][ T7094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.514655][ T7094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.566407][ T7094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.624620][ T30] audit: type=1400 audit(1787100722.413:1149): avc: denied { read append } for pid=7126 comm="syz.4.326" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 174.663998][ T30] audit: type=1400 audit(1787100722.413:1150): avc: denied { open } for pid=7126 comm="syz.4.326" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 174.676172][ T5695] usb 2-1: USB disconnect, device number 12 [ 174.759504][ T30] audit: type=1400 audit(1787100722.548:1151): avc: denied { read write } for pid=7129 comm="syz.0.340" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 174.825954][ T30] audit: type=1400 audit(1787100722.548:1152): avc: denied { open } for pid=7129 comm="syz.0.340" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 174.827877][ T7127] netlink: 'syz.4.326': attribute type 8 has an invalid length. [ 174.852629][ T30] audit: type=1400 audit(1787100722.586:1153): avc: denied { map } for pid=7131 comm="syz.2.339" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 176.264419][ T7152] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.342908][ T7151] netlink: 'syz.1.341': attribute type 21 has an invalid length. [ 176.366099][ T7151] netlink: 128 bytes leftover after parsing attributes in process `syz.1.341'. [ 176.392287][ T7151] netlink: 'syz.1.341': attribute type 4 has an invalid length. [ 176.546435][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 176.612389][ T7151] netlink: 'syz.1.341': attribute type 3 has an invalid length. [ 176.634114][ T7151] netlink: 3 bytes leftover after parsing attributes in process `syz.1.341'. [ 176.832396][ T24] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 176.877008][ T5711] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 176.890237][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.916555][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 80: 152, using maximum allowed: 30 [ 176.929905][ T24] usb 1-1: config 0 interface 0 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 152 [ 176.953776][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 177.016548][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.065605][ T5711] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 177.076780][ T24] usb 1-1: Product: syz [ 177.085420][ T24] usb 1-1: Manufacturer: syz [ 177.125359][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 177.142752][ T24] usb 1-1: SerialNumber: syz [ 177.168018][ T5711] usb 4-1: Product: syz [ 177.181816][ T24] usb 1-1: config 0 descriptor?? [ 177.190120][ T5711] usb 4-1: SerialNumber: syz [ 177.211141][ T5711] usb 4-1: config 0 descriptor?? [ 177.361198][ T5695] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 177.450306][ T7158] netlink: 'syz.3.348': attribute type 1 has an invalid length. [ 177.558820][ T5695] usb 3-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 177.577799][ T5695] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.593167][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 177.602854][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 177.602859][ T5695] usb 3-1: Product: syz [ 177.602908][ T30] audit: type=1400 audit(1787100725.247:1162): avc: denied { map } for pid=7150 comm="syz.0.345" path="/58" dev="tmpfs" ino=341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 177.608880][ T5695] usb 3-1: Manufacturer: syz [ 177.703488][ T7171] bond1: (slave geneve2): making interface the new active one [ 177.717901][ T5711] hso 4-1:0.0: Failed to find BULK eps [ 177.751305][ T5695] usb_debug 3-1:1.0: debug converter detected [ 177.763702][ T7171] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 177.791494][ T5695] usb 3-1: debug converter now attached to ttyUSB0 [ 177.828935][ T48] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 177.882566][ T48] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 177.919549][ T5695] usb 4-1: USB disconnect, device number 12 [ 177.945638][ T48] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 178.000908][ T48] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 178.108489][ T5711] usb 3-1: USB disconnect, device number 10 [ 178.204576][ T5711] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 178.225714][ T5711] usb_debug 3-1:1.0: device disconnected [ 178.528429][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.354'. [ 178.676240][ T30] audit: type=1400 audit(1787100726.252:1163): avc: denied { lock } for pid=7183 comm="syz.4.354" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 178.803101][ T30] audit: type=1400 audit(1787100726.374:1164): avc: denied { getopt } for pid=7185 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 178.829669][ T9] usb 1-1: USB disconnect, device number 10 [ 178.866524][ T7192] netlink: 'syz.1.356': attribute type 10 has an invalid length. [ 178.875117][ T7192] netlink: 152 bytes leftover after parsing attributes in process `syz.1.356'. [ 178.934813][ T7192] bond0: (slave batadv0): Releasing backup interface [ 178.962848][ T7192] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 179.194436][ T30] audit: type=1400 audit(1787100726.738:1165): avc: denied { mount } for pid=7195 comm="syz.3.358" name="/" dev="ramfs" ino=14811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 179.379343][ T30] audit: type=1400 audit(1787100726.916:1166): avc: denied { read write } for pid=7195 comm="syz.3.358" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 179.418388][ T30] audit: type=1400 audit(1787100726.916:1167): avc: denied { open } for pid=7195 comm="syz.3.358" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 179.483340][ T30] audit: type=1400 audit(1787100726.972:1168): avc: denied { ioctl } for pid=7195 comm="syz.3.358" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 179.645856][ T30] audit: type=1400 audit(1787100727.150:1169): avc: denied { mounton } for pid=7207 comm="syz.4.361" path="/72/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 179.672474][ T7208] netlink: 'syz.4.361': attribute type 29 has an invalid length. [ 179.716151][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 179.952761][ T7219] netlink: 91 bytes leftover after parsing attributes in process `syz.1.364'. [ 179.963511][ T5711] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 180.121610][ T7227] netlink: 24 bytes leftover after parsing attributes in process `syz.4.367'. [ 180.132028][ T5711] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 180.145951][ T5711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 180.166062][ T5711] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 180.185866][ T5711] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.207256][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 180.227255][ T5711] usb 1-1: Product: syz [ 180.238267][ T5711] usb 1-1: Manufacturer: syz [ 180.243994][ T5711] usb 1-1: SerialNumber: syz [ 180.442949][ T7234] FAULT_INJECTION: forcing a failure. [ 180.442949][ T7234] name failslab, interval 1, probability 0, space 0, times 0 [ 180.474212][ T7234] CPU: 0 UID: 0 PID: 7234 Comm: syz.3.369 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.474239][ T7234] Tainted: [L]=SOFTLOCKUP [ 180.474245][ T7234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 180.474254][ T7234] Call Trace: [ 180.474260][ T7234] [ 180.474265][ T7234] dump_stack_lvl+0x100/0x190 [ 180.474290][ T7234] should_fail_ex.cold+0x5/0xa [ 180.474313][ T7234] should_failslab+0xc2/0x120 [ 180.474336][ T7234] kmem_cache_alloc_noprof+0x91/0x6a0 [ 180.474358][ T7234] ? anon_vma_clone+0x2ba/0xcd0 [ 180.474387][ T7234] anon_vma_clone+0x2ba/0xcd0 [ 180.474418][ T7234] __split_vma+0x51f/0xda0 [ 180.474438][ T7234] ? __pfx___split_vma+0x10/0x10 [ 180.474460][ T7234] ? __pfx_mas_prev+0x10/0x10 [ 180.474484][ T7234] vms_gather_munmap_vmas+0x3a5/0x1720 [ 180.474507][ T7234] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 180.474534][ T7234] ? mas_walk+0x6ef/0x9b0 [ 180.474565][ T7234] __mmap_region+0x4a7/0x2db0 [ 180.474586][ T7234] ? __pfx___mmap_region+0x10/0x10 [ 180.474604][ T7234] ? __pfx___might_resched+0x10/0x10 [ 180.474630][ T7234] ? up_write+0x2e5/0x5c0 [ 180.474651][ T7234] ? process_measurement+0x1f4/0x2350 [ 180.474678][ T7234] ? __lock_acquire+0x49f/0x1a40 [ 180.474701][ T7234] ? __lock_acquire+0x49f/0x1a40 [ 180.474721][ T7234] ? find_held_lock+0x2b/0x80 [ 180.474732][ T7234] ? is_bpf_text_address+0x8a/0x1a0 [ 180.474786][ T7234] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 180.474809][ T7234] mmap_region+0x35d/0x620 [ 180.474827][ T7234] ? __pfx_mmap_region+0x10/0x10 [ 180.474843][ T7234] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 180.474863][ T7234] ? selinux_mmap_addr+0x2b/0x110 [ 180.474881][ T7234] ? bpf_lsm_mmap_addr+0x9/0x30 [ 180.474894][ T7234] ? security_mmap_addr+0x71/0x1e0 [ 180.474916][ T7234] ? __get_unmapped_area+0x255/0x3e0 [ 180.474939][ T7234] do_mmap+0xc63/0x12f0 [ 180.474964][ T7234] ? __pfx_do_mmap+0x10/0x10 [ 180.474987][ T7234] ? __pfx_down_write_killable+0x10/0x10 [ 180.475010][ T7234] vm_mmap_pgoff+0x29e/0x470 [ 180.475037][ T7234] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 180.475057][ T7234] ? __fget_files+0x215/0x3d0 [ 180.475080][ T7234] ? __fget_files+0x21f/0x3d0 [ 180.475103][ T7234] ksys_mmap_pgoff+0x3cb/0x610 [ 180.475128][ T7234] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 180.475149][ T7234] ? fput+0x79/0x100 [ 180.475170][ T7234] ? ksys_write+0x1ac/0x250 [ 180.475185][ T7234] ? __pfx_ksys_write+0x10/0x10 [ 180.475204][ T7234] __x64_sys_mmap+0x125/0x190 [ 180.475231][ T7234] do_syscall_64+0x115/0x870 [ 180.475254][ T7234] ? clear_bhb_loop+0x70/0xc0 [ 180.475274][ T7234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.475292][ T7234] RIP: 0033:0x7f5d40d9e0d9 [ 180.475307][ T7234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.475323][ T7234] RSP: 002b:00007f5d41ba6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 180.475340][ T7234] RAX: ffffffffffffffda RBX: 00007f5d41026090 RCX: 00007f5d40d9e0d9 [ 180.475351][ T7234] RDX: 000000000100000b RSI: 0000000000002000 RDI: 0000200000ffd000 [ 180.475361][ T7234] RBP: 00007f5d41ba6090 R08: 0000000000000003 R09: 0000000000000000 [ 180.475371][ T7234] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000001 [ 180.475381][ T7234] R13: 00007f5d41026128 R14: 00007f5d41026090 R15: 00007fff810ff008 [ 180.475404][ T7234] [ 180.498487][ T5711] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 180.687332][ T30] audit: type=1400 audit(1787100728.129:1170): avc: denied { read write } for pid=7209 comm="syz.0.362" name="lp0" dev="devtmpfs" ino=3122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 180.922710][ T30] audit: type=1400 audit(1787100728.129:1171): avc: denied { open } for pid=7209 comm="syz.0.362" path="/dev/usb/lp0" dev="devtmpfs" ino=3122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 181.034999][ T5711] usb 1-1: USB disconnect, device number 11 [ 181.053814][ T5711] usblp0: removed [ 181.382322][ T7251] fuse: Unknown parameter 'P[^dc*R' [ 182.756587][ T7264] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1551 sclass=netlink_audit_socket pid=7264 comm=syz.1.380 [ 182.787643][ T7264] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7264 comm=syz.1.380 [ 182.819283][ T7264] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7264 comm=syz.1.380 [ 184.734794][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 184.734824][ T30] audit: type=1400 audit(1787100731.081:1173): avc: denied { create } for pid=7269 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.075620][ T30] audit: type=1400 audit(1787100731.081:1174): avc: denied { write } for pid=7269 comm="syz.1.384" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.122446][ T5711] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 185.148819][ T30] audit: type=1400 audit(1787100731.461:1175): avc: denied { write } for pid=7271 comm="syz.2.383" name="c.1" dev="configfs" ino=14046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 185.915420][ T30] audit: type=1400 audit(1787100731.470:1176): avc: denied { write } for pid=7271 comm="syz.2.383" name="c.1" dev="configfs" ino=14046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 186.036771][ T7289] netlink: 64 bytes leftover after parsing attributes in process `syz.1.386'. [ 186.067708][ T5711] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 186.105210][ T30] audit: type=1400 audit(1787100733.307:1177): avc: denied { setopt } for pid=7291 comm="syz.3.388" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.105325][ T7294] xt_hashlimit: size too large, truncated to 1048576 [ 186.143427][ T5711] usb 1-1: Dual-Role OTG device on HNP port [ 186.172246][ T7300] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 186.218988][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.290354][ T30] audit: type=1400 audit(1787100733.443:1178): avc: denied { connect } for pid=7288 comm="syz.1.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.291293][ T1103] tipc: Subscription rejected, illegal request [ 186.379017][ T5711] gspca_main: spca501-2.14.0 probing 0000:0000 [ 186.426350][ T5711] gspca_spca501: reg write: error -32 [ 186.438365][ T30] audit: type=1400 audit(1787100733.454:1179): avc: denied { read } for pid=7288 comm="syz.1.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.462470][ T5711] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 186.473564][ T5711] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 186.544968][ T5711] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.878479][ T30] audit: type=1400 audit(1787100734.111:1180): avc: denied { mount } for pid=7315 comm="syz.0.394" name="/" dev="hugetlbfs" ino=14989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 187.003980][ T30] audit: type=1400 audit(1787100734.213:1181): avc: denied { connect } for pid=7312 comm="syz.2.392" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.448717][ T30] audit: type=1400 audit(1787100734.691:1182): avc: denied { getopt } for pid=7321 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.740215][ T7325] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 187.749934][ T7325] overlayfs: missing 'lowerdir' [ 187.853655][ T7326] netlink: 'syz.0.396': attribute type 10 has an invalid length. [ 187.888228][ T7326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.912566][ T7326] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 190.033071][ T30] audit: type=1400 audit(1787100737.246:1183): avc: denied { ioctl } for pid=7333 comm="syz.4.399" path="socket:[15036]" dev="sockfs" ino=15036 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.354619][ T7339] bonding: no command found in bonding_masters - use +ifname or -ifname [ 190.465221][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.945078][ T30] audit: type=1400 audit(1787100738.121:1184): avc: denied { write } for pid=7357 comm="syz.0.407" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 191.288616][ T30] audit: type=1400 audit(1787100738.121:1185): avc: denied { open } for pid=7357 comm="syz.0.407" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 191.288660][ T30] audit: type=1400 audit(1787100738.121:1186): avc: denied { listen } for pid=7357 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 191.601089][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 191.904317][ T5331] [ 191.906668][ T5331] ============================================ [ 191.912804][ T5331] WARNING: possible recursive locking detected [ 191.918941][ T5331] syzkaller #0 Tainted: G L [ 191.924905][ T5331] -------------------------------------------- [ 191.931038][ T5331] kworker/0:3/5331 is trying to acquire lock: [ 191.937093][ T5331] ffff8880329ad928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 191.946845][ T5331] [ 191.946845][ T5331] but task is already holding lock: [ 191.954186][ T5331] ffff888025fac128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 191.963911][ T5331] [ 191.963911][ T5331] other info that might help us debug this: [ 191.971947][ T5331] Possible unsafe locking scenario: [ 191.971947][ T5331] [ 191.979373][ T5331] CPU0 [ 191.982631][ T5331] ---- [ 191.985888][ T5331] lock(&grp->list_lock); [ 191.990282][ T5331] lock(&grp->list_lock); [ 191.994675][ T5331] [ 191.994675][ T5331] *** DEADLOCK *** [ 191.994675][ T5331] [ 192.002794][ T5331] May be due to missing lock nesting notation [ 192.002794][ T5331] [ 192.011086][ T5331] 3 locks held by kworker/0:3/5331: [ 192.016258][ T5331] #0: ffff88801c04f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 192.026678][ T5331] #1: ffffc9000319fd08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 192.038568][ T5331] #2: ffff888025fac128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 192.048726][ T5331] [ 192.048726][ T5331] stack backtrace: [ 192.054592][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.054612][ T5331] Tainted: [L]=SOFTLOCKUP [ 192.054616][ T5331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 192.054627][ T5331] Workqueue: events snd_rawmidi_input_event_work [ 192.054645][ T5331] Call Trace: [ 192.054650][ T5331] [ 192.054656][ T5331] dump_stack_lvl+0x100/0x190 [ 192.054673][ T5331] print_deadlock_bug.cold+0xbd/0xca [ 192.054696][ T5331] __lock_acquire+0x1256/0x1a40 [ 192.054717][ T5331] lock_acquire+0x1b9/0x370 [ 192.054732][ T5331] ? snd_seq_deliver_event+0x230/0x860 [ 192.054751][ T5331] ? do_raw_read_unlock+0x3f/0x70 [ 192.054771][ T5331] _raw_read_lock+0x5f/0x70 [ 192.054788][ T5331] ? snd_seq_deliver_event+0x230/0x860 [ 192.054804][ T5331] snd_seq_deliver_event+0x230/0x860 [ 192.054820][ T5331] ? do_raw_spin_lock+0x128/0x260 [ 192.054841][ T5331] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 192.054857][ T5331] ? mark_held_locks+0x40/0x70 [ 192.054874][ T5331] ? lockdep_hardirqs_on+0x78/0x100 [ 192.054893][ T5331] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 192.054911][ T5331] ? client_use_ptr+0x107/0x4b0 [ 192.054925][ T5331] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 192.054944][ T5331] queue_broadcast_event.isra.0+0x143/0x1b0 [ 192.054964][ T5331] ? __pfx_queue_broadcast_event.isra.0+0x10/0x10 [ 192.054984][ T5331] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 192.055003][ T5331] ? snd_seq_timer_start+0x1f0/0x2a0 [ 192.055016][ T5331] snd_seq_control_queue+0x709/0xb70 [ 192.055036][ T5331] ? __pfx_event_input_timer+0x10/0x10 [ 192.055049][ T5331] __snd_seq_deliver_single_event+0x127/0x1c0 [ 192.055068][ T5331] snd_seq_deliver_single_event+0x31f/0x8c0 [ 192.055084][ T5331] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 192.055102][ T5331] ? __lock_acquire+0x49f/0x1a40 [ 192.055126][ T5331] snd_seq_deliver_event+0x44b/0x860 [ 192.055141][ T5331] ? do_raw_spin_lock+0x128/0x260 [ 192.055162][ T5331] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 192.055177][ T5331] ? mark_held_locks+0x40/0x70 [ 192.055194][ T5331] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 192.055211][ T5331] ? lockdep_hardirqs_on+0x78/0x100 [ 192.055231][ T5331] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 192.055249][ T5331] ? client_use_ptr+0x107/0x4b0 [ 192.055263][ T5331] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 192.055281][ T5331] send_timer_event.isra.0+0x130/0x190 [ 192.055297][ T5331] ? __pfx_send_timer_event.isra.0+0x10/0x10 [ 192.055315][ T5331] ? lockdep_hardirqs_on+0x78/0x100 [ 192.055333][ T5331] ? snd_seq_queue_timer_set_tempo+0x199/0x510 [ 192.055355][ T5331] snd_seq_oss_timer_start+0x1db/0x320 [ 192.055372][ T5331] ? __pfx_snd_seq_oss_timer_start+0x10/0x10 [ 192.055389][ T5331] ? snd_seq_oss_readq_put_timestamp+0xd1/0x260 [ 192.055412][ T5331] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 192.055430][ T5331] ? find_slot+0x166/0x1b0 [ 192.055448][ T5331] snd_seq_oss_midi_input+0x467/0xa30 [ 192.055469][ T5331] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 192.055491][ T5331] ? find_held_lock+0x2b/0x80 [ 192.055504][ T5331] ? snd_seq_port_use_ptr+0x128/0x190 [ 192.055519][ T5331] snd_seq_oss_event_input+0x194/0x250 [ 192.055537][ T5331] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 192.055555][ T5331] __snd_seq_deliver_single_event+0x127/0x1c0 [ 192.055573][ T5331] snd_seq_deliver_single_event+0x31f/0x8c0 [ 192.055591][ T5331] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 192.055607][ T5331] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 192.055626][ T5331] ? lockdep_hardirqs_on+0x78/0x100 [ 192.055644][ T5331] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 192.055663][ T5331] ? snd_seq_timer_get_cur_tick+0x50/0x70 [ 192.055677][ T5331] snd_seq_deliver_event+0x2c1/0x860 [ 192.055695][ T5331] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 192.055711][ T5331] ? mark_held_locks+0x40/0x70 [ 192.055729][ T5331] ? lockdep_hardirqs_on+0x78/0x100 [ 192.055749][ T5331] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 192.055769][ T5331] ? client_use_ptr+0x107/0x4b0 [ 192.055784][ T5331] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 192.055802][ T5331] snd_midi_input_event+0x32f/0x470 [ 192.055818][ T5331] ? __pfx_snd_midi_input_event+0x10/0x10 [ 192.055831][ T5331] ? lock_acquire+0x5e/0x370 [ 192.055850][ T5331] ? __pfx_snd_midi_input_event+0x10/0x10 [ 192.055862][ T5331] snd_rawmidi_input_event_work+0x61/0x80 [ 192.055880][ T5331] process_one_work+0xa23/0x1940 [ 192.055897][ T5331] ? __pfx_process_one_work+0x10/0x10 [ 192.055915][ T5331] ? __pfx_snd_rawmidi_input_event_work+0x10/0x10 [ 192.055934][ T5331] worker_thread+0x5ef/0xe50 [ 192.055950][ T5331] ? __pfx_worker_thread+0x10/0x10 [ 192.055966][ T5331] ? kthread+0x13a/0x450 [ 192.055979][ T5331] ? __pfx_worker_thread+0x10/0x10 [ 192.055992][ T5331] kthread+0x370/0x450 [ 192.056005][ T5331] ? __pfx_kthread+0x10/0x10 [ 192.056018][ T5331] ret_from_fork+0x72b/0xd50 [ 192.056038][ T5331] ? __pfx_ret_from_fork+0x10/0x10 [ 192.056058][ T5331] ? __switch_to+0x800/0x10f0 [ 192.056072][ T5331] ? __pfx_kthread+0x10/0x10 [ 192.056085][ T5331] ret_from_fork_asm+0x1a/0x30 [ 192.056109][ T5331] [ 192.600791][ T30] audit: type=1400 audit(1787100739.258:1187): avc: denied { create } for pid=7381 comm="syz.2.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 193.004524][ T7389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.013145][ T7389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.190869][ T30] audit: type=1400 audit(1787100740.369:1188): avc: denied { getopt } for pid=7381 comm="syz.2.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 193.232089][ T5331] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 193.380139][ T5331] usb 5-1: device descriptor read/64, error -71 [ 193.625335][ T5331] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 193.753191][ T5331] usb 5-1: device descriptor read/64, error -71 [ 193.862972][ T5331] usb usb5-port1: attempt power cycle [ 194.204740][ T5331] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 194.225503][ T5331] usb 5-1: device descriptor read/8, error -71 [ 194.466428][ T5331] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 194.486888][ T5331] usb 5-1: device descriptor read/8, error -71 [ 194.597547][ T5331] usb usb5-port1: unable to enumerate USB device