last executing test programs: 28m35.880881759s ago: executing program 2 (id=865): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 28m34.605688392s ago: executing program 2 (id=870): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, 0x0) 28m33.732596531s ago: executing program 2 (id=874): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) userfaultfd(0x80800) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) r3 = syz_usb_connect(0x4, 0x55, &(0x7f0000000100)=ANY=[@ANYRES64], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x4, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0x0, 0x5, 0x2, 0x9}, {0x953c, 0xff, 0x65, 0x7}, {0x1, 0x1, 0x0, 0xfff}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8000000008]}, 0x8, 0x800) acct(0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) rt_sigsuspend(0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x0) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000004c0)={0x3, {{0xa, 0x5e22, 0xc, @mcast1, 0x408}}, 0x1}, 0x90) syz_usb_control_io(r3, 0x0, 0x0) signalfd4(r6, &(0x7f0000000140)={[0x1]}, 0x8, 0x80000) 28m30.055060019s ago: executing program 2 (id=891): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0) r0 = socket(0x1, 0x2, 0x102) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x2) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, 0x0, 0x22000054) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x20000000, &(0x7f0000000300)="4e684412e34a05061ed1a14dc63259ce04520efb7e955abd8a4fb7cd197ad556830ee0e61ac9f24a33b21a7e6c0c98dbc472b4827ee5d5fea3b823d5bc6eb4c39d5e5be6494851cb0ad94d0812107a2594d4f6fcdef61a920ef2ddaca954857f10cc18e92bd75a467926d1ef8823b1726051afd2d62b0ab2dcd042f7dc5a675748656f20b483779c4ac95e4e39b0e379b63ed8da46b26bd9a1ed0a1318a4983037413adc28dd9dbd07", 0xa9, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="6c59745b68ede56533e8434f6d34f31d4f9fd32ca7d328a4b33367b795f461d19d5f464f96280ec1a6a65602eefa98ecf10b87b72ee0027b9a1cbabc21f29bdcf17fc38fcf225fa59ed5483851ab2c08c96350c7f74f0094c0770d056507ff6435a34aabe4f5d52605ac30feb5b77dcbf96c1bf26868754bd920338b255c66f7d9010a1c0641c0b5beab1056a96e63f9a00fe5de3bf29dfca84bed718114ec0b53c8194215937906a6a691675c9efa5b1baa6954c173e07755ab26851a36f9f317bd486721655fbe2965b2b5ebc99b91e09ee94221aaf94f170e9edfca1f35c2023bcb0607fbcdcc9625bed63c117b07e6897519926a493f") prlimit64(r4, 0xb, &(0x7f0000000540)={0xf, 0x4}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x303, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000600)={0x2020}, 0x2020) 28m25.94054943s ago: executing program 2 (id=909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000000020c000180080001400000fa03080008400000005c05000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) r3 = fsmount(r2, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat2(r3, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60901000000002066000000646c6c251801000020646c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200), 0x0, 0xfffffffffffffffe) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd1, &(0x7f0000000000)=0x2, 0x4) ioctl$XFS_IOC_SET_RESBLKS(r6, 0xc0105872, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r5, 0x40026f34, &(0x7f0000000040)=0x1) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 28m25.103058319s ago: executing program 2 (id=912): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000400), 0xd, 0x28580) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc040564a, &(0x7f0000000000)={0x0, 0x7fff, 0x100f, 0xffffffffffffffff, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring) 28m23.953698495s ago: executing program 32 (id=912): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000400), 0xd, 0x28580) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc040564a, &(0x7f0000000000)={0x0, 0x7fff, 0x100f, 0xffffffffffffffff, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring) 7.929873536s ago: executing program 5 (id=6892): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e0102030109021200"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="416ca0e555a7a9dfa12fe0afccb7298719c889a4854aba18521296808e5aac950b8efceec7817611272c4fb2eca66df8c1581ebc70546ab235ade695cd6fdc597abe00c31b51ebc248fedc2e2655f406e23f9f2543b51f92d96b7ac0ffc47c739b416b666d5d519c3f109736dd4f0e439df352fa5b9cf499716ee2bdee05090c8c463016cbc8e147c7081c438ab83a343166a8d08e3497a84baf97359915ba62ca872c5fa05b8ede9bbdf0edc9c6a76cdb3ac7cb6c51"], 0x0, 0x0}) syz_usb_control_io$uac2(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x195fc63901d89a09, 0x23, 0xe, {0xe, 0x2, "6b323af9d9348624e92c2920"}}, &(0x7f0000000140)={0x0, 0x3, 0x6b, @string={0x6b, 0x3, "c8c4faa2769a038250475dd2d1c45d349bc4752536023cff54b48ac039bf1ba398ac188da1b7252eb669eea3f4de5bb75047efd7caff79624f2d8b49193a93062d9a03353ec12bad3992bf9c8210a7023dfd63dccd6c997f5dc675b9ab0ee68526ba5db2244822ef33"}}}, &(0x7f0000000580)={0x44, &(0x7f0000000200)={0x40, 0x16, 0xfe, "f79541e178fa0b0eb6bd19528491c199c7c3dd6c05c66fe60b84b8a8f7e31594fef1119765888e0efb5449e103477696f86a6d3e4f41c991e072e0eee1725f2928f83999a38daf6f4bb96296b0de32fa95d8e679ecc05b84948b4c6f691e37e78b06fc2db562b08b67cd42e45891647c2018983ffadfa9912e3d049dd64c6fc54746f41f39780522acb6e9f4c806bf13edf493cf545da5ba5b091c9bb1814c9b702ca9ab4980fecb628c1fe4864a455c7334292f53f7aa33515173f16e6db69a40c26f95a60ba2dac7d5cba815f08f1bfcd1ff571924133903d4753ecd9d7fc229b05c7e1e9701df8c9c5ed1de294abee9a728b0847b632a76a70bc1b7ab"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000003c0)={0x20, 0x81, 0x2, "194e"}, &(0x7f0000000500)={0x20, 0x82, 0x3, "08001e"}, &(0x7f0000000440)={0x20, 0x83, 0x2, '\x00\x00'}, &(0x7f0000000480)={0x20, 0x84, 0x3, "4cd9ec"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "607305"}}) 7.711150948s ago: executing program 3 (id=6894): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000200001002dbd7000fcdbdf250a008000090000051e80020014000200fc0200"/45], 0x38}}, 0x480d0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 7.479888846s ago: executing program 3 (id=6896): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x3, [0x0, 0x0, 0x0, 0x9, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x6000000, 0x8, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9197, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x2007, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40, 0x0, 0x200, 0x0, 0xfffffffe, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x921, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0xffffffff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x6c, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1f73, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xcaa, 0x10006, 0x0, 0xfffffff7, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000050b000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 7.126070186s ago: executing program 1 (id=6898): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) listen(r2, 0x5) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) syz_usb_ep_write(r1, 0x42, 0x9b, &(0x7f0000000540)="e1ce0b9d3c7bcb8eaa2676576faaf47e9fde0002369f5de29acaafbf03c117fb3d45f05edc9d7632f21dacb6fc763ff49dc20b35644bb7d93d98e979055246fd3843985545fc57689cb10665181148bdd2b68fa417e9b2760c0fdf6de4999be3979329045873079b5bbd6140f489f94ee0cdd80b1dd9b4eff1c04531639de45c088dbb7f59b1dda97bae2cc2ec3cad4ce0c7626bea6915a7c77047") sendmsg$nl_route(r0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'veth1\x00'}) 6.612222435s ago: executing program 4 (id=6900): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x39b3) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000400)=0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) read$FUSE(0xffffffffffffffff, &(0x7f0000004900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff54) r5 = syz_open_procfs$namespace(r4, &(0x7f0000003a00)='ns/cgroup\x00') bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001700)=ANY=[@ANYBLOB="50ec3e3cfeb32140add5d7849472c11ab7fc1a6864276af54ff82af438f7dac04c9ca3030edf7e2722c1681907e73bd4519e68c612da6415d1d7113cff4c035622e5aec216c6ff191ec7038c955ab70c1fcd3252e4e4c65a084c74b455159fd6254b0210a4ed3105a32ad031cc49", @ANYRES32=r2, @ANYBLOB="cb551bc402f4b9cd014a8fd8dffa2804c961e4fbaefa4242cf54dd5d2d384a975a02000000000000"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x12140, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0x1b, 0x0, &(0x7f00000001c0)="df33c9f7b9322bd440fa09353428ba4053e491f4ff000000004000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r6, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000003000000010002000008000f40fe000000", 0x24) r7 = accept4$nfc_llcp(r5, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2400, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETTXFILTER(r8, 0x400454d1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) write(0xffffffffffffffff, &(0x7f0000000300)='reg-fixed-voltage\x00', 0x12) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f00000004c0)={0x648, r2, 0x24, {0x5, 0x5}, 0xb}, 0x1) socket$rds(0x15, 0x5, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="5c0000007d0100000055000500a9080000100000000008000000000000000000849001000000705f66696c6573000a006d61705f66696c6573000100260d002f6465762f6e65742f74756e003f6e5780630d474850a812da64c9ab897e6cff92bcd0538af24f46def261e968968503924e639a1fbab23d1168b8b98e507e7745e34dc5724672d5338283f6b33dfc6ea6affb23e98907e375a02158af731bc81a87b119778cac24bdfe42d34934041e3d08213e375529c0d8eb8f170be30fdef88d3397d7e99536d8aa1fa2ebd3d575fb69d6307854622f4291b0dafb09743d8edd7b882f2c36fa3ee0ef9db162e903458011dfeda7d62e9ec79100"/266], 0xffffffffffffff62) connect$nfc_llcp(r7, &(0x7f0000000100)={0x27, r9, 0xffffffffffffffff, 0x5, 0x8, 0x3, "2a0ab697997c3d91d8afc2d51789b0118ca6de311934589bf66a428022ba814c0752facdbac298d1ce2d398c49d9d34faf0afd302b416d7772770938d043e3", 0x3f}, 0x60) prlimit64(0x0, 0xd, &(0x7f0000000480)={0x8, 0x8d}, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000180)="cb"}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='m'}) 5.883026846s ago: executing program 3 (id=6903): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, 0x0, 0x7f03) r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) syz_usb_connect(0x5, 0x12e, &(0x7f0000000040)=ANY=[@ANYRESHEX=r4], 0x0) 5.656486218s ago: executing program 0 (id=6904): close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x7, &(0x7f0000006680)) r0 = openat(0xffffffffffffff9c, 0x0, 0x404c2, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) close(r1) recvmmsg$unix(r0, &(0x7f00000052c0)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000003080)=[{&(0x7f0000000200)=""/187, 0xbb}, {&(0x7f00000002c0)=""/109, 0x6d}, {&(0x7f0000000340)=""/248, 0xf8}, {&(0x7f0000000440)=""/169, 0xa9}, {&(0x7f0000000500)=""/84, 0x54}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x6}}, {{&(0x7f0000003100)=@abs, 0x6e, &(0x7f0000003480)=[{&(0x7f0000003180)=""/109, 0x6d}, {&(0x7f0000003200)=""/224, 0xe0}, {&(0x7f0000003300)=""/67, 0x43}, {&(0x7f0000003380)=""/5, 0x5}, {&(0x7f00000033c0)=""/115, 0x73}, {&(0x7f0000003440)=""/35, 0x23}], 0x6, &(0x7f0000003500)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f00000035c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/17, 0x11}, {&(0x7f0000004680)=""/130, 0x82}], 0x3, &(0x7f0000004780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f00000047c0), 0x6e, &(0x7f00000048c0)=[{&(0x7f0000004840)=""/124, 0x7c}], 0x1, &(0x7f0000004900)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000004980), 0x6e, &(0x7f0000004d40)=[{&(0x7f0000004a00)=""/50, 0x32}, {&(0x7f0000004a40)=""/194, 0xc2}, {&(0x7f0000004b40)=""/178, 0xb2}, {&(0x7f0000004c00)=""/28, 0x1c}, {&(0x7f0000004c40)=""/159, 0x9f}, {&(0x7f0000004d00)=""/22, 0x16}], 0x6, &(0x7f0000004dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000004e80), 0x6e, &(0x7f0000005280)=[{&(0x7f0000004f00)=""/204, 0xcc}, {0x0}, {&(0x7f0000005100)=""/108, 0x6c}], 0x3}}], 0x6, 0x40000123, &(0x7f0000005440)={0x77359400}) utime(&(0x7f0000000140)='./file0/file0\x00', 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x1, 0x4f, 0x80000001, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x18, 0x4, 0x5, 0x8, r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000580)={"415605bee420485d69c6e479ca5e11e2", 0x0, 0x0, {0x81, 0x7}, {0x7fff, 0x9}, 0x400, [0xffffffffffffa135, 0x0, 0x1, 0x1, 0x7, 0xd, 0xfffffffffffffffc, 0x1, 0xf32, 0x5, 0x2f31, 0x2, 0x4000000000000, 0x1, 0x3d21518e, 0xfa1]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000005480)={{r5}, r6, 0x14, @inherit={0x80, &(0x7f0000000680)={0x0, 0x7, 0x6bf, 0x3, {0x2c, 0xe, 0xc, 0x4, 0x2}, [0xffffffffffff48f9, 0x0, 0x4, 0x2, 0x8000, 0x3ff, 0x5]}}, @subvolid=0xf8}) r7 = syz_open_dev$dmmidi(&(0x7f0000001600), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r7, 0x40045702, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000018140100000000000000000008000100"], 0x20}, 0x1, 0x0, 0x0, 0x200040c0}, 0x90) 5.056866709s ago: executing program 0 (id=6905): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)={0x34, 0x0, 0xe29, 0x70bd29, 0x5dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "53e0e85290ceb080fb816d3cdadf198b"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) 4.985041545s ago: executing program 1 (id=6906): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000002100), 0x0) 4.972494095s ago: executing program 0 (id=6907): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/81, 0x51}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYRES64=r1], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 4.832463536s ago: executing program 0 (id=6908): r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x48043) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r2, &(0x7f0000000240)="a7", &(0x7f0000001700)=""/4096}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0xffffffffffffff5f, &(0x7f0000000580)={&(0x7f0000000200)=@can_newroute={0x20, 0x18, 0x300, 0x74bd2d, 0x25dfdbfb, {0x1d, 0x1, 0x6}, [@CGW_MOD_SET={0x0, 0x4, {{{0x3, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "a6b63a01f53d7818"}, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c001}, 0x800) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r5, 0x0, 0x61000006, &(0x7f0000000340)) sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x8996) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x37}, 0x24}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x40002, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) r7 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.723837922s ago: executing program 4 (id=6909): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) ftruncate(0xffffffffffffffff, 0x51a9497) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYRES8=r2, @ANYBLOB="ba1a075b98f1022a1bb3063b3f7998aec53d4af28f47211fab5dc7c06606caa5379de35d727488e533b962f3c79091aaff0247e8301d6b918d75eae850b013dc5b0b093919091fa42d537c7169f65cdf98ee440a5e300dfaace51e68c6de6f53942124735549c9e0be0aedcde03845d7f2a98abbdc34174fe32ef941c0cb945f94cc04356ead58efc00038e9fa99ad09f05d85b8805b759e7edf4831e8dc3c75b157dfe02f55db686666debef8", @ANYRES32, @ANYBLOB="004989005b2898f81d2ebaa318260423162700000000000000000066000080000025000000d3a2330bda578910ef3d9e355a9b9f6edef5e08916a9743f72ecc9bdf51b14cf5cbf357a48d56259305ba9da6c29baf3f29528e39a3378443b3417b3626e95b595c37974ef0dbb98ceaa39a87cba5ea71e0707e5e4ebffb01af4d3c73d8aaedf496300"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x40) bind(r4, &(0x7f0000000000)=@hci={0xa, 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.639054814s ago: executing program 5 (id=6910): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='my_tracefs\x00', &(0x7f0000000200)={0x400, 0x40, 0x7}, 0x18) getdents(r0, &(0x7f0000000240)=""/27, 0x1b) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) (async, rerun: 64) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) (async) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES8=0x0]) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) (async) mount(0x0, 0x0, &(0x7f0000000300)='msdos\x00', 0x41, 0x0) (async) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000016c0)={0x29, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004", @ANYRES32], 0x48) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYRESHEX=r0, @ANYRES32=r8, @ANYRESHEX=0x0], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 4.457846585s ago: executing program 0 (id=6911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x74) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x80800) 4.360289239s ago: executing program 5 (id=6912): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x0) 4.188774542s ago: executing program 5 (id=6913): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) io_setup(0x6, &(0x7f00000000c0)=0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_async', 0x1a1081, 0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x1, r5, &(0x7f0000000100)="391ff582", 0x4}]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd29000084"], 0x48) r7 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xa9, 0x79, 0xb5, 0x20, 0xe41, 0x4159, 0xb8da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd1, 0x50, 0x60, "", [{{0x9, 0x4, 0x0, 0x1, 0x0, 0x25, 0x1c, 0xde, 0x2}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf, 0x82, 0xbc, 0x40, 0xaf7, 0x101, 0xccda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_disconnect(r7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000006c0), 0x10020005, r6}, 0x38) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0xd}}}]}, 0x80}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x408}, {r1, 0x50}], 0x2, &(0x7f0000000180), &(0x7f0000000340)={[0x9]}, 0x8) syz_open_dev$sg(0x0, 0x0, 0x8002) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) openat$cgroup_type(r11, &(0x7f00000003c0), 0x2, 0x0) 3.948561888s ago: executing program 1 (id=6914): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='8\x00', 0x2) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x76, &(0x7f0000000140)=@assoc_value, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1000}, 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x4bb, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000003440)=""/4096) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001d00), 0x2e03, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r5, 0x43403d0e, &(0x7f0000000440)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xb, 0x0, &(0x7f0000000180)="0080000000006f00e266eb", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50) 3.757066877s ago: executing program 0 (id=6915): ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) ftruncate(0xffffffffffffffff, 0x51a9497) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYRES8=r1, @ANYBLOB="ba1a075b98f1022a1bb3063b3f7998aec53d4af28f47211fab5dc7c06606caa5379de35d727488e533b962f3c79091aaff0247e8301d6b918d75eae850b013dc5b0b093919091fa42d537c7169f65cdf98ee440a5e300dfaace51e68c6de6f53942124735549c9e0be0aedcde03845d7f2a98abbdc34174fe32ef941c0cb945f94cc04356ead58efc00038e9fa99ad09f05d85b8805b759e7edf4831", @ANYRES32, @ANYBLOB="004989005b2898f81d2ebaa318260423162700000000000000000066000080000025000000d3a2330bda578910ef3d9e355a9b9f6edef5e08916a9743f72ecc9bdf51b14cf5cbf357a48d56259305ba9da6c29baf3f29528e39a3378443b3417b3626e95b595c37974ef0dbb98ceaa39a87cba5ea71e0707e5e4ebffb01af4d3c73d8aaedf496300"], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000640)={'team0\x00', &(0x7f00000005c0)=@ethtool_link_settings={0x4c, 0x4, 0xb8, 0x6, 0x2, 0x5, 0x3, 0x2, 0x8, 0x4, [0x2, 0xa, 0xb7, 0x6, 0xaa, 0x8001, 0x8, 0xbfa7]}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x40) bind(r4, &(0x7f0000000000)=@hci={0xa, 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r2, @ANYRES8, @ANYRES32=r3, @ANYRESDEC], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.159213976s ago: executing program 4 (id=6916): close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x7, &(0x7f0000006680)) r0 = openat(0xffffffffffffff9c, 0x0, 0x404c2, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) close(r1) recvmmsg$unix(r0, &(0x7f00000052c0)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000003080)=[{&(0x7f0000000200)=""/187, 0xbb}, {&(0x7f00000002c0)=""/109, 0x6d}, {&(0x7f0000000340)=""/248, 0xf8}, {&(0x7f0000000440)=""/169, 0xa9}, {&(0x7f0000000500)=""/84, 0x54}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x6}}, {{&(0x7f0000003100)=@abs, 0x6e, &(0x7f0000003480)=[{&(0x7f0000003180)=""/109, 0x6d}, {&(0x7f0000003200)=""/224, 0xe0}, {&(0x7f0000003300)=""/67, 0x43}, {&(0x7f0000003380)=""/5, 0x5}, {&(0x7f00000033c0)=""/115, 0x73}, {&(0x7f0000003440)=""/35, 0x23}], 0x6, &(0x7f0000003500)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f00000035c0), 0x6e, &(0x7f0000004740)=[{&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/17, 0x11}, {&(0x7f0000004680)=""/130, 0x82}], 0x3, &(0x7f0000004780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f00000047c0), 0x6e, &(0x7f00000048c0)=[{&(0x7f0000004840)=""/124, 0x7c}], 0x1, &(0x7f0000004900)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000004980), 0x6e, &(0x7f0000004d40)=[{&(0x7f0000004a00)=""/50, 0x32}, {&(0x7f0000004a40)=""/194, 0xc2}, {&(0x7f0000004b40)=""/178, 0xb2}, {&(0x7f0000004c00)=""/28, 0x1c}, {&(0x7f0000004c40)=""/159, 0x9f}, {&(0x7f0000004d00)=""/22, 0x16}], 0x6, &(0x7f0000004dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000004e80), 0x6e, &(0x7f0000005280)=[{&(0x7f0000005000)=""/223, 0xdf}, {&(0x7f0000005100)=""/108, 0x6c}], 0x2}}], 0x6, 0x40000123, &(0x7f0000005440)={0x77359400}) utime(&(0x7f0000000140)='./file0/file0\x00', 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x1, 0x4f, 0x80000001, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x18, 0x4, 0x5, 0x8, r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000580)={"415605bee420485d69c6e479ca5e11e2", 0x0, 0x0, {0x81, 0x7}, {0x7fff, 0x9}, 0x400, [0xffffffffffffa135, 0x0, 0x1, 0x1, 0x7, 0xd, 0xfffffffffffffffc, 0x1, 0xf32, 0x5, 0x2f31, 0x2, 0x4000000000000, 0x1, 0x3d21518e, 0xfa1]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000005480)={{r5}, r6, 0x14, @inherit={0x80, &(0x7f0000000680)={0x0, 0x7, 0x6bf, 0x3, {0x2c, 0xe, 0xc, 0x4, 0x2}, [0xffffffffffff48f9, 0x0, 0x4, 0x2, 0x8000, 0x3ff, 0x5]}}, @subvolid=0xf8}) r7 = syz_open_dev$dmmidi(&(0x7f0000001600), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r7, 0x40045702, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000018140100000000000000000008000100"], 0x20}, 0x1, 0x0, 0x0, 0x200040c0}, 0x90) 3.023335599s ago: executing program 1 (id=6917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) listen(r2, 0x5) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) syz_usb_ep_write(r1, 0x42, 0x9b, &(0x7f0000000540)="e1ce0b9d3c7bcb8eaa2676576faaf47e9fde0002369f5de29acaafbf03c117fb3d45f05edc9d7632f21dacb6fc763ff49dc20b35644bb7d93d98e979055246fd3843985545fc57689cb10665181148bdd2b68fa417e9b2760c0fdf6de4999be3979329045873079b5bbd6140f489f94ee0cdd80b1dd9b4eff1c04531639de45c088dbb7f59b1dda97bae2cc2ec3cad4ce0c7626bea6915a7c77047") sendmsg$nl_route(r0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'veth1\x00'}) 2.846125833s ago: executing program 4 (id=6918): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0xa4c593486f2e234d) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000007, 0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x104a, 0x28900) r3 = gettid() r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000280)={{0x5, 0x4, 0x4, 0x0, 'syz0\x00', 0x3ff}, 0x1, 0x100, 0x40, r3, 0x0, 0x8501, 'syz0\x00', 0x0}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f004, 0x20000000}) 2.755425392s ago: executing program 3 (id=6919): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7de6}]}, 0x30}}, 0x0) (async) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r0, 0x402) (async) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x1, 0x2}}) (async, rerun: 32) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) (rerun: 32) 2.532847669s ago: executing program 4 (id=6920): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000002100), 0x0) 2.388719268s ago: executing program 3 (id=6921): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019440)=""/102400, 0x19000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x300, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd34}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) setgroups(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000200000000000000070000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) r7 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000002100), 0x0) 308.763638ms ago: executing program 1 (id=6923): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x0) 302.831534ms ago: executing program 4 (id=6924): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_connect(0x5, 0x12e, &(0x7f0000000040)=ANY=[@ANYRESHEX=r4], 0x0) 180.332435ms ago: executing program 5 (id=6925): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) lsm_list_modules(0x0, &(0x7f0000000000), 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x20080a0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x2040) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 11.250826ms ago: executing program 1 (id=6926): mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x20002, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x6, 0x10, 0x7}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)) syz_ublk_setup_io_uring(0xf0b, &(0x7f0000000140)={0x0, 0xf5ab, 0x2, 0x1, 0x2b0}, &(0x7f0000000280), &(0x7f0000000340), &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, 0x0, r3, &(0x7f0000002d00)=@IORING_OP_RECVMSG={0xa, 0x4, 0x34, 0xffffffffffffffff, 0x0, &(0x7f0000002cc0)={&(0x7f0000000400)=@phonet, 0x80, &(0x7f0000002c00)=[{&(0x7f0000000500)=""/151, 0x97}, {&(0x7f00000005c0)=""/14, 0xe}, {&(0x7f0000000600)=""/137, 0x89}, {&(0x7f00000006c0)=""/61, 0x3d}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/235, 0xeb}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x7, &(0x7f0000002c80)=""/1, 0x1}, 0x0, 0x10100, 0x1, {0x3}}) syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x40400) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) 0s ago: executing program 3 (id=6927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x1, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x9}, {0x0, 0xfff1}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000811}, 0x4041080) kernel console output (not intermixed with test programs): d0: Unsupported socket: should be TCP or UNIX. [ 1940.823127][ T1616] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1940.838229][T30018] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1940.856391][ T5686] usb 4-1: Using ep0 maxpacket: 8 [ 1940.881906][T14539] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1940.883839][ T5686] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1940.891654][T14539] CPU: 1 UID: 0 PID: 14539 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1940.891684][T14539] Tainted: [L]=SOFTLOCKUP [ 1940.891691][T14539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1940.891704][T14539] Workqueue: hci4 hci_rx_work [ 1940.891738][T14539] Call Trace: [ 1940.891745][T14539] [ 1940.891754][T14539] dump_stack_lvl+0x100/0x190 [ 1940.891779][T14539] sysfs_warn_dup.cold+0x1c/0x28 [ 1940.891806][T14539] sysfs_create_dir_ns+0x24b/0x2b0 [ 1940.891829][T14539] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1940.891848][T14539] ? find_held_lock+0x2b/0x80 [ 1940.891865][T14539] ? kobject_add_internal+0x25f/0x930 [ 1940.891882][T14539] ? kobject_add_internal+0x25f/0x930 [ 1940.891901][T14539] ? do_raw_spin_unlock+0x145/0x1e0 [ 1940.891926][T14539] kobject_add_internal+0x2c8/0x930 [ 1940.891946][T14539] kobject_add+0x16a/0x1e0 [ 1940.891962][T14539] ? __pfx_kobject_add+0x10/0x10 [ 1940.891976][T14539] ? class_to_subsys+0x10f/0x150 [ 1940.892004][T14539] ? kobject_put+0xb9/0x640 [ 1940.892027][T14539] ? _raw_spin_unlock+0x28/0x50 [ 1940.892052][T14539] device_add+0x294/0x1970 [ 1940.892076][T14539] ? __pfx_dev_set_name+0x10/0x10 [ 1940.892093][T14539] ? __pfx_device_add+0x10/0x10 [ 1940.892116][T14539] ? mgmt_send_event_skb+0x2fb/0x460 [ 1940.892144][T14539] hci_conn_add_sysfs+0x1a3/0x260 [ 1940.892168][T14539] le_conn_complete_evt+0x11eb/0x1f60 [ 1940.892195][T14539] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1940.892214][T14539] ? hci_event_packet+0x186/0xcd0 [ 1940.892236][T14539] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1940.892257][T14539] ? skb_pull_data+0x15f/0x1e0 [ 1940.892285][T14539] hci_le_meta_evt+0x34a/0x5f0 [ 1940.892306][T14539] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1940.892330][T14539] hci_event_packet+0x51c/0xcd0 [ 1940.892350][T14539] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1940.892372][T14539] ? __pfx_hci_event_packet+0x10/0x10 [ 1940.892395][T14539] ? kcov_remote_start+0x384/0x670 [ 1940.892415][T14539] ? lockdep_hardirqs_on+0x78/0x100 [ 1940.892442][T14539] hci_rx_work+0x451/0xfc0 [ 1940.892467][T14539] process_one_work+0xa23/0x1940 [ 1940.892495][T14539] ? __pfx_process_one_work+0x10/0x10 [ 1940.892521][T14539] ? __pfx_hci_rx_work+0x10/0x10 [ 1940.892543][T14539] worker_thread+0x5ef/0xe50 [ 1940.892570][T14539] ? kthread+0x13a/0x450 [ 1940.892585][T14539] ? __pfx_worker_thread+0x10/0x10 [ 1940.892602][T14539] kthread+0x370/0x450 [ 1940.892617][T14539] ? __pfx_kthread+0x10/0x10 [ 1940.892636][T14539] ret_from_fork+0x72b/0xd50 [ 1940.892660][T14539] ? __pfx_ret_from_fork+0x10/0x10 [ 1940.892684][T14539] ? __switch_to+0x800/0x10f0 [ 1940.892702][T14539] ? __pfx_kthread+0x10/0x10 [ 1940.892725][T14539] ret_from_fork_asm+0x1a/0x30 [ 1940.892761][T14539] [ 1940.892792][T14539] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1940.928717][ T5686] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1940.931364][T14539] Bluetooth: hci4: failed to register connection device [ 1941.225693][ T5686] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1941.258102][T30018] sctp: [Deprecated]: syz.5.6576 (pid 30018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1941.258102][T30018] Use struct sctp_sack_info instead [ 1941.266107][ T5686] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1941.274825][ T1616] usb 2-1: Using ep0 maxpacket: 8 [ 1941.293226][ T1616] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1941.301881][ T1616] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1941.302766][ T9] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1941.311800][ T1616] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1941.311832][ T1616] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1941.311854][ T1616] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1941.311894][ T1616] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1941.311917][ T1616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.382059][ T5686] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1941.395149][ T5686] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1941.402896][T30040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1941.404479][ T5686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.413402][T30040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1941.515359][ T9] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1941.517572][T30040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1941.537989][T30040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1941.541082][ T9] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1941.579525][ T9] asix 6-1:0.34: probe with driver asix failed with error -61 [ 1941.647134][ T1616] usb 2-1: usb_control_msg returned -32 [ 1941.653659][ T1616] usbtmc 2-1:16.0: can't read capabilities [ 1941.684677][ T5686] usb 4-1: usb_control_msg returned -32 [ 1941.696432][ T5686] usbtmc 4-1:16.0: can't read capabilities [ 1941.835371][T30044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6584'. [ 1941.880023][ T1616] usb 2-1: USB disconnect, device number 88 [ 1941.944349][T24934] usb 4-1: USB disconnect, device number 90 [ 1942.152208][T30050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1942.160937][T30050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1943.261094][T23795] Bluetooth: hci4: command 0x0406 tx timeout [ 1943.519407][ T1616] usb 6-1: USB disconnect, device number 77 [ 1944.244305][ T30] kauditd_printk_skb: 224 callbacks suppressed [ 1944.244324][ T30] audit: type=1400 audit(1786225266.193:16411): avc: denied { execmem } for pid=30077 comm="syz.0.6593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1944.314940][T30078] FAULT_INJECTION: forcing a failure. [ 1944.314940][T30078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1944.327991][T30078] CPU: 0 UID: 0 PID: 30078 Comm: syz.0.6593 Tainted: G L syzkaller #0 PREEMPT(full) [ 1944.328011][T30078] Tainted: [L]=SOFTLOCKUP [ 1944.328015][T30078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1944.328022][T30078] Call Trace: [ 1944.328027][T30078] [ 1944.328032][T30078] dump_stack_lvl+0x100/0x190 [ 1944.328050][T30078] should_fail_ex.cold+0x5/0xa [ 1944.328065][T30078] _copy_from_user+0x2e/0xd0 [ 1944.328081][T30078] memdup_user+0x6b/0xe0 [ 1944.328094][T30078] strndup_user+0x78/0xe0 [ 1944.328107][T30078] __x64_sys_mount+0x136/0x310 [ 1944.328123][T30078] ? __pfx___x64_sys_mount+0x10/0x10 [ 1944.328141][T30078] do_syscall_64+0x115/0x870 [ 1944.328156][T30078] ? clear_bhb_loop+0x70/0xc0 [ 1944.328170][T30078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1944.328181][T30078] RIP: 0033:0x7f63ad99e0d9 [ 1944.328191][T30078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1944.328202][T30078] RSP: 002b:00007f63ae91e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1944.328213][T30078] RAX: ffffffffffffffda RBX: 00007f63adc25fa0 RCX: 00007f63ad99e0d9 [ 1944.328220][T30078] RDX: 0000200000000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 1944.328226][T30078] RBP: 00007f63ae91e090 R08: 0000200000000000 R09: 0000000000000000 [ 1944.328232][T30078] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1944.328239][T30078] R13: 00007f63adc26038 R14: 00007f63adc25fa0 R15: 00007fffc45f6d88 [ 1944.328252][T30078] [ 1944.496214][ T30] audit: type=1400 audit(1786225266.763:16412): avc: denied { read } for pid=30077 comm="syz.0.6593" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1944.522356][ T30] audit: type=1400 audit(1786225266.763:16413): avc: denied { open } for pid=30077 comm="syz.0.6593" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1944.632527][ T30] audit: type=1400 audit(1786225267.043:16414): avc: denied { read } for pid=30080 comm="syz.3.6595" dev="nsfs" ino=4026532790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1944.661164][ T30] audit: type=1400 audit(1786225267.043:16415): avc: denied { open } for pid=30080 comm="syz.3.6595" path="net:[4026532790]" dev="nsfs" ino=4026532790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1944.684604][ T1616] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1944.931472][ T1616] usb 6-1: device descriptor read/64, error -71 [ 1944.965053][ T30] audit: type=1400 audit(1786225267.043:16416): avc: denied { create } for pid=30080 comm="syz.3.6595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1945.171217][ T1616] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1945.312555][ T1616] usb 6-1: device descriptor read/64, error -71 [ 1945.370502][T23795] Bluetooth: hci4: command 0x0406 tx timeout [ 1945.425083][ T1616] usb usb6-port1: attempt power cycle [ 1945.439791][ T30] audit: type=1400 audit(1786225267.043:16417): avc: denied { execmem } for pid=30080 comm="syz.3.6595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1945.493007][ T30] audit: type=1400 audit(1786225267.153:16418): avc: denied { ioctl } for pid=30071 comm="syz.5.6592" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1945.618386][ T30] audit: type=1400 audit(1786225267.153:16419): avc: denied { ioctl } for pid=30071 comm="syz.5.6592" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1945.689668][ T30] audit: type=1400 audit(1786225267.193:16420): avc: denied { ioctl } for pid=30071 comm="syz.5.6592" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1945.771217][ T1616] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1945.816218][ T1616] usb 6-1: device descriptor read/8, error -71 [ 1946.665432][ T1616] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1946.702780][ T1616] usb 6-1: device descriptor read/8, error -71 [ 1947.022724][ T1616] usb usb6-port1: unable to enumerate USB device [ 1947.242120][T30108] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1948.006487][T30112] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6597'. [ 1948.375968][T30119] [U]  [ 1949.288083][ T30] kauditd_printk_skb: 193 callbacks suppressed [ 1949.288102][ T30] audit: type=1400 audit(1786225271.763:16614): avc: denied { mounton } for pid=30124 comm="syz.5.6611" path="/498/my_configfs" dev="tmpfs" ino=2969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1949.442324][ T30] audit: type=1400 audit(1786225271.793:16615): avc: denied { mount } for pid=30124 comm="syz.5.6611" name="/" dev="configfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1950.283734][ T30] audit: type=1400 audit(1786225271.813:16616): avc: denied { search } for pid=30124 comm="syz.5.6611" name="/" dev="configfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1950.400547][ T30] audit: type=1400 audit(1786225271.813:16617): avc: denied { search } for pid=30124 comm="syz.5.6611" name="usb_gadget" dev="configfs" ino=3559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1950.471242][ T30] audit: type=1400 audit(1786225271.813:16618): avc: denied { search } for pid=30124 comm="syz.5.6611" name="g1" dev="configfs" ino=18641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1950.521218][T24934] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1950.623575][ T30] audit: type=1400 audit(1786225271.813:16619): avc: denied { search } for pid=30124 comm="syz.5.6611" name="functions" dev="configfs" ino=18642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1950.695359][ T30] audit: type=1400 audit(1786225271.903:16620): avc: denied { prog_load } for pid=30124 comm="syz.5.6611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1950.716407][ T30] audit: type=1400 audit(1786225271.903:16621): avc: denied { bpf } for pid=30124 comm="syz.5.6611" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1950.753479][T28812] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1950.760048][T28812] audit: audit_lost=57 audit_rate_limit=0 audit_backlog_limit=64 [ 1950.821179][T24934] usb 6-1: device descriptor read/64, error -71 [ 1951.061142][T24934] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1951.203769][T24934] usb 6-1: device descriptor read/64, error -71 [ 1951.340783][T24934] usb usb6-port1: attempt power cycle [ 1951.421284][ T1616] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1952.472600][T24934] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1952.503066][T24934] usb 6-1: device descriptor read/8, error -71 [ 1952.581553][ T1616] usb 4-1: Using ep0 maxpacket: 8 [ 1952.951745][ T1616] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1952.993732][ T1616] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1953.052471][ T1616] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1953.071683][T24934] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1953.082576][ T1616] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1953.112835][ T1616] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1953.135318][T24934] usb 6-1: device descriptor read/8, error -71 [ 1953.150931][ T1616] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1953.170958][ T1616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.251312][T24934] usb usb6-port1: unable to enumerate USB device [ 1953.398843][ T1616] usb 4-1: usb_control_msg returned -32 [ 1953.419401][ T1616] usbtmc 4-1:16.0: can't read capabilities [ 1953.625377][ T1616] usb 4-1: USB disconnect, device number 91 [ 1954.897447][ T30] kauditd_printk_skb: 198 callbacks suppressed [ 1954.897464][ T30] audit: type=1400 audit(1786225277.383:16813): avc: denied { listen } for pid=30164 comm="syz.5.6623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1955.067816][ T30] audit: type=1400 audit(1786225277.553:16814): avc: denied { create } for pid=30179 comm="syz.0.6626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1955.082481][T30180] FAULT_INJECTION: forcing a failure. [ 1955.082481][T30180] name failslab, interval 1, probability 0, space 0, times 0 [ 1955.110809][ T30] audit: type=1400 audit(1786225277.593:16815): avc: denied { accept } for pid=30164 comm="syz.5.6623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1955.143839][ T30] audit: type=1400 audit(1786225277.603:16816): avc: denied { accept } for pid=30164 comm="syz.5.6623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1955.174836][ T30] audit: type=1400 audit(1786225277.633:16817): avc: denied { read write } for pid=28812 comm="syz-executor" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1955.211927][T30180] CPU: 0 UID: 0 PID: 30180 Comm: syz.0.6626 Tainted: G L syzkaller #0 PREEMPT(full) [ 1955.211956][T30180] Tainted: [L]=SOFTLOCKUP [ 1955.211962][T30180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1955.211973][T30180] Call Trace: [ 1955.211979][T30180] [ 1955.211987][T30180] dump_stack_lvl+0x100/0x190 [ 1955.212018][T30180] should_fail_ex.cold+0x5/0xa [ 1955.212038][T30180] should_failslab+0xc2/0x120 [ 1955.212059][T30180] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1955.212077][T30180] ? __pfx_map_id_range_down+0x10/0x10 [ 1955.212097][T30180] ? security_inode_alloc+0x3b/0x2c0 [ 1955.212125][T30180] security_inode_alloc+0x3b/0x2c0 [ 1955.212149][T30180] inode_init_always_gfp+0xc77/0xfb0 [ 1955.212172][T30180] alloc_inode+0x8e/0x250 [ 1955.212197][T30180] sock_alloc+0x44/0x280 [ 1955.212225][T30180] do_accept+0xf9/0x530 [ 1955.212245][T30180] ? do_raw_spin_lock+0x128/0x260 [ 1955.212272][T30180] ? __pfx_do_accept+0x10/0x10 [ 1955.212304][T30180] __sys_accept4+0x108/0x200 [ 1955.212323][T30180] ? __pfx___sys_accept4+0x10/0x10 [ 1955.212342][T30180] ? ksys_write+0x1ac/0x250 [ 1955.212361][T30180] ? __pfx_ksys_write+0x10/0x10 [ 1955.212384][T30180] __x64_sys_accept+0x74/0xb0 [ 1955.212403][T30180] ? lockdep_hardirqs_on+0x78/0x100 [ 1955.212429][T30180] do_syscall_64+0x115/0x870 [ 1955.212453][T30180] ? clear_bhb_loop+0x70/0xc0 [ 1955.212476][T30180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.212494][T30180] RIP: 0033:0x7f63ad99e0d9 [ 1955.212511][T30180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1955.212527][T30180] RSP: 002b:00007f63ae91e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 1955.212544][T30180] RAX: ffffffffffffffda RBX: 00007f63adc25fa0 RCX: 00007f63ad99e0d9 [ 1955.212556][T30180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1955.212566][T30180] RBP: 00007f63ae91e090 R08: 0000000000000000 R09: 0000000000000000 [ 1955.212576][T30180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1955.212587][T30180] R13: 00007f63adc26038 R14: 00007f63adc25fa0 R15: 00007fffc45f6d88 [ 1955.212616][T30180] [ 1955.216858][ T30] audit: type=1400 audit(1786225277.633:16818): avc: denied { open } for pid=28812 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1955.505445][ T30] audit: type=1400 audit(1786225277.633:16819): avc: denied { ioctl } for pid=28812 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1955.626486][ T30] audit: type=1400 audit(1786225277.653:16820): avc: denied { accept } for pid=30164 comm="syz.5.6623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1955.724872][ T30] audit: type=1400 audit(1786225277.653:16821): avc: denied { create } for pid=30164 comm="syz.5.6623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1955.819443][ T30] audit: type=1400 audit(1786225277.693:16822): avc: denied { accept } for pid=30164 comm="syz.5.6623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1956.098623][T30190] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6629'. [ 1956.121117][ T9] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1956.323116][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1956.360459][ T9] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 1956.402146][ T9] usb 4-1: config 0 has no interface number 0 [ 1956.427691][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1956.533489][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1956.595270][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1956.669637][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.720302][ T9] usb 4-1: Product: syz [ 1956.736688][ T9] usb 4-1: Manufacturer: syz [ 1956.755969][ T9] usb 4-1: SerialNumber: syz [ 1956.778671][ T9] usb 4-1: config 0 descriptor?? [ 1956.783835][ T980] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1956.809381][T30186] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1956.851945][T30186] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1956.951215][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 1956.962944][ T980] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 1956.980610][ T980] usb 2-1: config 0 has no interface number 0 [ 1957.000264][ T980] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1957.074306][ T980] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1957.108244][T23795] Bluetooth: hci0: command 0x0406 tx timeout [ 1957.128059][T30186] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1957.157400][ T980] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1957.177942][T30186] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1957.195691][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.227887][ T980] usb 2-1: Product: syz [ 1957.242570][ T980] usb 2-1: Manufacturer: syz [ 1957.258394][ T980] usb 2-1: SerialNumber: syz [ 1957.279482][ T980] usb 2-1: config 0 descriptor?? [ 1957.310581][T30197] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1957.330096][T30197] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1958.457204][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1958.715941][T30197] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1958.729642][T30197] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1958.984058][T30197] sctp: [Deprecated]: syz.1.6631 (pid 30197) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1958.984058][T30197] Use struct sctp_sack_info instead [ 1959.026267][ T980] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1959.037250][ T980] asix 2-1:0.34: probe with driver asix failed with error -61 [ 1959.324270][T30186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1959.396964][T30186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1959.693047][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1959.939559][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1959.952996][ T9] asix 4-1:0.34: probe with driver asix failed with error -71 [ 1959.965146][ T9] usb 4-1: USB disconnect, device number 92 [ 1959.973636][ T30] kauditd_printk_skb: 182 callbacks suppressed [ 1959.973651][ T30] audit: type=1400 audit(1786225282.463:17005): avc: denied { read write } for pid=20053 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1960.060108][ T30] audit: type=1400 audit(1786225282.503:17006): avc: denied { read write open } for pid=20053 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1960.096530][ T30] audit: type=1400 audit(1786225282.503:17007): avc: denied { ioctl } for pid=20053 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1960.126533][ T30] audit: type=1400 audit(1786225282.543:17008): avc: denied { read write } for pid=28075 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1961.104949][ T30] audit: type=1400 audit(1786225282.543:17009): avc: denied { read write open } for pid=28075 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1961.166806][ T1616] usb 2-1: USB disconnect, device number 89 [ 1961.294330][ T30] audit: type=1400 audit(1786225282.543:17010): avc: denied { ioctl } for pid=28075 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1961.459594][T30233] [U]  [ 1961.485036][ T30] audit: type=1400 audit(1786225282.623:17011): avc: denied { map_create } for pid=30221 comm="syz.0.6640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1961.576556][T30236] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6644'. [ 1961.594644][T30237] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6645'. [ 1961.627513][ T30] audit: type=1400 audit(1786225282.733:17012): avc: denied { read append } for pid=30221 comm="syz.0.6640" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1961.788809][ T30] audit: type=1400 audit(1786225282.733:17013): avc: denied { read open } for pid=30221 comm="syz.0.6640" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1961.872462][ T30] audit: type=1400 audit(1786225282.753:17014): avc: denied { ioctl } for pid=30221 comm="syz.0.6640" path="/dev/usbmon0" dev="devtmpfs" ino=715 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1961.922392][T24934] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1962.103226][T24934] usb 4-1: Using ep0 maxpacket: 8 [ 1962.136432][T24934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1962.188040][T24934] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1962.210155][T30228] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1962.360683][T30228] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1962.377672][T24934] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1962.467232][T30255] overlayfs: failed to resolve './file1': -2 [ 1962.636455][T24934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1962.737619][T24934] usb 4-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 1962.759715][T30228] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1962.850268][T24934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1963.086741][T24934] usb 4-1: config 0 descriptor?? [ 1963.745638][T30239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1963.754420][T30239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1964.277903][T30263] ip_tables: iptables: counters copy to user failed while replacing table [ 1964.315556][T24934] usbhid 4-1:0.0: can't add hid device: -71 [ 1964.341209][T24934] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1964.389283][T24934] usb 4-1: USB disconnect, device number 93 [ 1964.527584][T30268] xt_CT: No such helper "snmp" [ 1964.641144][ T5686] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1964.681751][T30276] [U]  [ 1964.697535][T30273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1964.716649][T30273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1965.722005][ T30] kauditd_printk_skb: 138 callbacks suppressed [ 1965.722025][ T30] audit: type=1400 audit(1786225287.263:17153): avc: denied { execmem } for pid=30277 comm="syz.4.6658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1965.781116][ T5686] usb 6-1: Using ep0 maxpacket: 16 [ 1965.808287][ T5686] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 1965.830314][ T5686] usb 6-1: config 0 has no interface number 0 [ 1965.841213][ T30] audit: type=1400 audit(1786225287.383:17154): avc: denied { read } for pid=30277 comm="syz.4.6658" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1965.871840][ T5686] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1965.893235][ T5686] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1965.912764][ T30] audit: type=1400 audit(1786225287.383:17155): avc: denied { open } for pid=30277 comm="syz.4.6658" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1965.962287][ T5686] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1965.970842][ T30] audit: type=1400 audit(1786225287.463:17156): avc: denied { create } for pid=30277 comm="syz.4.6658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1965.971972][ T5686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.021131][ T30] audit: type=1400 audit(1786225287.523:17157): avc: denied { create } for pid=30277 comm="syz.4.6658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1966.031092][ T5686] usb 6-1: Product: syz [ 1966.055650][ T5686] usb 6-1: Manufacturer: syz [ 1966.062781][T28918] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1966.065796][ T5686] usb 6-1: SerialNumber: syz [ 1966.075011][ T30] audit: type=1400 audit(1786225287.563:17158): avc: denied { bind } for pid=30277 comm="syz.4.6658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1966.075060][ T30] audit: type=1400 audit(1786225287.583:17159): avc: denied { accept } for pid=30277 comm="syz.4.6658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1966.075098][ T30] audit: type=1400 audit(1786225287.583:17160): avc: denied { write } for pid=30277 comm="syz.4.6658" path="socket:[117214]" dev="sockfs" ino=117214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1966.075139][ T30] audit: type=1400 audit(1786225288.273:17161): avc: denied { read write } for pid=28812 comm="syz-executor" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1966.075176][ T30] audit: type=1400 audit(1786225288.273:17162): avc: denied { open } for pid=28812 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1966.199201][ T5686] usb 6-1: config 0 descriptor?? [ 1966.213355][T30265] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1966.221502][T28918] usb 2-1: device descriptor read/64, error -71 [ 1966.222429][T30265] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1966.490472][T28918] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1966.564948][T30265] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1966.677771][T30265] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1967.124808][ T5686] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1968.271119][T28918] usb 2-1: device descriptor read/64, error -71 [ 1968.413736][T28918] usb usb2-port1: attempt power cycle [ 1968.691104][ T980] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1968.761304][T28918] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1968.793543][T28918] usb 2-1: device descriptor read/8, error -71 [ 1968.860496][T30310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1968.886277][ T980] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1968.895633][T30310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1968.912749][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.949607][T30265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1968.951078][ T980] usb 4-1: Product: syz [ 1969.010781][T30265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1969.032040][T30310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1969.256298][ T980] usb 4-1: Manufacturer: syz [ 1969.261469][T30310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1969.270359][ T980] usb 4-1: SerialNumber: syz [ 1969.292632][ T980] usb 4-1: config 0 descriptor?? [ 1969.416313][T30320] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6669'. [ 1969.441164][ T5686] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1969.454902][ T5686] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1969.466465][ T5686] asix 6-1:0.34: probe with driver asix failed with error -71 [ 1969.491441][ T5686] usb 6-1: USB disconnect, device number 86 [ 1969.585161][T15443] usb 4-1: USB disconnect, device number 94 [ 1969.637480][T24408] udevd[24408]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1969.883305][ T5686] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1970.071942][ T5686] usb 6-1: Using ep0 maxpacket: 8 [ 1970.084198][ T5686] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1970.095399][ T5686] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1970.112505][ T5686] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1970.123414][ T5686] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1970.130119][ T5686] usb 6-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 1970.140596][ T5686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1970.208372][ T5686] usb 6-1: config 0 descriptor?? [ 1970.392563][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1970.398957][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1970.569275][T30324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1970.625504][T30324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1970.698537][T30333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6674'. [ 1970.809364][ T30] kauditd_printk_skb: 184 callbacks suppressed [ 1970.809381][ T30] audit: type=1400 audit(1786225293.293:17347): avc: denied { read write } for pid=28812 comm="syz-executor" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1970.856071][ T30] audit: type=1400 audit(1786225293.293:17348): avc: denied { read write open } for pid=28812 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1970.882522][ T30] audit: type=1400 audit(1786225293.293:17349): avc: denied { ioctl } for pid=28812 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1970.909233][ T30] audit: type=1326 audit(1786225293.373:17350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30337 comm="syz.0.6676" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63ad99e0d9 code=0x0 [ 1970.949025][T30340] overlayfs: failed to resolve './file0': -2 [ 1971.178818][ T30] audit: type=1400 audit(1786225293.433:17351): avc: denied { mounton } for pid=30329 comm="syz.1.6675" path="/49/bus" dev="tmpfs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1971.208850][T30341] netlink: 1852 bytes leftover after parsing attributes in process `syz.3.6677'. [ 1971.296252][ T30] audit: type=1400 audit(1786225293.463:17352): avc: denied { map_create } for pid=30336 comm="syz.3.6677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1971.317789][ T30] audit: type=1400 audit(1786225293.473:17353): avc: denied { map_read map_write } for pid=30336 comm="syz.3.6677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1971.339793][ T30] audit: type=1400 audit(1786225293.563:17354): avc: denied { prog_load } for pid=30336 comm="syz.3.6677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1971.362614][ T30] audit: type=1400 audit(1786225293.563:17355): avc: denied { bpf } for pid=30336 comm="syz.3.6677" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1971.383606][ T30] audit: type=1400 audit(1786225293.573:17356): avc: denied { create } for pid=30336 comm="syz.3.6677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1971.404575][ T5686] usbhid 6-1:0.0: can't add hid device: -71 [ 1971.410542][ T5686] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1971.420523][ T5686] usb 6-1: USB disconnect, device number 87 [ 1971.556210][T28918] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1971.711128][T28918] usb 4-1: Using ep0 maxpacket: 16 [ 1971.717992][T28918] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1971.733364][T28918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1971.748519][T28918] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1971.761137][T28918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.769229][T28918] usb 4-1: Product: syz [ 1971.773545][T28918] usb 4-1: Manufacturer: syz [ 1971.778896][T28918] usb 4-1: SerialNumber: syz [ 1971.798542][T28918] usb 4-1: config 0 descriptor?? [ 1971.853992][T28918] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1971.867193][T24934] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1971.918308][T28918] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1972.066622][T24934] usb 2-1: device descriptor read/64, error -71 [ 1972.331223][T24934] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1972.503119][T24934] usb 2-1: device descriptor read/64, error -71 [ 1972.508520][T28918] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1972.673112][T24934] usb usb2-port1: attempt power cycle [ 1972.730896][T28918] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1972.742807][T28918] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1972.755946][T28918] em28xx 4-1:0.0: No AC97 audio processor [ 1972.769518][T28918] usb 4-1: USB disconnect, device number 95 [ 1972.789605][T28918] em28xx 4-1:0.0: Disconnecting em28xx [ 1972.809338][T28918] em28xx 4-1:0.0: Freeing device [ 1972.908712][T30359] [U]  [ 1973.051548][T24934] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1973.072072][T24934] usb 2-1: device descriptor read/8, error -71 [ 1973.282791][T25095] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1973.331258][T24934] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1973.357553][T24934] usb 2-1: device descriptor read/8, error -71 [ 1973.472873][T24934] usb usb2-port1: unable to enumerate USB device [ 1973.494116][T25095] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1973.515875][T25095] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.529782][T25095] usb 6-1: config 0 descriptor?? [ 1973.543965][T25095] cp210x 6-1:0.0: cp210x converter detected [ 1973.720399][ T5686] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 1973.771489][ T5686] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1973.978738][T25095] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1973.994469][T25095] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1974.007532][T25095] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 1974.018503][T25095] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1974.030996][T25095] usb 6-1: USB disconnect, device number 88 [ 1974.040912][T25095] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1974.051764][T25095] cp210x 6-1:0.0: device disconnected [ 1974.241151][T28918] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1974.736163][T28918] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1975.269017][T28918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.333220][T28918] usb 4-1: config 0 descriptor?? [ 1975.369670][T28918] cp210x 4-1:0.0: cp210x converter detected [ 1975.671334][T30403] netlink: 1852 bytes leftover after parsing attributes in process `syz.1.6699'. [ 1975.830048][ T30] kauditd_printk_skb: 266 callbacks suppressed [ 1975.830083][ T30] audit: type=1400 audit(1786225298.313:17623): avc: denied { read write } for pid=28075 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1975.878937][T28918] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1975.895625][ T30] audit: type=1400 audit(1786225298.313:17624): avc: denied { open } for pid=28075 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1975.921182][T24934] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1975.930841][T28918] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1975.939383][T28918] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1975.974447][ T30] audit: type=1400 audit(1786225298.313:17625): avc: denied { ioctl } for pid=28075 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1976.002029][T28918] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1976.015983][T28918] usb 4-1: USB disconnect, device number 96 [ 1976.023244][ T30] audit: type=1400 audit(1786225298.353:17626): avc: denied { create } for pid=30390 comm="syz.3.6696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1976.052045][T28918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1976.065301][T28918] cp210x 4-1:0.0: device disconnected [ 1976.083605][ T30] audit: type=1400 audit(1786225298.353:17627): avc: denied { bind } for pid=30390 comm="syz.3.6696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1976.103217][T24934] usb 2-1: Using ep0 maxpacket: 16 [ 1976.114340][ T30] audit: type=1400 audit(1786225298.353:17628): avc: denied { name_bind } for pid=30390 comm="syz.3.6696" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1976.136957][T24934] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1976.149553][T24934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1976.289823][T24934] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1976.299936][T24934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.315479][ T30] audit: type=1400 audit(1786225298.353:17629): avc: denied { node_bind } for pid=30390 comm="syz.3.6696" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1976.342364][T24934] usb 2-1: Product: syz [ 1976.353156][T24934] usb 2-1: Manufacturer: syz [ 1976.367145][T24934] usb 2-1: SerialNumber: syz [ 1976.387275][ T30] audit: type=1400 audit(1786225298.353:17630): avc: denied { ioctl } for pid=30401 comm="syz.1.6699" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1976.417768][T24934] usb 2-1: config 0 descriptor?? [ 1976.425318][T24934] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1976.437291][T24934] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1976.449002][ T30] audit: type=1400 audit(1786225298.353:17631): avc: denied { listen } for pid=30390 comm="syz.3.6696" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1976.475193][ T30] audit: type=1400 audit(1786225298.353:17632): avc: denied { connect } for pid=30390 comm="syz.3.6696" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1977.803979][T24934] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1977.824564][T24934] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1977.918828][T24934] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1977.931441][T24934] em28xx 2-1:0.0: No AC97 audio processor [ 1978.024487][T30429] FAULT_INJECTION: forcing a failure. [ 1978.024487][T30429] name failslab, interval 1, probability 0, space 0, times 0 [ 1978.038159][T30429] CPU: 0 UID: 0 PID: 30429 Comm: syz.4.6708 Tainted: G L syzkaller #0 PREEMPT(full) [ 1978.038187][T30429] Tainted: [L]=SOFTLOCKUP [ 1978.038193][T30429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1978.038204][T30429] Call Trace: [ 1978.038210][T30429] [ 1978.038218][T30429] dump_stack_lvl+0x100/0x190 [ 1978.038246][T30429] should_fail_ex.cold+0x5/0xa [ 1978.038269][T30429] should_failslab+0xc2/0x120 [ 1978.038294][T30429] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 1978.038316][T30429] ? __schedule+0x126e/0x6730 [ 1978.038337][T30429] ? __get_vm_area_node+0x101/0x330 [ 1978.038365][T30429] __get_vm_area_node+0x101/0x330 [ 1978.038399][T30429] __vmalloc_node_range_noprof+0x228/0x1630 [ 1978.038426][T30429] ? kernel_clone+0x176/0x9d0 [ 1978.038450][T30429] ? __pfx___schedule+0x10/0x10 [ 1978.038473][T30429] ? preempt_schedule_irq+0x7b/0x90 [ 1978.038497][T30429] ? kernel_clone+0x176/0x9d0 [ 1978.038528][T30429] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1978.038559][T30429] ? memcpy_and_pad+0x46/0x90 [ 1978.038587][T30429] ? kasan_check_range+0xc1/0x1e0 [ 1978.038617][T30429] ? kernel_clone+0x176/0x9d0 [ 1978.038641][T30429] __vmalloc_node_noprof+0xad/0xf0 [ 1978.038667][T30429] ? kernel_clone+0x176/0x9d0 [ 1978.038694][T30429] copy_process+0x7fb/0x8030 [ 1978.038718][T30429] ? __pfx___schedule+0x10/0x10 [ 1978.038740][T30429] ? preempt_schedule_irq+0x7b/0x90 [ 1978.038768][T30429] ? __pfx_copy_process+0x10/0x10 [ 1978.038804][T30429] kernel_clone+0x176/0x9d0 [ 1978.038827][T30429] ? lockdep_hardirqs_on+0x78/0x100 [ 1978.038851][T30429] ? irqentry_exit+0x24d/0xa00 [ 1978.038871][T30429] ? __pfx_kernel_clone+0x10/0x10 [ 1978.038900][T30429] ? __do_sys_clone+0x8e/0x120 [ 1978.038916][T30429] __do_sys_clone+0xd9/0x120 [ 1978.038937][T30429] ? __pfx___do_sys_clone+0x10/0x10 [ 1978.038959][T30429] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1978.038991][T30429] ? ksys_write+0x1ac/0x250 [ 1978.039003][T30429] ? __pfx_ksys_write+0x10/0x10 [ 1978.039017][T30429] do_syscall_64+0x115/0x870 [ 1978.039031][T30429] ? clear_bhb_loop+0x70/0xc0 [ 1978.039045][T30429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.039057][T30429] RIP: 0033:0x7ff37839e0d9 [ 1978.039067][T30429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1978.039077][T30429] RSP: 002b:00007ff3791e9fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1978.039089][T30429] RAX: ffffffffffffffda RBX: 00007ff378626090 RCX: 00007ff37839e0d9 [ 1978.039096][T30429] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1978.039103][T30429] RBP: 00007ff3791ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1978.039109][T30429] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1978.039115][T30429] R13: 00007ff378626128 R14: 00007ff378626090 R15: 00007ffdd01927c8 [ 1978.039129][T30429] [ 1978.039154][T30429] syz.4.6708: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1978.208461][T24934] usb 2-1: USB disconnect, device number 98 [ 1978.211205][T30429] ,cpuset=/,mems_allowed=0-1 [ 1978.362895][T30429] CPU: 0 UID: 0 PID: 30429 Comm: syz.4.6708 Tainted: G L syzkaller #0 PREEMPT(full) [ 1978.362922][T30429] Tainted: [L]=SOFTLOCKUP [ 1978.362926][T30429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1978.362933][T30429] Call Trace: [ 1978.362938][T30429] [ 1978.362943][T30429] dump_stack_lvl+0x100/0x190 [ 1978.362961][T30429] warn_alloc.cold+0x94/0xa8 [ 1978.362973][T30429] ? __pfx_warn_alloc+0x10/0x10 [ 1978.362984][T30429] ? __kasan_kmalloc+0x8a/0xb0 [ 1978.363003][T30429] ? __get_vm_area_node+0x208/0x330 [ 1978.363021][T30429] __vmalloc_node_range_noprof+0xccd/0x1630 [ 1978.363039][T30429] ? __pfx___schedule+0x10/0x10 [ 1978.363053][T30429] ? preempt_schedule_irq+0x7b/0x90 [ 1978.363068][T30429] ? kernel_clone+0x176/0x9d0 [ 1978.363088][T30429] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1978.363107][T30429] ? memcpy_and_pad+0x46/0x90 [ 1978.363125][T30429] ? kasan_check_range+0xc1/0x1e0 [ 1978.363143][T30429] ? kernel_clone+0x176/0x9d0 [ 1978.363157][T30429] __vmalloc_node_noprof+0xad/0xf0 [ 1978.363174][T30429] ? kernel_clone+0x176/0x9d0 [ 1978.363190][T30429] copy_process+0x7fb/0x8030 [ 1978.363204][T30429] ? __pfx___schedule+0x10/0x10 [ 1978.363218][T30429] ? preempt_schedule_irq+0x7b/0x90 [ 1978.363236][T30429] ? __pfx_copy_process+0x10/0x10 [ 1978.363258][T30429] kernel_clone+0x176/0x9d0 [ 1978.363272][T30429] ? lockdep_hardirqs_on+0x78/0x100 [ 1978.363286][T30429] ? irqentry_exit+0x24d/0xa00 [ 1978.363300][T30429] ? __pfx_kernel_clone+0x10/0x10 [ 1978.363321][T30429] ? __do_sys_clone+0x8e/0x120 [ 1978.363337][T30429] __do_sys_clone+0xd9/0x120 [ 1978.363353][T30429] ? __pfx___do_sys_clone+0x10/0x10 [ 1978.363372][T30429] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1978.363393][T30429] ? ksys_write+0x1ac/0x250 [ 1978.363403][T30429] ? __pfx_ksys_write+0x10/0x10 [ 1978.363417][T30429] do_syscall_64+0x115/0x870 [ 1978.363432][T30429] ? clear_bhb_loop+0x70/0xc0 [ 1978.363445][T30429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.363456][T30429] RIP: 0033:0x7ff37839e0d9 [ 1978.363466][T30429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1978.363476][T30429] RSP: 002b:00007ff3791e9fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1978.363487][T30429] RAX: ffffffffffffffda RBX: 00007ff378626090 RCX: 00007ff37839e0d9 [ 1978.363494][T30429] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1978.363500][T30429] RBP: 00007ff3791ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1978.363506][T30429] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1978.363512][T30429] R13: 00007ff378626128 R14: 00007ff378626090 R15: 00007ffdd01927c8 [ 1978.363526][T30429] [ 1978.363544][T30429] Mem-Info: [ 1978.648635][T30429] active_anon:60654 inactive_anon:0 isolated_anon:0 [ 1978.648635][T30429] active_file:6548 inactive_file:66171 isolated_file:0 [ 1978.648635][T30429] unevictable:0 dirty:228 writeback:0 [ 1978.648635][T30429] slab_reclaimable:10142 slab_unreclaimable:107407 [ 1978.648635][T30429] mapped:35432 shmem:51366 pagetables:1613 [ 1978.648635][T30429] sec_pagetables:0 bounce:0 [ 1978.648635][T30429] kernel_misc_reclaimable:0 [ 1978.648635][T30429] free:1209070 free_pcp:17870 free_cma:0 [ 1978.694091][T30429] Node 0 active_anon:242616kB inactive_anon:0kB active_file:26192kB inactive_file:264460kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141728kB dirty:912kB writeback:0kB shmem:205464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13808kB pagetables:6312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1978.731288][T30429] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1978.763442][T30429] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1978.794049][T30429] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 1978.800040][T30429] Node 0 DMA32 free:881472kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:242616kB inactive_anon:0kB active_file:26192kB inactive_file:264460kB unevictable:0kB writepending:912kB zspages:0kB present:3129332kB managed:2532248kB mlocked:0kB bounce:0kB free_pcp:71480kB local_pcp:41572kB free_cma:0kB [ 1978.838662][T30429] lowmem_reserve[]: 0 0 0 0 0 [ 1978.843724][T30429] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1978.873164][T30429] lowmem_reserve[]: 0 0 0 0 0 [ 1978.878151][T30429] Node 1 Normal free:3939448kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:224kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1978.909654][T30429] lowmem_reserve[]: 0 0 0 0 0 [ 1978.917945][T30429] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1978.931295][T30429] Node 0 DMA32: 1675*4kB (UME) 362*8kB (UME) 826*16kB (UME) 703*32kB (UME) 810*64kB (UME) 532*128kB (UME) 282*256kB (ME) 152*512kB (UME) 75*1024kB (UME) 39*2048kB (ME) 100*4096kB (UM) = 881532kB [ 1978.951374][T30429] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1978.963356][T30429] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 9*16kB (UM) 8*32kB (UM) 11*64kB (UM) 10*128kB (UM) 7*256kB (UM) 6*512kB (UM) 2*1024kB (M) 3*2048kB (UM) 958*4096kB (UM) = 3939448kB [ 1978.981484][T30429] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1978.991140][T30429] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1979.000462][T30429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1979.010063][T30429] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1979.022663][T30429] 124081 total pagecache pages [ 1979.027484][T30429] 0 pages in swap cache [ 1979.031739][T30429] Free swap = 124996kB [ 1979.035944][T30429] Total swap = 124996kB [ 1979.040111][T30429] 2097051 pages RAM [ 1979.044029][T30429] 0 pages HighMem/MovableOnly [ 1979.048797][T30429] 432278 pages reserved [ 1979.053078][T30429] 0 pages cma reserved [ 1979.257390][T30428] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.6707' sets config #-129 [ 1979.333794][T24934] em28xx 2-1:0.0: Disconnecting em28xx [ 1979.387148][T24934] em28xx 2-1:0.0: Freeing device [ 1980.925045][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 1980.925061][ T30] audit: type=1400 audit(1786225303.413:17732): avc: denied { map_create } for pid=30440 comm="syz.1.6713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1981.086810][ T30] audit: type=1400 audit(1786225303.413:17733): avc: denied { bpf } for pid=30440 comm="syz.1.6713" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1981.168276][T30450] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6715'. [ 1981.182815][ T30] audit: type=1400 audit(1786225303.413:17734): avc: denied { map_create } for pid=30440 comm="syz.1.6713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1981.229099][ T30] audit: type=1400 audit(1786225303.413:17735): avc: denied { map_read map_write } for pid=30440 comm="syz.1.6713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1981.327257][ T30] audit: type=1400 audit(1786225303.443:17736): avc: denied { create } for pid=30440 comm="syz.1.6713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1981.382666][ T30] audit: type=1400 audit(1786225303.443:17737): avc: denied { create } for pid=30440 comm="syz.1.6713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1981.459881][ T30] audit: type=1400 audit(1786225303.443:17738): avc: denied { create } for pid=30440 comm="syz.1.6713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1981.539135][ T30] audit: type=1400 audit(1786225303.453:17739): avc: denied { write } for pid=30440 comm="syz.1.6713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1981.594245][ T30] audit: type=1400 audit(1786225303.453:17740): avc: denied { read } for pid=30440 comm="syz.1.6713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1981.646995][ T30] audit: type=1400 audit(1786225303.453:17741): avc: denied { ioctl } for pid=30440 comm="syz.1.6713" path="socket:[117537]" dev="sockfs" ino=117537 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1982.758608][T30468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9754 sclass=netlink_route_socket pid=30468 comm=syz.0.6721 [ 1982.901152][T24934] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1982.910303][T30469] kvm: kvm [30465]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 1983.101203][T24934] usb 6-1: Using ep0 maxpacket: 8 [ 1983.114190][T24934] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1983.140208][T30478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6725'. [ 1983.140980][T24934] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1983.207042][T24934] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1983.227955][T24934] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1983.242125][T24934] usb 6-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 1983.264304][T24934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1983.289972][T24934] usb 6-1: config 0 descriptor?? [ 1984.220740][T30464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1984.248111][T30464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1984.297612][T30489] FAULT_INJECTION: forcing a failure. [ 1984.297612][T30489] name failslab, interval 1, probability 0, space 0, times 0 [ 1984.312972][T30489] CPU: 1 UID: 0 PID: 30489 Comm: syz.1.6723 Tainted: G L syzkaller #0 PREEMPT(full) [ 1984.312999][T30489] Tainted: [L]=SOFTLOCKUP [ 1984.313005][T30489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1984.313015][T30489] Call Trace: [ 1984.313021][T30489] [ 1984.313028][T30489] dump_stack_lvl+0x100/0x190 [ 1984.313057][T30489] should_fail_ex.cold+0x5/0xa [ 1984.313080][T30489] should_failslab+0xc2/0x120 [ 1984.313099][T30489] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1984.313113][T30489] ? __alloc_skb+0x5b7/0x710 [ 1984.313126][T30489] ? __alloc_skb+0x140/0x710 [ 1984.313141][T30489] __alloc_skb+0x140/0x710 [ 1984.313153][T30489] ? __alloc_skb+0x5b7/0x710 [ 1984.313165][T30489] ? __pfx___alloc_skb+0x10/0x10 [ 1984.313182][T30489] netlink_alloc_large_skb+0x69/0x150 [ 1984.313196][T30489] netlink_sendmsg+0x680/0xda0 [ 1984.313209][T30489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1984.313222][T30489] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1984.313241][T30489] ____sys_sendmsg+0xa4d/0xbe0 [ 1984.313257][T30489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1984.313270][T30489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1984.313293][T30489] ___sys_sendmsg+0x190/0x1e0 [ 1984.313304][T30489] ? __pfx____sys_sendmsg+0x10/0x10 [ 1984.313314][T30489] ? __lock_acquire+0x49f/0x1a40 [ 1984.313334][T30489] ? get_pid_task+0x106/0x250 [ 1984.313377][T30489] __sys_sendmsg+0x160/0x210 [ 1984.313394][T30489] ? __pfx___sys_sendmsg+0x10/0x10 [ 1984.313415][T30489] do_syscall_64+0x115/0x870 [ 1984.313430][T30489] ? clear_bhb_loop+0x70/0xc0 [ 1984.313444][T30489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1984.313455][T30489] RIP: 0033:0x7f5b6db9e0d9 [ 1984.313465][T30489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1984.313475][T30489] RSP: 002b:00007f5b6eb31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1984.313486][T30489] RAX: ffffffffffffffda RBX: 00007f5b6de25fa0 RCX: 00007f5b6db9e0d9 [ 1984.313493][T30489] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000003 [ 1984.313499][T30489] RBP: 00007f5b6eb31090 R08: 0000000000000000 R09: 0000000000000000 [ 1984.313506][T30489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1984.313512][T30489] R13: 00007f5b6de26038 R14: 00007f5b6de25fa0 R15: 00007fff219ea108 [ 1984.313526][T30489] [ 1985.475723][T24934] usbhid 6-1:0.0: can't add hid device: -71 [ 1985.502032][T24934] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1985.546394][T24934] usb 6-1: USB disconnect, device number 89 [ 1985.910854][T30504] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6732'. [ 1985.932706][ T30] kauditd_printk_skb: 189 callbacks suppressed [ 1985.932724][ T30] audit: type=1400 audit(1786225308.423:17931): avc: denied { read write } for pid=30503 comm="syz.4.6731" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1985.934801][T30505] input: syz1 as /devices/virtual/input/input127 [ 1985.979586][ T30] audit: type=1400 audit(1786225308.423:17932): avc: denied { open } for pid=30503 comm="syz.4.6731" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1986.629793][ T30] audit: type=1400 audit(1786225308.423:17933): avc: denied { ioctl } for pid=30503 comm="syz.4.6731" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1986.762976][ T30] audit: type=1400 audit(1786225308.463:17934): avc: denied { read } for pid=4946 comm="acpid" name="event4" dev="devtmpfs" ino=5473 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1986.863190][ T30] audit: type=1400 audit(1786225308.463:17935): avc: denied { open } for pid=4946 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=5473 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1986.955829][ T30] audit: type=1400 audit(1786225308.463:17936): avc: denied { ioctl } for pid=4946 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=5473 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1987.019387][ T30] audit: type=1400 audit(1786225308.593:17937): avc: denied { create } for pid=30502 comm="syz.3.6732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1987.077247][ T30] audit: type=1400 audit(1786225308.593:17938): avc: denied { ioctl } for pid=30502 comm="syz.3.6732" path="socket:[116585]" dev="sockfs" ino=116585 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1987.204938][ T30] audit: type=1400 audit(1786225308.683:17939): avc: denied { read } for pid=30503 comm="syz.4.6731" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1987.332420][T30520] input: syz1 as /devices/virtual/input/input128 [ 1987.436539][ T30] audit: type=1400 audit(1786225308.683:17940): avc: denied { open } for pid=30503 comm="syz.4.6731" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1990.836718][T30548] can: request_module (can-proto-0) failed. [ 1990.881504][T28918] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1990.947386][ T30] kauditd_printk_skb: 191 callbacks suppressed [ 1990.947404][ T30] audit: type=1400 audit(1786225313.433:18132): avc: denied { read write } for pid=28812 comm="syz-executor" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1990.980062][ T30] audit: type=1400 audit(1786225313.453:18133): avc: denied { open } for pid=28812 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1991.006114][ T30] audit: type=1400 audit(1786225313.453:18134): avc: denied { ioctl } for pid=28812 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1991.032641][ T30] audit: type=1400 audit(1786225313.473:18135): avc: denied { ioctl } for pid=30549 comm="syz.5.6746" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1991.057827][T28918] usb 6-1: Using ep0 maxpacket: 32 [ 1991.073858][ T30] audit: type=1400 audit(1786225313.563:18136): avc: denied { ioctl } for pid=30549 comm="syz.5.6746" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1991.103438][ T30] audit: type=1400 audit(1786225313.563:18137): avc: denied { read write } for pid=30560 comm="syz.3.6749" name="raw-gadget" dev="devtmpfs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1991.128226][ T30] audit: type=1400 audit(1786225313.563:18138): avc: denied { open } for pid=30560 comm="syz.3.6749" path="/dev/raw-gadget" dev="devtmpfs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1991.153233][ T30] audit: type=1400 audit(1786225313.563:18139): avc: denied { ioctl } for pid=30560 comm="syz.3.6749" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1991.818723][ T30] audit: type=1400 audit(1786225313.563:18140): avc: denied { ioctl } for pid=30560 comm="syz.3.6749" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1991.859791][ T30] audit: type=1400 audit(1786225313.653:18141): avc: denied { execmem } for pid=30549 comm="syz.5.6746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1991.959265][T28918] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1991.970290][T28918] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1992.008272][T28918] usb 6-1: can't read configurations, error -71 [ 1992.021115][ T9] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1992.171122][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1992.250564][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1992.260986][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1992.288768][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1992.299218][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1992.309547][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1992.329273][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1992.338583][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1992.346660][ T9] usb 4-1: Manufacturer: syz [ 1992.358958][ T9] usb 4-1: config 0 descriptor?? [ 1992.472798][T30583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1992.484002][T30583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1992.524509][T30583] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1992.671096][ T9] rc_core: IR keymap rc-hauppauge not found [ 1992.687250][ T9] Registered IR keymap rc-empty [ 1992.692723][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1992.721274][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1992.751954][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1992.774365][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input129 [ 1992.796852][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1992.821246][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1992.841183][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1992.877039][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1992.911506][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1992.931329][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1992.961361][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1992.981158][T30561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1992.981189][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1992.993935][T30561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1993.011270][T24934] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1993.041522][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1993.091699][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1993.990693][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1994.002441][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1994.028538][ T9] usb 4-1: USB disconnect, device number 97 [ 1994.071345][T24934] usb 2-1: Using ep0 maxpacket: 16 [ 1994.087697][T24934] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 1994.119565][T24934] usb 2-1: config 0 has no interface number 0 [ 1994.141411][T24934] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1994.168104][T24934] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1994.198342][T24934] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1994.221280][T24934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.229391][T24934] usb 2-1: Product: syz [ 1994.233991][T24934] usb 2-1: Manufacturer: syz [ 1994.238616][T24934] usb 2-1: SerialNumber: syz [ 1994.248184][T24934] usb 2-1: config 0 descriptor?? [ 1994.256327][T30587] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1994.265275][T30587] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1994.278715][T30600] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6761'. [ 1994.494372][T30587] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1994.518332][T30587] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1994.531517][ T9] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1994.711350][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1994.724585][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1994.729974][T24934] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1994.741703][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1994.762923][T24934] asix 2-1:0.34: probe with driver asix failed with error -61 [ 1994.764156][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1994.816670][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1994.832874][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 1994.855231][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1994.879737][ T9] usb 4-1: config 0 descriptor?? [ 1995.157451][ T5686] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1995.191636][T30598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1995.361219][T30598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1995.413672][ T5686] usb 6-1: Using ep0 maxpacket: 32 [ 1996.629943][ T30] kauditd_printk_skb: 300 callbacks suppressed [ 1996.629967][ T30] audit: type=1400 audit(1786225318.183:18442): avc: denied { execmem } for pid=30614 comm="syz.5.6766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1996.676368][ T5686] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1996.722601][ T980] usb 2-1: USB disconnect, device number 99 [ 1996.731617][ T5686] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1996.770571][ T5686] usb 6-1: can't read configurations, error -71 [ 1996.794982][ T30] audit: type=1400 audit(1786225318.483:18443): avc: denied { read } for pid=30614 comm="syz.5.6766" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1996.854683][ T30] audit: type=1400 audit(1786225318.483:18444): avc: denied { open } for pid=30614 comm="syz.5.6766" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1997.922484][ T30] audit: type=1400 audit(1786225319.193:18445): avc: denied { bind } for pid=30597 comm="syz.3.6760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1997.985794][ T30] audit: type=1400 audit(1786225319.193:18446): avc: denied { setopt } for pid=30597 comm="syz.3.6760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1998.015269][ T30] audit: type=1400 audit(1786225319.193:18447): avc: denied { create } for pid=30597 comm="syz.3.6760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1998.046256][ T30] audit: type=1400 audit(1786225319.193:18448): avc: denied { setopt } for pid=30597 comm="syz.3.6760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1998.072920][ T30] audit: type=1400 audit(1786225319.193:18449): avc: denied { accept } for pid=30597 comm="syz.3.6760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1998.094948][ T30] audit: type=1400 audit(1786225319.203:18450): avc: denied { read } for pid=30597 comm="syz.3.6760" dev="nsfs" ino=4026532790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1998.116800][ T30] audit: type=1400 audit(1786225319.203:18451): avc: denied { open } for pid=30597 comm="syz.3.6760" path="net:[4026532790]" dev="nsfs" ino=4026532790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1998.171147][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 1998.212067][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1998.246901][ T9] usb 4-1: USB disconnect, device number 98 [ 1998.280425][T30639] jffs2: notice: (30639) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 1 orphan) and 3 of xref (0 dead, 1 orphan) found. [ 1998.821226][T30646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1998.855170][T30646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1998.916653][T30646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1999.105119][T30651] input: syz1 as /devices/virtual/input/input130 [ 1999.116355][T30646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2000.086833][T30662] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6778'. [ 2000.104856][T30659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2000.116565][T30659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2000.152216][ T9] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2000.244540][T30672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6784'. [ 2000.284090][T30674] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6785'. [ 2000.293358][T24934] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2000.321121][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 2000.328972][ T9] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 2000.339182][ T9] usb 2-1: config 0 has no interface number 0 [ 2000.346898][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2000.360674][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 2000.373489][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2000.383745][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.391858][ T9] usb 2-1: Product: syz [ 2000.396043][ T9] usb 2-1: Manufacturer: syz [ 2000.400792][ T9] usb 2-1: SerialNumber: syz [ 2000.411532][ T9] usb 2-1: config 0 descriptor?? [ 2000.421363][T30661] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2000.430943][T30661] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2000.451591][T24934] usb 4-1: Using ep0 maxpacket: 32 [ 2001.598376][T24934] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2001.640514][T24934] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2001.652591][ T30] kauditd_printk_skb: 159 callbacks suppressed [ 2001.652608][ T30] audit: type=1400 audit(1786225324.143:18611): avc: denied { ioctl } for pid=30660 comm="syz.1.6780" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2001.652747][T30661] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2001.693299][T24934] usb 4-1: can't read configurations, error -71 [ 2001.746085][ T30] audit: type=1400 audit(1786225324.143:18612): avc: denied { ioctl } for pid=30660 comm="syz.1.6780" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2001.749135][T30661] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2001.825642][T30684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2001.840464][ T30] audit: type=1400 audit(1786225324.193:18613): avc: denied { read write } for pid=20053 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2001.866481][T30684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2001.896994][T30682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6789'. [ 2001.910023][T30684] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2001.918955][T30682] netlink: 'syz.5.6789': attribute type 30 has an invalid length. [ 2001.944607][ T30] audit: type=1400 audit(1786225324.193:18614): avc: denied { open } for pid=20053 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2001.970022][T29364] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2001.980064][T29364] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2001.989002][T29364] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2001.999967][T29364] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2002.008875][ T30] audit: type=1400 audit(1786225324.193:18615): avc: denied { ioctl } for pid=20053 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2002.625323][ T30] audit: type=1400 audit(1786225324.233:18616): avc: denied { ioctl } for pid=30660 comm="syz.1.6780" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2002.651090][ T30] audit: type=1400 audit(1786225324.303:18617): avc: denied { ioctl } for pid=30660 comm="syz.1.6780" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2002.726357][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2002.748810][ T9] asix 2-1:0.34: probe with driver asix failed with error -61 [ 2002.756405][ T30] audit: type=1400 audit(1786225324.313:18618): avc: denied { read write } for pid=30683 comm="syz.0.6788" name="raw-gadget" dev="devtmpfs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2002.814770][ T30] audit: type=1400 audit(1786225324.313:18619): avc: denied { open } for pid=30683 comm="syz.0.6788" path="/dev/raw-gadget" dev="devtmpfs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2002.859507][ T30] audit: type=1400 audit(1786225324.373:18620): avc: denied { create } for pid=30681 comm="syz.5.6789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2003.263624][T30698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2003.299365][T30698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2003.604421][T30709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6797'. [ 2003.703280][T30713] cgroup2: Unknown parameter 'm†t¤×üÔ-Ñcü˜9L¢/emory_hugetlb_accounting' [ 2003.727241][T30713] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2003.761648][ T9] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 2003.870334][T30711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2003.884821][T30711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2003.932841][ T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2003.945216][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.962520][ T9] usb 6-1: config 0 descriptor?? [ 2003.972840][ T9] cp210x 6-1:0.0: cp210x converter detected [ 2004.003127][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880573e7000: rx timeout, send abort [ 2004.081929][T30720] overlayfs: missing 'workdir' [ 2004.351219][T28918] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2004.416081][ T9] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 2004.425959][ T5686] usb 2-1: USB disconnect, device number 100 [ 2004.433259][ T9] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 2004.441507][ T9] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 2004.458985][ T9] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2004.488535][ T9] usb 6-1: USB disconnect, device number 94 [ 2004.493614][T28918] usb 4-1: device descriptor read/64, error -71 [ 2004.503315][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054829000: rx timeout, send abort [ 2004.514449][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880573e7000: abort rx timeout. Force session deactivation [ 2004.551500][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2004.571298][ T9] cp210x 6-1:0.0: device disconnected [ 2004.859629][T28918] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2005.011561][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054829000: abort rx timeout. Force session deactivation [ 2005.065446][T28918] usb 4-1: device descriptor read/64, error -71 [ 2005.194886][T28918] usb usb4-port1: attempt power cycle [ 2005.199688][ T5686] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2005.363868][ T5686] usb 2-1: Using ep0 maxpacket: 32 [ 2005.573112][T28918] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2005.584140][T30742] FAULT_INJECTION: forcing a failure. [ 2005.584140][T30742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2005.597871][T30742] CPU: 1 UID: 0 PID: 30742 Comm: syz.5.6807 Tainted: G L syzkaller #0 PREEMPT(full) [ 2005.597900][T30742] Tainted: [L]=SOFTLOCKUP [ 2005.597907][T30742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2005.597917][T30742] Call Trace: [ 2005.597924][T30742] [ 2005.597934][T30742] dump_stack_lvl+0x100/0x190 [ 2005.597963][T30742] should_fail_ex.cold+0x5/0xa [ 2005.597987][T30742] _copy_from_user+0x2e/0xd0 [ 2005.598014][T30742] kstrtouint_from_user+0xd6/0x1d0 [ 2005.598034][T30742] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2005.598053][T30742] ? __lock_acquire+0x49f/0x1a40 [ 2005.598087][T30742] proc_fail_nth_write+0x83/0x220 [ 2005.598107][T30742] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2005.598133][T30742] vfs_write+0x2aa/0x1050 [ 2005.598152][T30742] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2005.598173][T30742] ? __pfx_vfs_write+0x10/0x10 [ 2005.598190][T30742] ? __fget_files+0x215/0x3d0 [ 2005.598216][T30742] ? __fget_files+0x21f/0x3d0 [ 2005.598243][T30742] ksys_write+0x12a/0x250 [ 2005.598266][T30742] ? __pfx_ksys_write+0x10/0x10 [ 2005.598291][T30742] do_syscall_64+0x115/0x870 [ 2005.598315][T30742] ? clear_bhb_loop+0x70/0xc0 [ 2005.598338][T30742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2005.598357][T30742] RIP: 0033:0x7f9c8475e90e [ 2005.598372][T30742] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2005.598389][T30742] RSP: 002b:00007f9c85687fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2005.598408][T30742] RAX: ffffffffffffffda RBX: 00007f9c856886c0 RCX: 00007f9c8475e90e [ 2005.598420][T30742] RDX: 0000000000000001 RSI: 00007f9c856880a0 RDI: 0000000000000003 [ 2005.598431][T30742] RBP: 00007f9c85688090 R08: 0000000000000000 R09: 0000000000000000 [ 2005.598441][T30742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2005.598452][T30742] R13: 00007f9c84a26128 R14: 00007f9c84a26090 R15: 00007ffd00e01b48 [ 2005.598477][T30742] [ 2005.809377][T28918] usb 4-1: device descriptor read/8, error -71 [ 2006.473849][ T5686] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2006.502839][ T5686] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2006.520636][ T5686] usb 2-1: can't read configurations, error -71 [ 2006.537894][T30743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=30743 comm=syz.0.6808 [ 2006.553311][T30745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6809'. [ 2006.592224][T28918] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2006.622571][T28918] usb 4-1: device descriptor read/8, error -71 [ 2006.694496][ T30] kauditd_printk_skb: 261 callbacks suppressed [ 2006.694512][ T30] audit: type=1400 audit(1786225329.183:18882): avc: denied { map_create } for pid=30751 comm="syz.5.6811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2006.705212][T30752] netlink: 1852 bytes leftover after parsing attributes in process `syz.5.6811'. [ 2006.721922][ T30] audit: type=1400 audit(1786225329.183:18883): avc: denied { map_read map_write } for pid=30751 comm="syz.5.6811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2006.740871][T28918] usb usb4-port1: unable to enumerate USB device [ 2006.749907][ T30] audit: type=1400 audit(1786225329.183:18884): avc: denied { prog_load } for pid=30751 comm="syz.5.6811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2006.776042][ T30] audit: type=1400 audit(1786225329.183:18885): avc: denied { bpf } for pid=30751 comm="syz.5.6811" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2006.798878][ T30] audit: type=1400 audit(1786225329.183:18886): avc: denied { create } for pid=30751 comm="syz.5.6811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2006.822039][ T30] audit: type=1400 audit(1786225329.183:18887): avc: denied { read } for pid=30751 comm="syz.5.6811" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2006.853245][T30754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2006.865236][ T30] audit: type=1400 audit(1786225329.183:18888): avc: denied { open } for pid=30751 comm="syz.5.6811" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2006.878286][T30754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2006.928611][T30754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2006.940033][T30754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2006.941445][ T30] audit: type=1400 audit(1786225329.193:18889): avc: denied { ioctl } for pid=30751 comm="syz.5.6811" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2006.974534][ T30] audit: type=1400 audit(1786225329.193:18890): avc: denied { write } for pid=30751 comm="syz.5.6811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2006.995170][ T30] audit: type=1400 audit(1786225329.223:18891): avc: denied { ioctl } for pid=30717 comm="syz.3.6800" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2007.025237][T24934] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2007.142548][T30758] wlan0 speed is unknown, defaulting to 1000 [ 2007.151560][T30758] wlan0 speed is unknown, defaulting to 1000 [ 2007.158419][T30758] wlan0 speed is unknown, defaulting to 1000 [ 2007.165246][T30758] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 2007.180752][T30758] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 2007.197753][T30758] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 2007.217895][T30758] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2007.254101][T30759] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2007.263069][T24934] usb 6-1: Using ep0 maxpacket: 16 [ 2007.329064][T30758] wlan0 speed is unknown, defaulting to 1000 [ 2007.345276][T30758] wlan0 speed is unknown, defaulting to 1000 [ 2007.359353][T30758] wlan0 speed is unknown, defaulting to 1000 [ 2007.375792][T30758] wlan0 speed is unknown, defaulting to 1000 [ 2007.390864][T30758] wlan0 speed is unknown, defaulting to 1000 [ 2007.404742][T30758] wlan0 speed is unknown, defaulting to 1000 [ 2007.739364][T24934] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2007.766439][T24934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2007.878437][T24934] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2007.903559][T24934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.951710][T30763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6816'. [ 2007.971608][T30763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6816'. [ 2007.997449][T30763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6816'. [ 2008.041409][T24934] usb 6-1: Product: syz [ 2008.046775][T24934] usb 6-1: Manufacturer: syz [ 2008.051867][T24934] usb 6-1: SerialNumber: syz [ 2008.059249][T24934] usb 6-1: config 0 descriptor?? [ 2008.068585][T24934] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2008.078146][T24934] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 2009.066127][T24934] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2009.178797][T24934] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 2009.227328][T24934] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 2009.257926][T24934] em28xx 6-1:0.0: No AC97 audio processor [ 2009.271680][T30772] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30772 comm=syz.1.6814 [ 2009.301941][T24934] usb 6-1: USB disconnect, device number 95 [ 2009.326166][T30776] 9pnet_fd: p9_fd_create_unix (30776): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2009.336549][T24934] em28xx 6-1:0.0: Disconnecting em28xx [ 2009.449959][T30770] SELinux: invalid class [ 2009.460988][T30770] SELinux: failed to load policy [ 2009.494635][T24934] em28xx 6-1:0.0: Freeing device [ 2010.636614][T30787] netlink: 1852 bytes leftover after parsing attributes in process `syz.5.6821'. [ 2010.940313][T30791] binder: 30789:30791 ioctl 3ba0 200000000340 returned -22 [ 2011.021357][T14671] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2011.237421][T30796] overlayfs: missing 'lowerdir' [ 2011.329222][T30797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2011.339366][T30797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2011.691874][T14671] usb 6-1: Using ep0 maxpacket: 16 [ 2011.715310][ T30] kauditd_printk_skb: 165 callbacks suppressed [ 2011.715325][ T30] audit: type=1400 audit(1786225334.203:19057): avc: denied { ioctl } for pid=30786 comm="syz.5.6821" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2011.753309][T14671] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2011.764871][T24934] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2011.799543][ T30] audit: type=1400 audit(1786225334.273:19058): avc: denied { ioctl } for pid=30795 comm="syz.1.6825" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2011.833681][T14671] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2011.833707][ T30] audit: type=1400 audit(1786225334.273:19059): avc: denied { create } for pid=30799 comm="syz.4.6824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2011.877285][ T30] audit: type=1400 audit(1786225334.283:19060): avc: denied { write } for pid=30799 comm="syz.4.6824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2011.906563][ T30] audit: type=1400 audit(1786225334.283:19061): avc: denied { read } for pid=30799 comm="syz.4.6824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2011.927295][T24934] usb 2-1: device descriptor read/64, error -71 [ 2011.936969][ T30] audit: type=1400 audit(1786225334.283:19062): avc: denied { read append } for pid=30799 comm="syz.4.6824" name="sg0" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2011.962731][ T30] audit: type=1400 audit(1786225334.283:19063): avc: denied { open } for pid=30799 comm="syz.4.6824" path="/dev/sg0" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2011.988529][ T30] audit: type=1400 audit(1786225334.283:19064): avc: denied { read write } for pid=30801 comm="syz.3.6826" name="raw-gadget" dev="devtmpfs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2012.015803][ T30] audit: type=1400 audit(1786225334.283:19065): avc: denied { open } for pid=30801 comm="syz.3.6826" path="/dev/raw-gadget" dev="devtmpfs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2012.040361][T14671] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2012.040415][ T30] audit: type=1400 audit(1786225334.283:19066): avc: denied { ioctl } for pid=30799 comm="syz.4.6824" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2012.074690][T28918] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2012.090477][T14671] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.107756][T14671] usb 6-1: Product: syz [ 2012.117057][T14671] usb 6-1: Manufacturer: syz [ 2012.126739][T14671] usb 6-1: SerialNumber: syz [ 2012.139672][T14671] usb 6-1: config 0 descriptor?? [ 2012.161805][T14671] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2012.180856][T14671] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 2012.211145][T24934] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2012.232892][T28918] usb 4-1: config 0 has no interfaces? [ 2012.242683][T28918] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2012.262013][T28918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2012.276773][T28918] usb 4-1: config 0 descriptor?? [ 2012.341712][T24934] usb 2-1: device descriptor read/64, error -71 [ 2012.461931][T24934] usb usb2-port1: attempt power cycle [ 2012.510152][T28918] usb 4-1: USB disconnect, device number 105 [ 2012.769202][T14671] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2012.784460][T14671] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 2012.792420][T14671] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 2012.799360][T14671] em28xx 6-1:0.0: No AC97 audio processor [ 2012.813317][T14671] usb 6-1: USB disconnect, device number 96 [ 2012.821145][T24934] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2012.826021][T14671] em28xx 6-1:0.0: Disconnecting em28xx [ 2012.837901][T14671] em28xx 6-1:0.0: Freeing device [ 2012.854488][T24934] usb 2-1: device descriptor read/8, error -71 [ 2013.091130][T24934] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2013.111887][T24934] usb 2-1: device descriptor read/8, error -71 [ 2013.162980][T30807] syz.3.6828 (30807): /proc/30806/oom_adj is deprecated, please use /proc/30806/oom_score_adj instead. [ 2013.221904][T24934] usb usb2-port1: unable to enumerate USB device [ 2014.462289][T24934] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 2014.645275][T24934] usb 6-1: device descriptor read/64, error -71 [ 2014.901187][T24934] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2014.949009][T30833] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6838'. [ 2015.052779][T24934] usb 6-1: device descriptor read/64, error -71 [ 2015.665735][T24934] usb usb6-port1: attempt power cycle [ 2015.829296][T28918] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2015.857205][T30844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2015.896064][T30844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2016.024058][T28918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2016.035916][T28918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2016.056760][T28918] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2016.068831][T28918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.077023][T24934] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2016.105870][T24934] usb 6-1: device descriptor read/8, error -71 [ 2016.134815][T28918] usb 2-1: config 0 descriptor?? [ 2016.251154][ T1616] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2016.361116][T24934] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 2016.381582][T24934] usb 6-1: device descriptor read/8, error -71 [ 2016.411114][ T1616] usb 4-1: Using ep0 maxpacket: 8 [ 2016.417626][ T1616] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2016.441152][ T1616] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2016.465284][ T1616] usb 4-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 2016.478165][ T1616] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 2016.489454][ T1616] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2016.501253][ T1616] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2016.514656][T24934] usb usb6-port1: unable to enumerate USB device [ 2016.521946][ T1616] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2016.532676][ T1616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.690308][T30854] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6843'. [ 2016.755667][ T1616] usb 4-1: GET_CAPABILITIES returned 0 [ 2016.761420][ T1616] usbtmc 4-1:16.0: can't read capabilities [ 2016.781701][ T30] kauditd_printk_skb: 204 callbacks suppressed [ 2016.781719][ T30] audit: type=1400 audit(1786225339.243:19271): avc: denied { ioctl } for pid=30845 comm="syz.3.6840" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2016.854941][ T30] audit: type=1400 audit(1786225339.343:19272): avc: denied { ioctl } for pid=30822 comm="syz.1.6834" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2016.895425][ T30] audit: type=1400 audit(1786225339.343:19273): avc: denied { ioctl } for pid=30822 comm="syz.1.6834" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2016.924016][ T30] audit: type=1400 audit(1786225339.383:19274): avc: denied { prog_load } for pid=30822 comm="syz.1.6834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2016.948747][ T30] audit: type=1400 audit(1786225339.383:19275): avc: denied { bpf } for pid=30822 comm="syz.1.6834" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2017.008700][T30858] overlayfs: missing 'lowerdir' [ 2017.023343][T30846] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6840'. [ 2017.054159][ T5686] usb 4-1: USB disconnect, device number 106 [ 2017.180797][ T30] audit: type=1400 audit(1786225339.423:19276): avc: denied { read write } for pid=20053 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2017.207541][ T30] audit: type=1400 audit(1786225339.423:19277): avc: denied { open } for pid=20053 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2017.258931][ T30] audit: type=1400 audit(1786225339.423:19278): avc: denied { ioctl } for pid=20053 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2017.293506][ T30] audit: type=1400 audit(1786225339.473:19279): avc: denied { write } for pid=30845 comm="syz.3.6840" name="usbtmc0" dev="devtmpfs" ino=5511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2017.319086][ T30] audit: type=1400 audit(1786225339.493:19280): avc: denied { mounton } for pid=30855 comm="syz.0.6844" path="/383/bus" dev="tmpfs" ino=2240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2017.965858][T28918] usbhid 2-1:0.0: can't add hid device: -71 [ 2017.973356][T28918] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2017.989053][T28918] usb 2-1: USB disconnect, device number 107 [ 2018.131971][T14671] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 2018.312270][T14671] usb 6-1: Using ep0 maxpacket: 32 [ 2019.326886][T14671] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2019.376135][T14671] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2019.422904][T14671] usb 6-1: can't read configurations, error -71 [ 2020.692522][T30890] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6855'. [ 2021.234332][T30898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6857'. [ 2021.632491][T14671] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 2021.810284][ T30] kauditd_printk_skb: 169 callbacks suppressed [ 2021.810296][ T30] audit: type=1400 audit(1786225344.293:19450): avc: denied { write } for pid=30888 comm="syz.0.6856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2021.865288][T14671] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2021.903596][T14671] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2021.921101][ T30] audit: type=1400 audit(1786225344.333:19451): avc: denied { ioctl } for pid=30893 comm="syz.5.6850" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2021.958290][T14671] usb 6-1: config 0 descriptor?? [ 2021.983171][T14671] cp210x 6-1:0.0: cp210x converter detected [ 2022.028652][ T30] audit: type=1400 audit(1786225344.333:19452): avc: denied { write } for pid=30888 comm="syz.0.6856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2022.100689][ T30] audit: type=1400 audit(1786225344.343:19453): avc: denied { create } for pid=30903 comm="syz.4.6860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2022.171167][ T30] audit: type=1400 audit(1786225344.353:19454): avc: denied { write } for pid=30903 comm="syz.4.6860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2022.257217][ T30] audit: type=1400 audit(1786225344.353:19455): avc: denied { read } for pid=30903 comm="syz.4.6860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2023.343820][T14671] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 2023.373151][ T30] audit: type=1400 audit(1786225344.353:19456): avc: denied { ioctl } for pid=30893 comm="syz.5.6850" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2023.419474][T14671] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 2023.440331][T14671] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 2023.464626][T14671] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2023.567385][ T30] audit: type=1400 audit(1786225344.353:19457): avc: denied { read append } for pid=30903 comm="syz.4.6860" name="sg0" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2023.628223][T14671] usb 6-1: USB disconnect, device number 103 [ 2023.680673][T14671] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2023.711607][ T30] audit: type=1400 audit(1786225344.353:19458): avc: denied { open } for pid=30903 comm="syz.4.6860" path="/dev/sg0" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2023.742636][T14671] cp210x 6-1:0.0: device disconnected [ 2023.862061][ T30] audit: type=1400 audit(1786225344.373:19459): avc: denied { read write } for pid=30903 comm="syz.4.6860" name="raw-gadget" dev="devtmpfs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2025.294874][T30932] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6869'. [ 2027.373153][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 2027.373170][ T30] audit: type=1400 audit(1786225348.963:19591): avc: denied { execmem } for pid=30952 comm="syz.0.6874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2027.618375][ T30] audit: type=1400 audit(1786225349.243:19592): avc: denied { read } for pid=30952 comm="syz.0.6874" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2027.800735][ T30] audit: type=1400 audit(1786225349.243:19593): avc: denied { open } for pid=30952 comm="syz.0.6874" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2027.909719][ T30] audit: type=1400 audit(1786225349.403:19594): avc: denied { create } for pid=30952 comm="syz.0.6874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2027.980845][T30960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6876'. [ 2027.996020][ T30] audit: type=1400 audit(1786225349.403:19595): avc: denied { create } for pid=30952 comm="syz.0.6874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2028.029387][ T30] audit: type=1400 audit(1786225349.403:19596): avc: denied { write } for pid=30952 comm="syz.0.6874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2028.147640][ T30] audit: type=1400 audit(1786225349.413:19597): avc: denied { read } for pid=30952 comm="syz.0.6874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2028.169231][ T30] audit: type=1400 audit(1786225349.423:19598): avc: denied { create } for pid=30952 comm="syz.0.6874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2028.190593][ T30] audit: type=1400 audit(1786225349.433:19599): avc: denied { bind } for pid=30952 comm="syz.0.6874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2028.768884][ T30] audit: type=1400 audit(1786225349.433:19600): avc: denied { accept } for pid=30952 comm="syz.0.6874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2028.975479][T30964] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6877'. [ 2030.253664][T30978] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6881'. [ 2031.824810][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2031.874264][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2032.447433][ T30] kauditd_printk_skb: 190 callbacks suppressed [ 2032.447447][ T30] audit: type=1400 audit(1786225354.923:19791): avc: denied { read } for pid=31002 comm="syz.1.6888" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2032.685024][ T30] audit: type=1400 audit(1786225354.923:19792): avc: denied { open } for pid=31002 comm="syz.1.6888" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2032.837354][ T30] audit: type=1400 audit(1786225355.003:19793): avc: denied { create } for pid=31002 comm="syz.1.6888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2032.974699][ T30] audit: type=1400 audit(1786225355.013:19794): avc: denied { create } for pid=31002 comm="syz.1.6888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2032.996182][T31022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6894'. [ 2033.136837][ T30] audit: type=1400 audit(1786225355.023:19795): avc: denied { bind } for pid=31002 comm="syz.1.6888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2033.166327][T31025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2033.194656][T31025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2033.212903][ T30] audit: type=1400 audit(1786225355.023:19796): avc: denied { accept } for pid=31002 comm="syz.1.6888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2033.251142][ T1616] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 2033.275080][T31025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2033.304116][T31025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2033.329104][ T30] audit: type=1400 audit(1786225355.023:19797): avc: denied { write } for pid=31002 comm="syz.1.6888" path="socket:[118657]" dev="sockfs" ino=118657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2033.329731][T31027] input: syz1 as /devices/virtual/input/input131 [ 2033.501206][ T1616] usb 6-1: Using ep0 maxpacket: 8 [ 2033.511315][ T30] audit: type=1400 audit(1786225355.153:19798): avc: denied { read write } for pid=20053 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2033.553207][ T1616] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2033.583604][T31032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2033.590149][ T1616] usb 6-1: config 0 has no interfaces? [ 2033.598699][T31018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2033.625174][ T1616] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2033.653067][ T1616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2033.683050][ T1616] usb 6-1: Product: syz [ 2033.702975][ T1616] usb 6-1: Manufacturer: syz [ 2033.723089][ T1616] usb 6-1: SerialNumber: syz [ 2033.745484][ T1616] usb 6-1: config 0 descriptor?? [ 2033.852150][T28918] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2033.907342][T31037] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6899'. [ 2034.012837][T28918] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2034.033094][T28918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2034.059086][T28918] usb 2-1: config 0 descriptor?? [ 2034.090163][T28918] cp210x 2-1:0.0: cp210x converter detected [ 2034.539859][T28918] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 2034.570335][T28918] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 2034.599703][T28918] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2034.632744][T28918] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2034.668451][T28918] usb 2-1: USB disconnect, device number 108 [ 2034.699805][T28918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2034.728826][T28918] cp210x 2-1:0.0: device disconnected [ 2035.411161][ T9] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2035.496299][T31053] [U]  [ 2035.636200][ T9] usb 4-1: device descriptor read/64, error -71 [ 2035.932614][T28918] usb 6-1: USB disconnect, device number 104 [ 2036.121086][ T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2036.207525][T24922] cgroup: fork rejected by pids controller in /syz0 [ 2036.321277][ T9] usb 4-1: device descriptor read/64, error -71 [ 2036.476295][T27489] tipc: Resetting bearer [ 2036.495418][T27489] tipc: Disabling bearer [ 2036.523072][ T9] usb usb4-port1: attempt power cycle [ 2036.648436][T31081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31081 comm=syz.5.6913 [ 2036.951648][ T9] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2037.001779][ T9] usb 4-1: device descriptor read/8, error -71 [ 2037.091106][T28918] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 2037.251076][ T9] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2037.264322][T28918] usb 6-1: Using ep0 maxpacket: 32 [ 2037.286287][T28918] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2037.302024][ T9] usb 4-1: device descriptor read/8, error -71 [ 2037.315849][T28918] usb 6-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da [ 2037.353973][T28918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.386904][T28918] usb 6-1: Product: syz [ 2037.400020][T28918] usb 6-1: Manufacturer: syz [ 2037.417055][T28918] usb 6-1: SerialNumber: syz [ 2037.439876][T28918] usb 6-1: config 0 descriptor?? [ 2037.451640][ T30] kauditd_printk_skb: 260 callbacks suppressed [ 2037.451656][ T30] audit: type=1400 audit(1786225359.943:20046): avc: denied { ioctl } for pid=31049 comm="syz.3.6903" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2037.491113][ T9] usb usb4-port1: unable to enumerate USB device [ 2037.529340][T23795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2037.551067][T23795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2037.571891][T23795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2037.591794][T23795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2037.606958][T23795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2037.648773][T31090] [U]  [ 2037.669378][ T30] audit: type=1400 audit(1786225359.943:20047): avc: denied { ioctl } for pid=31080 comm="syz.5.6913" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2037.717670][T31081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2037.777115][T31081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2037.857664][ T30] audit: type=1400 audit(1786225359.943:20048): avc: denied { ioctl } for pid=31080 comm="syz.5.6913" path="/dev/raw-gadget" dev="devtmpfs" ino=817 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2037.862907][T28918] snd_usb_podhd 6-1:0.0: Line 6 POD HD500X found [ 2037.962882][T28918] snd_usb_podhd 6-1:0.0: set_interface failed [ 2037.984919][T28918] snd_usb_podhd 6-1:0.0: Line 6 POD HD500X now disconnected [ 2037.994240][ T30] audit: type=1400 audit(1786225359.963:20049): avc: denied { create } for pid=31087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2038.041178][ T9] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2038.041623][T28918] snd_usb_podhd 6-1:0.0: probe with driver snd_usb_podhd failed with error -71 [ 2038.098019][T28918] usb 6-1: USB disconnect, device number 105 [ 2038.108343][ T30] audit: type=1400 audit(1786225359.963:20050): avc: denied { read write } for pid=31087 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2038.214788][ T30] audit: type=1400 audit(1786225359.963:20051): avc: denied { open } for pid=31087 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2038.299339][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2038.326806][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2038.331556][ T30] audit: type=1400 audit(1786225359.983:20052): avc: denied { read write } for pid=28075 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2038.446578][ T9] usb 2-1: config 0 descriptor?? [ 2038.454009][ T30] audit: type=1400 audit(1786225359.983:20053): avc: denied { open } for pid=28075 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2038.500394][T31082] netlink: 'syz.5.6913': attribute type 1 has an invalid length. [ 2038.546091][T31093] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2038.566370][T31093] audit: audit_lost=65 audit_rate_limit=0 audit_backlog_limit=64 [ 2038.617672][ T9] cp210x 2-1:0.0: cp210x converter detected [ 2038.881410][T31087] wlan0 speed is unknown, defaulting to 1000 [ 2039.078820][ T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 2039.123980][ T9] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 2039.164460][ T9] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2039.220581][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2039.287181][ T9] usb 2-1: USB disconnect, device number 109 [ 2039.380132][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2039.480165][ T9] cp210x 2-1:0.0: device disconnected [ 2039.662086][T14539] Bluetooth: hci3: command tx timeout [ 2039.773861][T31128] overlayfs: missing 'workdir' [ 2040.421687][T31087] bridge0: port 1(bridge_slave_0) entered blocking state [ 2040.457629][T31087] bridge0: port 1(bridge_slave_0) entered disabled state [ 2040.603890][T31087] bridge_slave_0: entered allmulticast mode [ 2041.156908][T31087] bridge_slave_0: entered promiscuous mode [ 2041.181285][T28918] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 2041.208697][T31087] bridge0: port 2(bridge_slave_1) entered blocking state [ 2041.225131][ T1616] [ 2041.227464][ T1616] ============================================ [ 2041.233594][ T1616] WARNING: possible recursive locking detected [ 2041.239713][ T1616] syzkaller #0 Tainted: G L [ 2041.245657][ T1616] -------------------------------------------- [ 2041.251773][ T1616] kworker/1:2/1616 is trying to acquire lock: [ 2041.257813][ T1616] ffff888032d1e128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 2041.267535][ T1616] [ 2041.267535][ T1616] but task is already holding lock: [ 2041.274870][ T1616] ffff88807989d928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 2041.284587][ T1616] [ 2041.284587][ T1616] other info that might help us debug this: [ 2041.292625][ T1616] Possible unsafe locking scenario: [ 2041.292625][ T1616] [ 2041.300043][ T1616] CPU0 [ 2041.303294][ T1616] ---- [ 2041.306552][ T1616] lock(&grp->list_lock); [ 2041.310938][ T1616] lock(&grp->list_lock); [ 2041.315325][ T1616] [ 2041.315325][ T1616] *** DEADLOCK *** [ 2041.315325][ T1616] [ 2041.323449][ T1616] May be due to missing lock nesting notation [ 2041.323449][ T1616] [ 2041.331735][ T1616] 3 locks held by kworker/1:2/1616: [ 2041.336898][ T1616] #0: ffff88801bc0b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 2041.347303][ T1616] #1: ffffc900066cfd08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 2041.359180][ T1616] #2: ffff88807989d928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 2041.369333][ T1616] [ 2041.369333][ T1616] stack backtrace: [ 2041.375200][ T1616] CPU: 1 UID: 0 PID: 1616 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 2041.375226][ T1616] Tainted: [L]=SOFTLOCKUP [ 2041.375232][ T1616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2041.375245][ T1616] Workqueue: events snd_rawmidi_input_event_work [ 2041.375274][ T1616] Call Trace: [ 2041.375279][ T1616] [ 2041.375286][ T1616] dump_stack_lvl+0x100/0x190 [ 2041.375307][ T1616] print_deadlock_bug.cold+0xbd/0xca [ 2041.375333][ T1616] __lock_acquire+0x1256/0x1a40 [ 2041.375359][ T1616] lock_acquire+0x1b9/0x370 [ 2041.375378][ T1616] ? snd_seq_deliver_event+0x230/0x860 [ 2041.375405][ T1616] ? do_raw_read_unlock+0x3f/0x70 [ 2041.375431][ T1616] _raw_read_lock+0x5f/0x70 [ 2041.375449][ T1616] ? snd_seq_deliver_event+0x230/0x860 [ 2041.375472][ T1616] snd_seq_deliver_event+0x230/0x860 [ 2041.375495][ T1616] ? do_raw_spin_lock+0x128/0x260 [ 2041.375518][ T1616] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 2041.375540][ T1616] ? mark_held_locks+0x40/0x70 [ 2041.375561][ T1616] ? lockdep_hardirqs_on+0x78/0x100 [ 2041.375583][ T1616] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2041.375603][ T1616] ? client_use_ptr+0x107/0x4b0 [ 2041.375628][ T1616] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 2041.375655][ T1616] queue_broadcast_event.isra.0+0x143/0x1b0 [ 2041.375674][ T1616] ? __pfx_queue_broadcast_event.isra.0+0x10/0x10 [ 2041.375694][ T1616] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2041.375714][ T1616] ? snd_seq_timer_start+0x1f0/0x2a0 [ 2041.375735][ T1616] snd_seq_control_queue+0x709/0xb70 [ 2041.375752][ T1616] ? __pfx_event_input_timer+0x10/0x10 [ 2041.375773][ T1616] __snd_seq_deliver_single_event+0x127/0x1c0 [ 2041.375799][ T1616] snd_seq_deliver_single_event+0x31f/0x8c0 [ 2041.375825][ T1616] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 2041.375851][ T1616] ? __lock_acquire+0x49f/0x1a40 [ 2041.375875][ T1616] snd_seq_deliver_event+0x44b/0x860 [ 2041.375900][ T1616] ? do_raw_spin_lock+0x128/0x260 [ 2041.375926][ T1616] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 2041.375951][ T1616] ? mark_held_locks+0x40/0x70 [ 2041.375970][ T1616] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2041.375996][ T1616] ? lockdep_hardirqs_on+0x78/0x100 [ 2041.376017][ T1616] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2041.376035][ T1616] ? client_use_ptr+0x107/0x4b0 [ 2041.376051][ T1616] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 2041.376069][ T1616] send_timer_event.isra.0+0x130/0x190 [ 2041.376085][ T1616] ? __pfx_send_timer_event.isra.0+0x10/0x10 [ 2041.376102][ T1616] ? lockdep_hardirqs_on+0x78/0x100 [ 2041.376115][ T1616] ? snd_seq_queue_timer_set_tempo+0x199/0x510 [ 2041.376128][ T1616] snd_seq_oss_timer_start+0x1db/0x320 [ 2041.376145][ T1616] ? __pfx_snd_seq_oss_timer_start+0x10/0x10 [ 2041.376161][ T1616] ? snd_seq_oss_readq_put_timestamp+0xd1/0x260 [ 2041.376176][ T1616] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2041.376188][ T1616] ? find_slot+0x166/0x1b0 [ 2041.376198][ T1616] snd_seq_oss_midi_input+0x467/0xa30 [ 2041.376211][ T1616] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 2041.376225][ T1616] ? find_held_lock+0x2b/0x80 [ 2041.376234][ T1616] ? snd_seq_port_use_ptr+0x128/0x190 [ 2041.376249][ T1616] snd_seq_oss_event_input+0x194/0x250 [ 2041.376259][ T1616] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 2041.376270][ T1616] __snd_seq_deliver_single_event+0x127/0x1c0 [ 2041.376287][ T1616] snd_seq_deliver_single_event+0x31f/0x8c0 [ 2041.376304][ T1616] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 2041.376320][ T1616] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2041.376332][ T1616] ? lockdep_hardirqs_on+0x78/0x100 [ 2041.376345][ T1616] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2041.376358][ T1616] ? snd_seq_timer_get_cur_tick+0x50/0x70 [ 2041.376372][ T1616] snd_seq_deliver_event+0x2c1/0x860 [ 2041.376389][ T1616] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 2041.376405][ T1616] ? mark_held_locks+0x40/0x70 [ 2041.376418][ T1616] ? lockdep_hardirqs_on+0x78/0x100 [ 2041.376431][ T1616] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2041.376443][ T1616] ? client_use_ptr+0x107/0x4b0 [ 2041.376458][ T1616] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 2041.376475][ T1616] snd_midi_input_event+0x32f/0x470 [ 2041.376490][ T1616] ? __pfx_snd_midi_input_event+0x10/0x10 [ 2041.376506][ T1616] ? __pfx_snd_midi_input_event+0x10/0x10 [ 2041.376519][ T1616] snd_rawmidi_input_event_work+0x61/0x80 [ 2041.376537][ T1616] process_one_work+0xa23/0x1940 [ 2041.376551][ T1616] ? __pfx_process_one_work+0x10/0x10 [ 2041.376564][ T1616] ? __pfx_snd_rawmidi_input_event_work+0x10/0x10 [ 2041.376581][ T1616] worker_thread+0x5ef/0xe50 [ 2041.376607][ T1616] ? kthread+0x13a/0x450 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2041.376617][ T1616] ? __pfx_worker_thread+0x10/0x10 [ 2041.376628][ T1616] kthread+0x370/0x450 [ 2041.376638][ T1616] ? __pfx_kthread+0x10/0x10 [ 2041.376648][ T1616] ret_from_fork+0x72b/0xd50 [ 2041.376664][ T1616] ? __pfx_ret_from_fork+0x10/0x10 [ 2041.376678][ T1616] ? __switch_to+0x800/0x10f0 [ 2041.376689][ T1616] ? __pfx_kthread+0x10/0x10 [ 2041.376700][ T1616] ret_from_fork_asm+0x1a/0x30 [ 2041.376718][ T1616] [ 2041.781258][T14539] Bluetooth: hci3: command tx timeout [ 2041.865445][T28918] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2041.874619][T28918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.882720][T28918] usb 6-1: Product: syz [ 2041.886909][T28918] usb 6-1: Manufacturer: syz [ 2041.891980][T28918] usb 6-1: SerialNumber: syz [ 2041.935245][T28918] usb 6-1: config 0 descriptor?? [ 2041.948508][T31087] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.979468][T31087] bridge_slave_1: entered allmulticast mode [ 2042.029790][T31087] bridge_slave_1: entered promiscuous mode [ 2042.540173][T31139] tipc: Resetting bearer [ 2042.567405][T31139] tipc: Disabling bearer [ 2042.875022][T28918] usb 6-1: USB disconnect, device number 106 [ 2042.938542][T29432] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2042.955016][T29432] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.987754][T29432] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2043.004270][T29432] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2043.054585][T29432] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2043.065158][T29432] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2043.135943][T29432] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2043.146248][T29432] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2043.240977][ T30] kauditd_printk_skb: 145 callbacks suppressed [ 2043.240994][ T30] audit: type=1400 audit(1786225365.723:20198): avc: denied { read } for pid=5256 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 2043.275814][T29432] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2043.289524][ T30] audit: type=1400 audit(1786225365.743:20199): avc: denied { read } for pid=5256 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 2043.312398][ T30] audit: type=1400 audit(1786225365.743:20200): avc: denied { search } for pid=5256 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2043.337096][ T30] audit: type=1400 audit(1786225365.743:20201): avc: denied { search } for pid=5256 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2043.361073][ T30] audit: type=1400 audit(1786225365.743:20202): avc: denied { search } for pid=5256 comm="dhcpcd" name="data" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2043.383231][ T30] audit: type=1400 audit(1786225365.743:20203): avc: denied { read } for pid=5256 comm="dhcpcd" name="n74" dev="tmpfs" ino=22622 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2043.405225][ T30] audit: type=1400 audit(1786225365.743:20204): avc: denied { open } for pid=5256 comm="dhcpcd" path="/run/udev/data/n74" dev="tmpfs" ino=22622 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2043.430215][ T30] audit: type=1400 audit(1786225365.743:20205): avc: denied { getattr } for pid=5256 comm="dhcpcd" path="/run/udev/data/n74" dev="tmpfs" ino=22622 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2043.453973][ T30] audit: type=1400 audit(1786225365.743:20206): avc: denied { read } for pid=5256 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 2043.454546][T29432] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2043.475406][ T30] audit: type=1400 audit(1786225365.783:20207): avc: denied { search } for pid=31146 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2043.550876][T29432] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2043.580223][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2043.606694][T29432] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2043.674655][T29432] bridge_slave_1: left allmulticast mode [ 2043.684743][T29432] bridge_slave_1: left promiscuous mode [ 2043.701826][T29432] bridge0: port 2(bridge_slave_1) entered disabled state [ 2043.710117][T29432] bridge_slave_0: left allmulticast mode [ 2043.716445][T29432] bridge_slave_0: left promiscuous mode [ 2043.722262][T29432] bridge0: port 1(bridge_slave_0) entered disabled state [ 2043.736182][T29432] bridge_slave_1: left allmulticast mode [ 2043.742869][T29432] bridge_slave_1: left promiscuous mode [ 2043.748538][T29432] bridge0: port 2(bridge_slave_1) entered disabled state [ 2043.757468][T29432] bridge_slave_0: left allmulticast mode [ 2043.765059][T29432] bridge_slave_0: left promiscuous mode [ 2043.770738][T29432] bridge0: port 1(bridge_slave_0) entered disabled state [ 2043.782078][T29432] bridge_slave_1: left allmulticast mode [ 2043.787750][T29432] bridge_slave_1: left promiscuous mode [ 2043.794065][T29432] bridge0: port 2(bridge_slave_1) entered disabled state [ 2043.802432][T29432] bridge_slave_0: left allmulticast mode [ 2043.808088][T29432] bridge_slave_0: left promiscuous mode [ 2043.819000][T29432] bridge0: port 1(bridge_slave_0) entered disabled state [ 2043.868698][T29432] bond0 (unregistering): Released all slaves [ 2043.895011][T29432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2043.904921][T29432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2043.914200][T29432] bond0 (unregistering): Released all slaves [ 2043.921629][T29432] bond1 (unregistering): Released all slaves [ 2043.929667][T29432] bond2 (unregistering): Released all slaves [ 2043.941726][T29432] bond3 (unregistering): Released all slaves [ 2043.949945][T29432] bond4 (unregistering): Released all slaves [ 2043.958757][T29432] bond5 (unregistering): Released all slaves [ 2043.966867][T29432] bond6 (unregistering): Released all slaves [ 2043.975205][T29432] bond7 (unregistering): Released all slaves [ 2044.000422][T29432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2044.017322][T29432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2044.026789][T29432] bond0 (unregistering): Released all slaves [ 2044.034280][T29432] bond1 (unregistering): Released all slaves [ 2044.042963][T29432] bond2 (unregistering): Released all slaves [ 2044.051319][ T5256] 8021q: adding VLAN 0 to HW filter on device eth7 [ 2044.116827][T29432] : left promiscuous mode [ 2044.158676][T29432] tipc: Left network mode [ 2044.172692][T29432] tipc: Left network mode [ 2044.305648][ T5256] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2044.384956][T29432] hsr_slave_0: left promiscuous mode [ 2044.390614][T29432] hsr_slave_1: left promiscuous mode [ 2044.396846][T29432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2044.404365][T29432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2044.415176][T29432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2044.424454][T29432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2044.438188][T29432] hsr_slave_0: left promiscuous mode [ 2044.448530][T29432] hsr_slave_1: left promiscuous mode [ 2044.455069][T29432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2044.463227][T29432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2044.470917][T29432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2044.479512][T29432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2044.490506][T29432] veth1_macvtap: left promiscuous mode [ 2044.496844][T29432] veth0_macvtap: left promiscuous mode [ 2044.504181][T29432] veth1_vlan: left promiscuous mode [ 2044.509518][T29432] veth0_vlan: left promiscuous mode [ 2044.516408][T29432] veth1_macvtap: left promiscuous mode [ 2044.522232][T29432] veth0_macvtap: left promiscuous mode [ 2044.527779][T29432] veth1_vlan: left promiscuous mode [ 2044.533617][T29432] veth0_vlan: left promiscuous mode [ 2044.666475][T29432] team0 (unregistering): Port device team_slave_1 removed [ 2044.679426][T29432] team0 (unregistering): Port device team_slave_0 removed [ 2044.748999][T29432] team0 (unregistering): Port device team_slave_1 removed [ 2044.758453][T29432] team0 (unregistering): Port device team_slave_0 removed [ 2044.787416][ T5256] 8021q: adding VLAN 0 to HW filter on device eth8 [ 2044.993156][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2045.297860][ T5256] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2045.388924][T29432] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2045.450869][T29432] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2045.516947][T29432] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2045.585231][T29432] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2045.598149][ T5256] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2045.684514][T29432] bridge_slave_1: left allmulticast mode [ 2045.692616][T29432] bridge_slave_1: left promiscuous mode [ 2045.698326][T29432] bridge0: port 2(bridge_slave_1) entered disabled state [ 2045.707309][T29432] bridge_slave_0: left allmulticast mode [ 2045.713005][T29432] bridge_slave_0: left promiscuous mode [ 2045.718693][T29432] bridge0: port 1(bridge_slave_0) entered disabled state [ 2045.781312][T29432] bond2 (unregistering): (slave geneve2): Releasing active interface [ 2045.798156][T29432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2045.808577][T29432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2045.819065][T29432] bond0 (unregistering): Released all slaves [ 2045.829891][T29432] bond1 (unregistering): Released all slaves [ 2045.842835][T29432] bond2 (unregistering): Released all slaves [ 2045.872278][ T5256] 8021q: adding VLAN 0 to HW filter on device eth12 [ 2046.023180][T20253] smbdirect: ib_dev[syz0] removed [ 2046.028295][ T1616] wlan0 speed is unknown, defaulting to 1000 [ 2046.037765][ T1616] infiniband syz0: ib_query_port failed (-19) [ 2046.093835][ T5256] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2046.109259][T29432] hsr_slave_0: left promiscuous mode [ 2046.116616][T29432] hsr_slave_1: left promiscuous mode [ 2046.122742][T29432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2046.130116][T29432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2046.138151][T29432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2046.146252][T29432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2046.155259][T29432] veth1_macvtap: left promiscuous mode [ 2046.160723][T29432] veth0_macvtap: left promiscuous mode [ 2046.166260][T29432] veth1_vlan: left promiscuous mode [ 2046.171589][T29432] veth0_vlan: left promiscuous mode [ 2046.219103][T29432] team0 (unregistering): Port device team_slave_1 removed [ 2046.228802][T29432] team0 (unregistering): Port device team_slave_0 removed [ 2046.540755][ T5256] 8021q: adding VLAN 0 to HW filter on device eth14 [ 2046.708224][ T5256] 8021q: adding VLAN 0 to HW filter on device eth16 [ 2046.891654][ T5256] 8021q: adding VLAN 0 to HW filter on device eth15