last executing test programs: 12.45101027s ago: executing program 2 (id=367): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x4e20, @local}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x4e20, @local}}) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x4e20, @local}}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$TIOCSCTTY(r1, 0xc01070ce, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e2405"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) sendto$inet(r0, &(0x7f00000001c0)="5054cdc54ead3657840eac1545f3843ccf6cbd6ff08b03d7cc61f950abc9913a7240b22e1ddbac77dcafeddf1ff4c8263ca2fd6feb9ddf62484e3b", 0x3b, 0x10, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) ioctl$KDSETLED(r1, 0x4b32, 0x4) syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x1, 0x4000) (async) r2 = syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x1, 0x4000) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000100)=0x6) fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:tape_device_t:s0\x00', 0x23, 0x1) (async) fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:tape_device_t:s0\x00', 0x23, 0x1) 8.722216863s ago: executing program 2 (id=376): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) clock_gettime(0x0, &(0x7f0000004a40)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000048c0)=[{{&(0x7f0000001080)=@nl, 0x80, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/115, 0x73}, {&(0x7f0000001200)=""/194, 0xc2}, {&(0x7f0000001300)=""/86, 0x56}, {&(0x7f00000025c0)=""/135, 0x87}, {&(0x7f0000002680)=""/41, 0x29}], 0x5}, 0x8}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000002740)=""/62, 0x3e}, {&(0x7f0000002780)=""/11, 0xb}, {&(0x7f00000027c0)=""/250, 0xfa}, {&(0x7f00000028c0)=""/227, 0xe3}, {&(0x7f00000029c0)=""/115, 0x73}, {&(0x7f0000002a40)=""/77, 0x4d}], 0x6}, 0x1}, {{&(0x7f0000002b40)=@can, 0x80, &(0x7f0000002d80)=[{0x0}, {&(0x7f0000002cc0)=""/151, 0x97}], 0x2, &(0x7f0000002dc0)=""/4, 0x4}, 0x1c26}, {{&(0x7f0000002e00)=@phonet, 0x80, &(0x7f0000002e80), 0x0, &(0x7f0000002ec0)=""/105, 0x69}, 0x4}, {{&(0x7f0000002f40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000045c0)=[{&(0x7f0000002fc0)=""/209, 0xd1}, {&(0x7f00000030c0)=""/204, 0xcc}, {&(0x7f00000031c0)=""/239, 0xef}, {&(0x7f00000032c0)=""/216, 0xd8}, {&(0x7f00000033c0)=""/146, 0x92}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/73, 0x49}, {&(0x7f0000004500)=""/136, 0x88}], 0x8, &(0x7f0000004640)=""/37, 0x25}, 0xfe4}, {{&(0x7f0000004680)=@nfc, 0x80, &(0x7f0000004840)=[{&(0x7f0000004700)=""/57, 0x39}, {&(0x7f0000004780)=""/108, 0x6c}, {&(0x7f0000004800)=""/31, 0x1f}], 0x3, &(0x7f0000004880)=""/36, 0x24}, 0x5}], 0x6, 0x40000021, &(0x7f0000004a80)={r1, r2+10000000}) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000340)="3b02", 0x2}], 0x1) 8.637762504s ago: executing program 2 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x2, {0x1, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newtclass={0x34, 0x28, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff1, 0x8}, {0xe, 0x3}, {0xffe0, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x3, 0x6, @remote}, 0x14) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x2, {0x5dfb, 0x6, "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", 0x5, 0xae, 0xe, 0x6, 0x81, 0x88, 0x5}}}, 0x128) 8.415430499s ago: executing program 4 (id=378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x67c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioperm(0x0, 0x9, 0x3) r3 = socket$alg(0x26, 0x5, 0x0) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x3) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000440)=""/123, 0xff32}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 7.520000858s ago: executing program 3 (id=381): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @local, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b9312948f6651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267513308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0xffff) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) ioctl$BLKDISCARDZEROES(r2, 0x127c, &(0x7f00000000c0)) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000680)="91") ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 7.425555086s ago: executing program 4 (id=383): bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="8cb0c3f98f703a092f367d92170eebb7eaa30dfb6578de29a35fc269f9d2103bdf506c3dd28e4db8775f4a68cb0e75c19ccd2e68a2c13afb223f728d776009a570c1d18e600584d03adf32335d226d2c6f11386ba0a0d8f85e0bec6510d0559ddeec94024607714416c454d4a1d83161ed3bebe8e38ff720c5f1faabef7842df80fc7986b41cb6cf0e33b8748ef38922d97ac9b77b0df2fcbc60e41674ab9f37e3a87b7df2e8443aae31c3b54411972edd85866f67c546c1", @ANYRES64=0x0], 0x20) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r2, 0x2800, 0x4, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='10', 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000dd"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000206011e0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a300000000020000780050003001c0000000c0001800800014008000000050014002000000005000500020000000500010006"], 0x68}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", "", ""]}, 0x14}}, 0x41) 5.300865473s ago: executing program 3 (id=385): r0 = socket$rds(0x15, 0x5, 0x0) setns(0xc9, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r1) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x14}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000000) write(r1, &(0x7f0000000100)='measure', 0x7) close(r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x700, 0x8, 0x1, 0x9, {{0x1e, 0x4, 0x0, 0x8, 0x78, 0x66, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@cipso={0x86, 0x22, 0x3, [{0x7, 0x12, "998c549c4f5e8118f2fab5b5c31e7836"}, {0x7, 0xa, "a2afa59e54bd0fb6"}]}, @cipso={0x86, 0x2d, 0x2, [{0x1, 0x11, "3a57c693e46a16e8aea9b72eac9ba1"}, {0x6, 0x5, "92ed0f"}, {0x5, 0xc, "62d5513e5a4323d0111f"}, {0x6, 0x5, "5ab134"}]}, @end, @lsrr={0x83, 0x13, 0xbf, [@rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001380)=@bpf_lsm={0x1d, 0xa, &(0x7f00000001c0)=@raw=[@map_idx_val={0x18, 0x60a78d2d3370f555, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000001}, @call={0x85, 0x0, 0x0, 0x7d}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x2, 0x1, 0x0, 0x4, 0x0, 0x830bb92627606ead, 0xffffffffffffffff}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0xb4}], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000280)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000012c0)={0x2, 0xb, 0xfff, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001340)=[{0x2, 0x5, 0xf, 0x6}], 0x10, 0x400}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001440)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) mmap$panthor(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10010, r5, 0x3) sendmsg$nl_route(r1, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001580)={&(0x7f0000001480)=ANY=[@ANYBLOB="e8000000110010002cbd7000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="120101000801000008002000040000000c001980080001000800000023002400ae03fec3b9f38c9f98cf16e34c44e1189c31c7d3b24a49d1541020dd96de37000d002200e4d3b404d8583ea66900000024002b80080003000400000008000800", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="080023007d6f043a05001100030000000800040006000000440012800a00010069706f69620000003400028006000200000000000600010000000000060003000000000006000100f7ff000006000200000000000600020001000000"], 0xe8}}, 0x8004) r6 = socket(0x15, 0x5, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000001740), &(0x7f0000001780)=0x4) getsockopt(r6, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 5.256978059s ago: executing program 3 (id=386): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000000000000000000000000006400000400000000000000000c02013999ae799c8ce11e4ecef700030076800c00010076786c616e81e30082000280050019000100000005001e008100"/86], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c80000"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110001000300000000000000000000006400000000000000"], 0x20}}, 0x0) 4.422867688s ago: executing program 0 (id=387): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) clock_gettime(0x0, &(0x7f0000004a40)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000048c0)=[{{&(0x7f0000001080)=@nl, 0x80, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/115, 0x73}, {&(0x7f0000001200)=""/194, 0xc2}, {&(0x7f0000001300)=""/86, 0x56}, {&(0x7f00000025c0)=""/135, 0x87}, {&(0x7f0000002680)=""/41, 0x29}], 0x5}, 0x8}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000002740)=""/62, 0x3e}, {&(0x7f0000002780)=""/11, 0xb}, {&(0x7f00000027c0)=""/250, 0xfa}, {&(0x7f00000028c0)=""/227, 0xe3}, {&(0x7f00000029c0)=""/115, 0x73}, {&(0x7f0000002a40)=""/77, 0x4d}], 0x6}, 0x1}, {{&(0x7f0000002b40)=@can, 0x80, &(0x7f0000002d80)=[{0x0}, {&(0x7f0000002cc0)=""/151, 0x97}], 0x2, &(0x7f0000002dc0)=""/4, 0x4}, 0x1c26}, {{&(0x7f0000002e00)=@phonet, 0x80, &(0x7f0000002e80), 0x0, &(0x7f0000002ec0)=""/105, 0x69}, 0x4}, {{&(0x7f0000002f40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000045c0)=[{&(0x7f0000002fc0)=""/209, 0xd1}, {&(0x7f00000030c0)=""/204, 0xcc}, {&(0x7f00000031c0)=""/239, 0xef}, {&(0x7f00000032c0)=""/216, 0xd8}, {&(0x7f00000033c0)=""/146, 0x92}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/73, 0x49}, {&(0x7f0000004500)=""/136, 0x88}], 0x8, &(0x7f0000004640)=""/37, 0x25}, 0xfe4}, {{&(0x7f0000004680)=@nfc, 0x80, &(0x7f0000004840)=[{&(0x7f0000004700)=""/57, 0x39}, {&(0x7f0000004780)=""/108, 0x6c}, {&(0x7f0000004800)=""/31, 0x1f}], 0x3, &(0x7f0000004880)=""/36, 0x24}, 0x5}], 0x6, 0x40000021, &(0x7f0000004a80)={r1, r2+10000000}) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000340)="3b02", 0x2}], 0x1) 4.406339303s ago: executing program 4 (id=389): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0xb00000000000000) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.240755689s ago: executing program 2 (id=390): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000440)=""/56, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0xa000200) r3 = semget$private(0x0, 0x3, 0x34) semtimedop(r3, &(0x7f0000000340)=[{0x2, 0x89, 0x1800}], 0x1, 0x0) unshare(0x20060400) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_TP_METER(r1, 0x0, 0x4004855) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 4.240058507s ago: executing program 3 (id=391): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xf}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000003c0)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x40008c0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000480)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8000000, 0x2, 0x3, 0x2, 0x1, 0x4}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x1) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xffffffffffffff9f, &(0x7f0000000080)=ANY=[]) connect$unix(r4, &(0x7f000057eff8)=@abs, 0xa2) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x1d7c0229565f272a, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x40, 0x1}}, 0x50) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x202, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0xc}) 3.688343143s ago: executing program 0 (id=392): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000180)={0xc}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x1, 0x0, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0xb, r2}) 3.677282086s ago: executing program 1 (id=393): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9000000000", @ANYRES32=r2], 0x18}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x51, 0xfe, r5}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) 3.472812533s ago: executing program 1 (id=394): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000740)={'pcl816\x00', [0x100, 0xa17, 0x8, 0x10, 0xe, 0x205, 0x79, 0xfffffff8, 0x80008, 0x1f000000, 0x7, 0x1, 0xfffffffb, 0x2, 0x0, 0xfd, 0xfffffffb, 0x9, 0x100003, 0x7fffffff, 0x489, 0x7, 0xfffffffd, 0x20001e58, 0xfffffffe, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) 3.472006494s ago: executing program 0 (id=395): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a86d06106f06008081000102030109021200010400000800000000000000b479"], &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000000)={0x3e}) syz_usb_connect$cdc_ecm(0x2, 0x8f, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x1, 0x1, 0x6, 0x40, 0x8, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x6, {{0xb, 0x24, 0x6, 0x0, 0x0, "9124baccd58c"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x2, 0x1, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @country_functional={0x10, 0x24, 0x7, 0x4, 0xd, [0xffff, 0x4, 0x1, 0x6, 0x8]}, @mbim={0xc, 0x24, 0x1b, 0xdc4, 0x966, 0x8, 0x6, 0x85, 0x7}, @ncm={0x6, 0x24, 0x1a, 0x96a7}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x1a, 0x7, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x9, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x8, 0x40}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x350, 0xd, 0x3, 0x6, 0x20, 0x1}, 0x46, &(0x7f0000000140)={0x5, 0xf, 0x46, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0xa, 0x2, 0x1824, 0x6b60346322174d13, 0x9, [0xff00c0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "2300da26aea01ddfca2c223e1e8fbac7"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xf, 0xdf4c}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x80, 0x83, 0xce}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x410}}, {0x58, &(0x7f0000000240)=@string={0x58, 0x3, "1b4a1608c7ad72fe78c9208906733b829dce88f05000f9b6bb02074f552d55a072ce4c195a4853861b63afecfecc7a787bbb66a26b67bee63d5f13641b46e9d7b5d30e4b199411b9295cc00b2d68636067835930dcc2"}}]}) 3.275689529s ago: executing program 1 (id=396): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000002400fffd27bd70000000000000000008", @ANYRES32=0x0, @ANYBLOB="715a0300651a010008000a00", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x20040040) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delchain={0x48, 0x64, 0x20, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff1}, {0xfff3, 0x1}, {0xa, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x18, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x3}, @TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x48}}, 0x44800) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getsockopt$sock_int(r6, 0x1, 0x2a, 0x0, &(0x7f0000000180)) r8 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x23a000, 0x1000, 0x0, 0x3}, 0x20) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x4, 0x1000002, 0x234}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8, 0x2, 0x134}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x1000, 0x40050001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x200, 0x2, 0xf7ffffff, 0x0, r4}}], 0x1, 0x0, 0x0) 2.853454217s ago: executing program 2 (id=397): socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2010060000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_read(r0, 0x2, 0x28, &(0x7f0000000140)=""/40) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x4, 0x1000, 0xffff1000, 0xffffffff], 0x0, 0x6, 0x400}) 2.592569537s ago: executing program 1 (id=398): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@index_off}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080)) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 2.165421971s ago: executing program 0 (id=399): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x70bd28, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x4, 0x1, {0x0, 0x1, 0x3, 0x0, {@ip4=@remote, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) 1.885514187s ago: executing program 0 (id=400): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) fspick(0xffffffffffffff9c, 0x0, 0xf) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214050, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0x114a, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xfffffffd}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1001b}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) 1.681465602s ago: executing program 1 (id=401): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40081271, &(0x7f0000000980)=0x4000) fanotify_init(0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) sendmsg$key(r3, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000025300)=""/102392, 0x18ff8) close(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_xfrm(r4, 0x0, 0x0) pipe(&(0x7f0000000180)) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, 0x0, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffe) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x4, 0x2, 0x0, 0x5, 0x3}) 1.081234282s ago: executing program 3 (id=402): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0x294, 0x51ee, 0x9d, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x3, 0x1000004, 0x7f, 0xfeff, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x9, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x0, r4, 0x0, 0x0}, 0x10) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x60000003}) read$FUSE(r5, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000006780)={0x10, 0x0, r7}, 0x10) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast2}, r4}, 0x14) 552.844479ms ago: executing program 4 (id=403): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) clock_gettime(0x0, &(0x7f0000004a40)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000048c0)=[{{&(0x7f0000001080)=@nl, 0x80, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/115, 0x73}, {&(0x7f0000001200)=""/194, 0xc2}, {&(0x7f0000001300)=""/86, 0x56}, {&(0x7f00000025c0)=""/135, 0x87}, {&(0x7f0000002680)=""/41, 0x29}], 0x5}, 0x8}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000002740)=""/62, 0x3e}, {&(0x7f0000002780)=""/11, 0xb}, {&(0x7f00000027c0)=""/250, 0xfa}, {&(0x7f00000028c0)=""/227, 0xe3}, {&(0x7f00000029c0)=""/115, 0x73}, {&(0x7f0000002a40)=""/77, 0x4d}], 0x6}, 0x1}, {{&(0x7f0000002b40)=@can, 0x80, &(0x7f0000002d80)=[{0x0}, {&(0x7f0000002cc0)=""/151, 0x97}], 0x2, &(0x7f0000002dc0)=""/4, 0x4}, 0x1c26}, {{&(0x7f0000002e00)=@phonet, 0x80, &(0x7f0000002e80), 0x0, &(0x7f0000002ec0)=""/105, 0x69}, 0x4}, {{&(0x7f0000002f40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000045c0)=[{&(0x7f0000002fc0)=""/209, 0xd1}, {&(0x7f00000030c0)=""/204, 0xcc}, {&(0x7f00000031c0)=""/239, 0xef}, {&(0x7f00000032c0)=""/216, 0xd8}, {&(0x7f00000033c0)=""/146, 0x92}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/73, 0x49}, {&(0x7f0000004500)=""/136, 0x88}], 0x8, &(0x7f0000004640)=""/37, 0x25}, 0xfe4}, {{&(0x7f0000004680)=@nfc, 0x80, &(0x7f0000004840)=[{&(0x7f0000004700)=""/57, 0x39}, {&(0x7f0000004780)=""/108, 0x6c}, {&(0x7f0000004800)=""/31, 0x1f}], 0x3, &(0x7f0000004880)=""/36, 0x24}, 0x5}], 0x6, 0x40000021, &(0x7f0000004a80)={r1, r2+10000000}) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000340)="3b02", 0x2}], 0x1) 342.845344ms ago: executing program 0 (id=404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x7, 0x4}, {0x0, 0x9}, {0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x3f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040054) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='0', 0x1) write(r3, &(0x7f00000001a0)='1', 0x1) 269.987848ms ago: executing program 2 (id=405): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x10d243, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x69a8d2bb) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r3, 0x7}, 0x8) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r4], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000086c78211faea9d78a6548aee7100009500deff0000000030a5bcdf3687df388e061dd358a913497b904a7dcca59d0b68a2d30d0c19bce71b74dacf4c886817bbf14bc724d78f6329c8902f64f694618f4ee4c8092a39de13eba82434f355c18ec2408170a8a6434dd3aa0cc3338e54ba97fd6194a3000000000000000000000000000000001ea815192a4b40cc1dead353e427ee939b76bdba4225e48cdd768475d17dbcbb"], &(0x7f0000000080)='GPL\x00'}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xe, 0xfa11, 0x2}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000140)={0xf1504}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x20) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000040)={0x2, 0xa000, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r9, 0x1, 0xc, &(0x7f0000000480)=0x8, 0x4) 197.330467ms ago: executing program 4 (id=406): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet_sctp(r0, &(0x7f0000006240)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="814c594d0bd78f542ea6a16cec7785d432e2f8a665a1968faa5d7b0517bec0169c184f9ad000641ab638f707ba01bd87f403d521f2c4ea80d483c6e7709d741f7525d98c7a2d029f8e6f13003417a90a9d4b3b9be5510b7e12246be2714983cb18c82b4bc716ea5f50b26463b53aa2dab41dbd7135c862ac612c19892b810ca51cc005af6bbcbc9430e06f59cf75804d62df7ecbacfa0a6c500b541c8ba3d7958fe338b7c9d9eecc39328a7cf84cf20fa0e26fc9b2a305de84adec380f24ddb80c043333895aece33ff72f6bd0abc14bcfb340cfd7891ecf601421b795eb664019bf74add4c1481f1e4755a3764d21765640433f", 0xf4}, {&(0x7f0000000480)="cf4a1e93489489671fe50f83a397f0db2f33d454d616b2009ba858", 0x1b}, {&(0x7f0000000500)="872daa3013c515f04108fccef6f8f95e34015799685768823d", 0x19}, {&(0x7f0000000580)="0ede0539c63d5db50432ce2a2a743035e2f873a578c8a5d259cdedd71a8ee848b234fb8861a169b53861708e621ef9a1ca9359a6698b823b8d8d255425e459eaed36737ca5", 0x45}], 0x4, 0x0, 0x0, 0x20000000}], 0x1, 0x20000000) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b", 0x77}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f2", 0x62}, {&(0x7f0000002300)="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", 0x1d7}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000a80)="005bd59ea6e8b3e0e917b21f7ed0cd7b84ced4929f916ac305000000000240004f6dcfa6e816645a5c9dba071ed15f985b8352928ef8ebdb06be85dfd44b6103316367a66294fd7fca2b79e815bf4cfdc6ff0ff960aed1e1f393bf8be3a69838e572a8be740246b05ad30c0c2f0bd9015a8bc6ac592e0230c5fbd6746996689cd656b1e562b23ab7018c8bc0200fe5ba03a24c594176033170c9084ad5477dd5d3c8fc19d9bb706fe824dba5a0c82ac91c013a00", 0xb4, 0x10008095, 0x0, 0x0) 21.1183ms ago: executing program 1 (id=407): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x82042, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) socket$inet6(0xa, 0x4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) lsm_set_self_attr(0x69, &(0x7f0000000e40)=ANY=[@ANYBLOB], 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYRES8=r0, @ANYRES32, @ANYBLOB="080002"], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000003100)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8801) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x8f}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000380)={0x81, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x13) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_smc(0x2b, 0x1, 0x0) 5.726487ms ago: executing program 4 (id=408): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, "226929fb", {0x3, 0x102, 0x0, 0xe, 0x3, 0xf6, 0x6}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x95, &(0x7f00000000c0)=ANY=[@ANYBLOB="0102"]) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x40, 0x8, 0x34, {0x34, 0x5, "a376671062e01b23f2da38362bb6dd954f709aa8fc564545c0ff9f4d9cd708142698ce1dbe77cc45931f36c752326350e80c"}}, &(0x7f0000000180)={0x0, 0x3, 0x2c, @string={0x2c, 0x3, "d84212106849c88b0690a927a85dd2765b01e4a6df31c84c06890f0b5aee6eab0d50e857601a432f998a"}}, &(0x7f0000000240)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0x4, 0x2, 0x4a}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x2, 0x8, "837a4328", "f9e2034e"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x6, 0x6d, 0x7, 0x3, 0x68}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x20, 0x10, 0x74, "43c81962973d4d8018cdec12ed61568f6a34f7d8e7fa89d8deef8a41fe144980cb33ab6a059d4f20dd52bbe008148bd22300a196a872150577953e98b3ce6ef2fa65d98e6b2d23ad48f238ed3918560e0c5e0dc7da50aba9db23cc280e27a3aff33eca555dda6529af9d5393dea47f776d33917b"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x200, 0x1, [0xf0f0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x9b8}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000540)={0x40, 0xb, 0x2, "9fbd"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "8bfb"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0xf6a}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xbe}}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000000)) 0s ago: executing program 3 (id=409): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x2) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x7, 0x24}, {0x0, 0x9}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56741, 0x2000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x10, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x4}}, @qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x4000010) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x1c, 0x48, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0xbf, 0x0, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x44040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000000000)="955e", 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000ac0)=ANY=[@ANYBLOB='mpol=prefer,mpol=l']) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/218, 0xda, 0x0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e) kernel console output (not intermixed with test programs): [ 93.485688][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.503187][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.522564][ T799] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.777028][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.788632][ T176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.807843][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.830806][ T176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.411026][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.438639][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.656682][ T799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.678092][ T799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.692456][ T1155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.780418][ T5822] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 94.798126][ T5830] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10'. [ 94.804887][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.826733][ T5822] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 94.963569][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.976603][ T5822] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 94.991283][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.015934][ T5822] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 95.041866][ T176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.066336][ T176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.101753][ T176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.118969][ T5822] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 95.124238][ T176] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.301571][ T5851] FAULT_INJECTION: forcing a failure. [ 96.301571][ T5851] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.384149][ T5851] CPU: 0 UID: 0 PID: 5851 Comm: syz.1.14 Not tainted syzkaller #0 PREEMPT(full) [ 96.384180][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 96.384199][ T5851] Call Trace: [ 96.384223][ T5851] [ 96.384232][ T5851] dump_stack_lvl+0x100/0x190 [ 96.384268][ T5851] should_fail_ex.cold+0x5/0xa [ 96.384296][ T5851] _copy_from_user+0x2e/0xd0 [ 96.384326][ T5851] core_sys_select+0x2d0/0xbb0 [ 96.384356][ T5851] ? __pfx_core_sys_select+0x10/0x10 [ 96.384379][ T5851] ? find_held_lock+0x2b/0x80 [ 96.384398][ T5851] ? get_pid_task+0xfc/0x250 [ 96.384448][ T5851] ? __pfx_set_user_sigmask+0x10/0x10 [ 96.384475][ T5851] ? __mutex_unlock_slowpath+0x35d/0x930 [ 96.384512][ T5851] do_pselect.constprop.0+0x238/0x270 [ 96.384539][ T5851] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 96.384568][ T5851] ? ksys_write+0x1ac/0x250 [ 96.384593][ T5851] __x64_sys_pselect6+0x149/0x1c0 [ 96.384620][ T5851] do_syscall_64+0x115/0x870 [ 96.384647][ T5851] ? clear_bhb_loop+0x70/0xc0 [ 96.384674][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.384696][ T5851] RIP: 0033:0x7f74d1d9e0d9 [ 96.384715][ T5851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.384734][ T5851] RSP: 002b:00007f74d2cc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 96.384762][ T5851] RAX: ffffffffffffffda RBX: 00007f74d2026090 RCX: 00007f74d1d9e0d9 [ 96.384777][ T5851] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 96.384790][ T5851] RBP: 00007f74d2cc9090 R08: 0000000000000000 R09: 0000000000000000 [ 96.384803][ T5851] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 96.384816][ T5851] R13: 00007f74d2026128 R14: 00007f74d2026090 R15: 00007ffe73de7128 [ 96.384846][ T5851] [ 96.933074][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 96.933098][ T30] audit: type=1400 audit(1786479411.381:214): avc: denied { bind } for pid=5856 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.032222][ T5791] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.128312][ T30] audit: type=1400 audit(1786479411.421:215): avc: denied { name_bind } for pid=5856 comm="syz.0.17" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 97.358246][ T30] audit: type=1400 audit(1786479411.421:216): avc: denied { node_bind } for pid=5856 comm="syz.0.17" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 97.551426][ T30] audit: type=1400 audit(1786479411.431:217): avc: denied { getopt } for pid=5856 comm="syz.0.17" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.610777][ T5862] overlayfs: conflicting options: nfs_export=on,index=off [ 97.669696][ T5867] netlink: 'syz.0.17': attribute type 11 has an invalid length. [ 97.677684][ T5867] netlink: 220 bytes leftover after parsing attributes in process `syz.0.17'. [ 97.823636][ T30] audit: type=1400 audit(1786479411.431:218): avc: denied { name_connect } for pid=5856 comm="syz.0.17" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 98.000692][ T30] audit: type=1400 audit(1786479411.971:219): avc: denied { getopt } for pid=5856 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.203878][ T5720] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.222185][ T30] audit: type=1400 audit(1786479412.641:220): avc: denied { create } for pid=5868 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 98.272768][ T30] audit: type=1400 audit(1786479412.711:221): avc: denied { read write } for pid=5868 comm="syz.4.19" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 98.333284][ T30] audit: type=1400 audit(1786479412.711:222): avc: denied { open } for pid=5868 comm="syz.4.19" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 98.391797][ T30] audit: type=1400 audit(1786479412.711:223): avc: denied { map } for pid=5868 comm="syz.4.19" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.731791][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 98.740985][ T5720] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 98.834198][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 99.117486][ T5720] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 99.201552][ T5720] usb 2-1: config 0 has no interface number 0 [ 99.212759][ T5720] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 99.234998][ T5720] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 99.255513][ T5720] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.273217][ T5720] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 99.321828][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.347688][ T5720] usb 2-1: config 0 descriptor?? [ 99.371287][ T5720] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 99.473812][ T5883] Zero length message leads to an empty skb [ 99.624506][ T5865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.662500][ T5865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.696581][ T5894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5894 comm=syz.3.25 [ 99.821832][ T5791] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.002528][ T5791] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 100.026764][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.056331][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.085429][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.094225][ T5904] ======================================================= [ 100.094225][ T5904] WARNING: The mand mount option has been deprecated and [ 100.094225][ T5904] and is ignored by this kernel. Remove the mand [ 100.094225][ T5904] option from the mount to silence this warning. [ 100.094225][ T5904] ======================================================= [ 100.147519][ T5905] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 100.183677][ T5791] usb 3-1: config 0 descriptor?? [ 100.202961][ T5905] overlayfs: overlapping lowerdir path [ 100.243865][ T5904] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 100.640086][ T5791] usbhid 3-1:0.0: can't add hid device: -71 [ 100.662859][ T5791] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 100.675750][ T5791] usb 3-1: USB disconnect, device number 3 [ 102.714903][ T42] usb 2-1: USB disconnect, device number 2 [ 102.780833][ T42] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 103.056031][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 103.056048][ T30] audit: type=1400 audit(1786479417.511:253): avc: denied { write } for pid=5933 comm="syz.1.35" name="video3" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 103.188733][ T30] audit: type=1400 audit(1786479417.641:254): avc: denied { mounton } for pid=5937 comm="syz.2.36" path="/7/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 103.218244][ T5938] nfs: Unknown parameter 'fs' [ 103.345991][ T30] audit: type=1400 audit(1786479417.741:255): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 103.592470][ T5941] FAULT_INJECTION: forcing a failure. [ 103.592470][ T5941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.605711][ T5941] CPU: 0 UID: 0 PID: 5941 Comm: syz.4.37 Not tainted syzkaller #0 PREEMPT(full) [ 103.605738][ T5941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 103.605752][ T5941] Call Trace: [ 103.605759][ T5941] [ 103.605767][ T5941] dump_stack_lvl+0x100/0x190 [ 103.605800][ T5941] should_fail_ex.cold+0x5/0xa [ 103.605828][ T5941] _copy_from_iter+0x1f4/0x1690 [ 103.605860][ T5941] ? irqentry_exit+0x24d/0xa00 [ 103.605892][ T5941] ? __pfx__copy_from_iter+0x10/0x10 [ 103.605930][ T5941] ? copy_page_from_iter+0x263/0x300 [ 103.605964][ T5941] copy_page_from_iter+0x238/0x300 [ 103.605998][ T5941] skb_copy_datagram_from_iter+0x399/0x720 [ 103.606034][ T5941] unix_stream_sendmsg+0x536/0x1310 [ 103.606073][ T5941] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 103.606103][ T5941] ? security_socket_sendmsg+0xde/0x230 [ 103.606137][ T5941] ? selinux_socket_sendmsg+0x198/0x2f0 [ 103.606173][ T5941] ____sys_sendmsg+0xa4d/0xbe0 [ 103.606205][ T5941] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 103.606237][ T5941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.606275][ T5941] ? __schedule+0x126e/0x6730 [ 103.606308][ T5941] ___sys_sendmsg+0x190/0x1e0 [ 103.606332][ T5941] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.606367][ T5941] ? irqentry_exit+0x24d/0xa00 [ 103.606397][ T5941] ? lockdep_hardirqs_on+0x78/0x100 [ 103.606434][ T5941] ? fdget+0x17a/0x210 [ 103.606457][ T5941] __sys_sendmsg+0x160/0x210 [ 103.606485][ T5941] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.606524][ T5941] do_syscall_64+0x115/0x870 [ 103.606559][ T5941] ? clear_bhb_loop+0x70/0xc0 [ 103.606586][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.606608][ T5941] RIP: 0033:0x7fa6ef79e0d9 [ 103.606627][ T5941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.606647][ T5941] RSP: 002b:00007fa6f06a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.606669][ T5941] RAX: ffffffffffffffda RBX: 00007fa6efa26090 RCX: 00007fa6ef79e0d9 [ 103.606683][ T5941] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 103.606696][ T5941] RBP: 00007fa6f06a7090 R08: 0000000000000000 R09: 0000000000000000 [ 103.606709][ T5941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.606722][ T5941] R13: 00007fa6efa26128 R14: 00007fa6efa26090 R15: 00007ffea3b05768 [ 103.606751][ T5941] [ 105.004410][ T5947] netlink: 'syz.0.38': attribute type 11 has an invalid length. [ 105.012221][ T5947] netlink: 220 bytes leftover after parsing attributes in process `syz.0.38'. [ 105.716780][ T30] audit: type=1400 audit(1786479420.171:256): avc: denied { bind } for pid=5956 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.774080][ T30] audit: type=1400 audit(1786479420.191:257): avc: denied { accept } for pid=5956 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.829055][ T30] audit: type=1400 audit(1786479420.201:258): avc: denied { write } for pid=5956 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.856161][ T5957] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 105.867819][ T5957] block device autoloading is deprecated and will be removed. [ 105.875913][ T5791] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.886237][ T30] audit: type=1400 audit(1786479420.341:259): avc: denied { create } for pid=5962 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.006516][ T30] audit: type=1400 audit(1786479420.341:260): avc: denied { getopt } for pid=5962 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.027303][ T30] audit: type=1400 audit(1786479420.341:261): avc: denied { create } for pid=5962 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.081745][ T5791] usb 3-1: device descriptor read/64, error -71 [ 106.198630][ T30] audit: type=1400 audit(1786479420.651:262): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.361886][ T5791] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.491928][ T5791] usb 3-1: device descriptor read/64, error -71 [ 106.626603][ T5791] usb usb3-port1: attempt power cycle [ 106.769803][ T5980] overlayfs: missing 'lowerdir' [ 107.128313][ T5791] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 107.168027][ T5791] usb 3-1: device descriptor read/8, error -71 [ 107.411990][ T5791] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 107.450122][ T5791] usb 3-1: device descriptor read/8, error -71 [ 107.575590][ T5791] usb usb3-port1: unable to enumerate USB device [ 107.741991][ T5791] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 107.914524][ T5791] usb 5-1: device descriptor read/64, error -71 [ 108.181854][ T5791] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 108.361808][ T5791] usb 5-1: device descriptor read/64, error -71 [ 108.434531][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 108.434549][ T30] audit: type=1400 audit(1786479422.891:264): avc: denied { setopt } for pid=5992 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.505897][ T5996] vxcan1: tx drop: invalid da for name 0x0000100000000000 [ 108.522928][ T5791] usb usb5-port1: attempt power cycle [ 108.604894][ T30] audit: type=1400 audit(1786479422.921:265): avc: denied { ioctl } for pid=5992 comm="syz.1.52" path="socket:[8165]" dev="sockfs" ino=8165 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.710282][ T30] audit: type=1400 audit(1786479422.921:266): avc: denied { bind } for pid=5992 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.861144][ T30] audit: type=1400 audit(1786479422.961:267): avc: denied { connect } for pid=5992 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.946703][ T5791] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 109.000647][ T30] audit: type=1400 audit(1786479422.961:268): avc: denied { write } for pid=5992 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.170544][ T5791] usb 5-1: device descriptor read/8, error -71 [ 109.746406][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 109.873905][ T5791] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 110.074454][ T5791] usb 5-1: device descriptor read/8, error -71 [ 110.121762][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.314682][ T10] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 110.326133][ T5791] usb usb5-port1: unable to enumerate USB device [ 110.405936][ T10] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 110.529507][ T10] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 110.931337][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 110.984001][ T10] usb 2-1: SerialNumber: syz [ 111.501911][ T5791] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.824197][ T6005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6005 comm=syz.2.53 [ 112.358605][ T30] audit: type=1400 audit(1786479423.721:269): avc: denied { mmap_zero } for pid=6008 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 112.495655][ T10] usb 2-1: can't set config #253, error -71 [ 112.518296][ T5791] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.644833][ T6021] netlink: 'syz.4.57': attribute type 11 has an invalid length. [ 112.652692][ T6021] netlink: 220 bytes leftover after parsing attributes in process `syz.4.57'. [ 112.668103][ T30] audit: type=1400 audit(1786479426.911:270): avc: denied { create } for pid=6017 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.715169][ T30] audit: type=1400 audit(1786479427.051:271): avc: denied { connect } for pid=6017 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.761516][ T5791] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 112.978185][ T5791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.259717][ T10] usb 2-1: USB disconnect, device number 3 [ 113.271539][ T5791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.293542][ T5791] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.306529][ T5791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.332662][ T5791] usb 4-1: config 0 descriptor?? [ 113.607587][ T5791] usbhid 4-1:0.0: can't add hid device: -71 [ 113.613986][ T5791] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 113.636603][ T5791] usb 4-1: USB disconnect, device number 2 [ 113.737041][ T6034] overlayfs: missing 'lowerdir' [ 113.743012][ T6036] netlink: 'syz.4.61': attribute type 21 has an invalid length. [ 114.294426][ T6036] netlink: 'syz.4.61': attribute type 1 has an invalid length. [ 114.309329][ T30] audit: type=1400 audit(1786479428.761:272): avc: denied { create } for pid=6045 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.328355][ T6036] netlink: 144 bytes leftover after parsing attributes in process `syz.4.61'. [ 114.338985][ T6037] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 114.384337][ T6037] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 114.404959][ T30] audit: type=1400 audit(1786479428.761:273): avc: denied { write } for pid=6045 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.429433][ T6037] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 114.442275][ T6037] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 114.469696][ T30] audit: type=1400 audit(1786479428.831:274): avc: denied { create } for pid=6046 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.494967][ T6037] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 114.515842][ T6037] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 114.558951][ T6037] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 114.580186][ T6037] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 114.595115][ T6037] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 114.606448][ T24] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 114.620530][ T6037] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 114.703800][ T6032] overlayfs: conflicting options: nfs_export=on,index=off [ 114.772467][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 114.781809][ T5791] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 114.787642][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.811823][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.849334][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.884387][ T24] usb 4-1: config 0 descriptor?? [ 114.942889][ T5791] usb 3-1: Using ep0 maxpacket: 16 [ 114.957882][ T5791] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 114.986168][ T5791] usb 3-1: config 0 interface 0 altsetting 88 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.021017][ T5791] usb 3-1: config 0 interface 0 altsetting 88 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.048723][ T5791] usb 3-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.093201][ T5791] usb 3-1: config 0 interface 0 has no altsetting 0 [ 115.118056][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.127169][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 115.181437][ T5791] usb 3-1: config 0 descriptor?? [ 115.239271][ T6056] overlayfs: missing 'lowerdir' [ 115.626414][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 115.628845][ T6047] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 115.649799][ T24] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 115.657198][ T10] usb 5-1: too many configurations: 25, using maximum allowed: 8 [ 115.674121][ T24] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 115.684351][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.705130][ T24] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 115.730052][ T10] usb 5-1: config 0 descriptor?? [ 115.732150][ T6047] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 115.746100][ T24] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 115.764209][ T24] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 115.780685][ T24] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 115.807695][ T10] pwc: Creative Labs Webcam Pro Ex detected. [ 115.818087][ T24] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 115.821032][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 115.842358][ T5791] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 115.854336][ T10] pwc: Warning: more than 1 configuration available. [ 115.870437][ T5791] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 115.902593][ T5791] kovaplus 0003:1E7D:2D50.0002: item fetching failed at offset 2/44 [ 115.950028][ T24] isku 0003:1E7D:319C.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 115.956328][ T5791] kovaplus 0003:1E7D:2D50.0002: parse failed [ 116.030578][ T5791] kovaplus 0003:1E7D:2D50.0002: probe with driver kovaplus failed with error -22 [ 116.040630][ T10] pwc: Failed to set LED on/off time (-71) [ 116.066191][ T10] pwc: send_video_command error -71 [ 116.075260][ T24] isku 0003:1E7D:319C.0001: couldn't init struct isku_device [ 116.087571][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 116.106757][ T24] isku 0003:1E7D:319C.0001: couldn't install keyboard [ 116.119052][ T30] audit: type=1400 audit(1786479430.571:275): avc: denied { create } for pid=6061 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.141983][ T6064] netlink: 'syz.0.68': attribute type 4 has an invalid length. [ 116.148595][ T10] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 116.167957][ T24] isku 0003:1E7D:319C.0001: probe with driver isku failed with error -71 [ 116.183031][ T30] audit: type=1400 audit(1786479430.571:276): avc: denied { connect } for pid=6061 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.184356][ T6063] netlink: 48 bytes leftover after parsing attributes in process `syz.1.69'. [ 116.205162][ T10] usb 5-1: USB disconnect, device number 6 [ 116.242673][ T24] usb 4-1: USB disconnect, device number 3 [ 116.282613][ T6062] fido_id[6062]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 116.386697][ T30] audit: type=1400 audit(1786479430.841:277): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 116.422602][ T30] audit: type=1400 audit(1786479430.881:278): avc: denied { create } for pid=6065 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.605177][ T5600] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.842143][ T5600] usb 2-1: Using ep0 maxpacket: 32 [ 116.890161][ T5600] usb 2-1: unable to get BOS descriptor or descriptor too short [ 116.965784][ T5600] usb 2-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 117.066747][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.084569][ T5600] usb 2-1: Product: syz [ 117.093446][ T5600] usb 2-1: Manufacturer: syz [ 117.103386][ T5600] usb 2-1: SerialNumber: syz [ 117.126951][ T30] audit: type=1400 audit(1786479431.581:279): avc: denied { block_suspend } for pid=6070 comm="syz.3.72" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.224566][ T30] audit: type=1400 audit(1786479431.671:280): avc: denied { name_bind } for pid=6069 comm="syz.4.71" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 117.465414][ T30] audit: type=1400 audit(1786479431.671:281): avc: denied { name_connect } for pid=6069 comm="syz.4.71" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 117.501354][ T5600] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 117.530347][ T6074] netlink: 'syz.4.71': attribute type 11 has an invalid length. [ 117.539674][ T6074] netlink: 220 bytes leftover after parsing attributes in process `syz.4.71'. [ 117.826788][ T5600] usb 2-1: unit 37 not found! [ 117.911609][ T5600] usb 2-1: unit 0 not found! [ 117.933474][ T24] usb 3-1: USB disconnect, device number 8 [ 118.787641][ T5600] usb 2-1: USB disconnect, device number 4 [ 119.032287][ T42] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 120.235328][ T6090] overlayfs: conflicting options: nfs_export=on,index=off [ 121.731707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 122.429455][ T6091] netlink: 'syz.2.76': attribute type 11 has an invalid length. [ 122.438699][ T6091] netlink: 220 bytes leftover after parsing attributes in process `syz.2.76'. [ 123.059117][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 123.059160][ T30] audit: type=1400 audit(1786479437.511:286): avc: denied { write } for pid=6109 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.113753][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 123.436769][ T30] audit: type=1400 audit(1786479437.511:287): avc: denied { nlmsg_write } for pid=6109 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.503711][ T6118] udevd[6118]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.662563][ T10] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 123.822379][ T10] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 123.836562][ T10] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 123.849720][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.860032][ T10] usb 3-1: Product: syz [ 123.864376][ T10] usb 3-1: Manufacturer: syz [ 123.869041][ T10] usb 3-1: SerialNumber: syz [ 123.879832][ T10] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 123.982001][ T42] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.142188][ T42] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 124.153446][ T42] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 124.166158][ T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.177550][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 124.194333][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.208316][ T42] usb 5-1: Product: syz [ 124.215841][ T42] usb 5-1: Manufacturer: syz [ 124.228016][ T42] usb 5-1: SerialNumber: syz [ 124.248619][ T42] usb 5-1: config 0 descriptor?? [ 124.266693][ T42] usb-storage 5-1:0.0: USB Mass Storage device detected [ 124.286000][ T42] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 124.300250][ T6134] overlayfs: missing 'lowerdir' [ 124.659160][ T30] audit: type=1400 audit(1786479439.111:288): avc: denied { setopt } for pid=6123 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.693881][ T10] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 124.776979][ T10] usb 3-1: USB disconnect, device number 9 [ 124.800968][ T5600] usb 5-1: USB disconnect, device number 8 [ 124.860710][ T6140] netlink: 'syz.1.88': attribute type 4 has an invalid length. [ 125.060216][ T6146] netlink: 'syz.3.89': attribute type 11 has an invalid length. [ 125.067994][ T6146] netlink: 220 bytes leftover after parsing attributes in process `syz.3.89'. [ 125.094479][ T6145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.180381][ T6145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.084629][ T6154] sctp_transport_update_pmtu: 48 callbacks suppressed [ 126.084644][ T6154] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 126.102864][ T6154] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 126.113986][ T6154] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 126.124551][ T6154] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 126.137060][ T6154] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 126.147527][ T6154] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 126.157969][ T6154] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 126.168504][ T6154] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 126.179044][ T6154] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 126.189545][ T6154] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 126.528996][ T6164] overlayfs: missing 'lowerdir' [ 127.017232][ T6156] overlayfs: conflicting options: nfs_export=on,index=off [ 127.030027][ T6170] fuse: Bad value for 'fd' [ 127.044874][ T30] audit: type=1400 audit(1786479441.501:289): avc: denied { write } for pid=6169 comm="syz.2.95" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 127.113993][ T30] audit: type=1400 audit(1786479441.501:290): avc: denied { open } for pid=6169 comm="syz.2.95" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 127.259095][ T30] audit: type=1400 audit(1786479441.711:291): avc: denied { mount } for pid=6172 comm="syz.1.97" name="/" dev="configfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 127.350934][ T30] audit: type=1400 audit(1786479441.711:292): avc: denied { search } for pid=6172 comm="syz.1.97" name="/" dev="configfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.380463][ T6176] tmpfs: Unknown parameter 'j' [ 127.409325][ T6176] fuse: Bad value for 'rootmode' [ 127.446248][ T30] audit: type=1400 audit(1786479441.711:293): avc: denied { search } for pid=6172 comm="syz.1.97" name="nullb" dev="configfs" ino=3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.504927][ T30] audit: type=1400 audit(1786479441.711:294): avc: denied { write search } for pid=6172 comm="syz.1.97" name="nullb" dev="configfs" ino=3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.562311][ T30] audit: type=1400 audit(1786479441.711:295): avc: denied { add_name } for pid=6172 comm="syz.1.97" name="nullb1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.831769][ T5791] kernel write not supported for file /dsp1 (pid: 5791 comm: kworker/0:5) [ 128.064996][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.103'. [ 128.350453][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 128.350469][ T30] audit: type=1400 audit(1786479442.351:303): avc: denied { create } for pid=6190 comm="syz.4.103" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 128.486196][ T30] audit: type=1400 audit(1786479442.531:304): avc: denied { write } for pid=6190 comm="syz.4.103" name="file0" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 128.592116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 128.629219][ T30] audit: type=1400 audit(1786479442.531:305): avc: denied { open } for pid=6190 comm="syz.4.103" path="/23/file0" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 128.652009][ T30] audit: type=1400 audit(1786479443.091:306): avc: denied { unlink } for pid=5609 comm="syz-executor" name="file0" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 128.706834][ T6205] netlink: 'syz.1.104': attribute type 1 has an invalid length. [ 128.746126][ T30] audit: type=1400 audit(1786479443.141:307): avc: denied { create } for pid=6202 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 128.846236][ T30] audit: type=1400 audit(1786479443.161:308): avc: denied { setopt } for pid=6202 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 128.917476][ T6205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.932674][ T30] audit: type=1400 audit(1786479443.161:309): avc: denied { accept } for pid=6202 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 129.527605][ T30] audit: type=1400 audit(1786479443.981:310): avc: denied { write } for pid=6218 comm="syz.3.108" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 129.595967][ T6219] netlink: 'syz.3.108': attribute type 21 has an invalid length. [ 129.603842][ T6219] netlink: 128 bytes leftover after parsing attributes in process `syz.3.108'. [ 129.783474][ T6226] overlayfs: conflicting options: nfs_export=on,index=off [ 129.812421][ T6226] netlink: 'syz.1.109': attribute type 11 has an invalid length. [ 129.821794][ T6226] netlink: 220 bytes leftover after parsing attributes in process `syz.1.109'. [ 130.392279][ T30] audit: type=1400 audit(1786479444.851:311): avc: denied { name_bind } for pid=6228 comm="syz.1.110" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 130.550301][ T30] audit: type=1400 audit(1786479445.001:312): avc: denied { read } for pid=6231 comm="syz.1.111" name="sg0" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.966251][ T5791] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 131.006178][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.015373][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.104802][ T6215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.120340][ T6215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.144897][ T5791] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.165938][ T5791] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 131.216562][ T5791] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.228194][ T5791] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 131.244228][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 131.254823][ T5791] usb 2-1: SerialNumber: syz [ 131.313635][ T5600] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 131.553844][ T5600] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.685818][ T5600] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 131.786818][ T6219] netlink: 'syz.3.108': attribute type 4 has an invalid length. [ 131.796538][ T6219] netlink: 3 bytes leftover after parsing attributes in process `syz.3.108'. [ 131.828213][ T27] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.860511][ T5600] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.039885][ T6247] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.130551][ T5600] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 132.232005][ T1145] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.356248][ T5600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 132.394711][ T1145] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.519928][ T5600] usb 5-1: SerialNumber: syz [ 133.661332][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.669077][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.274514][ T5791] rndis_host 2-1:253.0: RNDIS init failed, -71 [ 137.326825][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 137.326839][ T30] audit: type=1400 audit(1786479451.781:320): avc: denied { setopt } for pid=6268 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.339067][ T5791] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -71 [ 137.468698][ T30] audit: type=1400 audit(1786479451.921:321): avc: denied { read write } for pid=6271 comm="syz.2.119" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 137.496303][ T5600] rndis_host 5-1:253.0: RNDIS init failed, -71 [ 137.503253][ T5600] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -71 [ 137.536151][ T5600] usb 5-1: USB disconnect, device number 9 [ 137.545512][ T30] audit: type=1400 audit(1786479451.921:322): avc: denied { open } for pid=6271 comm="syz.2.119" path="/20/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 137.570133][ T30] audit: type=1400 audit(1786479451.951:323): avc: denied { ioctl } for pid=6271 comm="syz.2.119" path="/20/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 137.582937][ T5791] usb 2-1: USB disconnect, device number 5 [ 137.761142][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 138.331991][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 138.542560][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 138.632893][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.733906][ T10] usb 5-1: config 0 descriptor?? [ 138.880878][ T10] cp210x 5-1:0.0: cp210x converter detected [ 139.407066][ T10] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 139.436853][ T10] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 139.486422][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 139.515103][ T30] audit: type=1400 audit(1786479453.971:324): avc: denied { read } for pid=6295 comm="syz.0.126" name="event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 139.539517][ T10] usb 5-1: USB disconnect, device number 10 [ 139.540803][ T30] audit: type=1400 audit(1786479453.971:325): avc: denied { open } for pid=6295 comm="syz.0.126" path="/dev/input/event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 139.592921][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 139.601020][ T10] cp210x 5-1:0.0: device disconnected [ 139.705282][ T30] audit: type=1400 audit(1786479454.161:326): avc: denied { bind } for pid=6297 comm="syz.2.127" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.747450][ T30] audit: type=1400 audit(1786479454.161:327): avc: denied { name_bind } for pid=6297 comm="syz.2.127" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 139.789062][ T30] audit: type=1400 audit(1786479454.181:328): avc: denied { node_bind } for pid=6297 comm="syz.2.127" saddr=ff01::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 140.249816][ T6302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.251944][ T30] audit: type=1400 audit(1786479454.701:329): avc: denied { read write } for pid=6295 comm="syz.0.126" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 140.312309][ T6302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.388303][ T6305] trusted_key: syz.0.126 sent an empty control message without MSG_MORE. [ 140.458580][ T6296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.471782][ T6296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.487442][ T6296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.500222][ T6296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.041751][ T6323] syz.1.135 uses obsolete (PF_INET,SOCK_PACKET) [ 141.101705][ T6325] kvm: pic: level sensitive irq not supported [ 141.139936][ T6325] kvm: pic: non byte read [ 141.165646][ T6328] netlink: 'syz.4.136': attribute type 10 has an invalid length. [ 141.215474][ T6325] kvm: pic: level sensitive irq not supported [ 141.215535][ T6325] kvm: pic: non byte read [ 141.323076][ T6328] team0: Port device dummy0 added [ 141.715896][ T6342] overlay: ./file1 is not a directory [ 142.723561][ T6357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.140'. [ 142.736747][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 142.747060][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 143.413421][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 143.413445][ T30] audit: type=1400 audit(1786479457.861:341): avc: denied { setopt } for pid=6360 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 143.523768][ T6357] block nbd3: shutting down sockets [ 143.549480][ T30] audit: type=1400 audit(1786479457.901:342): avc: denied { ioctl } for pid=6360 comm="syz.0.143" path="socket:[9979]" dev="sockfs" ino=9979 ioctlcmd=0xaf22 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.517926][ T30] audit: type=1400 audit(1786479457.911:343): avc: denied { ioctl } for pid=6360 comm="syz.0.143" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x6434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 144.683744][ T30] audit: type=1400 audit(1786479457.911:344): avc: denied { setattr } for pid=6360 comm="syz.0.143" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 145.159455][ T6370] tipc: Failed to remove unknown binding: 66,0,0/0:1461958148/1461958150 [ 145.348281][ T30] audit: type=1400 audit(1786479458.081:345): avc: denied { connect } for pid=6362 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.382735][ T30] audit: type=1400 audit(1786479458.101:346): avc: denied { bind } for pid=6362 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.708473][ T6370] tipc: Failed to remove unknown binding: 66,0,0/0:1461958148/1461958149 [ 145.797059][ T30] audit: type=1400 audit(1786479458.101:347): avc: denied { write } for pid=6362 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.821034][ T6370] tipc: Failed to remove unknown binding: 66,0,0/0:1461958148/1461958150 [ 145.866002][ T30] audit: type=1400 audit(1786479458.121:348): avc: denied { read } for pid=6362 comm="syz.4.144" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 145.904238][ T6387] ip_tables: iptables: counters copy to user failed while replacing table [ 145.949168][ T30] audit: type=1400 audit(1786479458.121:349): avc: denied { open } for pid=6362 comm="syz.4.144" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 146.000747][ T30] audit: type=1400 audit(1786479458.571:350): avc: denied { create } for pid=6367 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 146.591972][ T48] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.523287][ T6393] mmap: syz.4.153 (6393): VmData 25837568 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 148.362739][ T6413] process 'syz.2.158' launched './file0' with NULL argv: empty string added [ 148.377451][ T6413] Invalid argument reading file caps for ./file0 [ 148.515748][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 148.515764][ T30] audit: type=1400 audit(1786479462.971:365): avc: denied { create } for pid=6423 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 148.551303][ T30] audit: type=1400 audit(1786479463.001:366): avc: denied { setopt } for pid=6423 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 148.573692][ T30] audit: type=1400 audit(1786479463.011:367): avc: denied { bind } for pid=6423 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 148.673814][ T5600] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 148.809633][ T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 148.943288][ T5600] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 148.995215][ T6431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.019724][ T5600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.072707][ T6431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.123128][ T5600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.183014][ T5600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.354598][ T5600] usb 2-1: config 0 descriptor?? [ 149.751498][ T6427] netlink: 32 bytes leftover after parsing attributes in process `syz.2.163'. [ 150.252607][ T5707] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 150.260808][ T30] audit: type=1400 audit(1786479464.711:368): avc: denied { connect } for pid=6415 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.280296][ T5600] usbhid 2-1:0.0: can't add hid device: -71 [ 150.280395][ T5600] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 150.314283][ T5600] usb 2-1: USB disconnect, device number 6 [ 150.330605][ T10] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 150.360059][ T10] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 150.393892][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.433651][ T10] usb 4-1: Product: syz [ 150.449827][ T10] usb 4-1: Manufacturer: syz [ 150.467677][ T10] usb 4-1: SerialNumber: syz [ 150.474795][ T5707] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 150.487067][ T30] audit: type=1400 audit(1786479464.711:369): avc: denied { write } for pid=6415 comm="syz.1.161" lport=3592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.525544][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.619905][ T5707] usb 5-1: config 0 descriptor?? [ 150.775337][ T10] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 150.838839][ C0] raw-gadget.2 gadget.4: ignoring, device is not running [ 150.903347][ T5707] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 150.970594][ T5707] [drm:udl_init] *ERROR* Selecting channel failed [ 151.168907][ T5707] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 151.198799][ T5707] [drm] Initialized udl on minor 1 [ 151.230502][ T5707] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 151.249435][ T5707] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 151.270090][ T5791] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 151.282098][ T5707] usb 5-1: USB disconnect, device number 11 [ 151.288066][ T5795] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 151.303674][ T5791] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 151.413894][ T10] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 151.451218][ T10] usb 4-1: USB disconnect, device number 4 [ 151.464398][ T5795] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 151.497162][ T5795] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 151.515075][ T5795] usb 3-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 151.540746][ T5795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.554964][ T5600] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 151.565729][ T5795] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 151.582044][ T5795] usb 3-1: invalid MIDI out EP 0 [ 151.595468][ T30] audit: type=1400 audit(1786479466.041:370): avc: denied { watch } for pid=6448 comm="syz.0.172" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 151.626803][ T6449] tmpfs: Bad value for 'mpol' [ 151.714108][ T5600] usb 2-1: not running at top speed; connect to a high speed hub [ 151.736490][ T5600] usb 2-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=a7.d5 [ 151.771252][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.790121][ T5600] usb 2-1: Product: syz [ 151.794506][ T5600] usb 2-1: Manufacturer: syz [ 151.802901][ T5600] usb 2-1: SerialNumber: syz [ 151.828335][ T6452] tipc: Started in network mode [ 151.844142][ T6452] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 151.866699][ T6452] tipc: Enabled bearer , priority 2 [ 151.973229][ T5795] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 152.009702][ T5795] usb 3-1: USB disconnect, device number 10 [ 152.087146][ T30] audit: type=1400 audit(1786479466.541:371): avc: denied { append } for pid=6438 comm="syz.1.168" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 152.265919][ T30] audit: type=1400 audit(1786479466.541:372): avc: denied { node_bind } for pid=6454 comm="syz.0.175" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 152.910557][ T5600] gspca_main: conex-2.14.0 probing 0572:0041 [ 152.912768][ T10] tipc: Node number set to 8432298 [ 153.071564][ T6459] overlayfs: conflicting options: nfs_export=on,index=off [ 153.092068][ T6459] netlink: 'syz.0.175': attribute type 11 has an invalid length. [ 153.099942][ T6459] netlink: 220 bytes leftover after parsing attributes in process `syz.0.175'. [ 153.533944][ T30] audit: type=1400 audit(1786479467.991:373): avc: denied { ioctl } for pid=6469 comm="syz.2.178" path="socket:[10231]" dev="sockfs" ino=10231 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.566829][ T5600] usb 2-1: USB disconnect, device number 7 [ 154.619097][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.687771][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.842007][ T5728] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 155.045601][ T5728] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 155.056021][ T5728] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 155.075183][ T5600] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 155.090662][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.099446][ T5728] usb 4-1: Product: syz [ 155.103898][ T5728] usb 4-1: Manufacturer: syz [ 155.111915][ T5728] usb 4-1: SerialNumber: syz [ 155.124647][ T5728] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 155.563269][ T5600] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 155.580816][ T5600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.595160][ T5600] usb 2-1: config 0 descriptor?? [ 155.803248][ T5600] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 155.812612][ T5600] [drm:udl_init] *ERROR* Selecting channel failed [ 155.831892][ T24] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 155.878027][ T5600] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 155.891864][ T5600] [drm] Initialized udl on minor 1 [ 155.908346][ T5600] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 155.943517][ T5600] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 155.970813][ T3098] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 155.984031][ T24] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 155.995962][ T5600] usb 2-1: USB disconnect, device number 8 [ 156.007192][ T3098] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 156.014518][ T5728] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 156.031856][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 156.047136][ T30] audit: type=1400 audit(1786479470.501:374): avc: denied { read write } for pid=6499 comm="syz.4.185" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 156.077019][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.104767][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 156.132726][ T30] audit: type=1400 audit(1786479470.501:375): avc: denied { open } for pid=6499 comm="syz.4.185" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 156.167169][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.181863][ T30] audit: type=1400 audit(1786479470.621:376): avc: denied { mount } for pid=6501 comm="syz.0.186" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 156.208739][ T30] audit: type=1400 audit(1786479470.621:377): avc: denied { write } for pid=6501 comm="syz.0.186" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 156.234041][ T30] audit: type=1400 audit(1786479470.621:378): avc: denied { ioctl } for pid=6501 comm="syz.0.186" path="/40/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 156.266754][ T24] usb 3-1: config 0 descriptor?? [ 156.294883][ T5728] usb 4-1: USB disconnect, device number 5 [ 156.447877][ T6510] sctp_transport_update_pmtu: 47 callbacks suppressed [ 156.447896][ T6510] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.465323][ T6510] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.476036][ T6510] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.486925][ T6510] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.499223][ T6510] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.509897][ T6510] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.520585][ T6510] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.531125][ T6510] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.541607][ T6510] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.541663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 156.561111][ T6510] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.674203][ T6510] overlayfs: conflicting options: nfs_export=on,index=off [ 156.843288][ T24] acrux 0003:1A34:0802.0003: unknown main item tag 0x2 [ 157.001904][ T6502] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 157.093408][ T6502] device-mapper: ioctl: error adding target to table [ 157.546506][ T6518] overlayfs: conflicting options: nfs_export=on,index=off [ 157.593014][ T6519] netlink: 'syz.1.190': attribute type 11 has an invalid length. [ 157.600989][ T6519] netlink: 220 bytes leftover after parsing attributes in process `syz.1.190'. [ 157.787628][ T24] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 157.794678][ T24] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 157.801617][ T24] acrux 0003:1A34:0802.0003: unknown main item tag 0x6 [ 157.808560][ T24] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 157.815617][ T24] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 157.826530][ T24] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 157.833504][ T24] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 157.840441][ T24] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 157.851024][ T24] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 157.857354][ T30] audit: type=1400 audit(1786479472.291:379): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 157.858861][ T24] acrux 0003:1A34:0802.0003: item fetching failed at offset 37/41 [ 157.895318][ T24] acrux 0003:1A34:0802.0003: parse failed [ 157.901160][ T24] acrux 0003:1A34:0802.0003: probe with driver acrux failed with error -22 [ 159.112061][ T187] usb 3-1: USB disconnect, device number 11 [ 159.164896][ T30] audit: type=1400 audit(1786479473.621:380): avc: denied { bind } for pid=6521 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.245697][ T30] audit: type=1400 audit(1786479473.701:381): avc: denied { create } for pid=6521 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 159.256712][ T6536] capability: warning: `syz.1.195' uses deprecated v2 capabilities in a way that may be insecure [ 159.330728][ T30] audit: type=1400 audit(1786479473.701:382): avc: denied { bind } for pid=6521 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 159.522288][ T30] audit: type=1400 audit(1786479473.701:383): avc: denied { listen } for pid=6521 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 159.725713][ T30] audit: type=1400 audit(1786479474.101:384): avc: denied { read write } for pid=6540 comm="syz.2.196" name="video3" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 160.024628][ T6548] tmpfs: Bad value for 'nr_inodes' [ 160.058060][ T30] audit: type=1400 audit(1786479474.101:385): avc: denied { open } for pid=6540 comm="syz.2.196" path="/dev/video3" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 160.121089][ T6548] hugetlbfs: syz.1.198 (6548): Using mlock ulimits for SHM_HUGETLB is obsolete [ 160.171971][ T30] audit: type=1400 audit(1786479474.101:386): avc: denied { ioctl } for pid=6540 comm="syz.2.196" path="/dev/video3" dev="devtmpfs" ino=935 ioctlcmd=0x5640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 161.142309][ T30] audit: type=1400 audit(1786479475.561:387): avc: denied { write } for pid=6542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.549453][ T6571] sctp_transport_update_pmtu: 47 callbacks suppressed [ 161.549477][ T6571] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.567439][ T6571] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.578015][ T6571] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.588695][ T6571] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.600217][ T6571] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.610776][ T6571] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.621376][ T6571] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.631904][ T6571] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.642517][ T6571] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.652971][ T6571] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.871847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 162.142977][ T6575] overlayfs: conflicting options: nfs_export=on,index=off [ 162.204964][ T30] audit: type=1400 audit(1786479476.641:388): avc: denied { watch } for pid=6577 comm="syz.0.205" path="/44/net_prio.prioidx" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 162.606122][ T30] audit: type=1400 audit(1786479476.641:389): avc: denied { watch_sb watch_reads } for pid=6577 comm="syz.0.205" path="/44/net_prio.prioidx" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.850786][ T6589] netlink: 'syz.2.206': attribute type 21 has an invalid length. [ 162.892265][ T6589] netlink: 'syz.2.206': attribute type 6 has an invalid length. [ 163.030723][ T6589] netlink: 132 bytes leftover after parsing attributes in process `syz.2.206'. [ 163.177067][ T6570] overlayfs: conflicting options: nfs_export=on,index=off [ 163.204421][ T6570] netlink: 'syz.1.202': attribute type 11 has an invalid length. [ 163.213203][ T6570] netlink: 220 bytes leftover after parsing attributes in process `syz.1.202'. [ 163.462874][ T6602] SELinux: security policydb version 18 (MLS) not backwards compatible [ 163.591483][ T6602] SELinux: failed to load policy [ 163.892385][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 164.066093][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 164.117425][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.237884][ T5728] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 164.382643][ T6639] overlayfs: conflicting options: nfs_export=on,index=off [ 164.477226][ T6640] netlink: 'syz.1.213': attribute type 11 has an invalid length. [ 164.485243][ T6640] netlink: 220 bytes leftover after parsing attributes in process `syz.1.213'. [ 164.625116][ T24] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 164.635213][ T5728] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.703211][ T5728] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 164.714548][ T5728] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 164.777440][ T5728] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64 [ 164.965817][ T5728] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 165.132477][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 165.221494][ T5728] usb 3-1: SerialNumber: syz [ 165.398163][ T6645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.407224][ T6624] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 165.422303][ T6645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.446663][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 165.446675][ T30] audit: type=1400 audit(1786479479.851:398): avc: denied { open } for pid=6644 comm="syz.0.214" path="/dev/ttyq4" dev="devtmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 165.522632][ T30] audit: type=1400 audit(1786479479.971:399): avc: denied { write } for pid=6597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.611128][ T30] audit: type=1400 audit(1786479480.021:400): avc: denied { write } for pid=6612 comm="syz.4.209" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 165.694992][ T5728] cdc_acm 3-1:1.0: ttyACM1: USB ACM device [ 165.720314][ T5728] usb 3-1: USB disconnect, device number 12 [ 165.800409][ T30] audit: type=1400 audit(1786479480.251:401): avc: denied { write } for pid=6649 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.919905][ T6654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.215'. [ 166.159268][ T30] audit: type=1400 audit(1786479480.611:402): avc: denied { write } for pid=6660 comm="syz.0.216" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 166.264448][ T30] audit: type=1400 audit(1786479480.721:403): avc: denied { remount } for pid=6660 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 166.618330][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 166.995568][ T30] audit: type=1400 audit(1786479480.741:404): avc: denied { create } for pid=6660 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 167.203043][ T30] audit: type=1400 audit(1786479481.661:405): avc: denied { write } for pid=6652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.243809][ T10] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 167.264701][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.297144][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.497457][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.763168][ T10] usb 2-1: config 0 descriptor?? [ 167.787922][ T10] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 167.948446][ T6677] sctp_transport_update_pmtu: 48 callbacks suppressed [ 167.948464][ T6677] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 167.965971][ T6677] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 167.976791][ T6677] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 167.987320][ T6677] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 167.999805][ T6677] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 168.010507][ T6677] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 168.021770][ T6677] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 168.032553][ T6677] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 168.043185][ T6677] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 168.053860][ T6677] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 168.071662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 168.149880][ T30] audit: type=1400 audit(1786479482.601:406): avc: denied { write } for pid=6680 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.276995][ T6677] overlayfs: conflicting options: nfs_export=on,index=off [ 168.611662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 170.451659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 170.679774][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 170.850632][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 170.881522][ T10] usb 2-1: USB disconnect, device number 9 [ 171.373497][ T5728] usb 5-1: USB disconnect, device number 12 [ 171.638965][ T30] audit: type=1400 audit(1786479486.091:407): avc: denied { write } for pid=6689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.663576][ T6721] overlayfs: missing 'lowerdir' [ 171.668829][ T6694] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 172.102593][ T6694] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 172.507117][ T6694] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 172.519622][ T30] audit: type=1400 audit(1786479486.961:408): avc: denied { mount } for pid=6691 comm="syz.2.221" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 172.674131][ T30] audit: type=1400 audit(1786479486.961:409): avc: denied { firmware_load } for pid=6691 comm="syz.2.221" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 172.763230][ T30] audit: type=1400 audit(1786479487.201:410): avc: denied { write } for pid=6732 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.116417][ T30] audit: type=1400 audit(1786479487.211:411): avc: denied { mount } for pid=6733 comm="syz.4.228" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 173.432284][ T30] audit: type=1400 audit(1786479487.371:412): avc: denied { search } for pid=6733 comm="syz.4.228" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 173.499131][ T30] audit: type=1400 audit(1786479487.371:413): avc: denied { read } for pid=6733 comm="syz.4.228" name="available_tracers" dev="tracefs" ino=1319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 173.663952][ T30] audit: type=1400 audit(1786479487.371:414): avc: denied { open } for pid=6733 comm="syz.4.228" path="/49/tracefs/available_tracers" dev="tracefs" ino=1319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 174.271752][ T30] audit: type=1400 audit(1786479487.611:415): avc: denied { shutdown } for pid=6733 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.430928][ T30] audit: type=1400 audit(1786479488.151:416): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 175.011767][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 175.364318][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 175.920601][ T6776] overlayfs: missing 'lowerdir' [ 175.928308][ T6775] netlink: 36 bytes leftover after parsing attributes in process `syz.3.239'. [ 176.287727][ T6775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.239'. [ 176.327490][ T6775] netlink: 36 bytes leftover after parsing attributes in process `syz.3.239'. [ 176.751874][ T6789] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 177.108100][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 177.108133][ T30] audit: type=1326 audit(1786479491.551:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.1.243" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74d1d9e0d9 code=0x0 [ 177.147755][ T6792] IPVS: set_ctl: invalid protocol: 10885 0.0.0.0:0 [ 178.854085][ T6801] nbd: must specify at least one socket [ 178.904722][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.247'. [ 179.050921][ T30] audit: type=1400 audit(1786479493.501:429): avc: denied { mount } for pid=6807 comm="syz.3.249" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 179.172428][ T30] audit: type=1400 audit(1786479493.621:430): avc: denied { getopt } for pid=6810 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.285549][ T6818] overlayfs: missing 'lowerdir' [ 179.302568][ T30] audit: type=1400 audit(1786479493.751:431): avc: denied { read } for pid=6814 comm="syz.4.253" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 179.500605][ T30] audit: type=1400 audit(1786479493.761:432): avc: denied { open } for pid=6814 comm="syz.4.253" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 179.525987][ T30] audit: type=1400 audit(1786479493.761:433): avc: denied { ioctl } for pid=6814 comm="syz.4.253" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 179.778384][ T6825] overlayfs: conflicting options: nfs_export=on,index=off [ 180.422658][ T6829] netlink: 'syz.0.254': attribute type 11 has an invalid length. [ 180.430567][ T6829] netlink: 220 bytes leftover after parsing attributes in process `syz.0.254'. [ 181.271740][ T3098] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 182.012007][ T3098] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 182.079430][ T3098] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 182.208014][ T3098] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.285814][ T3098] usb 3-1: Product: syz [ 182.329005][ T3098] usb 3-1: Manufacturer: syz [ 182.382168][ T3098] usb 3-1: SerialNumber: syz [ 182.568116][ T30] audit: type=1400 audit(1786479497.011:434): avc: denied { create } for pid=6845 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 182.790457][ T3098] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 182.813708][ T30] audit: type=1400 audit(1786479497.111:435): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 183.092327][ T5728] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 183.283753][ T5728] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 183.304211][ T5728] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 183.314740][ T5728] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 183.335278][ T5728] usb 2-1: config 220 has no interface number 2 [ 183.346441][ T5728] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 183.393378][ T5728] usb 2-1: config 220 interface 0 has no altsetting 0 [ 183.416577][ T5728] usb 2-1: config 220 interface 76 has no altsetting 0 [ 183.441784][ T5728] usb 2-1: config 220 interface 1 has no altsetting 0 [ 183.509490][ T3098] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 183.543119][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.591295][ T5728] usb 2-1: Product: syz [ 183.610216][ T5728] usb 2-1: Manufacturer: syz [ 183.640420][ T5728] usb 2-1: SerialNumber: syz [ 183.694053][ T6863] overlayfs: missing 'lowerdir' [ 183.901236][ T30] audit: type=1400 audit(1786479498.351:436): avc: denied { write } for pid=6845 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 184.624103][ T6869] sctp_transport_update_pmtu: 48 callbacks suppressed [ 184.624150][ T6869] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 184.643559][ T6869] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 184.655506][ T6869] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 184.667779][ T6869] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 184.744292][ T6872] overlayfs: conflicting options: nfs_export=on,index=off [ 184.757743][ T6869] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 184.769621][ T6869] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 184.781435][ T6869] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 184.833169][ T6873] netlink: 'syz.0.266': attribute type 11 has an invalid length. [ 184.841221][ T6873] netlink: 220 bytes leftover after parsing attributes in process `syz.0.266'. [ 184.860999][ T6869] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 184.875337][ T6869] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 184.887912][ T6869] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 185.423086][ T3098] usb 3-1: USB disconnect, device number 13 [ 185.433564][ T5728] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 185.440951][ T5728] uvcvideo 2-1:220.0: No valid video chain found. [ 185.974634][ T5728] usb 2-1: selecting invalid altsetting 0 [ 185.998074][ T5728] usb 2-1: selecting invalid altsetting 0 [ 186.003945][ T5728] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 186.036865][ T5728] usb 2-1: USB disconnect, device number 10 [ 186.488381][ T6893] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 186.498495][ T6893] SELinux: failed to load policy [ 186.567669][ T30] audit: type=1400 audit(1786479500.931:437): avc: denied { write } for pid=6887 comm="syz.4.271" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 187.011258][ T6899] netlink: 'syz.0.272': attribute type 11 has an invalid length. [ 187.019228][ T6899] netlink: 220 bytes leftover after parsing attributes in process `syz.0.272'. [ 187.546808][ T6882] [U] b:]s 3:cDw[O@ޡ9ykw [ 187.688072][ T6900] devtmpfs: Unknown parameter '/' [ 187.698585][ T30] audit: type=1400 audit(1786479502.141:438): avc: denied { ioctl } for pid=6881 comm="syz.2.269" path="socket:[12936]" dev="sockfs" ino=12936 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.195572][ T6908] overlayfs: conflicting options: nfs_export=on,index=off [ 189.389743][ T6915] netlink: 'syz.0.275': attribute type 11 has an invalid length. [ 189.397731][ T6915] netlink: 220 bytes leftover after parsing attributes in process `syz.0.275'. [ 189.806336][ T30] audit: type=1400 audit(1786479502.141:439): avc: denied { remount } for pid=6881 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 189.862216][ T6917] overlayfs: missing 'lowerdir' [ 190.253184][ T30] audit: type=1400 audit(1786479504.701:440): avc: denied { read } for pid=6918 comm="syz.4.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 190.493917][ T6919] netlink: Invalid conntrack helper [ 190.568497][ T6919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.885277][ T6928] overlayfs: conflicting options: nfs_export=on,index=off [ 190.974022][ T6924] netlink: 'syz.1.278': attribute type 11 has an invalid length. [ 190.981925][ T6924] netlink: 220 bytes leftover after parsing attributes in process `syz.1.278'. [ 191.262770][ T30] audit: type=1400 audit(1786479505.701:441): avc: denied { connect } for pid=6929 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 191.286522][ T6931] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 191.328461][ T6934] netlink: 'syz.3.280': attribute type 4 has an invalid length. [ 191.438665][ T30] audit: type=1400 audit(1786479505.771:442): avc: denied { shutdown } for pid=6929 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 191.579278][ T30] audit: type=1400 audit(1786479505.831:443): avc: denied { read } for pid=4949 comm="acpid" name="mouse1" dev="devtmpfs" ino=2908 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.611535][ T6938] fuse: Unknown parameter '00000000000000000000' [ 191.696374][ T30] audit: type=1400 audit(1786479505.831:444): avc: denied { open } for pid=4949 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2908 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.837846][ T30] audit: type=1400 audit(1786479505.831:445): avc: denied { ioctl } for pid=4949 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2908 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.919943][ T6951] FAULT_INJECTION: forcing a failure. [ 191.919943][ T6951] name failslab, interval 1, probability 0, space 0, times 0 [ 191.932838][ T6951] CPU: 0 UID: 0 PID: 6951 Comm: syz.0.282 Not tainted syzkaller #0 PREEMPT(full) [ 191.932867][ T6951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 191.932880][ T6951] Call Trace: [ 191.932887][ T6951] [ 191.932895][ T6951] dump_stack_lvl+0x100/0x190 [ 191.932931][ T6951] should_fail_ex.cold+0x5/0xa [ 191.932960][ T6951] should_failslab+0xc2/0x120 [ 191.932989][ T6951] __kmalloc_cache_noprof+0x91/0x6c0 [ 191.933012][ T6951] ? __might_fault+0xc5/0x140 [ 191.933033][ T6951] ? alloc_bprm+0x86/0x9d0 [ 191.933071][ T6951] alloc_bprm+0x86/0x9d0 [ 191.933106][ T6951] do_execveat_common.isra.0+0x19c/0x580 [ 191.933141][ T6951] ? do_getname+0x191/0x390 [ 191.933171][ T6951] __x64_sys_execveat+0xdf/0x130 [ 191.933200][ T6951] do_syscall_64+0x115/0x870 [ 191.933229][ T6951] ? clear_bhb_loop+0x70/0xc0 [ 191.933256][ T6951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.933279][ T6951] RIP: 0033:0x7ff67119e0d9 [ 191.933301][ T6951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.933322][ T6951] RSP: 002b:00007ff671f9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 191.933346][ T6951] RAX: ffffffffffffffda RBX: 00007ff671426180 RCX: 00007ff67119e0d9 [ 191.933361][ T6951] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 191.933374][ T6951] RBP: 00007ff671f9a090 R08: 0000000000001000 R09: 0000000000000000 [ 191.933388][ T6951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.933401][ T6951] R13: 00007ff671426218 R14: 00007ff671426180 R15: 00007ffdda114e28 [ 191.933431][ T6951] [ 192.137979][ T30] audit: type=1400 audit(1786479505.841:446): avc: denied { write } for pid=6929 comm="syz.0.281" path="socket:[13870]" dev="sockfs" ino=13870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.162179][ T30] audit: type=1400 audit(1786479506.201:447): avc: denied { create } for pid=6941 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.222543][ T6947] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.120190][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 194.120240][ T30] audit: type=1400 audit(1786479508.561:450): avc: denied { read append } for pid=6965 comm="syz.2.289" name="sg0" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 194.216386][ T6968] overlayfs: missing 'lowerdir' [ 194.662123][ T30] audit: type=1400 audit(1786479508.571:451): avc: denied { ioctl open } for pid=6965 comm="syz.2.289" path="/dev/sg0" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 194.826689][ T30] audit: type=1400 audit(1786479509.281:452): avc: denied { write } for pid=6973 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 195.004160][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.010701][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.103421][ T5791] IPVS: starting estimator thread 0... [ 195.177229][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 195.203938][ T6989] IPVS: using max 63 ests per chain, 151200 per kthread [ 195.233064][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 195.264886][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'. [ 195.277572][ T6979] tcpci 0-0050: probe with driver tcpci failed with error -5 [ 195.296154][ T6995] netlink: 'syz.0.296': attribute type 4 has an invalid length. [ 195.320947][ T6979] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 195.525390][ T30] audit: type=1400 audit(1786479509.981:453): avc: denied { write } for pid=6992 comm="syz.3.298" name="set_event" dev="tracefs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 196.007238][ T7004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.299'. [ 196.526858][ T7004] nvme_fabrics: missing parameter 'transport=%s' [ 196.533411][ T7004] nvme_fabrics: missing parameter 'nqn=%s' [ 196.594486][ T30] audit: type=1400 audit(1786479511.051:454): avc: denied { map } for pid=7008 comm="syz.3.301" path="/dev/video0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 197.530465][ T7015] binder: 7014:7015 ioctl c00c620f 200000000400 returned -22 [ 197.628925][ T30] audit: type=1326 audit(1786479512.041:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7017 comm="syz.1.303" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74d1d9e0d9 code=0x0 [ 197.686002][ T30] audit: type=1400 audit(1786479512.121:456): avc: denied { setopt } for pid=6991 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.711679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 197.794129][ T30] audit: type=1400 audit(1786479512.241:457): avc: denied { read write } for pid=7017 comm="syz.1.303" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 197.836746][ T30] audit: type=1400 audit(1786479512.241:458): avc: denied { open } for pid=7017 comm="syz.1.303" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 198.327802][ T7033] netlink: 20 bytes leftover after parsing attributes in process `syz.4.306'. [ 198.398454][ T7033] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 200.208526][ T30] audit: type=1400 audit(1786479514.661:459): avc: denied { name_connect } for pid=7096 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 200.259794][ T30] audit: type=1400 audit(1786479514.711:460): avc: denied { getopt } for pid=7096 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 200.293299][ T3098] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 200.325920][ T30] audit: type=1400 audit(1786479514.711:461): avc: denied { ioctl } for pid=7096 comm="syz.1.314" path="socket:[13224]" dev="sockfs" ino=13224 ioctlcmd=0x61f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 200.352143][ T5600] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 200.426677][ T7105] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.316'. [ 200.459699][ T7105] nbd: must specify a size in bytes for the device [ 200.479034][ T3098] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 200.495477][ T3098] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.505515][ T5600] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 200.517125][ T3098] usb 3-1: Product: syz [ 200.523867][ T5600] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 200.536151][ T3098] usb 3-1: Manufacturer: syz [ 200.545798][ T3098] usb 3-1: SerialNumber: syz [ 200.552431][ T5600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.564441][ T5600] usb 4-1: Product: syz [ 200.586125][ T5600] usb 4-1: Manufacturer: syz [ 200.604052][ T5600] usb 4-1: SerialNumber: syz [ 200.616944][ T5600] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 200.617714][ T30] audit: type=1400 audit(1786479515.071:462): avc: denied { read } for pid=7107 comm="syz.0.318" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 200.659624][ T30] audit: type=1400 audit(1786479515.071:463): avc: denied { open } for pid=7107 comm="syz.0.318" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 200.695658][ T30] audit: type=1400 audit(1786479515.141:464): avc: denied { firmware_load } for pid=24 comm="kworker/1:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 200.714480][ T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 200.741750][ T5791] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 200.850680][ T7114] hsr0: entered allmulticast mode [ 200.855968][ T7114] hsr_slave_0: entered allmulticast mode [ 200.862372][ T7114] hsr_slave_1: entered allmulticast mode [ 200.875556][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 200.885314][ T7114] hsr_slave_0: left promiscuous mode [ 200.892433][ T5791] usb 5-1: Using ep0 maxpacket: 8 [ 200.901183][ T7114] hsr_slave_1: left promiscuous mode [ 200.901702][ T5791] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 200.916806][ T5791] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 200.927205][ T5791] usb 5-1: config 179 has no interface number 0 [ 200.933611][ T5791] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 200.946002][ T5791] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 200.958780][ T7114] hsr0 (unregistering): left allmulticast mode [ 200.968460][ T5791] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 200.985951][ T5791] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 201.001568][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.015267][ T7105] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 201.028275][ T5791] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 201.167314][ T30] audit: type=1400 audit(1786479515.621:465): avc: denied { listen } for pid=7089 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 201.204905][ T30] audit: type=1326 audit(1786479515.641:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7089 comm="syz.2.312" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4bf9e0d9 code=0x7ffc0000 [ 201.238853][ T5600] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 201.239089][ T5791] usb 5-1: USB disconnect, device number 13 [ 201.291447][ T30] audit: type=1326 audit(1786479515.641:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7089 comm="syz.2.312" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4bf9e0d9 code=0x7ffc0000 [ 201.355754][ T30] audit: type=1326 audit(1786479515.641:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7089 comm="syz.2.312" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1b4bf9e0d9 code=0x7ffc0000 [ 201.393790][ T7109] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.411376][ T7109] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.433135][ T5600] usb 4-1: USB disconnect, device number 6 [ 201.511048][ T7109] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.554298][ T7109] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.575525][ T7109] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 201.599552][ T7109] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 201.624553][ T7109] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.631772][ T7109] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 201.652830][ T7109] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 201.675138][ T7109] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.684714][ T7109] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 201.702813][ T7109] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 201.724714][ T7109] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 201.730735][ T7109] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 201.744364][ T7109] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 201.792453][ T24] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 201.830468][ T24] ath9k_htc: Failed to initialize the device [ 201.967559][ T24] usb 3-1: ath9k_htc: USB layer deinitialized [ 202.187225][ T7125] mmap: syz.1.324 (7125) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 202.286363][ T7132] netlink: 'syz.0.322': attribute type 4 has an invalid length. [ 202.752953][ T4914] Bluetooth: hci1: command 0x0c1a tx timeout [ 203.653228][ T4914] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.766600][ T5599] Bluetooth: hci3: command 0x0c1a tx timeout [ 203.772912][ T5599] Bluetooth: hci2: command 0x0c1a tx timeout [ 203.791987][ T4914] Bluetooth: hci4: command 0x0c1a tx timeout [ 203.825934][ T7148] overlayfs: conflicting options: nfs_export=on,index=off [ 203.907096][ T5791] usb 3-1: USB disconnect, device number 14 [ 204.055028][ T7147] netlink: 'syz.4.326': attribute type 11 has an invalid length. [ 204.063370][ T7147] netlink: 220 bytes leftover after parsing attributes in process `syz.4.326'. [ 204.084896][ T7146] sctp_transport_update_pmtu: 106 callbacks suppressed [ 204.084919][ T7146] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 204.103616][ T7146] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 204.115366][ T7146] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 204.127169][ T7146] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 204.145327][ T7146] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 204.156930][ T7146] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 204.169198][ T7146] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 204.180841][ T7146] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 204.193069][ T7146] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 204.204689][ T7146] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 204.831952][ T5599] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.996729][ T7176] i2c i2c-0: delete_device: Can't find device in list [ 205.034320][ T3098] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 205.071822][ T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 205.111781][ T24] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 205.193176][ T3098] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 205.206807][ T3098] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.221175][ T3098] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 205.255218][ T3098] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.272639][ T24] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 205.302011][ T3098] usb 5-1: Product: syz [ 205.319513][ T3098] usb 5-1: Manufacturer: syz [ 205.340442][ T24] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 205.364451][ T3098] usb 5-1: SerialNumber: syz [ 205.377629][ T24] usb 4-1: config 127 has no interface number 0 [ 205.414983][ T10] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 205.438516][ T24] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 205.540446][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.594805][ T24] usb 4-1: Product: syz [ 205.733958][ T24] usb 4-1: Manufacturer: syz [ 205.784970][ T24] usb 4-1: SerialNumber: syz [ 205.792054][ T4914] Bluetooth: hci3: command 0x0c1a tx timeout [ 205.801934][ T5599] Bluetooth: hci2: command 0x0c1a tx timeout [ 205.854846][ T3098] ttusb_dec_init_stb: unknown model returned by firmware (00000000) - please report [ 205.871905][ T4914] Bluetooth: hci0: command 0x0c1a tx timeout [ 205.881599][ T5599] Bluetooth: hci4: command 0x0c1a tx timeout [ 205.998855][ T3098] ttusb-dec 5-1:1.0: probe with driver ttusb-dec failed with error -2 [ 206.026443][ T10] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 206.039535][ T7173] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 206.045430][ T10] usb 2-1: Product: syz [ 206.061147][ T10] usb 2-1: Manufacturer: syz [ 206.065924][ T10] usb 2-1: SerialNumber: syz [ 206.084208][ T10] usb 2-1: config 0 descriptor?? [ 206.106936][ T3098] usb 5-1: USB disconnect, device number 14 [ 206.130678][ T7188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.142007][ T7188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.292354][ T7166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.309500][ T7166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.311893][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 206.311907][ T30] audit: type=1400 audit(1786479520.761:481): avc: denied { append } for pid=7195 comm="syz.0.342" name="uprobe_events" dev="tracefs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 206.403822][ T30] audit: type=1400 audit(1786479520.861:482): avc: denied { write } for pid=7161 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 206.466349][ T30] audit: type=1400 audit(1786479520.921:483): avc: denied { ioctl } for pid=7161 comm="syz.1.332" path="socket:[14165]" dev="sockfs" ino=14165 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 206.493646][ T187] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 206.507359][ T7173] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 206.652299][ T187] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 206.666312][ T187] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 206.691470][ T187] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 206.721492][ T187] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 206.739445][ T24] asix 4-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 206.747295][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 206.758266][ T187] usb 3-1: SerialNumber: syz [ 206.765215][ T7206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.783944][ T7206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.948656][ T5599] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.956532][ T24] asix 4-1:127.57 (unnamed net_device) (uninitialized): invalid PHY address: 186 [ 207.097083][ T7213] i2c i2c-0: delete_device: Can't find device in list [ 207.975095][ T5599] Bluetooth: hci2: command 0x0c1a tx timeout [ 207.997835][ T4914] Bluetooth: hci3: command 0x0c1a tx timeout [ 207.998226][ T5599] Bluetooth: hci4: command 0x0c1a tx timeout [ 208.011007][ T4914] Bluetooth: hci0: command 0x0c1a tx timeout [ 209.516046][ T187] rndis_host 3-1:253.0: RNDIS init failed, -71 [ 209.557276][ T187] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71 [ 209.577576][ T5707] usb 4-1: USB disconnect, device number 7 [ 209.646095][ T187] usb 3-1: USB disconnect, device number 15 [ 209.674921][ T7223] syzkaller0: entered promiscuous mode [ 209.678763][ T10] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 209.689603][ T7223] syzkaller0: entered allmulticast mode [ 209.700754][ T10] peak_usb 2-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 209.723670][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 209.760379][ T30] audit: type=1400 audit(1786479524.211:484): avc: denied { append } for pid=7222 comm="syz.2.348" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 209.922680][ T30] audit: type=1400 audit(1786479524.381:485): avc: denied { nlmsg_read } for pid=7226 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 209.922702][ T7229] netlink: 104 bytes leftover after parsing attributes in process `syz.1.350'. [ 209.957415][ T30] audit: type=1400 audit(1786479524.411:486): avc: denied { read } for pid=7226 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 209.985019][ T10] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 209.997400][ T7223] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 210.088042][ T10] usb 2-1: USB disconnect, device number 11 [ 210.421959][ T24] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 210.435129][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 210.444904][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 210.455285][ T7223] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 210.469760][ T7223] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 210.478119][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.494834][ T30] audit: type=1400 audit(1786479524.951:487): avc: denied { read } for pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 210.533025][ T7223] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 210.541039][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 210.554958][ T7223] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 210.747455][ T30] audit: type=1400 audit(1786479525.201:488): avc: denied { bind } for pid=7220 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 210.909248][ T30] audit: type=1400 audit(1786479525.341:489): avc: denied { listen } for pid=7220 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 212.112607][ T5599] Bluetooth: hci1: command 0x0c1a tx timeout [ 212.150956][ T10] usb 5-1: USB disconnect, device number 15 [ 212.511721][ T5599] Bluetooth: hci0: command 0x0c1a tx timeout [ 212.524528][ T5599] Bluetooth: hci3: command 0x0c1a tx timeout [ 212.594202][ T4914] Bluetooth: hci2: command 0x0c1a tx timeout [ 212.600320][ T5599] Bluetooth: hci4: command 0x0c1a tx timeout [ 212.871797][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 212.951969][ T7269] netlink: 'syz.2.357': attribute type 4 has an invalid length. [ 212.980475][ T30] audit: type=1400 audit(1786479527.431:490): avc: denied { create } for pid=7270 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 213.036192][ T30] audit: type=1400 audit(1786479527.491:491): avc: denied { getopt } for pid=7270 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 213.059224][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 213.080150][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.109173][ T24] usb 2-1: config 0 descriptor?? [ 213.135540][ T24] cp210x 2-1:0.0: cp210x converter detected [ 213.229656][ T30] audit: type=1400 audit(1786479527.681:492): avc: denied { getopt } for pid=7270 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.534729][ T24] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 214.460711][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 214.492018][ T30] audit: type=1400 audit(1786479528.931:493): avc: denied { write } for pid=7266 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.563612][ T30] audit: type=1400 audit(1786479528.981:494): avc: denied { read } for pid=7266 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 214.713051][ T187] usb 2-1: USB disconnect, device number 12 [ 214.770058][ T187] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 214.827707][ T187] cp210x 2-1:0.0: device disconnected [ 215.869134][ T7293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.905817][ T7293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.969061][ T7293] netlink: 32 bytes leftover after parsing attributes in process `syz.0.364'. [ 216.080424][ T30] audit: type=1400 audit(1786479530.531:495): avc: denied { append } for pid=7297 comm="syz.2.367" name="sda1" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.351707][ T5707] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 216.431940][ T24] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 216.679675][ T24] usb 3-1: device descriptor read/64, error -71 [ 217.032158][ T24] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 217.093588][ T5707] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 217.104233][ T5707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.114655][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.131177][ T5707] usb 4-1: config 0 descriptor?? [ 217.150999][ T5707] pwc: Askey VC010 type 2 USB webcam detected. [ 217.182477][ T24] usb 3-1: device descriptor read/64, error -71 [ 217.415657][ T24] usb usb3-port1: attempt power cycle [ 217.628011][ T5707] pwc: recv_control_msg error -32 req 02 val 2b00 [ 217.672997][ T5707] pwc: recv_control_msg error -32 req 02 val 2700 [ 217.720938][ T5707] pwc: recv_control_msg error -32 req 02 val 2c00 [ 218.130940][ T5707] pwc: recv_control_msg error -32 req 04 val 1000 [ 218.150030][ T5707] pwc: recv_control_msg error -32 req 04 val 1300 [ 218.245281][ T5707] pwc: recv_control_msg error -32 req 04 val 1400 [ 218.266145][ T5707] pwc: recv_control_msg error -32 req 02 val 2000 [ 218.338107][ T5707] pwc: recv_control_msg error -32 req 02 val 2100 [ 218.384518][ T5707] pwc: recv_control_msg error -32 req 04 val 1500 [ 218.462808][ T5707] pwc: recv_control_msg error -32 req 02 val 2500 [ 218.519449][ T5707] pwc: recv_control_msg error -32 req 02 val 2400 [ 218.566366][ T7327] overlayfs: conflicting options: nfs_export=on,index=off [ 218.619630][ T7327] netlink: 'syz.0.373': attribute type 11 has an invalid length. [ 218.628135][ T7327] netlink: 220 bytes leftover after parsing attributes in process `syz.0.373'. [ 218.695455][ T7325] sctp_transport_update_pmtu: 47 callbacks suppressed [ 218.695480][ T7325] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 218.718398][ T7325] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 218.730071][ T7325] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 218.743158][ T7325] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 218.759812][ T7325] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 218.774243][ T7325] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 218.786014][ T7325] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 218.797293][ T5707] pwc: recv_control_msg error -71 req 02 val 2600 [ 218.804624][ T7325] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 218.811718][ T24] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 218.824387][ T7325] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 218.836599][ T7325] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 218.983923][ T5707] pwc: recv_control_msg error -71 req 02 val 2900 [ 219.089477][ T5707] pwc: recv_control_msg error -71 req 02 val 2800 [ 219.242368][ T5707] pwc: recv_control_msg error -71 req 04 val 1100 [ 219.479714][ T5707] pwc: recv_control_msg error -71 req 04 val 1200 [ 219.694574][ T5707] pwc: Registered as video103. [ 219.701422][ T5707] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 219.707340][ T7331] binder: 7330:7331 ioctl 4018620d 0 returned -22 [ 219.817674][ T5707] usb 4-1: USB disconnect, device number 8 [ 219.878214][ T7331] fuse: Unknown parameter 'u00000000000000000000' [ 219.891683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 219.949631][ T24] usb 3-1: device not accepting address 18, error -71 [ 220.004746][ T7331] overlayfs: overlapping lowerdir path [ 220.038179][ T7338] syzkaller0: entered promiscuous mode [ 220.089875][ T7338] syzkaller0: entered allmulticast mode [ 220.250141][ T7345] netlink: 20 bytes leftover after parsing attributes in process `syz.0.379'. [ 220.778627][ T7345] openvswitch: netlink: Missing key (keys=c0, expected=2000) [ 221.191872][ T42] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 221.381734][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 221.412128][ T42] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 221.447759][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.490117][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.578312][ T42] usb 4-1: config 0 descriptor?? [ 222.113514][ T42] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 222.188711][ T30] audit: type=1400 audit(1786479536.631:496): avc: denied { map } for pid=7357 comm="syz.1.384" path="socket:[14751]" dev="sockfs" ino=14751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 222.317797][ T30] audit: type=1400 audit(1786479536.771:497): avc: denied { ioctl } for pid=7349 comm="syz.3.381" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 222.548412][ T42] usb 4-1: USB disconnect, device number 9 [ 223.514973][ T7366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7366 comm=syz.3.386 [ 224.040947][ T30] audit: type=1400 audit(1786479538.491:498): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 224.160502][ T7371] netlink: 830 bytes leftover after parsing attributes in process `syz.1.388'. [ 224.839537][ T30] audit: type=1400 audit(1786479539.291:499): avc: denied { create } for pid=7384 comm="syz.1.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 224.931711][ T5707] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 225.080309][ T7389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.090923][ T7389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.152930][ T5707] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 225.426424][ T5707] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 225.436991][ T30] audit: type=1400 audit(1786479539.891:500): avc: denied { ioctl } for pid=7388 comm="syz.0.395" path="socket:[15746]" dev="sockfs" ino=15746 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 225.441657][ T5707] usb 4-1: config 0 has no interface number 0 [ 225.470386][ T7389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.481406][ T7389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.488424][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 225.512769][ T5707] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 225.524746][ T5707] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.593795][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.647940][ T30] audit: type=1400 audit(1786479540.071:501): avc: denied { getopt } for pid=7391 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 225.683511][ T5707] usb 4-1: Product: syz [ 225.688303][ T5707] usb 4-1: Manufacturer: syz [ 225.727901][ T30] audit: type=1400 audit(1786479540.151:502): avc: denied { setopt } for pid=7391 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 225.747456][ T5707] usb 4-1: SerialNumber: syz [ 225.755633][ T5707] usb 4-1: config 0 descriptor?? [ 225.762075][ T7379] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.771393][ T5707] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 225.785331][ T5707] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 225.921720][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 226.103764][ T10] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 226.148269][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.159076][ T7399] overlayfs: conflicting options: nfs_export=on,index=off [ 226.263188][ T10] usb 3-1: config 0 descriptor?? [ 226.693425][ T10] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 226.724653][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 226.740522][ T7404] overlayfs: missing 'lowerdir' [ 226.765448][ T10] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 226.772476][ T10] [drm] Initialized udl on minor 1 [ 226.779164][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 226.789369][ T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 226.813462][ T5791] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 226.863760][ T5791] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 226.875540][ T10] usb 3-1: USB disconnect, device number 20 [ 227.372081][ T5791] usb 4-1: USB disconnect, device number 10 [ 227.543115][ T7409] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (7) [ 227.797744][ T30] audit: type=1400 audit(1786479541.991:503): avc: denied { connect } for pid=7406 comm="syz.1.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 228.108854][ T7412] comedi comedi0: ni_at_a2150: I/O base address not correctly aligned [ 228.192919][ T5791] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 228.212288][ T30] audit: type=1400 audit(1786479542.661:504): avc: denied { bind } for pid=7411 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 228.261463][ T5791] cyberjack 4-1:0.69: device disconnected [ 228.279478][ T30] audit: type=1400 audit(1786479542.701:505): avc: denied { setopt } for pid=7418 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 228.416816][ T7414] smpboot: CPU 1 is now offline [ 228.504370][ T30] audit: type=1400 audit(1786479542.951:506): avc: denied { write } for pid=7425 comm="syz.1.407" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 228.792158][ T5791] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 228.803196][ T10] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 228.905927][ T7420] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 228.949784][ T19] ------------[ cut here ]------------ [ 228.950375][ T19] [ 228.950380][ T19] ====================================================== [ 228.950384][ T19] WARNING: possible circular locking dependency detected [ 228.950389][ T19] syzkaller #0 Not tainted [ 228.950394][ T19] ------------------------------------------------------ [ 228.950398][ T19] migration/0/19 is trying to acquire lock: [ 228.950404][ T19] ffffffff8eaf4160 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 228.950442][ T19] [ 228.950442][ T19] but task is already holding lock: [ 228.950446][ T19] ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 228.950480][ T19] [ 228.950480][ T19] which lock already depends on the new lock. [ 228.950480][ T19] [ 228.950484][ T19] [ 228.950484][ T19] the existing dependency chain (in reverse order) is: [ 228.950488][ T19] [ 228.950488][ T19] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 228.950504][ T19] lock_acquire+0x1b9/0x370 [ 228.950518][ T19] _raw_spin_lock_nested+0x31/0x40 [ 228.950530][ T19] raw_spin_rq_lock_nested+0x2c/0x140 [ 228.950546][ T19] _task_rq_lock+0xcf/0x500 [ 228.950560][ T19] cgroup_move_task+0x81/0x320 [ 228.950571][ T19] css_set_move_task+0x285/0x600 [ 228.950586][ T19] cgroup_post_fork+0x1f9/0x9a0 [ 228.950599][ T19] copy_process+0x6b7a/0x8030 [ 228.950614][ T19] kernel_clone+0x176/0x9d0 [ 228.950628][ T19] user_mode_thread+0xcc/0x110 [ 228.950643][ T19] rest_init+0x21/0x260 [ 228.950652][ T19] start_kernel+0x48e/0x490 [ 228.950668][ T19] x86_64_start_reservations+0x24/0x30 [ 228.950685][ T19] x86_64_start_kernel+0x12b/0x130 [ 228.950702][ T19] common_startup_64+0x13e/0x158 [ 228.950712][ T19] [ 228.950712][ T19] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 228.950726][ T19] lock_acquire+0x1b9/0x370 [ 228.950739][ T19] _raw_spin_lock_irqsave+0x3a/0x60 [ 228.950750][ T19] try_to_wake_up+0xbd/0x1c90 [ 228.950766][ T19] __wake_up_common+0x135/0x1f0 [ 228.950778][ T19] __wake_up+0x31/0x60 [ 228.950788][ T19] tty_port_default_wakeup+0x47/0x60 [ 228.950803][ T19] serial8250_tx_chars+0x68f/0x860 [ 228.950817][ T19] serial8250_handle_irq_locked+0x770/0x9a0 [ 228.950832][ T19] serial8250_handle_irq.part.0+0xb4/0x530 [ 228.950846][ T19] serial8250_default_handle_irq+0xc2/0x280 [ 228.950861][ T19] serial8250_interrupt+0xf8/0x1b0 [ 228.950877][ T19] __handle_irq_event_percpu+0x232/0x880 [ 228.950895][ T19] handle_irq_event+0xab/0x1e0 [ 228.950911][ T19] handle_edge_irq+0x34c/0x950 [ 228.950932][ T19] __common_interrupt+0xd8/0x2f0 [ 228.950945][ T19] common_interrupt+0xb9/0xe0 [ 228.950954][ T19] asm_common_interrupt+0x26/0x40 [ 228.950965][ T19] lock_is_held_type+0xf5/0x140 [ 228.950979][ T19] mt_validate+0x1c78/0x31e0 [ 228.950994][ T19] validate_mm+0xa8/0x4e0 [ 228.951004][ T19] __split_vma+0xa7f/0xda0 [ 228.951013][ T19] vms_gather_munmap_vmas+0x3a5/0x1720 [ 228.951023][ T19] __mmap_region+0x4a7/0x2db0 [ 228.951033][ T19] mmap_region+0x35d/0x620 [ 228.951043][ T19] do_mmap+0xc63/0x12f0 [ 228.951057][ T19] vm_mmap_pgoff+0x29e/0x470 [ 228.951070][ T19] ksys_mmap_pgoff+0x3cb/0x610 [ 228.951083][ T19] __x64_sys_mmap+0x125/0x190 [ 228.951099][ T19] do_syscall_64+0x115/0x870 [ 228.951113][ T19] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.951123][ T19] [ 228.951123][ T19] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 228.951137][ T19] lock_acquire+0x1b9/0x370 [ 228.951150][ T19] _raw_spin_lock_irqsave+0x3a/0x60 [ 228.951162][ T19] __wake_up+0x1c/0x60 [ 228.951171][ T19] tty_port_default_wakeup+0x47/0x60 [ 228.951185][ T19] serial8250_tx_chars+0x68f/0x860 [ 228.951199][ T19] serial8250_handle_irq_locked+0x770/0x9a0 [ 228.951213][ T19] serial8250_handle_irq.part.0+0xb4/0x530 [ 228.951228][ T19] serial8250_default_handle_irq+0xc2/0x280 [ 228.951243][ T19] serial8250_interrupt+0xf8/0x1b0 [ 228.951258][ T19] __handle_irq_event_percpu+0x232/0x880 [ 228.951275][ T19] handle_irq_event+0xab/0x1e0 [ 228.951291][ T19] handle_edge_irq+0x34c/0x950 [ 228.951307][ T19] __common_interrupt+0xd8/0x2f0 [ 228.951319][ T19] common_interrupt+0xb9/0xe0 [ 228.951328][ T19] asm_common_interrupt+0x26/0x40 [ 228.951339][ T19] pv_native_safe_halt+0xf/0x20 [ 228.951351][ T19] default_idle+0x9/0x10 [ 228.951366][ T19] default_idle_call+0x6c/0xb0 [ 228.951382][ T19] do_idle+0x3a7/0x5b0 [ 228.951397][ T19] cpu_startup_entry+0x4f/0x60 [ 228.951412][ T19] start_secondary+0x21d/0x2d0 [ 228.951429][ T19] common_startup_64+0x13e/0x158 [ 228.951439][ T19] [ 228.951439][ T19] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 228.951452][ T19] lock_acquire+0x1b9/0x370 [ 228.951465][ T19] _raw_spin_lock_irqsave+0x3a/0x60 [ 228.951477][ T19] serial8250_console_write+0x177/0x1a50 [ 228.951492][ T19] console_flush_one_record+0x790/0xe50 [ 228.951509][ T19] console_unlock+0x103/0x260 [ 228.951525][ T19] vprintk_emit+0x407/0x6b0 [ 228.951534][ T19] _printk+0xcf/0x110 [ 228.951543][ T19] register_console.cold+0xc0/0x248 [ 228.951554][ T19] univ8250_console_init+0x6f/0x80 [ 228.951569][ T19] console_init+0x3d5/0x5b0 [ 228.951581][ T19] start_kernel+0x314/0x490 [ 228.951597][ T19] x86_64_start_reservations+0x24/0x30 [ 228.951613][ T19] x86_64_start_kernel+0x12b/0x130 [ 228.951630][ T19] common_startup_64+0x13e/0x158 [ 228.951640][ T19] [ 228.951640][ T19] -> #0 (console_owner){-.-.}-{0:0}: [ 228.951653][ T19] check_prev_add+0xeb/0xe60 [ 228.951665][ T19] __lock_acquire+0x136c/0x1a40 [ 228.951678][ T19] lock_acquire+0x1b9/0x370 [ 228.951690][ T19] console_lock_spinning_enable+0x72/0x80 [ 228.951707][ T19] console_flush_one_record+0x739/0xe50 [ 228.951723][ T19] console_unlock+0x103/0x260 [ 228.951738][ T19] vprintk_emit+0x407/0x6b0 [ 228.951747][ T19] _printk+0xcf/0x110 [ 228.951756][ T19] __report_bug.cold+0x34/0x141 [ 228.951768][ T19] report_bug+0xb2/0x220 [ 228.951782][ T19] handle_bug+0x16a/0x2a0 [ 228.951797][ T19] exc_invalid_op+0x17/0x50 [ 228.951812][ T19] asm_exc_invalid_op+0x1a/0x20 [ 228.951822][ T19] update_rq_clock+0x40a/0xd20 [ 228.951837][ T19] __schedule+0x1e2d/0x6730 [ 228.951848][ T19] schedule+0xdd/0x2c0 [ 228.951859][ T19] smpboot_thread_fn+0x893/0xaa0 [ 228.951877][ T19] kthread+0x370/0x450 [ 228.951886][ T19] ret_from_fork+0x72b/0xd50 [ 228.951901][ T19] ret_from_fork_asm+0x1a/0x30 [ 228.951921][ T19] [ 228.951921][ T19] other info that might help us debug this: [ 228.951921][ T19] [ 228.951925][ T19] Chain exists of: [ 228.951925][ T19] console_owner --> &p->pi_lock --> &rq->__lock [ 228.951925][ T19] [ 228.951940][ T19] Possible unsafe locking scenario: [ 228.951940][ T19] [ 228.951943][ T19] CPU0 CPU1 [ 228.951946][ T19] ---- ---- [ 228.951949][ T19] lock(&rq->__lock); [ 228.951955][ T19] lock(&p->pi_lock); [ 228.951963][ T19] lock(&rq->__lock); [ 228.951970][ T19] lock(console_owner); [ 228.951977][ T19] [ 228.951977][ T19] *** DEADLOCK *** [ 228.951977][ T19] [ 228.951979][ T19] 3 locks held by migration/0/19: [ 228.951985][ T19] #0: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 228.952022][ T19] #1: ffffffff8ebd45a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 228.952046][ T19] #2: ffffffff8ebd4618 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 228.952078][ T19] [ 228.952078][ T19] stack backtrace: [ 228.952083][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Not tainted syzkaller #0 PREEMPT(full) [ 228.952096][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 228.952103][ T19] Stopper: 0x0 <- 0x0 [ 228.952113][ T19] Call Trace: [ 228.952117][ T19] [ 228.952121][ T19] dump_stack_lvl+0x100/0x190 [ 228.952134][ T19] print_circular_bug.cold+0x178/0x1c7 [ 228.952153][ T19] check_noncircular+0x146/0x160 [ 228.952168][ T19] check_prev_add+0xeb/0xe60 [ 228.952182][ T19] __lock_acquire+0x136c/0x1a40 [ 228.952198][ T19] lock_acquire+0x1b9/0x370 [ 228.952211][ T19] ? console_lock_spinning_enable+0x61/0x80 [ 228.952228][ T19] ? console_lock_spinning_enable+0x4a/0x80 [ 228.952246][ T19] console_lock_spinning_enable+0x72/0x80 [ 228.952263][ T19] ? console_lock_spinning_enable+0x61/0x80 [ 228.952280][ T19] console_flush_one_record+0x739/0xe50 [ 228.952299][ T19] ? __pfx_console_flush_one_record+0x10/0x10 [ 228.952319][ T19] ? is_printk_cpu_sync_owner+0x32/0x40 [ 228.952331][ T19] console_unlock+0x103/0x260 [ 228.952348][ T19] ? __pfx_console_unlock+0x10/0x10 [ 228.952366][ T19] ? do_raw_spin_unlock+0x145/0x1e0 [ 228.952382][ T19] ? _printk+0xcf/0x110 [ 228.952393][ T19] vprintk_emit+0x407/0x6b0 [ 228.952403][ T19] ? __pfx_vprintk_emit+0x10/0x10 [ 228.952416][ T19] _printk+0xcf/0x110 [ 228.952428][ T19] ? __pfx__printk+0x10/0x10 [ 228.952437][ T19] ? clockevents_program_event+0x23e/0x820 [ 228.952457][ T19] ? ktime_get+0x9f/0x320 [ 228.952470][ T19] ? __report_bug.cold+0x24/0x141 [ 228.952482][ T19] ? __report_bug+0x2ab/0x440 [ 228.952497][ T19] __report_bug.cold+0x34/0x141 [ 228.952509][ T19] ? update_rq_clock+0x40a/0xd20 [ 228.952525][ T19] ? __pfx___report_bug+0x10/0x10 [ 228.952539][ T19] ? pick_eevdf+0x198/0x860 [ 228.952550][ T19] ? find_held_lock+0x2b/0x80 [ 228.952560][ T19] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 228.952571][ T19] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 228.952584][ T19] ? update_rq_clock+0x40a/0xd20 [ 228.952600][ T19] report_bug+0xb2/0x220 [ 228.952614][ T19] ? update_rq_clock+0x40a/0xd20 [ 228.952630][ T19] handle_bug+0x16a/0x2a0 [ 228.952646][ T19] exc_invalid_op+0x17/0x50 [ 228.952662][ T19] asm_exc_invalid_op+0x1a/0x20 [ 228.952672][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 228.952689][ T19] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 228.952701][ T19] RSP: 0018:ffffc90000187c28 EFLAGS: 00010046 [ 228.952710][ T19] RAX: 0000000000000000 RBX: ffff8880b853b4c0 RCX: 0000000000000001 [ 228.952717][ T19] RDX: 0000000000000046 RSI: ffffffff8e1835cb RDI: ffffffff8c400480 [ 228.952724][ T19] RBP: ffffc90000187dd0 R08: 0000000000000001 R09: 0000000000000001 [ 228.952732][ T19] R10: ffff888075a2e007 R11: 000000354e760c00 R12: ffffffff9121c7a4 [ 228.952739][ T19] R13: ffff8880b853c3a0 R14: ffff88802651a540 R15: ffff8880b843c058 [ 228.952750][ T19] ? update_rq_clock+0x9c/0xd20 [ 228.952767][ T19] __schedule+0x1e2d/0x6730 [ 228.952783][ T19] ? __pfx___schedule+0x10/0x10 [ 228.952796][ T19] ? find_held_lock+0x2b/0x80 [ 228.952806][ T19] ? schedule+0x225/0x2c0 [ 228.952819][ T19] schedule+0xdd/0x2c0 [ 228.952831][ T19] smpboot_thread_fn+0x893/0xaa0 [ 228.952849][ T19] ? kthread+0x13a/0x450 [ 228.952859][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 228.952876][ T19] kthread+0x370/0x450 [ 228.952886][ T19] ? __pfx_kthread+0x10/0x10 [ 228.952897][ T19] ret_from_fork+0x72b/0xd50 [ 228.952913][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 228.952934][ T19] ? __switch_to+0x800/0x10f0 [ 228.952945][ T19] ? __pfx_kthread+0x10/0x10 [ 228.952956][ T19] ret_from_fork_asm+0x1a/0x30 [ 228.952976][ T19] [ 230.087987][ T19] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 230.087998][ T19] WARNING: kernel/sched/sched.h:1641 at update_rq_clock+0x40a/0xd20, CPU#0: migration/0/19 [ 230.105729][ T19] Modules linked in: [ 230.109596][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Not tainted syzkaller #0 PREEMPT(full) [ 230.118760][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 230.128785][ T19] Stopper: 0x0 <- 0x0 [ 230.132743][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 230.138266][ T19] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 230.157844][ T19] RSP: 0018:ffffc90000187c28 EFLAGS: 00010046 [ 230.163882][ T19] RAX: 0000000000000000 RBX: ffff8880b853b4c0 RCX: 0000000000000001 [ 230.171823][ T19] RDX: 0000000000000046 RSI: ffffffff8e1835cb RDI: ffffffff8c400480 [ 230.179778][ T19] RBP: ffffc90000187dd0 R08: 0000000000000001 R09: 0000000000000001 [ 230.187734][ T19] R10: ffff888075a2e007 R11: 000000354e760c00 R12: ffffffff9121c7a4 [ 230.195676][ T19] R13: ffff8880b853c3a0 R14: ffff88802651a540 R15: ffff8880b843c058 [ 230.203618][ T19] FS: 0000000000000000(0000) GS:ffff888123dec000(0000) knlGS:0000000000000000 [ 230.212535][ T19] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.219089][ T19] CR2: 00007f600f866e9c CR3: 000000005d450000 CR4: 00000000003526f0 [ 230.227034][ T19] Call Trace: [ 230.230303][ T19] [ 230.233207][ T19] __schedule+0x1e2d/0x6730 [ 230.237689][ T19] ? __pfx___schedule+0x10/0x10 [ 230.242511][ T19] ? find_held_lock+0x2b/0x80 [ 230.247157][ T19] ? schedule+0x225/0x2c0 [ 230.251462][ T19] schedule+0xdd/0x2c0 [ 230.255504][ T19] smpboot_thread_fn+0x893/0xaa0 [ 230.260420][ T19] ? kthread+0x13a/0x450 [ 230.264631][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 230.270066][ T19] kthread+0x370/0x450 [ 230.274109][ T19] ? __pfx_kthread+0x10/0x10 [ 230.278686][ T19] ret_from_fork+0x72b/0xd50 [ 230.283251][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 230.288352][ T19] ? __switch_to+0x800/0x10f0 [ 230.292999][ T19] ? __pfx_kthread+0x10/0x10 [ 230.297558][ T19] ret_from_fork_asm+0x1a/0x30 [ 230.302302][ T19] [ 230.305307][ T19] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 230.312557][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Not tainted syzkaller #0 PREEMPT(full) [ 230.321732][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 230.331757][ T19] Stopper: 0x0 <- 0x0 [ 230.335707][ T19] Call Trace: [ 230.338972][ T19] [ 230.341874][ T19] dump_stack_lvl+0x100/0x190 [ 230.346527][ T19] vpanic+0x552/0x970 [ 230.350481][ T19] ? __pfx_vpanic+0x10/0x10 [ 230.354952][ T19] ? lock_release+0x24d/0x310 [ 230.359605][ T19] panic+0xd1/0xe0 [ 230.363294][ T19] ? __pfx_panic+0x10/0x10 [ 230.367682][ T19] ? check_panic_on_warn+0x1f/0x90 [ 230.372766][ T19] check_panic_on_warn.cold+0x19/0x34 [ 230.378111][ T19] ? update_rq_clock+0x40a/0xd20 [ 230.383024][ T19] __warn.cold+0x191/0x318 [ 230.387410][ T19] __report_bug+0x30f/0x440 [ 230.391902][ T19] ? update_rq_clock+0x40a/0xd20 [ 230.396816][ T19] ? __pfx___report_bug+0x10/0x10 [ 230.401812][ T19] ? pick_eevdf+0x198/0x860 [ 230.406282][ T19] ? find_held_lock+0x2b/0x80 [ 230.410928][ T19] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 230.416628][ T19] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 230.422319][ T19] ? update_rq_clock+0x40a/0xd20 [ 230.427229][ T19] report_bug+0xb2/0x220 [ 230.431458][ T19] ? update_rq_clock+0x40a/0xd20 [ 230.436372][ T19] handle_bug+0x16a/0x2a0 [ 230.440675][ T19] exc_invalid_op+0x17/0x50 [ 230.445155][ T19] asm_exc_invalid_op+0x1a/0x20 [ 230.449979][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 230.455499][ T19] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 230.475077][ T19] RSP: 0018:ffffc90000187c28 EFLAGS: 00010046 [ 230.481116][ T19] RAX: 0000000000000000 RBX: ffff8880b853b4c0 RCX: 0000000000000001 [ 230.489075][ T19] RDX: 0000000000000046 RSI: ffffffff8e1835cb RDI: ffffffff8c400480 [ 230.497019][ T19] RBP: ffffc90000187dd0 R08: 0000000000000001 R09: 0000000000000001 [ 230.504960][ T19] R10: ffff888075a2e007 R11: 000000354e760c00 R12: ffffffff9121c7a4 [ 230.512901][ T19] R13: ffff8880b853c3a0 R14: ffff88802651a540 R15: ffff8880b843c058 [ 230.520847][ T19] ? update_rq_clock+0x9c/0xd20 [ 230.525676][ T19] __schedule+0x1e2d/0x6730 [ 230.530159][ T19] ? __pfx___schedule+0x10/0x10 [ 230.534981][ T19] ? find_held_lock+0x2b/0x80 [ 230.539628][ T19] ? schedule+0x225/0x2c0 [ 230.543931][ T19] schedule+0xdd/0x2c0 [ 230.547973][ T19] smpboot_thread_fn+0x893/0xaa0 [ 230.552888][ T19] ? kthread+0x13a/0x450 [ 230.557114][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 230.562548][ T19] kthread+0x370/0x450 [ 230.566587][ T19] ? __pfx_kthread+0x10/0x10 [ 230.571149][ T19] ret_from_fork+0x72b/0xd50 [ 230.575715][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 230.580800][ T19] ? __switch_to+0x800/0x10f0 [ 230.585463][ T19] ? __pfx_kthread+0x10/0x10 [ 230.590023][ T19] ret_from_fork_asm+0x1a/0x30 [ 230.594770][ T19] [ 230.597902][ T19] Kernel Offset: disabled [ 230.602205][ T19] Rebooting in 86400 seconds..