last executing test programs: 26.520604825s ago: executing program 2 (id=979): mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @random="42238e910adb", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "3e090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}]}]}}}}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="c323567fea2eb55ab91640ea77eb5f6ae9f6564983ae5689da72d2e7a28657524e863f1102f9bbf99e3f973e4abe7a95eeb4e1e213c0bf915331001e04c028f2dbc32428bb43d87ac6364d93d936435e000aa9cc8dff68141f7e752a1a10d9ec3f0a87583236e7d32f3fa56ba46a6081ee30f26f6c71aca4c7c43bf653cb768932e992", @ANYRES16=r5, @ANYBLOB="99061762e348c5774f5a7938c05120d53914d04aa1519eb03dece010d02e65f8ec0ebc6e66684ca7986bbccf1c260bdcd5c1a550eef5330ae0", @ANYRES8=r3, @ANYRESOCT=r5, @ANYRES64=0x0], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendto$packet(r4, &(0x7f0000000140)="09000000e7001400000000803500008100000088a80000000000504e7c6a59e468", 0x21, 0x4044804, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1000000014000300ce5d6201ffdbdf25"], 0x10}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x7, 0x7) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 22.079074783s ago: executing program 3 (id=986): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x4}}, 0x2000000, 0x800, 0x3f7, 0x0, 0x32, 0x5b, 0xfc}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) request_key(0x0, 0x0, &(0x7f0000000a40)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89\xdcj&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf-\x87F?\xa0\x90\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x01\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hd\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1c\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$sN\xd1vU\x9cB)ao\xf1\'\x00'/399, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x87124641c6425a43}, 0x20040050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = accept(r1, &(0x7f0000000680)=@ieee802154={0x24, @short}, &(0x7f0000000580)=0x80) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000440)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe2}}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1a0, 0x0, 0x0, 0x0, 0x6b64, &(0x7f00000005c0)='rose0\x00', 0x5, 0x0, 0x9}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r6, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) 22.065338941s ago: executing program 2 (id=987): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x35ebc0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl(0xffffffffffffffff, 0x8, &(0x7f0000000200)=' \x00\x00\x00\x00\x00\x00@') ioctl(r0, 0x4048aece, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r4, &(0x7f00000002c0)=""/10, 0x5b) io_setup(0x4, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/93, 0x24) 21.003037047s ago: executing program 0 (id=988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) listns(&(0x7f0000000200)={0x20, 0x0, 0x3, 0x14020000, 0x0, 0x1}, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x3, 0x9dc5, 0x0, 0x0, 0xef7826c8d995ba17}) r5 = openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"}) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r6, @ANYBLOB='.'], 0x20) 20.332530332s ago: executing program 3 (id=989): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_gettime(r1, &(0x7f0000000100)) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8}}]}}}]}}]}}, 0x0) r5 = memfd_secret(0x0) ioctl$UBLK_U_CMD_START_DEV(r5, 0xc0207506, 0x0) tgkill(0x0, 0x0, 0x2) syz_usb_control_io$hid(r4, 0x0, 0x0) r6 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r6, 0x400c4808, &(0x7f0000000400)={0x2, 0x100}) r7 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x200) 19.136617013s ago: executing program 0 (id=990): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x882c0, 0x4) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r5, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) syz_emit_ethernet(0xf87, 0x0, 0x0) 16.996379719s ago: executing program 3 (id=993): r0 = syz_usb_connect$uac2(0x3, 0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff01022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003024ed7f9e753754f2e421c4a6e9dc90000000203"]}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000002800)={0x0, 0x21, 0x2015, 0x1}) syz_usb_control_io(r0, 0x0, 0x0) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x10000, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = userfaultfd(0x80801) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x48, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x33}]}], "fb36eeca6fad50b3"}}}}}}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b70800", @ANYRES8=r5, @ANYBLOB="05", @ANYRES16=r5, @ANYRES64=r5], 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f00000001c0)={{0x8, 0x67}, 0x1, 0x9, 0xfffffc01, {0x0, 0x53}, 0x1, 0x10}) fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x2, 0x0, 0x2f, 0x9}) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x6e20, @multicast1}, 0x10) listen(r6, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[], 0xf8}}, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) syz_usbip_server_init(0x6) syz_usbip_server_init(0x5) listen(r7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x1ea, 0x8, 0x0, 0x3ff}, {0x1800, 0xb1, 0x3, 0x7}, {0x2ed0, 0x1, 0x9, 0x7}, {0x2, 0xf7, 0x4e, 0x80}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0xffffffffffffffff, &(0x7f0000000a40), &(0x7f00000007c0), 0xb9, r2}, 0x38) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000100)=0xd) 15.620350801s ago: executing program 0 (id=994): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) set_mempolicy(0x8006, 0x0, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x78d4a000) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local, @empty, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x5, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x73, 0x0, @local, @multicast1}, {0x0, 0x0, 0x10, 0x0, @wg=@response={0x2, 0x4, 0x3, "dfb65230d5edc9ad722342f5326b79663aa7379c6ae756a685a6b06e728ddf14", "c8049ac105204a72358c9d00", {"ee0b3e9b577d0b94198fe03ffa76fd52", "7caec12cf489c2efecbb4c9fbe12a219"}}}}}}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x80000020) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x25, r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x50) pipe(0x0) clock_settime(0x6, 0x0) 13.26042592s ago: executing program 4 (id=996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 12.233307572s ago: executing program 4 (id=997): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 11.763785478s ago: executing program 3 (id=998): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x600) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xd}) 11.710265565s ago: executing program 2 (id=999): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16002182973d2bd4b83c4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000280)="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", 0x192}], 0x2}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0xdf41) 11.667195021s ago: executing program 0 (id=1000): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) listns(&(0x7f0000000200)={0x20, 0x0, 0x3, 0x14020000, 0x0, 0x1}, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}}) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x3, 0x9dc5, 0x0, 0x0, 0xef7826c8d995ba17}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0) r6 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"}) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r7, @ANYBLOB='.'], 0x20) 10.500827639s ago: executing program 0 (id=1001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 10.272543988s ago: executing program 2 (id=1002): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$selinux_validatetrans(r4, &(0x7f00000000c0)=ANY=[], 0x75) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x800, 0x12) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r5, &(0x7f0000000180), 0x0) 9.24442329s ago: executing program 2 (id=1003): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) set_mempolicy(0x8006, 0x0, 0x5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x78d4a000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local, @empty, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x5, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x73, 0x0, @local, @multicast1}, {0x0, 0x0, 0x10, 0x0, @wg=@response={0x2, 0x4, 0x3, "dfb65230d5edc9ad722342f5326b79663aa7379c6ae756a685a6b06e728ddf14", "c8049ac105204a72358c9d00", {"ee0b3e9b577d0b94198fe03ffa76fd52", "7caec12cf489c2efecbb4c9fbe12a219"}}}}}}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000020) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x25, r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) socket$nl_route(0x10, 0x3, 0x0) close(r0) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x50) pipe(0x0) clock_settime(0x6, 0x0) 9.063746131s ago: executing program 1 (id=1004): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x67) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={0x0}, 0xee}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080081004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x600) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xd}) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) 8.224289321s ago: executing program 1 (id=1005): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x4}}, 0x2000000, 0x800, 0x3f7, 0x0, 0x32, 0x5b, 0xfc}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) request_key(0x0, 0x0, &(0x7f0000000a40)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89\xdcj&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf-\x87F?\xa0\x90\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x01\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hd\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1c\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$sN\xd1vU\x9cB)ao\xf1\'\x00'/399, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x87124641c6425a43}, 0x20040050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = accept(r1, &(0x7f0000000680)=@ieee802154={0x24, @short}, &(0x7f0000000580)=0x80) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000440)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe2}}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1a0, 0x0, 0x0, 0x0, 0x6b64, &(0x7f00000005c0)='rose0\x00', 0x5, 0x0, 0x9}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r5, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) 6.984933981s ago: executing program 1 (id=1006): io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079100800000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.782891158s ago: executing program 4 (id=1007): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x2c000010) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3f}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$nl_xfrm(r0, 0x0, 0x987a3a9f32358a4c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) sendto$packet(r4, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) 5.777632288s ago: executing program 0 (id=1008): socket(0x10, 0x80003, 0x0) setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x15, 0x0, &(0x7f00000002c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) socket$pppoe(0x18, 0x1, 0x0) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x110) read(r2, &(0x7f0000000100)=""/9, 0xfffffd87) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x60) write$tun(r2, &(0x7f00000000c0)=ANY=[], 0xffe) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000100), 0x12) listen(r4, 0x1) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b"], 0x97) 5.645810456s ago: executing program 1 (id=1009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 5.519517469s ago: executing program 3 (id=1010): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$binfmt_format(r4, 0x0, 0x0) 5.402419278s ago: executing program 4 (id=1011): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) gettimeofday(0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x1, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x300) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x5, @private0, 0x9a6}}, [0xfffffffffffffff9, 0x2, 0xffffffffffffffff, 0x7fff, 0x5, 0x7, 0x100000000, 0xc, 0x7, 0xfffffffffffffff9, 0xffff, 0x0, 0x0, 0x7, 0x4]}, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0x6, 0x4) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.632623719s ago: executing program 3 (id=1012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) listns(&(0x7f0000000200)={0x20, 0x0, 0x3, 0x14020000, 0x0, 0x1}, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2800) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x3, 0x9dc5, 0x0, 0x0, 0xef7826c8d995ba17}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0) r6 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r7, @ANYBLOB='.'], 0x20) 4.192437674s ago: executing program 4 (id=1013): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.500748096s ago: executing program 1 (id=1014): mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @random="42238e910adb", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x67, 0x0, @dev, @local, {[@fragment={0x21}]}}}}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="c323567fea2eb55ab91640ea77eb5f6ae9f6564983ae5689da72d2e7a28657524e863f1102f9bbf99e3f973e4abe7a95eeb4e1e213c0bf915331001e04c028f2dbc32428bb43d87ac6364d93d936435e000aa9cc8dff68141f7e752a1a10d9ec3f0a87583236e7d32f3fa56ba46a6081ee30f26f6c71aca4c7c43bf653cb768932e992", @ANYRES16=r5, @ANYBLOB="99061762e348c5774f5a7938c05120d53914d04aa1519eb03dece010d02e65f8ec0ebc6e66684ca7986bbccf1c260bdcd5c1a550eef5330ae0", @ANYRES8=r3, @ANYRESOCT=r5, @ANYRES64=0x0], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendto$packet(r4, &(0x7f0000000140)="09000000e7001400000000803500008100000088a80000000000504e7c6a59e468", 0x21, 0x4044804, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1000000014000300ce5d6201ffdbdf25"], 0x10}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x7, 0x7) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 2.192652671s ago: executing program 4 (id=1015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'batadv_slave_1\x00', 0x200}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5026, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r2, &(0x7f0000000000)=""/121, 0x79) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000140)) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f00000003c0)=0x101, 0x4) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) process_vm_readv(0x0, &(0x7f0000000980), 0x0, &(0x7f0000000500)=[{&(0x7f00000008c0)=""/206, 0xce}, {&(0x7f0000000400)=""/9, 0x9}, {0x0}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/99, 0x63}], 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) clock_gettime(0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x8030, 0xffffffff, {}, {0x0, 0xc, 0xf1, 0xa, 0x0, 0x1, "bf231e4b"}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f0000000340)={0x5}) 2.119130025s ago: executing program 2 (id=1016): sync() sync() sync() r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) syz_io_uring_setup(0x13ba, &(0x7f0000000140)={0x0, 0xb8c3, 0x1, 0x1, 0x332}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000340)) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000004c0)=0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b800000019000100ffffffff00000000e00000020000000000000000000000002001000000000000000000000000000100000000000000030a0000208700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000ffffffffffffff7f00000000000000000000010000000000000000000000000000000000000000000000000000000000fbfff494ffffffff00000000000000000400000000000000000000000000000200000f00000000000000000000000000000103"], 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) read(r2, &(0x7f0000000a80)=""/193, 0xc1) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) fchdir(0xffffffffffffffff) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x34325241, 0x3, [0x2], [0x80ffff], [0x0, 0xfffffffe], [0x400000000000000, 0xffffffffffffffff, 0x0, 0x4]}) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010200000000006000000000000005000500000000000900020073797a3000000000100003006269746d61703a706f72740014000780060005404e23000006000440000000000500010007000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) 0s ago: executing program 1 (id=1017): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) kernel console output (not intermixed with test programs): 789][ T943] usb 5-1: Using ep0 maxpacket: 32 [ 273.084516][ T943] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 273.085366][ T943] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.085389][ T943] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 273.085429][ T943] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 273.085459][ T943] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 273.085491][ T943] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 273.085509][ T943] usb 5-1: config 1 interface 1 has no altsetting 0 [ 273.087185][ T943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.087208][ T943] usb 5-1: Product: syz [ 273.087223][ T943] usb 5-1: Manufacturer: syz [ 273.087237][ T943] usb 5-1: SerialNumber: syz [ 273.174474][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 273.176698][ T31] audit: type=1400 audit(1790329764.096:467): avc: denied { ioctl } for pid=7438 comm="syz.2.448" path="socket:[16230]" dev="sockfs" ino=16230 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 273.176948][ T31] audit: type=1400 audit(1790329764.096:468): avc: denied { write } for pid=7438 comm="syz.2.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 274.182504][ T7429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.209472][ T7429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.486471][ T7429] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 274.486522][ T7429] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 274.486628][ T7429] vhci_hcd vhci_hcd.0: Device attached [ 274.536345][ T7445] vhci_hcd vhci_hcd.0: port 0 already used [ 274.539170][ T7449] vhci_hcd: connection closed [ 274.540610][ T6071] vhci_hcd vhci_hcd.4: stop threads [ 274.540643][ T6071] vhci_hcd vhci_hcd.4: release socket [ 274.540663][ T6071] vhci_hcd vhci_hcd.4: disconnect device [ 274.657645][ T943] usb 5-1: selecting invalid altsetting 0 [ 274.659490][ T943] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 274.660061][ T943] usb 5-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 274.684682][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 274.684699][ T31] audit: type=1400 audit(1790329765.606:473): avc: denied { create } for pid=7452 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 274.756357][ T31] audit: type=1400 audit(1790329765.686:474): avc: denied { write } for pid=7452 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 274.760259][ T31] audit: type=1400 audit(1790329765.686:475): avc: denied { write } for pid=7456 comm="syz.3.457" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 274.869875][ T943] usb 5-1: USB disconnect, device number 6 [ 274.935294][ T7430] udevd[7430]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.169334][ T7474] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 277.040488][ T31] audit: type=1400 audit(1790329767.626:476): avc: denied { create } for pid=7471 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 277.040542][ T31] audit: type=1400 audit(1790329767.646:477): avc: denied { setopt } for pid=7471 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 277.149533][ T31] audit: type=1400 audit(1790329768.076:478): avc: denied { create } for pid=7479 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 277.185319][ T7480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.463'. [ 277.809006][ T7485] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 278.132518][ T31] audit: type=1400 audit(1790329768.726:479): avc: denied { read append } for pid=7483 comm="syz.4.465" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 278.132578][ T31] audit: type=1400 audit(1790329768.726:480): avc: denied { open } for pid=7483 comm="syz.4.465" path="/dev/rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 278.132616][ T31] audit: type=1400 audit(1790329768.736:481): avc: denied { ioctl } for pid=7483 comm="syz.4.465" path="/dev/rtc0" dev="devtmpfs" ino=915 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 278.132674][ T31] audit: type=1400 audit(1790329768.746:482): avc: denied { read } for pid=7483 comm="syz.4.465" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 280.041664][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 280.041686][ T31] audit: type=1400 audit(1790329770.966:486): avc: denied { create } for pid=7501 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.084047][ T31] audit: type=1400 audit(1790329771.016:487): avc: denied { ioctl } for pid=7501 comm="syz.3.469" path="socket:[17385]" dev="sockfs" ino=17385 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.127172][ T31] audit: type=1400 audit(1790329771.056:488): avc: denied { bind } for pid=7501 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.128904][ T31] audit: type=1400 audit(1790329771.056:489): avc: denied { getopt } for pid=7501 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.131021][ T31] audit: type=1400 audit(1790329771.056:490): avc: denied { nlmsg_write } for pid=7501 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 280.132441][ T31] audit: type=1400 audit(1790329771.056:491): avc: denied { read } for pid=7501 comm="syz.3.469" path="socket:[17387]" dev="sockfs" ino=17387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 280.133419][ T31] audit: type=1400 audit(1790329771.056:492): avc: denied { setopt } for pid=7501 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 281.451987][ T30] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 281.686759][ T30] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 281.687690][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.693166][ T30] usb 4-1: config 0 descriptor?? [ 281.865635][ T7511] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 283.599569][ T30] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 283.623790][ T30] [drm:udl_init] *ERROR* Selecting channel failed [ 284.263496][ T30] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 284.263525][ T30] [drm] Initialized udl on minor 1 [ 284.264713][ T30] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 284.265028][ T30] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 284.267014][ T30] usb 4-1: USB disconnect, device number 11 [ 284.268025][ T5806] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 285.034431][ T7522] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 285.402024][ T31] audit: type=1400 audit(1790329776.326:493): avc: denied { ioctl } for pid=7525 comm="syz.4.478" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17640 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 285.662838][ T31] audit: type=1400 audit(1790329776.586:494): avc: denied { mount } for pid=7525 comm="syz.4.478" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 286.340027][ T31] audit: type=1400 audit(1790329777.266:495): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 286.758713][ T31] audit: type=1400 audit(1790329777.686:496): avc: denied { getopt } for pid=7534 comm="syz.4.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 286.761017][ T31] audit: type=1400 audit(1790329777.686:497): avc: denied { bind } for pid=7534 comm="syz.4.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 286.761447][ T31] audit: type=1400 audit(1790329777.686:498): avc: denied { node_bind } for pid=7534 comm="syz.4.479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 287.231129][ T7551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.483'. [ 288.239030][ T31] audit: type=1400 audit(1790329779.166:499): avc: denied { setopt } for pid=7536 comm="syz.4.480" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 288.491897][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 288.764997][ T9] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 288.766890][ T9] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 288.766916][ T9] usb 1-1: config 1 has no interface number 0 [ 288.766955][ T9] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 288.766981][ T9] usb 1-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 288.767004][ T9] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.991696][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.991730][ T9] usb 1-1: Product: syz [ 288.991746][ T9] usb 1-1: Manufacturer: syz [ 288.991766][ T9] usb 1-1: SerialNumber: syz [ 289.650393][ T31] audit: type=1400 audit(1790329780.216:500): avc: denied { bind } for pid=7558 comm="syz.4.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 289.650461][ T31] audit: type=1400 audit(1790329780.226:501): avc: denied { write } for pid=7558 comm="syz.4.485" path="socket:[18631]" dev="sockfs" ino=18631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 289.650501][ T31] audit: type=1400 audit(1790329780.236:502): avc: denied { mount } for pid=7558 comm="syz.4.485" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 289.738412][ T7543] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 289.738524][ T7543] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 289.759056][ T9] usb 1-1: Expected 3 endpoints, found: 2 [ 290.448859][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 290.448877][ T31] audit: type=1400 audit(1790329781.376:504): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 290.875897][ T31] audit: type=1400 audit(1790329781.606:505): avc: denied { setopt } for pid=7564 comm="syz.4.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 290.876164][ T31] audit: type=1400 audit(1790329781.606:506): avc: denied { name_bind } for pid=7564 comm="syz.4.486" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 290.876402][ T31] audit: type=1400 audit(1790329781.606:507): avc: denied { write } for pid=7564 comm="syz.4.486" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 290.876551][ T31] audit: type=1400 audit(1790329781.606:508): avc: denied { connect } for pid=7564 comm="syz.4.486" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 290.876706][ T31] audit: type=1400 audit(1790329781.606:509): avc: denied { name_connect } for pid=7564 comm="syz.4.486" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 290.876758][ T31] audit: type=1400 audit(1790329781.686:510): avc: denied { shutdown } for pid=7564 comm="syz.4.486" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 291.128430][ T31] audit: type=1400 audit(1790329782.056:511): avc: denied { ioctl } for pid=7571 comm="syz.1.488" path="socket:[17756]" dev="sockfs" ino=17756 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 291.130762][ T31] audit: type=1400 audit(1790329782.056:512): avc: denied { append } for pid=7571 comm="syz.1.488" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 292.313006][ T9] usb 1-1: USB disconnect, device number 20 [ 292.319371][ T7582] fuse: Bad value for 'group_id' [ 292.319390][ T7582] fuse: Bad value for 'group_id' [ 293.364587][ T31] audit: type=1400 audit(1790329784.296:513): avc: denied { create } for pid=7585 comm="syz.4.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 295.919029][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.499'. [ 296.821190][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 296.821217][ T31] audit: type=1400 audit(1790329787.736:516): avc: denied { mount } for pid=7615 comm="syz.0.501" name="/" dev="gadgetfs" ino=8430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 296.868688][ T7617] gadgetfs: bound to dummy_udc driver [ 296.896000][ T31] audit: type=1400 audit(1790329787.816:517): avc: denied { name_bind } for pid=7615 comm="syz.0.501" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 297.163929][ T943] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 297.164618][ C1] gadgetfs: connected [ 297.165257][ T943] gadgetfs: disconnected [ 297.325307][ C1] gadgetfs: connected [ 297.340536][ T943] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 297.357318][ T943] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 297.357527][ T943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.584555][ C1] gadgetfs: configuration #1 [ 297.591643][ T7615] gadgetfs: suspended from state 3 [ 297.591860][ T7615] gadgetfs: disconnected [ 297.612125][ T943] usb 1-1: can't set config #1, error -71 [ 297.690473][ T943] usb 1-1: USB disconnect, device number 21 [ 297.996413][ T31] audit: type=1400 audit(1790329788.926:518): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 299.370324][ T31] audit: type=1400 audit(1790329790.296:519): avc: denied { read write } for pid=7635 comm="syz.1.505" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 299.411717][ T31] audit: type=1400 audit(1790329790.296:520): avc: denied { open } for pid=7635 comm="syz.1.505" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 299.444108][ T31] audit: type=1400 audit(1790329790.376:521): avc: denied { ioctl } for pid=7635 comm="syz.1.505" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 299.514594][ T31] audit: type=1400 audit(1790329790.436:522): avc: denied { connect } for pid=7635 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 300.545958][ T31] audit: type=1400 audit(1790329791.476:523): avc: denied { accept } for pid=7643 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 301.261735][ T5606] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 301.262153][ T943] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 301.988220][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.512'. [ 302.005490][ T943] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 302.008513][ T943] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 302.008754][ T943] usb 3-1: config 1 has no interface number 0 [ 302.008860][ T943] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 302.008884][ T943] usb 3-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 302.008904][ T943] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.012245][ T943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.012268][ T943] usb 3-1: Product: syz [ 302.012283][ T943] usb 3-1: Manufacturer: syz [ 302.012297][ T943] usb 3-1: SerialNumber: syz [ 302.082815][ T7652] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 302.082904][ T7652] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 302.093263][ T943] usb 3-1: Expected 3 endpoints, found: 2 [ 302.114386][ T31] audit: type=1400 audit(1790329793.026:524): avc: denied { write } for pid=7668 comm="syz.3.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 302.114435][ T31] audit: type=1400 audit(1790329793.026:525): avc: denied { read } for pid=7668 comm="syz.3.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 302.114474][ T31] audit: type=1400 audit(1790329793.036:526): avc: denied { audit_write } for pid=7668 comm="syz.3.513" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 305.156794][ T5600] usb 3-1: USB disconnect, device number 8 [ 305.836486][ T7696] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 307.784469][ T7710] gadgetfs: bound to dummy_udc driver [ 307.813758][ T5600] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 308.765729][ T5600] usb 5-1: device descriptor read/64, error -71 [ 308.866081][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.528'. [ 309.003971][ T5600] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 309.133752][ T5600] usb 5-1: device descriptor read/64, error -71 [ 309.740391][ T5600] usb usb5-port1: attempt power cycle [ 309.756213][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 312.220564][ T7739] hub 8-0:1.0: USB hub found [ 312.222076][ T7739] hub 8-0:1.0: 1 port detected [ 313.068105][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.068163][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.458186][ T7749] loop9: detected capacity change from 0 to 2640 [ 313.461085][ T7749] buffer_io_error: 11 callbacks suppressed [ 313.461103][ T7749] Buffer I/O error on dev loop9, logical block 0, async page read [ 313.461264][ T7749] Buffer I/O error on dev loop9, logical block 0, async page read [ 313.461396][ T7749] Buffer I/O error on dev loop9, logical block 0, async page read [ 313.461513][ T7749] Buffer I/O error on dev loop9, logical block 0, async page read [ 313.461629][ T7749] Buffer I/O error on dev loop9, logical block 0, async page read [ 313.461801][ T7749] Buffer I/O error on dev loop9, logical block 0, async page read [ 313.462002][ T7749] Buffer I/O error on dev loop9, logical block 0, async page read [ 313.462120][ T7749] Buffer I/O error on dev loop9, logical block 0, async page read [ 313.462165][ T7749] ldm_validate_partition_table(): Disk read failed. [ 313.462314][ T7749] Buffer I/O error on dev loop9, logical block 0, async page read [ 313.462433][ T7749] Buffer I/O error on dev loop9, logical block 0, async page read [ 313.462704][ T7749] Dev loop9: unable to read RDB block 0 [ 313.463447][ T7749] loop9: unable to read partition table [ 313.466363][ T7749] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 313.754094][ T31] audit: type=1400 audit(1790329804.356:527): avc: denied { read write } for pid=7746 comm="syz.0.539" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 313.754152][ T31] audit: type=1400 audit(1790329804.356:528): avc: denied { open } for pid=7746 comm="syz.0.539" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 314.819960][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 315.695354][ T31] audit: type=1400 audit(1790329806.626:529): avc: denied { mount } for pid=7750 comm="syz.4.533" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 315.793114][ T31] audit: type=1400 audit(1790329806.646:530): avc: denied { search } for pid=7750 comm="syz.4.533" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 315.793351][ T31] audit: type=1400 audit(1790329806.646:531): avc: denied { append } for pid=7750 comm="syz.4.533" name="uprobe_events" dev="tracefs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 315.793471][ T31] audit: type=1400 audit(1790329806.646:532): avc: denied { open } for pid=7750 comm="syz.4.533" path="/108/tracing/uprobe_events" dev="tracefs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 318.645505][ T31] audit: type=1400 audit(1790329809.576:533): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 319.037560][ T7786] loop9: detected capacity change from 0 to 2640 [ 319.040534][ T7786] buffer_io_error: 11 callbacks suppressed [ 319.040573][ T7786] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.040753][ T7786] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.040827][ T7786] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.040852][ T7786] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.040875][ T7786] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.041127][ T7786] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.041213][ T7786] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.041338][ T7786] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.041387][ T7786] ldm_validate_partition_table(): Disk read failed. [ 319.041506][ T7786] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.041641][ T7786] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.041867][ T7786] Dev loop9: unable to read RDB block 0 [ 319.042654][ T7786] loop9: unable to read partition table [ 319.043955][ T7786] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 319.859543][ T31] audit: type=1400 audit(1790329810.006:534): avc: denied { map } for pid=7779 comm="syz.0.540" path="/dev/loop9" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 320.280118][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.545'. [ 326.775506][ T31] audit: type=1404 audit(1790329817.706:535): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 326.813796][ T31] audit: type=1404 audit(1790329817.736:536): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 326.837706][ T31] audit: type=1400 audit(1790329817.766:537): avc: denied { read } for pid=7824 comm="syz.3.558" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 326.964758][ T31] audit: type=1400 audit(1790329817.896:538): avc: denied { read write } for pid=5597 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 326.965020][ T31] audit: type=1400 audit(1790329817.896:539): avc: denied { open } for pid=5597 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 326.965264][ T31] audit: type=1400 audit(1790329817.896:540): avc: denied { ioctl } for pid=5597 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 327.973806][ T31] audit: type=1400 audit(1790329818.016:541): avc: denied { execmem } for pid=7830 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 327.973856][ T31] audit: type=1400 audit(1790329818.116:542): avc: denied { read } for pid=7830 comm="syz.0.554" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 327.973889][ T31] audit: type=1400 audit(1790329818.116:543): avc: denied { open } for pid=7830 comm="syz.0.554" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 327.973923][ T31] audit: type=1400 audit(1790329818.166:544): avc: denied { prog_load } for pid=7830 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 329.414125][ T7844] fuse: Bad value for 'fd' [ 329.638284][ T7846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.563'. [ 333.003527][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 333.003550][ T31] audit: type=1400 audit(1790329823.456:565): avc: denied { create } for pid=7859 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 333.003595][ T31] audit: type=1400 audit(1790329823.486:566): avc: denied { write } for pid=7859 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 333.051434][ T31] audit: type=1400 audit(1790329823.506:567): avc: denied { create } for pid=7859 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 333.051491][ T31] audit: type=1400 audit(1790329823.536:568): avc: denied { write } for pid=7859 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 333.051528][ T31] audit: type=1400 audit(1790329823.706:569): avc: denied { create } for pid=7859 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 333.051563][ T31] audit: type=1400 audit(1790329823.826:570): avc: denied { setopt } for pid=7859 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 333.930787][ T31] audit: type=1400 audit(1790329824.836:571): avc: denied { read } for pid=7874 comm="syz.4.565" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 333.930846][ T31] audit: type=1400 audit(1790329824.846:572): avc: denied { open } for pid=7874 comm="syz.4.565" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 333.930889][ T31] audit: type=1400 audit(1790329824.856:573): avc: denied { ioctl } for pid=7874 comm="syz.4.565" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 333.948541][ T7876] hub 8-0:1.0: USB hub found [ 333.949527][ T7876] hub 8-0:1.0: 1 port detected [ 334.050105][ T31] audit: type=1400 audit(1790329824.866:574): avc: denied { write } for pid=7871 comm="syz.2.567" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 335.768829][ T7892] gadgetfs: bound to dummy_udc driver [ 339.059593][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 339.059612][ T31] audit: type=1400 audit(1790329829.986:595): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 339.108565][ T31] audit: type=1400 audit(1790329830.036:596): avc: denied { search } for pid=5263 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.108760][ T31] audit: type=1400 audit(1790329830.036:597): avc: denied { search } for pid=5263 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.108933][ T31] audit: type=1400 audit(1790329830.036:598): avc: denied { search } for pid=5263 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.109169][ T31] audit: type=1400 audit(1790329830.036:599): avc: denied { read } for pid=5263 comm="dhcpcd" name="n31" dev="tmpfs" ino=4298 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.109466][ T31] audit: type=1400 audit(1790329830.036:600): avc: denied { open } for pid=5263 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=4298 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.109788][ T31] audit: type=1400 audit(1790329830.036:601): avc: denied { getattr } for pid=5263 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=4298 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.133728][ T31] audit: type=1400 audit(1790329830.056:602): avc: denied { create } for pid=7905 comm="syz.2.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 339.137881][ T31] audit: type=1400 audit(1790329830.066:603): avc: denied { mount } for pid=7905 comm="syz.2.578" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 339.513145][ T31] audit: type=1400 audit(1790329830.436:604): avc: denied { read } for pid=7910 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.047717][ T7919] gadgetfs: bound to dummy_udc driver [ 340.437062][ T5606] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 341.839725][ T7937] hub 8-0:1.0: USB hub found [ 341.839941][ T7937] hub 8-0:1.0: 1 port detected [ 342.035836][ T7946] hub 8-0:1.0: USB hub found [ 342.036565][ T7946] hub 8-0:1.0: 1 port detected [ 344.216668][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 344.216690][ T31] audit: type=1400 audit(1790329835.076:625): avc: denied { create } for pid=7938 comm="syz.2.580" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 344.216731][ T31] audit: type=1400 audit(1790329835.076:626): avc: denied { map } for pid=7938 comm="syz.2.580" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=19645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 344.216769][ T31] audit: type=1400 audit(1790329835.076:627): avc: denied { read write } for pid=7938 comm="syz.2.580" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=19645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 344.216810][ T31] audit: type=1400 audit(1790329835.126:628): avc: denied { bind } for pid=7938 comm="syz.2.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 344.216864][ T31] audit: type=1400 audit(1790329835.126:629): avc: denied { node_bind } for pid=7938 comm="syz.2.580" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 344.216898][ T31] audit: type=1400 audit(1790329835.136:630): avc: denied { watch } for pid=7938 comm="syz.2.580" path="/102" dev="tmpfs" ino=611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 344.216931][ T31] audit: type=1400 audit(1790329835.136:631): avc: denied { create } for pid=7938 comm="syz.2.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 344.216963][ T31] audit: type=1400 audit(1790329835.136:632): avc: denied { write } for pid=7938 comm="syz.2.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 344.623684][ T31] audit: type=1400 audit(1790329835.546:633): avc: denied { write } for pid=7932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.755560][ T31] audit: type=1400 audit(1790329835.686:634): avc: denied { write } for pid=7962 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.508231][ T7973] FAULT_INJECTION: forcing a failure. [ 346.508231][ T7973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.508268][ T7973] CPU: 1 UID: 0 PID: 7973 Comm: syz.4.582 Not tainted syzkaller #0 PREEMPT(full) [ 346.508290][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 346.508300][ T7973] Call Trace: [ 346.508309][ T7973] [ 346.508317][ T7973] dump_stack_lvl+0x100/0x190 [ 346.508354][ T7973] should_fail_ex.cold+0x5/0xa [ 346.508386][ T7973] _copy_from_user+0x2e/0xd0 [ 346.508414][ T7973] __sys_bpf+0x2f5/0x4a30 [ 346.508445][ T7973] ? __pfx___sys_bpf+0x10/0x10 [ 346.508465][ T7973] ? __pfx_futex_hash+0x10/0x10 [ 346.508491][ T7973] ? get_pid_task+0xfc/0x250 [ 346.508518][ T7973] ? get_pid_task+0xfc/0x250 [ 346.508552][ T7973] ? find_held_lock+0x2b/0x80 [ 346.508589][ T7973] ? rcu_read_lock_any_held+0x6a/0x90 [ 346.508620][ T7973] ? find_held_lock+0x2b/0x80 [ 346.508647][ T7973] ? ksys_write+0x190/0x250 [ 346.508671][ T7973] ? ksys_write+0x190/0x250 [ 346.508707][ T7973] ? __x64_sys_futex+0x34f/0x4d0 [ 346.508739][ T7973] ? __x64_sys_futex+0x358/0x4d0 [ 346.508772][ T7973] ? xfd_validate_state+0x129/0x190 [ 346.508800][ T7973] ? __x64_sys_bpf+0xce/0x140 [ 346.508819][ T7973] __x64_sys_bpf+0xce/0x140 [ 346.508840][ T7973] ? do_syscall_64+0xae/0x790 [ 346.508864][ T7973] do_syscall_64+0x123/0x790 [ 346.508886][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.508905][ T7973] RIP: 0033:0x7f451d39e159 [ 346.508924][ T7973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.508943][ T7973] RSP: 002b:00007f451e2a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 346.508964][ T7973] RAX: ffffffffffffffda RBX: 00007f451d625fa0 RCX: 00007f451d39e159 [ 346.508977][ T7973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 346.508988][ T7973] RBP: 00007f451d43506b R08: 0000000000000000 R09: 0000000000000000 [ 346.509000][ T7973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.509011][ T7973] R13: 00007f451d626038 R14: 00007f451d625fa0 R15: 00007ffec14eeed8 [ 346.509040][ T7973] [ 347.033831][ T5787] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 349.424257][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 349.424276][ T31] audit: type=1400 audit(1790329840.356:642): avc: denied { write } for pid=7988 comm="syz.2.588" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 350.673750][ T30] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 350.676796][ T5716] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 350.823723][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 350.824434][ T30] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 350.824518][ T5716] usb 3-1: Using ep0 maxpacket: 32 [ 350.825225][ T5716] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 350.826246][ T5716] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 350.826277][ T5716] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 350.826315][ T5716] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 350.826342][ T5716] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 350.826365][ T5716] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 350.826390][ T5716] usb 3-1: config 0 interface 0 has no altsetting 0 [ 350.826778][ T30] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 350.826805][ T30] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1015 [ 350.828546][ T5716] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 350.828571][ T5716] usb 3-1: Product: syz [ 350.828586][ T5716] usb 3-1: Manufacturer: syz [ 350.828602][ T5716] usb 3-1: SerialNumber: syz [ 350.830905][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.830931][ T30] usb 1-1: Product: syz [ 350.830946][ T30] usb 1-1: Manufacturer: syz [ 350.830961][ T30] usb 1-1: SerialNumber: syz [ 350.839845][ T5716] usb 3-1: config 0 descriptor?? [ 350.858528][ T5716] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 350.876686][ T5716] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 350.949205][ T7992] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 350.949295][ T7992] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 351.061206][ T7989] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90 [ 351.074489][ T5716] usb 3-1: USB disconnect, device number 10 [ 351.096445][ T5716] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 351.169279][ T31] audit: type=1400 audit(1790329842.096:643): avc: denied { create } for pid=7991 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 351.170712][ T31] audit: type=1400 audit(1790329842.096:644): avc: denied { setopt } for pid=7991 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 351.226848][ T30] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 351.231689][ T30] usb 1-1: USB disconnect, device number 24 [ 351.380802][ T31] audit: type=1400 audit(1790329842.306:645): avc: denied { mount } for pid=7999 comm="syz.4.596" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 351.472978][ T8002] hub 8-0:1.0: USB hub found [ 351.474006][ T8002] hub 8-0:1.0: 1 port detected [ 353.219724][ T8014] hub 8-0:1.0: USB hub found [ 353.220566][ T8014] hub 8-0:1.0: 1 port detected [ 353.617808][ T31] audit: type=1400 audit(1790329844.546:646): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 353.621344][ T8016] FAULT_INJECTION: forcing a failure. [ 353.621344][ T8016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.621379][ T8016] CPU: 0 UID: 0 PID: 8016 Comm: syz.1.601 Not tainted syzkaller #0 PREEMPT(full) [ 353.621401][ T8016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 353.621412][ T8016] Call Trace: [ 353.621419][ T8016] [ 353.621427][ T8016] dump_stack_lvl+0x100/0x190 [ 353.621464][ T8016] should_fail_ex.cold+0x5/0xa [ 353.621493][ T8016] _copy_from_user+0x2e/0xd0 [ 353.621528][ T8016] __sys_bpf+0x2f5/0x4a30 [ 353.621577][ T8016] ? __pfx___sys_bpf+0x10/0x10 [ 353.621597][ T8016] ? find_held_lock+0x2b/0x80 [ 353.621625][ T8016] ? futex_wake+0x4ea/0x5e0 [ 353.621659][ T8016] ? rcu_read_lock_any_held+0x6a/0x90 [ 353.621687][ T8016] ? find_held_lock+0x2b/0x80 [ 353.621710][ T8016] ? ksys_write+0x190/0x250 [ 353.621731][ T8016] ? ksys_write+0x190/0x250 [ 353.621763][ T8016] ? __x64_sys_futex+0x34f/0x4d0 [ 353.621786][ T8016] ? __x64_sys_futex+0x358/0x4d0 [ 353.621815][ T8016] ? xfd_validate_state+0x129/0x190 [ 353.621840][ T8016] ? __x64_sys_bpf+0xce/0x140 [ 353.621858][ T8016] __x64_sys_bpf+0xce/0x140 [ 353.621878][ T8016] ? do_syscall_64+0xae/0x790 [ 353.621898][ T8016] do_syscall_64+0x123/0x790 [ 353.621919][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.621942][ T8016] RIP: 0033:0x7f520d99e159 [ 353.621960][ T8016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.621979][ T8016] RSP: 002b:00007f520e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 353.621998][ T8016] RAX: ffffffffffffffda RBX: 00007f520dc25fa0 RCX: 00007f520d99e159 [ 353.622014][ T8016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 353.622025][ T8016] RBP: 00007f520da3506b R08: 0000000000000000 R09: 0000000000000000 [ 353.622036][ T8016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.622048][ T8016] R13: 00007f520dc26038 R14: 00007f520dc25fa0 R15: 00007ffd3dd473a8 [ 353.622074][ T8016] [ 353.694342][ T8018] fuse: Invalid rootmode [ 354.938484][ T31] audit: type=1400 audit(1790329845.866:647): avc: denied { name_bind } for pid=8025 comm="syz.4.603" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 354.938543][ T31] audit: type=1400 audit(1790329845.866:648): avc: denied { node_bind } for pid=8025 comm="syz.4.603" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 355.116077][ T31] audit: type=1400 audit(1790329846.046:649): avc: denied { create } for pid=8024 comm="syz.3.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 355.119348][ T31] audit: type=1400 audit(1790329846.046:650): avc: denied { listen } for pid=8024 comm="syz.3.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 355.166756][ T31] audit: type=1400 audit(1790329846.096:651): avc: denied { read } for pid=8025 comm="syz.4.603" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 355.176001][ T31] audit: type=1400 audit(1790329846.096:652): avc: denied { open } for pid=8025 comm="syz.4.603" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 355.243330][ T8028] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.243479][ T8028] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.223453][ T8028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.227292][ T8028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.083829][ T292] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.083878][ T292] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.083909][ T292] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.083938][ T292] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.372679][ T8049] loop9: detected capacity change from 0 to 2640 [ 358.377732][ T8049] buffer_io_error: 11 callbacks suppressed [ 358.377770][ T8049] Buffer I/O error on dev loop9, logical block 0, async page read [ 358.377922][ T8049] Buffer I/O error on dev loop9, logical block 0, async page read [ 358.378063][ T8049] Buffer I/O error on dev loop9, logical block 0, async page read [ 358.378193][ T8049] Buffer I/O error on dev loop9, logical block 0, async page read [ 358.378236][ T8049] Buffer I/O error on dev loop9, logical block 0, async page read [ 358.378304][ T8049] Buffer I/O error on dev loop9, logical block 0, async page read [ 358.378524][ T8049] Buffer I/O error on dev loop9, logical block 0, async page read [ 358.378642][ T8049] Buffer I/O error on dev loop9, logical block 0, async page read [ 358.378686][ T8049] ldm_validate_partition_table(): Disk read failed. [ 358.378787][ T8049] Buffer I/O error on dev loop9, logical block 0, async page read [ 358.378905][ T8049] Buffer I/O error on dev loop9, logical block 0, async page read [ 358.379113][ T8049] Dev loop9: unable to read RDB block 0 [ 358.379862][ T8049] loop9: unable to read partition table [ 358.380998][ T8049] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 358.660634][ T31] audit: type=1400 audit(1790329849.276:653): avc: denied { read write } for pid=8045 comm="syz.4.611" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 358.660702][ T31] audit: type=1400 audit(1790329849.276:654): avc: denied { open } for pid=8045 comm="syz.4.611" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 358.660743][ T31] audit: type=1400 audit(1790329849.536:655): avc: denied { map } for pid=8045 comm="syz.4.611" path="/dev/loop9" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 359.204338][ T31] audit: type=1400 audit(1790329850.126:656): avc: denied { setopt } for pid=8052 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.950467][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 359.950500][ T31] audit: type=1400 audit(1790329850.876:660): avc: denied { write } for pid=8051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.321691][ T8078] hub 8-0:1.0: USB hub found [ 360.322676][ T8078] hub 8-0:1.0: 1 port detected [ 360.438936][ T31] audit: type=1400 audit(1790329851.366:661): avc: denied { write } for pid=8080 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.600254][ T8085] hub 8-0:1.0: USB hub found [ 360.601159][ T8085] hub 8-0:1.0: 1 port detected [ 364.100539][ T31] audit: type=1400 audit(1790329855.026:662): avc: denied { ioctl } for pid=8100 comm="syz.0.620" path="socket:[20050]" dev="sockfs" ino=20050 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 365.578727][ T5606] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 366.862460][ T31] audit: type=1400 audit(1790329857.426:663): avc: denied { write } for pid=8087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.599990][ T8134] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 368.054770][ T8137] hub 8-0:1.0: USB hub found [ 368.058205][ T8137] hub 8-0:1.0: 1 port detected [ 368.169844][ T31] audit: type=1400 audit(1790329858.516:664): avc: denied { read append } for pid=8132 comm="syz.2.627" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 368.170050][ T31] audit: type=1400 audit(1790329858.516:665): avc: denied { open } for pid=8132 comm="syz.2.627" path="/dev/rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 368.170424][ T31] audit: type=1400 audit(1790329858.526:666): avc: denied { ioctl } for pid=8132 comm="syz.2.627" path="/dev/rtc0" dev="devtmpfs" ino=915 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 368.170492][ T31] audit: type=1400 audit(1790329858.546:667): avc: denied { read } for pid=8132 comm="syz.2.627" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 368.170785][ T31] audit: type=1400 audit(1790329858.546:668): avc: denied { open } for pid=8132 comm="syz.2.627" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 368.171153][ T31] audit: type=1400 audit(1790329858.556:669): avc: denied { ioctl } for pid=8132 comm="syz.2.627" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 368.171461][ T31] audit: type=1400 audit(1790329858.576:670): avc: denied { prog_run } for pid=8132 comm="syz.2.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 369.916527][ T31] audit: type=1400 audit(1790329860.846:671): avc: denied { write } for pid=8138 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.785766][ T8160] hub 8-0:1.0: USB hub found [ 370.786468][ T8160] hub 8-0:1.0: 1 port detected [ 371.034870][ T8155] fuse: Unknown parameter 'use00000000000000000000' [ 372.496540][ T31] audit: type=1400 audit(1790329863.426:672): avc: denied { bind } for pid=8165 comm="syz.1.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 372.753673][ T31] audit: type=1400 audit(1790329863.676:673): avc: denied { write } for pid=8173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.871211][ T31] audit: type=1400 audit(1790329863.786:674): avc: denied { write } for pid=8185 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.336158][ T8198] hub 8-0:1.0: USB hub found [ 373.336898][ T8198] hub 8-0:1.0: 1 port detected [ 373.914119][ T8203] FAULT_INJECTION: forcing a failure. [ 373.914119][ T8203] name failslab, interval 1, probability 0, space 0, times 0 [ 373.914156][ T8203] CPU: 0 UID: 0 PID: 8203 Comm: syz.1.640 Not tainted syzkaller #0 PREEMPT(full) [ 373.914182][ T8203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 373.914196][ T8203] Call Trace: [ 373.914204][ T8203] [ 373.914230][ T8203] dump_stack_lvl+0x100/0x190 [ 373.914267][ T8203] should_fail_ex.cold+0x5/0xa [ 373.914294][ T8203] should_failslab+0xc2/0x120 [ 373.914320][ T8203] kmem_cache_alloc_noprof+0x92/0x6a0 [ 373.914343][ T8203] ? __pud_alloc+0x4f6/0x690 [ 373.914369][ T8203] ? __pmd_alloc+0xbf/0x950 [ 373.914396][ T8203] __pmd_alloc+0xbf/0x950 [ 373.914426][ T8203] ? __pud_alloc+0x4fb/0x690 [ 373.914451][ T8203] __handle_mm_fault+0xa9d/0x2f60 [ 373.914487][ T8203] ? __pfx___handle_mm_fault+0x10/0x10 [ 373.914516][ T8203] ? __pfx_mt_find+0x10/0x10 [ 373.914565][ T8203] handle_mm_fault+0x363/0xa20 [ 373.914599][ T8203] __get_user_pages+0x8ae/0x2c30 [ 373.914634][ T8203] ? __pfx___get_user_pages+0x10/0x10 [ 373.914657][ T8203] ? lock_acquire+0x1d1/0x380 [ 373.914677][ T8203] ? mmap_read_lock_maybe_expand+0x1e2/0x3d0 [ 373.914713][ T8203] get_user_pages_remote+0x3d2/0xb10 [ 373.914743][ T8203] ? __pfx_get_user_pages_remote+0x10/0x10 [ 373.914776][ T8203] get_arg_page+0xf4/0x310 [ 373.914797][ T8203] ? __pfx_get_arg_page+0x10/0x10 [ 373.914814][ T8203] ? do_raw_spin_lock+0x128/0x260 [ 373.914839][ T8203] ? alloc_bprm+0x54e/0x9e0 [ 373.914858][ T8203] ? alloc_bprm+0x54e/0x9e0 [ 373.914881][ T8203] copy_string_kernel+0x17d/0x3f0 [ 373.914901][ T8203] ? alloc_bprm+0x596/0x9e0 [ 373.914923][ T8203] do_execveat_common.isra.0+0x2e6/0x580 [ 373.914949][ T8203] __x64_sys_execveat+0xdf/0x130 [ 373.914974][ T8203] do_syscall_64+0x123/0x790 [ 373.915000][ T8203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.915039][ T8203] RIP: 0033:0x7f520d99e159 [ 373.915059][ T8203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.915080][ T8203] RSP: 002b:00007f520e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 373.915102][ T8203] RAX: ffffffffffffffda RBX: 00007f520dc25fa0 RCX: 00007f520d99e159 [ 373.915115][ T8203] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 373.915128][ T8203] RBP: 00007f520da3506b R08: 0000000000001000 R09: 0000000000000000 [ 373.915140][ T8203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.915151][ T8203] R13: 00007f520dc26038 R14: 00007f520dc25fa0 R15: 00007ffd3dd473a8 [ 373.915179][ T8203] [ 374.337319][ T5606] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 374.494178][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 374.554403][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.554564][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.674165][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 374.689369][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 374.729961][ T10] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 374.729998][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 374.730031][ T10] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 374.730073][ T10] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 374.730093][ T10] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 374.730117][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 374.737011][ T10] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 374.737035][ T10] usb 4-1: Product: syz [ 374.737049][ T10] usb 4-1: Manufacturer: syz [ 374.737063][ T10] usb 4-1: SerialNumber: syz [ 374.771492][ T10] usb 4-1: config 0 descriptor?? [ 374.791642][ T10] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 374.808877][ T10] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 376.121279][ T8204] ldusb 4-1:0.0: Couldn't submit interrupt_in_urb -90 [ 376.216638][ T9] usb 4-1: USB disconnect, device number 13 [ 376.223602][ T9] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 376.995888][ T31] audit: type=1400 audit(1790329867.926:675): avc: denied { sys_module } for pid=8219 comm="syz.4.644" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 377.927024][ T31] audit: type=1400 audit(1790329868.856:676): avc: denied { write } for pid=8191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.166113][ T31] audit: type=1400 audit(1790329869.096:677): avc: denied { write } for pid=8245 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.304551][ T31] audit: type=1400 audit(1790329869.236:678): avc: denied { read write } for pid=8247 comm="syz.4.650" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 378.304608][ T31] audit: type=1400 audit(1790329869.236:679): avc: denied { open } for pid=8247 comm="syz.4.650" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 378.333067][ T31] audit: type=1400 audit(1790329869.246:680): avc: denied { ioctl } for pid=8247 comm="syz.4.650" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 378.405143][ T31] audit: type=1400 audit(1790329869.336:681): avc: denied { connect } for pid=8247 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 379.396956][ T31] audit: type=1400 audit(1790329870.296:682): avc: denied { mount } for pid=8255 comm="syz.3.652" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 379.449401][ T5606] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 379.673144][ T31] audit: type=1400 audit(1790329870.596:683): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 382.520715][ T31] audit: type=1400 audit(1790329873.446:684): avc: denied { watch } for pid=8288 comm="syz.2.660" path="/115/file5" dev="tmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 382.520767][ T31] audit: type=1400 audit(1790329873.446:685): avc: denied { watch_sb watch_reads } for pid=8288 comm="syz.2.660" path="/115/file5" dev="tmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 384.791184][ T8292] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 384.983744][ T30] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 385.144903][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 385.145401][ T30] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 385.146197][ T30] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 385.146216][ T30] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1015 [ 385.147663][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.147678][ T30] usb 1-1: Product: syz [ 385.147688][ T30] usb 1-1: Manufacturer: syz [ 385.147698][ T30] usb 1-1: SerialNumber: syz [ 385.151851][ T8298] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 385.151923][ T8298] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 386.341651][ T30] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 386.346733][ T30] usb 1-1: USB disconnect, device number 25 [ 387.202457][ T31] audit: type=1400 audit(1790329878.106:686): avc: denied { listen } for pid=8314 comm="syz.0.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 387.202512][ T31] audit: type=1400 audit(1790329878.116:687): avc: denied { accept } for pid=8314 comm="syz.0.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 388.297356][ T8326] hub 8-0:1.0: USB hub found [ 388.298140][ T8326] hub 8-0:1.0: 1 port detected [ 388.493750][ T31] audit: type=1400 audit(1790329879.386:688): avc: denied { mount } for pid=8314 comm="syz.0.667" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 388.493822][ T31] audit: type=1400 audit(1790329879.396:689): avc: denied { remount } for pid=8314 comm="syz.0.667" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 389.447234][ T31] audit: type=1400 audit(1790329880.366:690): avc: denied { connect } for pid=8314 comm="syz.0.667" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 389.617222][ T31] audit: type=1400 audit(1790329880.546:691): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 392.401656][ T31] audit: type=1400 audit(1790329883.326:692): avc: denied { read } for pid=8346 comm="syz.2.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 392.652741][ T5600] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 392.782927][ T31] audit: type=1400 audit(1790329883.696:693): avc: denied { setopt } for pid=8350 comm="syz.4.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 392.783129][ T31] audit: type=1400 audit(1790329883.706:694): avc: denied { ioctl } for pid=8350 comm="syz.4.672" path="socket:[21694]" dev="sockfs" ino=21694 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 393.163727][ T5600] usb 3-1: device descriptor read/64, error -71 [ 393.413724][ T5600] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 393.593889][ T5600] usb 3-1: device descriptor read/64, error -71 [ 393.705935][ T5600] usb usb3-port1: attempt power cycle [ 394.054199][ T5600] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 394.078271][ T5600] usb 3-1: device descriptor read/8, error -71 [ 394.354238][ T5600] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 394.381614][ T5600] usb 3-1: device descriptor read/8, error -71 [ 394.495457][ T5600] usb usb3-port1: unable to enumerate USB device [ 397.277135][ T8376] hub 8-0:1.0: USB hub found [ 397.277958][ T8376] hub 8-0:1.0: 1 port detected [ 399.438920][ T8386] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 400.641624][ T8419] hub 8-0:1.0: USB hub found [ 400.642389][ T8419] hub 8-0:1.0: 1 port detected [ 401.503990][ T8429] hub 8-0:1.0: USB hub found [ 401.504709][ T8429] hub 8-0:1.0: 1 port detected [ 405.378325][ T31] audit: type=1400 audit(1790329896.306:695): avc: denied { write } for pid=8421 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.862057][ T31] audit: type=1400 audit(1790329896.786:696): avc: denied { write } for pid=8453 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.973391][ T8454] gadgetfs: bound to dummy_udc driver [ 406.514562][ T5787] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 406.533330][ C1] gadgetfs: connected [ 406.539804][ T5787] gadgetfs: disconnected [ 406.708629][ C1] gadgetfs: connected [ 406.713989][ T5787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 406.717964][ T5787] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 406.718107][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.777237][ T8451] gadgetfs: suspended from state 3 [ 406.777329][ T8451] gadgetfs: disconnected [ 406.843826][ T5787] usb 1-1: can't set config #1, error -71 [ 406.851291][ T5787] usb 1-1: USB disconnect, device number 26 [ 410.178522][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 410.538406][ T5606] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 410.882186][ T9] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 410.883193][ T9] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 410.883217][ T9] usb 2-1: config 1 has no interface number 0 [ 410.883251][ T9] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 410.883273][ T9] usb 2-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 410.883294][ T9] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.949929][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.949959][ T9] usb 2-1: Product: syz [ 410.949974][ T9] usb 2-1: Manufacturer: syz [ 410.949989][ T9] usb 2-1: SerialNumber: syz [ 410.954776][ T8487] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 410.954865][ T8487] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 410.956504][ T9] usb 2-1: Expected 3 endpoints, found: 2 [ 410.970430][ T8503] FAULT_INJECTION: forcing a failure. [ 410.970430][ T8503] name failslab, interval 1, probability 0, space 0, times 0 [ 410.970464][ T8503] CPU: 0 UID: 0 PID: 8503 Comm: syz.0.708 Not tainted syzkaller #0 PREEMPT(full) [ 410.970488][ T8503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 410.970500][ T8503] Call Trace: [ 410.970509][ T8503] [ 410.970516][ T8503] dump_stack_lvl+0x100/0x190 [ 410.970560][ T8503] should_fail_ex.cold+0x5/0xa [ 410.970592][ T8503] should_failslab+0xc2/0x120 [ 410.970621][ T8503] kmem_cache_alloc_noprof+0x92/0x6a0 [ 410.970647][ T8503] ? mas_preallocate+0xc22/0xee0 [ 410.970675][ T8503] mas_preallocate+0xc22/0xee0 [ 410.970699][ T8503] ? __pfx_mas_preallocate+0x10/0x10 [ 410.970719][ T8503] ? mt_find+0x136/0x9b0 [ 410.970744][ T8503] ? lock_acquire+0x1d1/0x380 [ 410.970765][ T8503] ? avc_has_perm_noaudit+0x56/0x470 [ 410.970802][ T8503] vma_link+0x14a/0x8c0 [ 410.970832][ T8503] ? __pfx_vma_link+0x10/0x10 [ 410.970869][ T8503] ? __pfx_selinux_vm_enough_memory+0x10/0x10 [ 410.970893][ T8503] ? rcu_is_watching+0x13/0xc0 [ 410.970917][ T8503] ? percpu_counter_add_batch+0xb9/0x230 [ 410.970948][ T8503] insert_vm_struct+0x1f7/0x890 [ 410.970972][ T8503] create_init_stack_vma+0x830/0xcf0 [ 410.970997][ T8503] ? __pfx_create_init_stack_vma+0x10/0x10 [ 410.971023][ T8503] ? lock_acquire+0x1d1/0x380 [ 410.971044][ T8503] ? do_raw_spin_lock+0x128/0x260 [ 410.971067][ T8503] ? alloc_bprm+0x54e/0x9e0 [ 410.971086][ T8503] ? alloc_bprm+0x54e/0x9e0 [ 410.971110][ T8503] alloc_bprm+0x57b/0x9e0 [ 410.971131][ T8503] do_execveat_common.isra.0+0x19c/0x580 [ 410.971152][ T8503] ? do_getname+0x191/0x390 [ 410.971179][ T8503] __x64_sys_execveat+0xdf/0x130 [ 410.971201][ T8503] do_syscall_64+0x123/0x790 [ 410.971221][ T8503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.971239][ T8503] RIP: 0033:0x7f8a6539e159 [ 410.971254][ T8503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.971270][ T8503] RSP: 002b:00007f8a661aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 410.971289][ T8503] RAX: ffffffffffffffda RBX: 00007f8a65625fa0 RCX: 00007f8a6539e159 [ 410.971301][ T8503] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 410.971311][ T8503] RBP: 00007f8a6543506b R08: 0000000000001000 R09: 0000000000000000 [ 410.971322][ T8503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.971332][ T8503] R13: 00007f8a65626038 R14: 00007f8a65625fa0 R15: 00007ffcc90d5ef8 [ 410.971357][ T8503] [ 411.008291][ T31] audit: type=1400 audit(1790329901.936:697): avc: denied { write } for pid=8463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.305251][ T31] audit: type=1400 audit(1790329902.206:698): avc: denied { write } for pid=8506 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.743787][ T31] audit: type=1400 audit(1790329902.666:699): avc: denied { map } for pid=8510 comm="syz.3.710" path="socket:[21410]" dev="sockfs" ino=21410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 412.949758][ T31] audit: type=1400 audit(1790329903.876:700): avc: denied { mounton } for pid=8476 comm="syz.1.704" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 415.010898][ T9] usb 2-1: USB disconnect, device number 7 [ 418.828918][ T5606] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 420.742953][ T31] audit: type=1400 audit(1790329911.666:701): avc: denied { create } for pid=8581 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 420.869540][ T31] audit: type=1400 audit(1790329911.736:702): avc: denied { write } for pid=8581 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 421.066572][ T5606] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 421.493873][ T8599] gadgetfs: bound to dummy_udc driver [ 422.442457][ T5606] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 426.326840][ T5606] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 426.444627][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 426.526228][ T8647] gadgetfs: bound to dummy_udc driver [ 426.594615][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 426.611569][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 426.656422][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.656940][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 426.657744][ T9] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 426.658445][ T9] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 426.659375][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 426.659771][ T9] usb 3-1: config 1 interface 1 has no altsetting 0 [ 426.801472][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.801552][ T9] usb 3-1: Product: syz [ 426.801587][ T9] usb 3-1: Manufacturer: syz [ 426.801610][ T9] usb 3-1: SerialNumber: syz [ 426.831720][ T5716] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 426.832431][ C0] gadgetfs: connected [ 426.901531][ T5716] gadgetfs: disconnected [ 427.061805][ C0] gadgetfs: connected [ 427.076639][ T5716] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 427.098838][ T5716] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 427.099273][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.230899][ T8645] gadgetfs: suspended from state 3 [ 427.231107][ T8645] gadgetfs: disconnected [ 427.308327][ T5716] usb 1-1: can't set config #1, error -71 [ 427.339496][ T5716] usb 1-1: USB disconnect, device number 27 [ 427.925726][ T8639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.926140][ T8639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.953200][ T31] audit: type=1400 audit(1790329918.876:703): avc: denied { create } for pid=8636 comm="syz.2.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 427.954433][ T31] audit: type=1400 audit(1790329918.876:704): avc: denied { write } for pid=8636 comm="syz.2.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 428.176305][ T8658] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 428.176334][ T8658] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 428.176478][ T8658] vhci_hcd vhci_hcd.0: Device attached [ 428.230311][ T8639] vhci_hcd vhci_hcd.0: port 0 already used [ 428.321956][ T8659] vhci_hcd: connection closed [ 428.353250][ T6071] vhci_hcd vhci_hcd.2: stop threads [ 428.353297][ T6071] vhci_hcd vhci_hcd.2: release socket [ 428.353572][ T6071] vhci_hcd vhci_hcd.2: disconnect device [ 429.353761][ T31] audit: type=1400 audit(1790329920.256:705): avc: denied { read } for pid=8665 comm="syz.3.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 429.650588][ T5787] usb usb38-port1: attempt power cycle [ 429.934721][ T9] usb 3-1: selecting invalid altsetting 0 [ 429.940946][ T9] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 429.943864][ T9] usb 3-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 430.025241][ T8663] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 430.232480][ T9] usb 3-1: USB disconnect, device number 15 [ 430.266891][ T5787] usb usb38-port1: unable to enumerate USB device [ 431.029435][ T8676] gadgetfs: bound to dummy_udc driver [ 431.943788][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 432.095966][ T9] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 432.098792][ T9] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 432.098818][ T9] usb 5-1: config 1 has no interface number 0 [ 432.098854][ T9] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 432.101356][ T9] usb 5-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 432.101391][ T9] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.109842][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.109866][ T9] usb 5-1: Product: syz [ 432.109880][ T9] usb 5-1: Manufacturer: syz [ 432.109894][ T9] usb 5-1: SerialNumber: syz [ 432.124576][ T8688] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 432.124662][ T8688] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 432.156733][ T9] usb 5-1: Expected 3 endpoints, found: 2 [ 434.179652][ T31] audit: type=1400 audit(1790329925.106:706): avc: denied { create } for pid=8707 comm="syz.1.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.512842][ T31] audit: type=1400 audit(1790329925.346:707): avc: denied { connect } for pid=8707 comm="syz.1.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.513047][ T31] audit: type=1400 audit(1790329925.346:708): avc: denied { write } for pid=8707 comm="syz.1.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.513253][ T31] audit: type=1400 audit(1790329925.356:709): avc: denied { connect } for pid=8707 comm="syz.1.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 434.513367][ T31] audit: type=1400 audit(1790329925.356:710): avc: denied { ioctl } for pid=8707 comm="syz.1.759" path="socket:[22942]" dev="sockfs" ino=22942 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 434.513500][ T31] audit: type=1400 audit(1790329925.356:711): avc: denied { write } for pid=8707 comm="syz.1.759" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 434.513736][ T31] audit: type=1400 audit(1790329925.356:712): avc: denied { ioctl } for pid=8707 comm="syz.1.759" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 434.513855][ T31] audit: type=1400 audit(1790329925.356:713): avc: denied { ioctl } for pid=8707 comm="syz.1.759" path="socket:[22932]" dev="sockfs" ino=22932 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.909099][ T8718] hub 8-0:1.0: USB hub found [ 434.913771][ T8718] hub 8-0:1.0: 1 port detected [ 435.944962][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.945019][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 436.229386][ T30] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 436.413854][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 436.416928][ T30] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 436.448859][ T5600] usb 5-1: USB disconnect, device number 10 [ 436.450606][ T30] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.450628][ T30] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 436.450667][ T30] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 436.450697][ T30] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 436.450730][ T30] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 436.450751][ T30] usb 3-1: config 1 interface 1 has no altsetting 0 [ 436.485742][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.485840][ T30] usb 3-1: Product: syz [ 436.485902][ T30] usb 3-1: Manufacturer: syz [ 436.485965][ T30] usb 3-1: SerialNumber: syz [ 437.235019][ T8728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.236345][ T8728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.282522][ T8728] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 437.282551][ T8728] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 437.282629][ T8728] vhci_hcd vhci_hcd.0: Device attached [ 437.312215][ T8728] vhci_hcd vhci_hcd.0: port 0 already used [ 437.331493][ T8735] vhci_hcd: connection closed [ 437.332529][ T12] vhci_hcd vhci_hcd.2: stop threads [ 437.332561][ T12] vhci_hcd vhci_hcd.2: release socket [ 437.332577][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 437.415303][ T30] usb 3-1: selecting invalid altsetting 0 [ 437.420710][ T30] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 437.422523][ T30] usb 3-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 438.948231][ T5732] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 439.248707][ T5732] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 439.258226][ T5732] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 439.258257][ T5732] usb 2-1: config 1 has no interface number 0 [ 439.258297][ T5732] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 439.258319][ T5732] usb 2-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 439.258338][ T5732] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.277647][ T30] usb 3-1: USB disconnect, device number 16 [ 439.334958][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.334986][ T5732] usb 2-1: Product: syz [ 439.335000][ T5732] usb 2-1: Manufacturer: syz [ 439.335013][ T5732] usb 2-1: SerialNumber: syz [ 439.368050][ T8744] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 439.368186][ T8744] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 439.396988][ T5732] usb 2-1: Expected 3 endpoints, found: 2 [ 439.501734][ T7430] udevd[7430]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.730710][ T31] audit: type=1400 audit(1790329930.656:714): avc: denied { append } for pid=8758 comm="syz.0.772" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 440.494032][ T5787] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 441.597573][ T5787] usb 4-1: Using ep0 maxpacket: 8 [ 441.614129][ T5787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 441.617117][ T5787] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 441.617138][ T5787] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1015 [ 441.622503][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.622521][ T5787] usb 4-1: Product: syz [ 441.622531][ T5787] usb 4-1: Manufacturer: syz [ 441.622540][ T5787] usb 4-1: SerialNumber: syz [ 441.676227][ T30] usb 2-1: USB disconnect, device number 8 [ 441.685794][ T8766] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 441.685901][ T8766] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 441.838784][ T8775] gadgetfs: bound to dummy_udc driver [ 441.980453][ T31] audit: type=1400 audit(1790329932.906:715): avc: denied { mount } for pid=8776 comm="syz.2.776" name="/" dev="configfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 442.025768][ T31] audit: type=1400 audit(1790329932.946:716): avc: denied { search } for pid=8776 comm="syz.2.776" name="/" dev="configfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 442.030091][ T31] audit: type=1400 audit(1790329932.956:717): avc: denied { search } for pid=8776 comm="syz.2.776" name="nvmet" dev="configfs" ino=2553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 442.059154][ T31] audit: type=1400 audit(1790329932.956:718): avc: denied { search } for pid=8776 comm="syz.2.776" name="subsystems" dev="configfs" ino=2554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 442.112464][ T5716] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 442.113129][ C0] gadgetfs: connected [ 442.116665][ T5716] gadgetfs: disconnected [ 442.190193][ T31] audit: type=1400 audit(1790329933.116:719): avc: denied { read write } for pid=8776 comm="syz.2.776" name="attr_allow_any_host" dev="configfs" ino=24381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 442.222789][ T31] audit: type=1400 audit(1790329933.146:720): avc: denied { open } for pid=8776 comm="syz.2.776" path="/142/config/nvmet/subsystems/testnqn/attr_allow_any_host" dev="configfs" ino=24381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 442.275777][ C0] gadgetfs: connected [ 442.280218][ T5716] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 442.282375][ T5716] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 442.298103][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.362371][ T31] audit: type=1400 audit(1790329933.286:721): avc: denied { search } for pid=8776 comm="syz.2.776" name="/" dev="configfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 442.389873][ T31] audit: type=1400 audit(1790329933.286:722): avc: denied { search } for pid=8776 comm="syz.2.776" name="nvmet" dev="configfs" ino=2553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 442.428354][ T31] audit: type=1400 audit(1790329933.346:723): avc: denied { search } for pid=8776 comm="syz.2.776" name="ports" dev="configfs" ino=2555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 442.432103][ C0] gadgetfs: configuration #1 [ 442.737618][ T8773] gadgetfs: suspended from state 3 [ 442.737804][ T8773] gadgetfs: disconnected [ 442.790533][ T5716] usb 1-1: can't set config #1, error -71 [ 442.854360][ T5716] usb 1-1: USB disconnect, device number 28 [ 443.087084][ T5787] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 443.099472][ T5787] usb 4-1: USB disconnect, device number 14 [ 444.033892][ T5716] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 444.226393][ T5716] usb 3-1: Using ep0 maxpacket: 32 [ 444.228645][ T5716] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 444.230985][ T5716] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.231036][ T5716] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 444.231173][ T5716] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 444.231262][ T5716] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 444.231341][ T5716] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 444.231364][ T5716] usb 3-1: config 1 interface 1 has no altsetting 0 [ 444.372333][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.372361][ T5716] usb 3-1: Product: syz [ 444.372376][ T5716] usb 3-1: Manufacturer: syz [ 444.372390][ T5716] usb 3-1: SerialNumber: syz [ 444.676047][ T5732] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 444.843980][ T5732] usb 4-1: Using ep0 maxpacket: 32 [ 444.850302][ T5732] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 444.884981][ T5732] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.885190][ T5732] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 444.927419][ T5732] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 444.928380][ T5732] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 444.928907][ T5732] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 444.929227][ T5732] usb 4-1: config 1 interface 1 has no altsetting 0 [ 445.048626][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.049358][ T5732] usb 4-1: Product: syz [ 445.049925][ T5732] usb 4-1: Manufacturer: syz [ 445.050394][ T5732] usb 4-1: SerialNumber: syz [ 445.288006][ T8783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.313071][ T8783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.603405][ T8783] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 445.603443][ T8783] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 445.604049][ T8783] vhci_hcd vhci_hcd.0: Device attached [ 445.728596][ T8795] vhci_hcd: connection closed [ 445.746626][ T8796] vhci_hcd vhci_hcd.0: port 0 already used [ 445.747582][ T6071] vhci_hcd vhci_hcd.2: stop threads [ 445.747709][ T6071] vhci_hcd vhci_hcd.2: release socket [ 445.747832][ T6071] vhci_hcd vhci_hcd.2: disconnect device [ 445.830098][ T8787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.830579][ T8787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.878865][ T8787] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 445.878896][ T8787] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 445.878972][ T8787] vhci_hcd vhci_hcd.0: Device attached [ 445.883380][ T8787] vhci_hcd vhci_hcd.0: port 0 already used [ 445.884727][ T8801] vhci_hcd: connection closed [ 445.911828][ T6071] vhci_hcd vhci_hcd.3: stop threads [ 445.911861][ T6071] vhci_hcd vhci_hcd.3: release socket [ 445.911878][ T6071] vhci_hcd vhci_hcd.3: disconnect device [ 445.966062][ T5732] usb 4-1: selecting invalid altsetting 0 [ 445.966504][ T5732] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 445.967061][ T5732] usb 4-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 446.007436][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 446.007454][ T31] audit: type=1400 audit(1790329936.936:728): avc: denied { write } for pid=8805 comm="syz.4.775" name="subsystems" dev="configfs" ino=24384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 446.009058][ T31] audit: type=1400 audit(1790329936.936:729): avc: denied { create } for pid=8805 comm="syz.4.775" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 446.012137][ T31] audit: type=1400 audit(1790329936.936:730): avc: denied { write } for pid=8805 comm="syz.4.775" name="subsystems" dev="configfs" ino=24384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 446.012370][ T8806] nvmet_tcp: address family 255 not supported [ 446.127731][ T5716] usb 3-1: selecting invalid altsetting 0 [ 446.130269][ T5716] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 446.146629][ T5716] usb 3-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 446.161334][ T5732] usb 4-1: USB disconnect, device number 15 [ 446.414414][ T5716] usb 3-1: USB disconnect, device number 17 [ 446.556001][ T7426] udevd[7426]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 446.992812][ T8822] NILFS (nullb0): couldn't find nilfs on the device [ 447.694418][ T8830] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 448.208690][ T8835] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 448.814139][ T8838] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 451.014332][ T8853] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 453.182949][ T8875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.802'. [ 453.320810][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.802'. [ 454.626987][ T8880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.803'. [ 454.627022][ T8880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.803'. [ 454.627052][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 455.486672][ T8887] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 456.157754][ T8895] hub 8-0:1.0: USB hub found [ 456.158007][ T8895] hub 8-0:1.0: 1 port detected [ 459.155912][ T5787] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 459.313166][ T5787] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 459.331236][ T5787] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 459.331292][ T5787] usb 4-1: config 1 has no interface number 0 [ 459.331433][ T5787] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 459.331485][ T5787] usb 4-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 459.331534][ T5787] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.400085][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.400193][ T5787] usb 4-1: Product: syz [ 459.400235][ T5787] usb 4-1: Manufacturer: syz [ 459.400264][ T5787] usb 4-1: SerialNumber: syz [ 459.471290][ T8912] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 459.471424][ T8912] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 459.493754][ T5787] usb 4-1: Expected 3 endpoints, found: 2 [ 460.382187][ T5787] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 460.487514][ T31] audit: type=1400 audit(1790329951.406:731): avc: denied { bind } for pid=8922 comm="syz.2.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 460.487594][ T31] audit: type=1400 audit(1790329951.406:732): avc: denied { getopt } for pid=8922 comm="syz.2.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 460.487633][ T31] audit: type=1400 audit(1790329951.406:733): avc: denied { nlmsg_write } for pid=8922 comm="syz.2.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 460.487671][ T31] audit: type=1400 audit(1790329951.406:734): avc: denied { read } for pid=8922 comm="syz.2.813" path="socket:[25738]" dev="sockfs" ino=25738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 460.487731][ T31] audit: type=1400 audit(1790329951.406:735): avc: denied { setopt } for pid=8922 comm="syz.2.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 462.406320][ T5600] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 462.579447][ T5600] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 462.595532][ T5600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.604102][ T5732] usb 4-1: USB disconnect, device number 17 [ 462.617842][ T5600] usb 3-1: config 0 descriptor?? [ 462.705229][ T5600] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 462.706506][ T5600] [drm:udl_init] *ERROR* Selecting channel failed [ 462.754925][ T5600] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 462.754954][ T5600] [drm] Initialized udl on minor 1 [ 462.756094][ T5600] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 462.756428][ T5600] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 462.758699][ T5600] usb 3-1: USB disconnect, device number 18 [ 462.801636][ T30] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 462.928931][ T8944] hub 8-0:1.0: USB hub found [ 462.929152][ T8944] hub 8-0:1.0: 1 port detected [ 464.223083][ T5732] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 464.435969][ T5732] usb 4-1: unable to get BOS descriptor or descriptor too short [ 464.436037][ T5732] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 464.436813][ T5732] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 464.436851][ T5732] usb 4-1: can't read configurations, error -71 [ 465.169569][ T5716] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 465.314918][ T5716] usb 3-1: Using ep0 maxpacket: 32 [ 465.315691][ T5716] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 465.316822][ T5716] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.316860][ T5716] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 465.316899][ T5716] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 465.316932][ T5716] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 465.316964][ T5716] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 465.316983][ T5716] usb 3-1: config 1 interface 1 has no altsetting 0 [ 465.318780][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.318804][ T5716] usb 3-1: Product: syz [ 465.318820][ T5716] usb 3-1: Manufacturer: syz [ 465.318835][ T5716] usb 3-1: SerialNumber: syz [ 465.404664][ T8960] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 465.789067][ T8956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.791402][ T8956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.812759][ T31] audit: type=1400 audit(1790329956.736:736): avc: denied { write } for pid=8958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.913907][ T31] audit: type=1400 audit(1790329956.846:737): avc: denied { write } for pid=8981 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.994346][ T8984] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 465.994378][ T8984] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 465.994737][ T8984] vhci_hcd vhci_hcd.0: Device attached [ 466.002158][ T8984] vhci_hcd vhci_hcd.0: port 0 already used [ 466.060475][ T8985] vhci_hcd: connection closed [ 466.065898][ T3322] vhci_hcd vhci_hcd.2: stop threads [ 466.065932][ T3322] vhci_hcd vhci_hcd.2: release socket [ 466.065950][ T3322] vhci_hcd vhci_hcd.2: disconnect device [ 466.552582][ T5716] usb 3-1: selecting invalid altsetting 0 [ 466.559729][ T5716] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 466.561999][ T5716] usb 3-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 466.638222][ T5716] usb 3-1: USB disconnect, device number 19 [ 468.291645][ T7426] udevd[7426]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.395645][ T9026] hub 8-0:1.0: USB hub found [ 469.395891][ T9026] hub 8-0:1.0: 1 port detected [ 469.418003][ T31] audit: type=1400 audit(1790329960.346:738): avc: denied { write } for pid=8994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.534832][ T31] audit: type=1400 audit(1790329960.466:739): avc: denied { write } for pid=9030 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.613943][ T30] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 469.689305][ T9034] gadgetfs: bound to dummy_udc driver [ 469.763969][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 469.766136][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 469.767144][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.767169][ T30] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 469.767210][ T30] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 469.767250][ T30] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 469.767284][ T30] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 469.767305][ T30] usb 5-1: config 1 interface 1 has no altsetting 0 [ 469.772663][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.772692][ T30] usb 5-1: Product: syz [ 469.772707][ T30] usb 5-1: Manufacturer: syz [ 469.772722][ T30] usb 5-1: SerialNumber: syz [ 469.936451][ T9041] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 470.033038][ T31] audit: type=1400 audit(1790329960.956:740): avc: denied { write } for pid=9032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.066014][ T9041] md: could not open device unknown-block(1,0). [ 470.096962][ T9041] md: could not open device unknown-block(1,1). [ 470.169715][ T31] audit: type=1400 audit(1790329961.096:741): avc: denied { write } for pid=9050 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.308205][ T9025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.313503][ T9025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.498280][ T9025] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 471.498314][ T9025] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 471.498523][ T9025] vhci_hcd vhci_hcd.0: Device attached [ 471.520506][ T9025] vhci_hcd vhci_hcd.0: port 0 already used [ 471.552027][ T9063] vhci_hcd: connection closed [ 471.552333][ T309] vhci_hcd vhci_hcd.4: stop threads [ 471.552374][ T309] vhci_hcd vhci_hcd.4: release socket [ 471.552393][ T309] vhci_hcd vhci_hcd.4: disconnect device [ 471.621145][ T30] usb 5-1: selecting invalid altsetting 0 [ 471.622918][ T30] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 471.624674][ T30] usb 5-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 471.669593][ T9062] IPv4: Oversized IP packet from 127.202.26.0 [ 471.835342][ T30] usb 5-1: USB disconnect, device number 12 [ 471.874551][ T31] audit: type=1400 audit(1790329962.806:742): avc: denied { write } for pid=9065 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.952477][ T7426] udevd[7426]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.138237][ T9084] gadgetfs: bound to dummy_udc driver [ 472.384946][ T5716] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 472.385565][ C0] gadgetfs: connected [ 472.399286][ T5716] gadgetfs: disconnected [ 472.556292][ C0] gadgetfs: connected [ 472.576409][ T5716] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 472.595270][ T5716] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 472.596006][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.765051][ C0] gadgetfs: configuration #1 [ 472.955529][ T9080] gadgetfs: suspended from state 3 [ 472.955710][ T9080] gadgetfs: disconnected [ 472.995033][ T5716] usb 1-1: can't set config #1, error -71 [ 473.196965][ T5716] usb 1-1: USB disconnect, device number 29 [ 474.711875][ T31] audit: type=1400 audit(1790329965.626:743): avc: denied { write } for pid=9087 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.019458][ T9095] gadgetfs: bound to dummy_udc driver [ 475.242427][ T9109] hub 8-0:1.0: USB hub found [ 475.242735][ T9109] hub 8-0:1.0: 1 port detected [ 477.769727][ T9127] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 477.894448][ T9127] md: could not open device unknown-block(1,0). [ 478.308138][ T9127] md: could not open device unknown-block(1,1). [ 480.969061][ T9148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.857'. [ 481.025083][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 483.171906][ T9165] hub 8-0:1.0: USB hub found [ 483.172154][ T9165] hub 8-0:1.0: 1 port detected [ 484.245143][ T9169] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 484.505555][ T9169] md: could not open device unknown-block(1,0). [ 484.566733][ T9169] md: could not open device unknown-block(1,1). [ 485.151019][ T9177] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 486.339498][ T5600] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 486.457243][ T9188] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 486.483709][ T5600] usb 4-1: Using ep0 maxpacket: 32 [ 486.484472][ T5600] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 486.488524][ T5600] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.488549][ T5600] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 486.488590][ T5600] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 486.488648][ T5600] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 486.488682][ T5600] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 486.488705][ T5600] usb 4-1: config 1 interface 1 has no altsetting 0 [ 486.490498][ T5600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.490527][ T5600] usb 4-1: Product: syz [ 486.490542][ T5600] usb 4-1: Manufacturer: syz [ 486.490557][ T5600] usb 4-1: SerialNumber: syz [ 486.634024][ T9191] md: could not open device unknown-block(1,0). [ 486.676399][ T9188] md: could not open device unknown-block(1,1). [ 487.963281][ T9180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.975605][ T9180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.113781][ T9180] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 488.113819][ T9180] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 488.113915][ T9180] vhci_hcd vhci_hcd.0: Device attached [ 488.130512][ T9204] vhci_hcd: connection closed [ 488.174703][ T9206] vhci_hcd vhci_hcd.0: port 0 already used [ 488.176772][ T292] vhci_hcd vhci_hcd.3: stop threads [ 488.176801][ T292] vhci_hcd vhci_hcd.3: release socket [ 488.176837][ T292] vhci_hcd vhci_hcd.3: disconnect device [ 488.817929][ T9212] hub 8-0:1.0: USB hub found [ 488.818239][ T9212] hub 8-0:1.0: 1 port detected [ 488.894641][ T5600] usb 4-1: selecting invalid altsetting 0 [ 488.895560][ T5600] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 488.897894][ T5600] usb 4-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 489.081589][ T5600] usb 4-1: USB disconnect, device number 20 [ 489.215456][ T9221] udevd[9221]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.247485][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.878'. [ 491.292646][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.878'. [ 491.877929][ T943] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 492.054252][ T943] usb 3-1: Using ep0 maxpacket: 32 [ 492.055058][ T943] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 492.056031][ T943] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 492.056057][ T943] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.056088][ T943] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 492.056129][ T943] usb 3-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 492.056158][ T943] usb 3-1: config 0 interface 0 has no altsetting 0 [ 492.057902][ T943] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 492.057942][ T943] usb 3-1: Product: syz [ 492.057957][ T943] usb 3-1: Manufacturer: syz [ 492.057973][ T943] usb 3-1: SerialNumber: syz [ 492.061432][ T943] usb 3-1: config 0 descriptor?? [ 492.164986][ T943] ldusb 3-1:0.0: Interrupt in endpoint not found [ 492.335032][ T9252] hub 8-0:1.0: USB hub found [ 492.335891][ T9252] hub 8-0:1.0: 1 port detected [ 492.729315][ T30] usb 3-1: USB disconnect, device number 20 [ 493.629688][ T9259] gadgetfs: bound to dummy_udc driver [ 493.918720][ T5600] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 493.957141][ C1] gadgetfs: connected [ 493.957503][ T5600] gadgetfs: disconnected [ 494.167915][ C1] gadgetfs: connected [ 494.306365][ T5600] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 494.354527][ T5600] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 494.354576][ T5600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.663636][ C1] gadgetfs: configuration #1 [ 496.101118][ T9265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.892'. [ 496.101171][ T9265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.892'. [ 496.101187][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 496.141896][ T9259] gadgetfs: suspended from state 3 [ 496.142093][ T5600] usb 1-1: can't set config #1, error -71 [ 496.143397][ T5600] usb 1-1: USB disconnect, device number 30 [ 496.145641][ T9259] gadgetfs: disconnected [ 497.387918][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 497.388316][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 497.654331][ T9278] md: could not open device unknown-block(1,0). [ 497.937523][ T9283] loop9: detected capacity change from 0 to 2640 [ 497.940227][ T9283] buffer_io_error: 11 callbacks suppressed [ 497.940261][ T9283] Buffer I/O error on dev loop9, logical block 0, async page read [ 497.940401][ T9283] Buffer I/O error on dev loop9, logical block 0, async page read [ 497.940542][ T9283] Buffer I/O error on dev loop9, logical block 0, async page read [ 497.940631][ T9283] Buffer I/O error on dev loop9, logical block 0, async page read [ 497.940656][ T9283] Buffer I/O error on dev loop9, logical block 0, async page read [ 497.940818][ T9283] Buffer I/O error on dev loop9, logical block 0, async page read [ 497.941008][ T9283] Buffer I/O error on dev loop9, logical block 0, async page read [ 497.941126][ T9283] Buffer I/O error on dev loop9, logical block 0, async page read [ 497.941170][ T9283] ldm_validate_partition_table(): Disk read failed. [ 497.941285][ T9283] Buffer I/O error on dev loop9, logical block 0, async page read [ 497.941415][ T9283] Buffer I/O error on dev loop9, logical block 0, async page read [ 497.941640][ T9283] Dev loop9: unable to read RDB block 0 [ 497.942387][ T9283] loop9: unable to read partition table [ 497.943099][ T9283] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 498.884659][ T9291] gadgetfs: bound to dummy_udc driver [ 499.175078][ T5600] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 499.175608][ C1] gadgetfs: connected [ 499.182026][ T5600] gadgetfs: disconnected [ 499.324338][ C1] gadgetfs: connected [ 499.332791][ T5600] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 499.353071][ T5600] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 499.353308][ T5600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.666352][ T9285] gadgetfs: suspended from state 3 [ 499.666433][ T9285] gadgetfs: disconnected [ 499.775213][ T5600] usb 1-1: can't set config #1, error -71 [ 499.901437][ T5600] usb 1-1: USB disconnect, device number 31 [ 503.921210][ T9317] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 505.391915][ T9326] gadgetfs: bound to dummy_udc driver [ 506.106174][ T9320] gadgetfs: suspended from state 2 [ 506.299559][ T5732] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 507.716170][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.911'. [ 507.821406][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 511.092155][ T9352] fuse: Bad value for 'rootmode' [ 517.054291][ T31] audit: type=1400 audit(1790330007.986:744): avc: denied { write } for pid=9371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.132741][ T9401] fuse: Bad value for 'rootmode' [ 517.341073][ T31] audit: type=1400 audit(1790330008.266:745): avc: denied { write } for pid=9405 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.073703][ T30] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 518.233524][ T30] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 518.246720][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.249863][ T30] usb 4-1: config 0 descriptor?? [ 518.514756][ T30] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 519.512060][ T30] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 519.512090][ T30] [drm] Initialized udl on minor 1 [ 519.514055][ T30] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 519.514351][ T30] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 519.516903][ T30] usb 4-1: USB disconnect, device number 21 [ 519.517868][ T5600] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 519.776038][ T31] audit: type=1400 audit(1790330010.706:746): avc: denied { write } for pid=9411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.731354][ T31] audit: type=1400 audit(1790330013.656:747): avc: denied { write } for pid=9441 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.307528][ T9455] fuse: Unknown parameter 'use00000000000000000000' [ 526.229189][ T31] audit: type=1400 audit(1790330017.156:748): avc: denied { write } for pid=9456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.359010][ T31] audit: type=1400 audit(1790330017.286:749): avc: denied { write } for pid=9478 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.215138][ T31] audit: type=1400 audit(1790330021.126:750): avc: denied { write } for pid=9489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.261383][ T9514] fuse: Unknown parameter 'use00000000000000000000' [ 530.397241][ T31] audit: type=1400 audit(1790330021.326:751): avc: denied { write } for pid=9517 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.851799][ T9532] gadgetfs: bound to dummy_udc driver [ 532.173883][ T30] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 532.174381][ C1] gadgetfs: connected [ 532.174852][ T30] gadgetfs: disconnected [ 532.414957][ C1] gadgetfs: connected [ 532.435412][ T30] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 532.689172][ T9528] gadgetfs: suspended from state 3 [ 532.689308][ T9528] gadgetfs: disconnected [ 532.733301][ T30] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 532.733363][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.785771][ T30] usb 1-1: can't set config #1, error -71 [ 532.789061][ T30] usb 1-1: USB disconnect, device number 33 [ 534.586196][ T30] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 534.744407][ T30] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 534.747056][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.747089][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.747118][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 534.747153][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.757764][ T30] usb 2-1: config 0 descriptor?? [ 535.190060][ T30] usbhid 2-1:0.0: can't add hid device: -71 [ 535.190197][ T30] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 535.221305][ T30] usb 2-1: USB disconnect, device number 9 [ 535.225606][ T5600] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 536.233670][ T5600] usb 4-1: Using ep0 maxpacket: 32 [ 536.234342][ T5600] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 536.314291][ T5600] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.314322][ T5600] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 536.314364][ T5600] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 536.314403][ T5600] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 536.314449][ T5600] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 536.314472][ T5600] usb 4-1: config 1 interface 1 has no altsetting 0 [ 536.316165][ T5600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.316190][ T5600] usb 4-1: Product: syz [ 536.316205][ T5600] usb 4-1: Manufacturer: syz [ 536.316220][ T5600] usb 4-1: SerialNumber: syz [ 536.683769][ T9560] fuse: Unknown parameter 'use00000000000000000000' [ 536.877437][ T9545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.894600][ T9545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.945727][ T9545] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 536.945761][ T9545] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 536.945859][ T9545] vhci_hcd vhci_hcd.0: Device attached [ 536.956778][ T9545] vhci_hcd vhci_hcd.0: port 0 already used [ 536.998013][ T9564] vhci_hcd: connection closed [ 537.001245][ T12] vhci_hcd vhci_hcd.3: stop threads [ 537.001280][ T12] vhci_hcd vhci_hcd.3: release socket [ 537.001318][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 537.087975][ T5600] usb 4-1: selecting invalid altsetting 0 [ 537.089088][ T5600] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 537.090355][ T5600] usb 4-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 537.187498][ T5600] usb 4-1: USB disconnect, device number 22 [ 537.289541][ T9213] udevd[9213]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.156610][ T9579] gadgetfs: bound to dummy_udc driver [ 538.413920][ T5732] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 538.414435][ C0] gadgetfs: connected [ 538.415538][ T5732] gadgetfs: disconnected [ 538.564315][ C0] gadgetfs: connected [ 538.570898][ T5732] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 538.577174][ T5732] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 538.578726][ T5732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.597813][ C0] gadgetfs: configuration #1 [ 539.037937][ T9577] gadgetfs: suspended from state 3 [ 539.038129][ T9577] gadgetfs: disconnected [ 539.047711][ T5732] usb 1-1: can't set config #1, error -71 [ 539.055373][ T5732] usb 1-1: USB disconnect, device number 34 [ 539.240731][ T9588] gadgetfs: bound to dummy_udc driver [ 542.240208][ T31] audit: type=1400 audit(1790330033.166:752): avc: denied { mount } for pid=9598 comm="syz.3.971" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 542.393420][ T31] audit: type=1400 audit(1790330033.316:753): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 542.455049][ T30] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 543.064610][ T30] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 543.065478][ T30] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 543.065495][ T30] usb 1-1: config 1 has no interface number 0 [ 543.065517][ T30] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 543.065533][ T30] usb 1-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 543.065548][ T30] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.068027][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.068050][ T30] usb 1-1: Product: syz [ 543.068064][ T30] usb 1-1: Manufacturer: syz [ 543.068078][ T30] usb 1-1: SerialNumber: syz [ 543.075061][ T9590] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 543.075165][ T9590] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 543.076817][ T30] usb 1-1: Expected 3 endpoints, found: 2 [ 544.023962][ T5716] usb 1-1: USB disconnect, device number 35 [ 546.514160][ T9633] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 547.475484][ T9637] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 547.815733][ T9631] gadgetfs: bound to dummy_udc driver [ 549.145913][ T9647] gadgetfs: bound to dummy_udc driver [ 549.413779][ T943] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 549.414277][ C1] gadgetfs: connected [ 549.414727][ T943] gadgetfs: disconnected [ 549.584313][ C1] gadgetfs: connected [ 549.591783][ T943] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 549.611814][ T943] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 549.613077][ T943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.822377][ C1] gadgetfs: configuration #1 [ 550.054635][ T9645] gadgetfs: suspended from state 3 [ 550.054775][ T9645] gadgetfs: disconnected [ 550.088964][ T943] usb 1-1: can't set config #1, error -71 [ 550.154214][ T943] usb 1-1: USB disconnect, device number 36 [ 551.253256][ T9650] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 551.473498][ T5702] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 556.143816][ T5702] usb 4-1: device descriptor read/64, error -71 [ 556.403944][ T5702] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 556.554982][ T5702] usb 4-1: Using ep0 maxpacket: 32 [ 556.557554][ T5702] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 556.565669][ T5702] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.565692][ T5702] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 556.565744][ T5702] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 556.565772][ T5702] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 556.565808][ T5702] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 556.565828][ T5702] usb 4-1: config 1 interface 1 has no altsetting 0 [ 556.591418][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.591446][ T5702] usb 4-1: Product: syz [ 556.591478][ T5702] usb 4-1: Manufacturer: syz [ 556.591493][ T5702] usb 4-1: SerialNumber: syz [ 557.619181][ T9672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.620817][ T9672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.654174][ T9679] gadgetfs: bound to dummy_udc driver [ 557.731762][ T9672] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 557.731796][ T9672] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 557.731867][ T9672] vhci_hcd vhci_hcd.0: Device attached [ 557.753543][ T9672] vhci_hcd vhci_hcd.0: port 0 already used [ 557.785247][ T9680] vhci_hcd: connection closed [ 557.786279][ T4006] vhci_hcd vhci_hcd.3: stop threads [ 557.786311][ T4006] vhci_hcd vhci_hcd.3: release socket [ 557.786323][ T4006] vhci_hcd vhci_hcd.3: disconnect device [ 557.890368][ T5702] usb 4-1: selecting invalid altsetting 0 [ 557.890782][ T5702] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 557.891162][ T5702] usb 4-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 558.834571][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 558.834629][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 559.347331][ T5702] usb 4-1: USB disconnect, device number 24 [ 559.507259][ T9213] udevd[9213]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.140747][ T9699] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 560.543750][ T9695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.999'. [ 560.543785][ T9695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.999'. [ 560.543802][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.999'. [ 561.818112][ T9702] gadgetfs: bound to dummy_udc driver [ 562.289491][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 563.002392][ T9719] gadgetfs: bound to dummy_udc driver [ 563.253868][ T10] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 563.254507][ C0] gadgetfs: connected [ 563.261125][ T10] gadgetfs: disconnected [ 563.417415][ C0] gadgetfs: connected [ 563.436134][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 563.441929][ T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 563.442305][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.591170][ C0] gadgetfs: configuration #1 [ 563.888913][ T9717] gadgetfs: suspended from state 3 [ 563.889098][ T9717] gadgetfs: disconnected [ 563.926853][ T10] usb 1-1: can't set config #1, error -71 [ 564.009532][ T10] usb 1-1: USB disconnect, device number 37 [ 571.613485][ T9778] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 572.122088][ T9778] ------------[ cut here ]------------ [ 572.122099][ T9778] timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist) [ 572.122106][ T9778] WARNING: kernel/rcu/srcutree.c:706 at cleanup_srcu_struct+0x6e4/0xb30, CPU#0: syz.3.1012/9778 [ 572.147162][ T9778] Modules linked in: [ 572.151052][ T9778] CPU: 0 UID: 0 PID: 9778 Comm: syz.3.1012 Not tainted syzkaller #0 PREEMPT(full) [ 572.160544][ T9778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 572.170713][ T9778] RIP: 0010:cleanup_srcu_struct+0x6e4/0xb30 [ 572.176652][ T9778] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f4 03 00 00 48 8b 83 e8 00 00 00 48 8d 93 80 01 00 00 48 85 c0 0f 84 a7 fc ff ff 90 <0f> 0b 90 48 8d 8b 00 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 [ 572.196464][ T9778] RSP: 0018:ffffc90003417d80 EFLAGS: 00010206 [ 572.202514][ T9778] RAX: 0000000000000003 RBX: ffffe8ffffc8b2c0 RCX: ffffc9000f1b3000 [ 572.210510][ T9778] RDX: ffffe8ffffc8b440 RSI: ffffffff81f6e0ff RDI: ffff888038674b00 [ 572.218486][ T9778] RBP: ffff88804fdce800 R08: 0000000000000005 R09: 00000000ffffffff [ 572.226474][ T9778] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807edb42f0 [ 572.234452][ T9778] R13: 0000000000000000 R14: ffffffff8e65b0b0 R15: ffff88807edb4330 [ 572.242401][ T9778] FS: 00007fa2607f96c0(0000) GS:ffff888123b52000(0000) knlGS:0000000000000000 [ 572.251346][ T9778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 572.258079][ T9778] CR2: 00007f5c1b58eb34 CR3: 0000000053ccd000 CR4: 00000000003526f0 [ 572.266111][ T9778] Call Trace: [ 572.269369][ T9778] [ 572.272278][ T9778] blk_mq_free_tag_set+0x354/0x550 [ 572.277418][ T9778] loop_control_ioctl+0x504/0x620 [ 572.282515][ T9778] ? __pfx_loop_control_ioctl+0x10/0x10 [ 572.288085][ T9778] ? selinux_file_ioctl+0x13b/0x290 [ 572.293261][ T9778] ? selinux_file_ioctl+0xb6/0x290 [ 572.298438][ T9778] ? __pfx_loop_control_ioctl+0x10/0x10 [ 572.303995][ T9778] __x64_sys_ioctl+0x18e/0x210 [ 572.308741][ T9778] do_syscall_64+0x123/0x790 [ 572.313308][ T9778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.319202][ T9778] RIP: 0033:0x7fa25f99e159 [ 572.323621][ T9778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.343232][ T9778] RSP: 002b:00007fa2607f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 572.351650][ T9778] RAX: ffffffffffffffda RBX: 00007fa25fc26090 RCX: 00007fa25f99e159 [ 572.359764][ T9778] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000007 [ 572.367732][ T9778] RBP: 00007fa25fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 572.375705][ T9778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.383734][ T9778] R13: 00007fa25fc26128 R14: 00007fa25fc26090 R15: 00007ffdfc5731c8 [ 572.392190][ T9778] [ 572.395220][ T9778] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 572.402481][ T9778] CPU: 0 UID: 0 PID: 9778 Comm: syz.3.1012 Not tainted syzkaller #0 PREEMPT(full) [ 572.411743][ T9778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 572.421780][ T9778] Call Trace: [ 572.425033][ T9778] [ 572.427950][ T9778] dump_stack_lvl+0x100/0x190 [ 572.432622][ T9778] vpanic+0x553/0x970 [ 572.436605][ T9778] ? __pfx_vpanic+0x10/0x10 [ 572.441086][ T9778] panic+0xd1/0xe0 [ 572.444779][ T9778] ? __pfx_panic+0x10/0x10 [ 572.449185][ T9778] check_panic_on_warn.cold+0x19/0x34 [ 572.454532][ T9778] ? cleanup_srcu_struct+0x6e4/0xb30 [ 572.459811][ T9778] __warn.cold+0x191/0x318 [ 572.464230][ T9778] __report_bug+0x30f/0x440 [ 572.468715][ T9778] ? cleanup_srcu_struct+0x6e4/0xb30 [ 572.473979][ T9778] ? __pfx___report_bug+0x10/0x10 [ 572.478984][ T9778] ? __pfx_debug_object_deactivate+0x10/0x10 [ 572.484953][ T9778] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 572.490303][ T9778] ? _raw_spin_lock_irqsave+0x52/0x60 [ 572.495653][ T9778] ? find_held_lock+0x2b/0x80 [ 572.500308][ T9778] ? cleanup_srcu_struct+0x6e4/0xb30 [ 572.505571][ T9778] report_bug+0xb3/0x220 [ 572.509804][ T9778] ? cleanup_srcu_struct+0x6e4/0xb30 [ 572.515071][ T9778] handle_bug+0x16a/0x2a0 [ 572.519374][ T9778] exc_invalid_op+0x17/0x50 [ 572.523855][ T9778] asm_exc_invalid_op+0x1a/0x20 [ 572.528680][ T9778] RIP: 0010:cleanup_srcu_struct+0x6e4/0xb30 [ 572.534559][ T9778] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f4 03 00 00 48 8b 83 e8 00 00 00 48 8d 93 80 01 00 00 48 85 c0 0f 84 a7 fc ff ff 90 <0f> 0b 90 48 8d 8b 00 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 [ 572.554149][ T9778] RSP: 0018:ffffc90003417d80 EFLAGS: 00010206 [ 572.560189][ T9778] RAX: 0000000000000003 RBX: ffffe8ffffc8b2c0 RCX: ffffc9000f1b3000 [ 572.568134][ T9778] RDX: ffffe8ffffc8b440 RSI: ffffffff81f6e0ff RDI: ffff888038674b00 [ 572.576082][ T9778] RBP: ffff88804fdce800 R08: 0000000000000005 R09: 00000000ffffffff [ 572.584025][ T9778] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807edb42f0 [ 572.591977][ T9778] R13: 0000000000000000 R14: ffffffff8e65b0b0 R15: ffff88807edb4330 [ 572.599944][ T9778] ? __timer_delete_sync+0x10f/0x1c0 [ 572.605235][ T9778] blk_mq_free_tag_set+0x354/0x550 [ 572.610344][ T9778] loop_control_ioctl+0x504/0x620 [ 572.615364][ T9778] ? __pfx_loop_control_ioctl+0x10/0x10 [ 572.620885][ T9778] ? selinux_file_ioctl+0x13b/0x290 [ 572.626059][ T9778] ? selinux_file_ioctl+0xb6/0x290 [ 572.631155][ T9778] ? __pfx_loop_control_ioctl+0x10/0x10 [ 572.636679][ T9778] __x64_sys_ioctl+0x18e/0x210 [ 572.641429][ T9778] do_syscall_64+0x123/0x790 [ 572.646008][ T9778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.651874][ T9778] RIP: 0033:0x7fa25f99e159 [ 572.656277][ T9778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.675871][ T9778] RSP: 002b:00007fa2607f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 572.684270][ T9778] RAX: ffffffffffffffda RBX: 00007fa25fc26090 RCX: 00007fa25f99e159 [ 572.692213][ T9778] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000007 [ 572.700156][ T9778] RBP: 00007fa25fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 572.708102][ T9778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.716047][ T9778] R13: 00007fa25fc26128 R14: 00007fa25fc26090 R15: 00007ffdfc5731c8 [ 572.724002][ T9778] [ 572.727262][ T9778] Kernel Offset: disabled [ 572.731569][ T9778] Rebooting in 86400 seconds..