last executing test programs: 11.262615211s ago: executing program 3 (id=3272): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x4040030) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f0000000240)={0x29, 0x7, 0xffffffd2}) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x1, 0x0, 0x1}, &(0x7f00000004c0)=[{}]) openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x4000010, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x44d7c000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x401c}, 0x40041) 9.948407168s ago: executing program 1 (id=3277): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}]) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 9.438608088s ago: executing program 3 (id=3278): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x2, 0x0}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000300)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x1, 0x800}, &(0x7f00000001c0)=0x90) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) 8.556150998s ago: executing program 3 (id=3283): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) memfd_create(&(0x7f0000000080)='\xff\x00l\x1e\xa00x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, 0x0, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r10, 0x0, 0x0, 0x1}}, 0x20) 6.216457258s ago: executing program 4 (id=3291): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x3ee8, &(0x7f0000000340)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000540), &(0x7f0000000240), &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e21, 0xd5a, @local, 0xfd}}, 0x0, 0x0, 0xf, 0x0, "4d3f6382f503e45972bf1ff945f922db42c4b0f0558d0aa5c914d99c2fade4820c7c5ab0a69a313666fdc72e99fd10b78f406f0d48fe7cd976b44ca80b4a6ffe8bf7a85ace270d4e4c26a05f75eb00c4"}, 0xd8) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r3, &(0x7f0000000180)='0\x00', 0x2) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5.849376342s ago: executing program 1 (id=3293): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 5.774442812s ago: executing program 4 (id=3294): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000009c0), 0x5b0, r2}, 0x38) 5.731015355s ago: executing program 1 (id=3295): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4006, r3, 0x0}]) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x34, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 5.402296641s ago: executing program 0 (id=3296): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0x10f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_open_dev$tty1(0xc, 0x4, 0x2) 4.822657767s ago: executing program 4 (id=3297): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x20000000000000ca, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24}, 0x94) socket$inet(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$video(0x0, 0xfffffffd, 0x10bd00) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5338, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x2, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x400001ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x400, 0x5], [0x391, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x108, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x8000, 0x4, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x3, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x7, 0x7, 0x100, 0x3, 0x8, 0x8001, 0xbf23, 0x7, 0x6, 0xa, 0xffffffff, 0x40004, 0x3, 0x6, 0x100fffe, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3a, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x7, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0xf, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x0, 0x135, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 4.747492369s ago: executing program 2 (id=3298): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000be850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.636091035s ago: executing program 2 (id=3299): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x240008d4}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c00010029bd7000fadbdf2507000000", @ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48088) 4.634982327s ago: executing program 4 (id=3300): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}]) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 4.457149754s ago: executing program 2 (id=3301): socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143902) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 4.399669616s ago: executing program 1 (id=3302): ioperm(0x3, 0x1, 0xfffffffffffffe01) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) 3.742732135s ago: executing program 3 (id=3303): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) socket$kcm(0x29, 0x7, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, 0x0, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r10, 0x0, 0x0, 0x1}}, 0x20) 3.055242012s ago: executing program 2 (id=3304): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x3ee8, &(0x7f0000000340)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000540), &(0x7f0000000240), &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e21, 0xd5a, @local, 0xfd}}, 0x0, 0x0, 0xf, 0x0, "4d3f6382f503e45972bf1ff945f922db42c4b0f0558d0aa5c914d99c2fade4820c7c5ab0a69a313666fdc72e99fd10b78f406f0d48fe7cd976b44ca80b4a6ffe8bf7a85ace270d4e4c26a05f75eb00c4"}, 0xd8) gettid() write$binfmt_format(0xffffffffffffffff, &(0x7f0000000180)='0\x00', 0x2) r2 = io_uring_setup(0x178f, &(0x7f0000000140)={0x0, 0x52c1, 0x1000, 0xfffffffe, 0xc}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) close_range(r2, 0xffffffffffffffff, 0x0) iopl(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.748644982s ago: executing program 1 (id=3305): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r0, &(0x7f0000000240)=""/164, 0x131, 0x131) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000300200000000000000000000040100800c0002000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d97"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_connect$midi(0x0, 0x32, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x0, 0x80, 0x4a, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, [@midi_out_jack={0x7, 0x24, 0x3, 0x1, 0x7, 0x0, [], 0x5}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}]}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x108, &(0x7f00000004c0)={0x5, 0xf, 0x108, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x88, 0x3, 0x0, 0x8, 0x4}, @generic={0xed, 0x10, 0x2, "7d5a2be8cace88774c3f082e30d2c041b7198936d202cbbf4c97c539dddc60180b9e24b51038e5690b82b21134391ae186a88e3bb965c68de094956b527ec87e5608a2f23b28959d355e13ea9b1fc46af873f2a04b8b00060fcd07b9ab1333ebe3256db7696f355170bbe3d46695d69898771df22709ffd8805f50ab4c8af66ce131296d01921f6c3b84b9fcc7cd176ab71eba7d90d3b8e010e66aca857c651438c81345fe320192959e02bd18b8395af396494a463a0a0231ffe2eae5ddac917e76eadb66b38300283d3625f056b0e2e0e28a8950d035b91e97db60ca06010c94dadb6c2ddc63e98217"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x32, 0x68, 0xfb, 0x7, 0xff}]}, 0x1, [{0x61, &(0x7f0000000600)=@string={0x61, 0x3, "fdc86a8eac6382881b3f6d38bb027182fc5cd18e27c8007329db800dae397ebe2468dd51889fb2bbcee4ca1bad8b1cf59301c7cd75521bcda9dcd5bc3f460aa24c2bed543360a7b3444c8cfb462acf9561477e4753429e00c2e1ae1039d0bf"}}]}) write(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ptrace$poke(0x4, 0x0, &(0x7f0000000300), 0xffffffc0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 2.695324206s ago: executing program 3 (id=3306): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x4040030) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f0000000240)={0x29, 0x7, 0xffffffd2}) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x1, 0x0, 0x1}, &(0x7f00000004c0)=[{}]) openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x4000010, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x44d7c000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x401c}, 0x40041) 2.584884501s ago: executing program 2 (id=3307): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x40000) shmget(0x3, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) socket$packet(0x11, 0x3, 0x300) msgget(0x3, 0x2) r1 = socket(0x1, 0x5, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0xe000200c}) 2.584392208s ago: executing program 0 (id=3308): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) 2.08835538s ago: executing program 4 (id=3309): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56", @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b187725", 0xd4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f90753"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c1", 0x23}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266", 0x13}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c", 0xf}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.641951396s ago: executing program 0 (id=3310): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000be850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 904.944372ms ago: executing program 0 (id=3311): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x240008d4}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c00010029bd7000fadbdf2507000000", @ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48088) 494.184833ms ago: executing program 0 (id=3312): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x7c, 0x1, 0x2, 0x6de30b4], 0x3332d000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x36b002, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x4, 0x0, 0x3}, {0xeeee0000, 0xc000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x9, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20, 0x0, 0x23}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x5}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0xffffffffffffffff, 0xfffffdffffffffff, 0xfffffffeffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 91.72417ms ago: executing program 2 (id=3313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000040)='sys\x00', 0x1ff) r3 = socket$netlink(0x10, 0x3, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys/bus/pci/devices/0000:00:04.0/config\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)='\x00\x00', 0x2, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x4}) r6 = syz_io_uring_setup(0x34, &(0x7f00000002c0)={0x0, 0x4000880e, 0x13100, 0x0, 0x4, 0x0, r5}, &(0x7f0000000280), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440), 0x1f) ioctl(r2, 0x4048aec9, &(0x7f0000000200)) 17.299364ms ago: executing program 4 (id=3314): socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143902) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 0s ago: executing program 3 (id=3315): ioperm(0x3, 0x1, 0xfffffffffffffe01) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) kernel console output (not intermixed with test programs): uetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 519.329968][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 519.339835][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 519.359830][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 519.368939][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 519.817556][T14127] syzkaller0: entered promiscuous mode [ 519.823810][T14127] syzkaller0: entered allmulticast mode [ 520.174323][T14138] syzkaller0: entered promiscuous mode [ 520.211172][T14138] syzkaller0: entered allmulticast mode [ 520.650388][ T10] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 520.865061][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 520.958076][ T10] usb 5-1: config 0 has no interfaces? [ 521.039918][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 521.107360][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 521.178292][ T10] usb 5-1: Product: syz [ 521.222591][ T10] usb 5-1: Manufacturer: syz [ 521.256155][ T10] usb 5-1: SerialNumber: syz [ 521.305476][T14103] lo speed is unknown, defaulting to 1000 [ 521.510201][ T5608] Bluetooth: hci0: command tx timeout [ 521.856324][ T10] usb 5-1: config 0 descriptor?? [ 522.300125][T14161] Invalid ELF header magic: != ELF [ 522.683539][ T29] audit: type=1400 audit(1786240073.141:3173): avc: denied { module_load } for pid=14154 comm="syz.0.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 522.842505][ T10] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 522.881991][ T10] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 523.148054][T14103] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.155441][T14103] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.163247][T14103] bridge_slave_0: entered allmulticast mode [ 523.172220][T14103] bridge_slave_0: entered promiscuous mode [ 523.182354][T14103] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.189686][T14103] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.197362][T14103] bridge_slave_1: entered allmulticast mode [ 523.205208][T14103] bridge_slave_1: entered promiscuous mode [ 523.230265][ T10] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 523.349136][T14103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.412214][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 523.472247][T14103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.490199][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 523.531348][ T50] usb 5-1: USB disconnect, device number 115 [ 523.572973][ T10] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 523.590554][ T5608] Bluetooth: hci0: command tx timeout [ 523.606121][ T10] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 523.651118][T14103] team0: Port device team_slave_0 added [ 523.659150][T14103] team0: Port device team_slave_1 added [ 523.664758][ T10] usb 3-1: config 14 has no interface number 0 [ 523.664780][ T10] usb 3-1: config 14 has no interface number 1 [ 523.664843][ T10] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 523.664870][ T10] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 523.664900][ T10] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 523.664928][ T10] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 523.664958][ T10] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 523.664987][ T10] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 523.665011][ T10] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.665041][ T10] usb 3-1: config 14 interface 57 has no altsetting 0 [ 523.665062][ T10] usb 3-1: config 14 interface 228 has no altsetting 0 [ 523.667124][ T10] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 523.747287][T14103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.873589][T14103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.901822][T14103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.914808][T14103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.924330][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.933439][ T10] usb 3-1: Product: syz [ 523.940539][T14103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.950131][ T10] usb 3-1: Manufacturer: syz [ 524.417840][ T10] usb 3-1: SerialNumber: syz [ 524.573003][T14103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.726793][T14103] hsr_slave_0: entered promiscuous mode [ 524.749984][T14103] hsr_slave_1: entered promiscuous mode [ 524.815326][T14217] syzkaller0: entered promiscuous mode [ 524.821826][T14217] syzkaller0: entered allmulticast mode [ 524.844774][ T10] legousbtower 3-1:14.57: interrupt endpoints not found [ 525.049698][ T10] legousbtower 3-1:14.228: get version request failed: -71 [ 525.094413][ T10] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 525.133970][ T10] usb 3-1: USB disconnect, device number 120 [ 525.200781][ T29] audit: type=1400 audit(1786240076.041:3174): avc: denied { write } for pid=14228 comm="syz.0.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 525.245310][T14231] syzkaller0: entered promiscuous mode [ 525.255427][T14231] syzkaller0: entered allmulticast mode [ 525.376915][T14103] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.539908][T14103] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.581722][T14237] syzkaller0: entered promiscuous mode [ 525.587319][T14237] syzkaller0: entered allmulticast mode [ 525.644834][T14103] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.660746][ T5608] Bluetooth: hci0: command tx timeout [ 527.750174][ T5608] Bluetooth: hci0: command tx timeout [ 529.110229][ T5706] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 529.288704][ T5706] usb 5-1: unable to get BOS descriptor or descriptor too short [ 529.312485][ T5706] usb 5-1: not running at top speed; connect to a high speed hub [ 529.329946][ T5706] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 529.354303][ T5706] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 529.363569][ T5706] usb 5-1: config 14 has no interface number 0 [ 529.387456][ T5706] usb 5-1: config 14 has no interface number 1 [ 529.393839][ T5706] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 529.404907][ T5706] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 529.416700][ T5706] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 529.429086][ T5706] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 529.440409][ T5706] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 529.451852][ T5706] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 529.461859][ T5706] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.475098][ T5706] usb 5-1: config 14 interface 57 has no altsetting 0 [ 529.481918][ T5706] usb 5-1: config 14 interface 228 has no altsetting 0 [ 529.519122][ T5706] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 529.528318][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.545257][ T5706] usb 5-1: Product: syz [ 529.549452][ T5706] usb 5-1: Manufacturer: syz [ 529.561997][ T5706] usb 5-1: SerialNumber: syz [ 529.996927][ T5706] legousbtower 5-1:14.57: interrupt endpoints not found [ 530.414540][ T5706] legousbtower 5-1:14.228: get version request failed: -32 [ 530.422721][ T5706] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -32 [ 530.657546][T14103] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.713305][T14301] loop9: detected capacity change from 0 to 2640 [ 530.721821][T14301] buffer_io_error: 10 callbacks suppressed [ 530.721836][T14301] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 530.742907][T14294] Buffer I/O error on dev loop9, logical block 74, async page read [ 530.770313][T14301] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 530.791855][T14301] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 530.835091][T14301] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 530.856271][T14301] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 530.880796][T14301] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 530.902119][T14301] Buffer I/O error on dev loop9, logical block 6, lost async page write [ 530.926180][T14301] Buffer I/O error on dev loop9, logical block 7, lost async page write [ 530.949309][T14301] Buffer I/O error on dev loop9, logical block 8, lost async page write [ 530.996353][ T29] audit: type=1326 audit(1786240081.841:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.2.2950" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faee559e019 code=0x0 [ 531.064366][T14103] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 531.089962][T14103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.121560][T14103] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 531.157347][T14103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.177110][T14103] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 531.208053][T14103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 531.225100][T14103] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 531.381362][ T29] audit: type=1804 audit(1786240082.201:3176): pid=14318 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2951" name="/newroot/606/file0" dev="tmpfs" ino=3187 res=1 errno=0 [ 532.289929][ T10] usb 5-1: USB disconnect, device number 116 [ 532.722375][T14103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 533.002617][ T29] audit: type=1400 audit(1786240083.851:3177): avc: denied { append } for pid=14330 comm="syz.0.2954" name="001" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 533.150528][T14103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.756511][T14103] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.964151][T10540] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.971308][T10540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.157090][T10322] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.164279][T10322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.206280][T14346] syzkaller0: entered promiscuous mode [ 534.214152][T14346] syzkaller0: entered allmulticast mode [ 534.230960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 534.260326][T14340] syzkaller0: entered promiscuous mode [ 534.275522][T14340] syzkaller0: entered allmulticast mode [ 534.313110][T14103] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 534.339378][T14103] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.479061][T14353] loop9: detected capacity change from 0 to 2640 [ 534.610921][ T5715] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 534.740274][ T5343] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 534.916589][ T5343] usb 3-1: unable to get BOS descriptor or descriptor too short [ 534.935306][ T5343] usb 3-1: not running at top speed; connect to a high speed hub [ 534.970265][ T5343] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 534.980752][ T5343] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 534.989330][ T5343] usb 3-1: config 14 has no interface number 0 [ 534.996097][ T5343] usb 3-1: config 14 has no interface number 1 [ 535.023509][ T5343] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 535.035343][ T5343] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 535.107301][ T5343] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 535.147264][ T5343] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 535.176627][ T5343] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 535.189589][ T5343] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 535.200139][ T5343] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 535.213425][ T5343] usb 3-1: config 14 interface 57 has no altsetting 0 [ 535.220327][ T5343] usb 3-1: config 14 interface 228 has no altsetting 0 [ 535.229780][ T5343] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 535.239971][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.303703][ T29] audit: type=1326 audit(1786240086.151:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.0.2965" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f785039e019 code=0x0 [ 535.331026][ T5343] usb 3-1: Product: syz [ 535.336562][ T5343] usb 3-1: Manufacturer: syz [ 535.342315][ T5343] usb 3-1: SerialNumber: syz [ 535.783150][ T5343] legousbtower 3-1:14.57: interrupt endpoints not found [ 536.183860][ T5343] legousbtower 3-1:14.228: get version request failed: -32 [ 536.210478][ T5343] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -32 [ 537.594455][ T5715] usb 2-1: unable to get BOS descriptor or descriptor too short [ 537.671851][ T5715] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 537.723730][ T5715] usb 2-1: can't read configurations, error -71 [ 537.936868][ T50] usb 3-1: USB disconnect, device number 121 [ 538.337925][ T29] audit: type=1400 audit(1786240089.101:3179): avc: denied { write } for pid=14377 comm="syz.2.2969" name="functions" dev="configfs" ino=34009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 538.677920][ T29] audit: type=1400 audit(1786240089.261:3180): avc: denied { write } for pid=14377 comm="syz.2.2969" name="functions" dev="configfs" ino=34009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 539.086209][ T29] audit: type=1400 audit(1786240089.271:3181): avc: denied { remove_name } for pid=14377 comm="syz.2.2969" name="obex.usb1" dev="configfs" ino=55417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 539.274250][ T29] audit: type=1400 audit(1786240089.271:3182): avc: denied { rmdir } for pid=14377 comm="syz.2.2969" name="obex.usb1" dev="configfs" ino=55417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 539.523543][T14411] loop9: detected capacity change from 0 to 2640 [ 539.544253][T14411] buffer_io_error: 22 callbacks suppressed [ 539.544271][T14411] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 539.552377][T14294] Buffer I/O error on dev loop9, logical block 74, async page read [ 539.559272][T14411] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 539.576111][T14411] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 539.585465][T14411] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 539.593993][T14411] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 539.602436][T14411] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 539.610819][T14411] Buffer I/O error on dev loop9, logical block 6, lost async page write [ 539.619166][T14411] Buffer I/O error on dev loop9, logical block 7, lost async page write [ 539.627688][T14411] Buffer I/O error on dev loop9, logical block 8, lost async page write [ 541.182830][ T29] audit: type=1326 audit(1786240092.031:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14422 comm="syz.4.2975" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79be79e019 code=0x0 [ 541.660339][ T5715] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 541.681888][ T5343] usb 2-1: new low-speed USB device number 94 using dummy_hcd [ 541.855751][ T5715] usb 3-1: unable to get BOS descriptor or descriptor too short [ 541.917280][ T5715] usb 3-1: not running at top speed; connect to a high speed hub [ 542.177018][ T5715] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 542.286853][ T5715] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 542.340723][ T5715] usb 3-1: config 14 has no interface number 0 [ 542.379030][ T5715] usb 3-1: config 14 has no interface number 1 [ 542.436967][ T5715] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 542.505039][ T5715] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 542.614343][ T5715] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 543.436317][ T5715] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 543.497977][ T5715] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 543.559765][ T5715] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 543.598363][ T5715] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.628371][ T5715] usb 3-1: config 14 interface 57 has no altsetting 0 [ 543.685579][ T5715] usb 3-1: config 14 interface 228 has no altsetting 0 [ 543.718642][ T5715] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 543.736177][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.745305][ T5715] usb 3-1: Product: syz [ 543.748420][T14103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.749901][ T5715] usb 3-1: Manufacturer: syz [ 543.762184][ T5715] usb 3-1: SerialNumber: syz [ 543.883207][T14103] veth0_vlan: entered promiscuous mode [ 543.921732][T14103] veth1_vlan: entered promiscuous mode [ 544.012636][T14103] veth0_macvtap: entered promiscuous mode [ 544.043098][T14103] veth1_macvtap: entered promiscuous mode [ 544.087970][T14103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.127139][T14103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.180077][T10322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.202829][T11601] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.213111][ T5715] legousbtower 3-1:14.57: interrupt endpoints not found [ 544.271842][ T8601] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.352359][T10355] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.466206][T10355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.487624][T10355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.552787][T10355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.570225][T10355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.613394][ T5715] legousbtower 3-1:14.228: get version request failed: -32 [ 544.640178][ T5715] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -32 [ 544.748988][ T5343] usb 2-1: unable to get BOS descriptor or descriptor too short [ 544.777735][ T5343] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 544.800328][ T5343] usb 2-1: can't read configurations, error -71 [ 545.091435][ T29] audit: type=1326 audit(1786240095.911:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14457 comm="syz.3.2905" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 545.139776][ T29] audit: type=1326 audit(1786240095.911:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14457 comm="syz.3.2905" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 545.423364][ T29] audit: type=1326 audit(1786240095.911:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14457 comm="syz.3.2905" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 545.498665][ T29] audit: type=1326 audit(1786240095.921:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14457 comm="syz.3.2905" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 545.566559][ T29] audit: type=1326 audit(1786240095.921:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14457 comm="syz.3.2905" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 545.619578][T14468] syzkaller0: entered promiscuous mode [ 545.625256][ T29] audit: type=1326 audit(1786240095.921:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14457 comm="syz.3.2905" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 545.652714][T14468] syzkaller0: entered allmulticast mode [ 545.735530][ T29] audit: type=1326 audit(1786240095.921:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14457 comm="syz.3.2905" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 545.781641][ T29] audit: type=1326 audit(1786240095.921:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14457 comm="syz.3.2905" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 545.893449][ T29] audit: type=1326 audit(1786240095.921:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14457 comm="syz.3.2905" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 546.001756][ T10] usb 3-1: USB disconnect, device number 122 [ 546.072280][ T29] audit: type=1326 audit(1786240095.921:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14457 comm="syz.3.2905" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 546.170074][ T805] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 546.334364][ T805] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 546.366650][ T805] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.428142][ T805] usb 5-1: config 0 has no interface number 0 [ 546.481142][ T805] usb 5-1: config 0 interface 205 has no altsetting 0 [ 546.534312][ T805] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 546.567278][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.586555][ T805] usb 5-1: Product: syz [ 546.596261][ T805] usb 5-1: Manufacturer: syz [ 546.605554][ T805] usb 5-1: SerialNumber: syz [ 546.632333][ T805] usb 5-1: config 0 descriptor?? [ 546.651039][ T805] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 546.668654][ T805] dvb-usb: bulk message failed: -22 (3/0) [ 546.705317][ T805] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 546.723190][ T805] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 546.740637][ T805] usb 5-1: media controller created [ 546.747834][ T805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 546.783891][ T805] dvb-usb: bulk message failed: -22 (6/0) [ 546.813760][ T805] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 546.865049][ T805] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input45 [ 546.914486][ T805] dvb-usb: schedule remote query interval to 150 msecs. [ 546.942222][ T805] dvb-usb: bulk message failed: -22 (3/0) [ 546.975270][ T805] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 547.108989][ T5715] dvb-usb: bulk message failed: -22 (1/0) [ 547.118817][ T5715] dvb-usb: error while querying for an remote control event. [ 547.291693][ T5715] dvb-usb: bulk message failed: -22 (1/0) [ 547.298800][ T5715] dvb-usb: error while querying for an remote control event. [ 547.467040][ T5715] dvb-usb: bulk message failed: -22 (1/0) [ 547.474076][ T5715] dvb-usb: error while querying for an remote control event. [ 547.644980][ T5715] dvb-usb: bulk message failed: -22 (1/0) [ 547.650920][ T5715] dvb-usb: error while querying for an remote control event. [ 547.852631][ T805] dvb-usb: bulk message failed: -22 (1/0) [ 547.911975][ T805] dvb-usb: error while querying for an remote control event. [ 547.952991][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 547.965897][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 547.974243][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 547.981956][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 547.989403][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 548.090268][ T805] dvb-usb: bulk message failed: -22 (1/0) [ 548.100568][ T805] dvb-usb: error while querying for an remote control event. [ 548.281204][ T805] dvb-usb: bulk message failed: -22 (1/0) [ 548.287869][ T805] dvb-usb: error while querying for an remote control event. [ 548.442319][ T5728] usb 5-1: USB disconnect, device number 117 [ 548.497651][ T5728] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 549.847355][ T5728] SELinux: failure in sel_netif_sid_slow(), invalid network interface (11) [ 550.078962][ T5608] Bluetooth: hci4: command tx timeout [ 550.567507][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 550.567533][ T29] audit: type=1326 audit(1786240101.361:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14511 comm="syz.4.2990" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79be79e019 code=0x0 [ 551.879756][T10355] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.144226][ T5608] Bluetooth: hci4: command tx timeout [ 552.150086][ T5728] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 552.300648][T10355] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.328371][T14499] lo speed is unknown, defaulting to 1000 [ 552.799880][ T29] audit: type=1326 audit(1786240103.241:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.1.2995" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6aa59e019 code=0x7ffc0000 [ 552.879191][ T29] audit: type=1326 audit(1786240103.241:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.1.2995" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6aa59e019 code=0x7ffc0000 [ 552.906124][ T29] audit: type=1326 audit(1786240103.241:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.1.2995" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc6aa59e019 code=0x7ffc0000 [ 552.932751][ T29] audit: type=1326 audit(1786240103.241:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.1.2995" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6aa59e019 code=0x7ffc0000 [ 553.028117][ T29] audit: type=1326 audit(1786240103.251:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.1.2995" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6aa59e019 code=0x7ffc0000 [ 553.065592][ T29] audit: type=1326 audit(1786240103.251:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.1.2995" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fc6aa59e019 code=0x7ffc0000 [ 553.180777][T10355] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.217843][ T29] audit: type=1326 audit(1786240103.251:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.1.2995" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6aa59e019 code=0x7ffc0000 [ 553.281260][ T29] audit: type=1326 audit(1786240103.251:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.1.2995" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6aa59e019 code=0x7ffc0000 [ 553.415958][ T29] audit: type=1326 audit(1786240103.251:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.1.2995" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6aa59e019 code=0x7ffc0000 [ 553.464617][T10355] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.811295][T14548] lo speed is unknown, defaulting to 1000 [ 553.817451][T14548] lo speed is unknown, defaulting to 1000 [ 554.009958][T14550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2997'. [ 554.230076][ T49] Bluetooth: hci4: command tx timeout [ 554.474990][T14548] lo speed is unknown, defaulting to 1000 [ 554.506458][T14548] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 554.521427][T14548] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 554.538711][T14548] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 554.648767][T14548] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 554.910462][T14553] syzkaller0: entered promiscuous mode [ 554.915963][T14553] syzkaller0: entered allmulticast mode [ 554.950291][ T49] Bluetooth: hci5: command 0x0406 tx timeout [ 555.051135][T14557] netlink: 'syz.1.2999': attribute type 1 has an invalid length. [ 555.077187][ T5728] usb 4-1: unable to get BOS descriptor or descriptor too short [ 555.098951][ T5728] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 555.119882][ T5728] usb 4-1: can't read configurations, error -71 [ 555.164239][T14557] bond1: entered promiscuous mode [ 555.171303][T14557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 556.300576][ T5608] Bluetooth: hci4: command tx timeout [ 556.385785][T14548] lo speed is unknown, defaulting to 1000 [ 556.599216][T14557] bond1: (slave bridge1): making interface the new active one [ 556.607689][T14557] bridge1: entered promiscuous mode [ 556.613995][T14557] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 556.628090][T14567] syzkaller0: entered promiscuous mode [ 556.635746][T14567] syzkaller0: entered allmulticast mode [ 556.691628][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 556.691644][ T29] audit: type=1400 audit(1786240107.541:3224): avc: denied { create } for pid=14571 comm="syz.1.3002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 556.731864][ T29] audit: type=1400 audit(1786240107.541:3225): avc: denied { setopt } for pid=14571 comm="syz.1.3002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 556.751591][ T29] audit: type=1400 audit(1786240107.541:3226): avc: denied { write } for pid=14571 comm="syz.1.3002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 556.771451][ T29] audit: type=1400 audit(1786240107.541:3227): avc: denied { read } for pid=14571 comm="syz.1.3002" path="socket:[55708]" dev="sockfs" ino=55708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 556.800083][T14548] lo speed is unknown, defaulting to 1000 [ 556.916634][T14548] lo speed is unknown, defaulting to 1000 [ 557.088124][T14548] lo speed is unknown, defaulting to 1000 [ 557.169889][ T29] audit: type=1326 audit(1786240108.001:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.3.3005" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 557.580757][T14548] lo speed is unknown, defaulting to 1000 [ 557.587184][T14499] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.596635][ T29] audit: type=1326 audit(1786240108.001:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.3.3005" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 557.610395][T14499] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.663026][T14499] bridge_slave_0: entered allmulticast mode [ 557.670991][ T29] audit: type=1326 audit(1786240108.001:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.3.3005" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 557.671214][T14499] bridge_slave_0: entered promiscuous mode [ 557.742104][ T29] audit: type=1326 audit(1786240108.001:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.3.3005" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 557.837094][ T29] audit: type=1326 audit(1786240108.001:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.3.3005" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 557.864366][T10355] bridge_slave_1: left allmulticast mode [ 557.872675][T10355] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.884067][ T29] audit: type=1326 audit(1786240108.011:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.3.3005" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 557.914528][T10355] bridge_slave_0: left allmulticast mode [ 557.920943][T10355] bridge_slave_0: left promiscuous mode [ 557.927647][T10355] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.273252][T10355] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 558.292167][T10355] bridge1 (unregistering): left promiscuous mode [ 558.317936][T10355] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 558.336217][T10355] bridge2 (unregistering): left promiscuous mode [ 558.349106][T10355] bridge2 (unregistering): left allmulticast mode [ 558.377095][T10355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.408026][T10355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.428625][T10355] bond0 (unregistering): (slave team0): Releasing backup interface [ 558.448146][T10355] bond0 (unregistering): Released all slaves [ 558.454587][ T5728] usb 4-1: new low-speed USB device number 114 using dummy_hcd [ 558.479392][T10355] bond1 (unregistering): Released all slaves [ 558.534970][T10355] bond2 (unregistering): Released all slaves [ 558.556478][T10355] bond3 (unregistering): Released all slaves [ 558.580582][T14548] lo speed is unknown, defaulting to 1000 [ 558.588715][T14499] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.618167][T14499] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.648868][ T5728] usb 4-1: unable to get BOS descriptor or descriptor too short [ 558.664087][T14499] bridge_slave_1: entered allmulticast mode [ 558.685910][ T5728] usb 4-1: config 2 has an invalid interface number: 8 but max is 0 [ 558.695263][T14499] bridge_slave_1: entered promiscuous mode [ 558.705472][ T5728] usb 4-1: config 2 has no interface number 0 [ 558.750985][ T5728] usb 4-1: config 2 interface 8 has no altsetting 0 [ 558.763525][T10355] tipc: Left network mode [ 558.770180][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 558.808100][T14548] lo speed is unknown, defaulting to 1000 [ 558.910985][T14499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.006476][T14499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.167991][T14618] i2c i2c-0: new_device: Instantiated device anx7411 at 0x2c [ 559.497545][T14617] syzkaller0: entered promiscuous mode [ 559.527780][T14617] syzkaller0: entered allmulticast mode [ 561.374439][ T5728] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 561.394103][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.453417][ T5728] usb 4-1: can't set config #2, error -71 [ 561.503756][ T5728] usb 4-1: USB disconnect, device number 114 [ 563.118613][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.127430][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.497768][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 563.497801][ T29] audit: type=1326 audit(1786240114.331:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.2.3018" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee559e019 code=0x7ffc0000 [ 563.563591][ T29] audit: type=1326 audit(1786240114.331:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.2.3018" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee559e019 code=0x7ffc0000 [ 563.614356][ T29] audit: type=1326 audit(1786240114.331:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.2.3018" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faee559e019 code=0x7ffc0000 [ 563.679916][ T29] audit: type=1326 audit(1786240114.341:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.2.3018" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee559e019 code=0x7ffc0000 [ 563.710216][ T29] audit: type=1326 audit(1786240114.341:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.2.3018" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee559e019 code=0x7ffc0000 [ 563.746765][ T29] audit: type=1326 audit(1786240114.341:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.2.3018" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7faee559e019 code=0x7ffc0000 [ 563.782167][ T29] audit: type=1326 audit(1786240114.341:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.2.3018" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee559e019 code=0x7ffc0000 [ 563.822639][ T29] audit: type=1326 audit(1786240114.341:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.2.3018" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee559e019 code=0x7ffc0000 [ 563.856720][ T29] audit: type=1326 audit(1786240114.341:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.2.3018" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7faee555e84e code=0x7ffc0000 [ 563.890088][ T29] audit: type=1326 audit(1786240114.341:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.2.3018" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee559e019 code=0x7ffc0000 [ 564.391611][ T5839] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 564.558374][T14499] team0: Port device team_slave_0 added [ 564.566036][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 564.577156][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 564.587244][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 564.607764][ T5839] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 564.619482][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.627754][ T5839] usb 3-1: Product: syz [ 564.632094][ T5839] usb 3-1: Manufacturer: syz [ 564.636726][ T5839] usb 3-1: SerialNumber: syz [ 564.637856][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 564.655901][ T5839] usb 3-1: config 0 descriptor?? [ 564.697830][T14499] team0: Port device team_slave_1 added [ 564.848883][T14499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.870877][ T5839] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 564.879022][T14499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.953846][T14499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.979418][T14499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.988431][T14499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.024224][T14499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.050819][T10355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.102472][T10355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.123955][T10355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.139868][T10355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.156318][ T5839] usb 3-1: USB disconnect, device number 123 [ 565.227276][T10355] veth1_macvtap: left promiscuous mode [ 565.245421][T10355] veth0_macvtap: left promiscuous mode [ 565.258519][T10355] veth1_vlan: left promiscuous mode [ 565.274417][T10355] veth0_vlan: left promiscuous mode [ 565.836066][T10355] team0 (unregistering): Port device team_slave_1 removed [ 565.868005][T10355] team0 (unregistering): Port device team_slave_0 removed [ 565.953322][T14725] Invalid ELF header magic: != ELF [ 566.982464][T14728] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd3": -EINTR [ 566.986755][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 567.215936][T14732] syzkaller0: entered promiscuous mode [ 567.221698][T14732] syzkaller0: entered allmulticast mode [ 567.241030][T14499] hsr_slave_0: entered promiscuous mode [ 567.256325][T14499] hsr_slave_1: entered promiscuous mode [ 567.288264][T14499] debugfs: 'hsr0' already exists in 'hsr' [ 567.311961][T14499] Cannot create hsr debugfs directory [ 567.402704][T14744] syzkaller0: entered promiscuous mode [ 568.092134][T14744] syzkaller0: entered allmulticast mode [ 568.348701][T14755] loop9: detected capacity change from 0 to 2640 [ 568.368183][T14755] buffer_io_error: 7 callbacks suppressed [ 568.368200][T14755] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 568.385672][T14294] Buffer I/O error on dev loop9, logical block 3, async page read [ 568.522889][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 568.522906][ T29] audit: type=1326 audit(1786240119.371:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14756 comm="syz.2.3034" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faee559e019 code=0x0 [ 569.101535][ T5343] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 569.271850][ T5343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.283002][ T5343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.293145][ T5343] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 569.307632][ T5343] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 569.317524][ T5343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.329213][ T5343] usb 3-1: config 0 descriptor?? [ 570.868705][T14764] ima: Unable to open file: /e (-2) [ 570.881315][ T29] audit: type=1400 audit(1786240121.671:3269): avc: denied { mount } for pid=14759 comm="syz.4.3035" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 571.347528][ T29] audit: type=1400 audit(1786240122.171:3270): avc: denied { write } for pid=14765 comm="syz.3.3036" name="h" dev="configfs" ino=35030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 571.492280][T14759] ima: policy update failed [ 571.517540][ T29] audit: type=1400 audit(1786240122.191:3271): avc: denied { write } for pid=14765 comm="syz.3.3036" name="h" dev="configfs" ino=35030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 571.551065][T14768] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 571.781632][ T29] audit: type=1802 audit(1786240122.341:3272): pid=14759 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.4.3035" res=0 errno=0 [ 571.827943][T10355] IPVS: stop unused estimator thread 0... [ 571.845272][ T5343] usbhid 3-1:0.0: can't add hid device: -71 [ 571.860741][ T5343] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 572.187601][ T5343] usb 3-1: USB disconnect, device number 124 [ 572.244801][ T29] audit: type=1400 audit(1786240123.091:3273): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 572.804267][T14793] 9pnet_virtio: no channels available for device syz [ 572.838148][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3039'. [ 573.874712][T14804] overlayfs: missing 'workdir' [ 574.266216][T14808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3042'. [ 576.476504][T14790] bond0: (slave bond_slave_1): Releasing backup interface [ 576.528295][T14790] bond_slave_1 (unregistering): left promiscuous mode [ 576.586998][ T29] audit: type=1400 audit(1786240127.411:3274): avc: denied { write } for pid=14771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.707933][ T29] audit: type=1400 audit(1786240127.551:3275): avc: denied { write } for pid=14819 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.863841][T14825] syzkaller0: entered promiscuous mode [ 576.875871][T14825] syzkaller0: entered allmulticast mode [ 577.767407][T14838] syzkaller0: entered promiscuous mode [ 578.231080][ T29] audit: type=1400 audit(1786240128.641:3276): avc: denied { write } for pid=14839 comm="syz.2.3047" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 578.263555][T14838] syzkaller0: entered allmulticast mode [ 578.458000][ T29] audit: type=1400 audit(1786240128.651:3277): avc: denied { open } for pid=14839 comm="syz.2.3047" path="/529/tracing/events/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 579.221603][ T29] audit: type=1400 audit(1786240130.071:3278): avc: denied { write } for pid=14851 comm="syz.4.3050" name="h" dev="configfs" ino=35030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 579.266490][ T29] audit: type=1400 audit(1786240130.071:3279): avc: denied { write } for pid=14851 comm="syz.4.3050" name="h" dev="configfs" ino=35030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 579.328483][ T29] audit: type=1400 audit(1786240130.111:3280): avc: denied { write } for pid=14832 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.374029][ T29] audit: type=1400 audit(1786240130.221:3281): avc: denied { write } for pid=14859 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.462177][ T5839] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 579.621407][ T5839] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 580.372257][ T5839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.393311][ T5839] usb 4-1: config 0 has no interface number 0 [ 580.400812][ T5839] usb 4-1: config 0 interface 205 has no altsetting 0 [ 580.417606][T14499] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 580.460246][ T5839] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 580.470373][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.472142][T14499] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 580.478422][ T5839] usb 4-1: Product: syz [ 580.489671][ T5839] usb 4-1: Manufacturer: syz [ 580.495426][ T5839] usb 4-1: SerialNumber: syz [ 580.526071][ T5839] usb 4-1: config 0 descriptor?? [ 580.546555][T14499] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 580.593277][T14499] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 580.599605][ T5839] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 580.625212][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 580.649866][T14499] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 580.671542][ T5839] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 580.713047][ T5839] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 580.741241][T14499] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 580.745336][ T5839] usb 4-1: media controller created [ 580.766869][T14884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3055'. [ 580.777192][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 580.782490][T14499] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 580.890069][ T5806] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 581.015899][T14499] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 581.034176][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 581.038315][ T29] audit: type=1400 audit(1786240131.851:3282): avc: denied { sys_module } for pid=14878 comm="syz.4.3055" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 581.054192][ T5839] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 581.079740][ T5839] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input46 [ 581.117757][ T5839] dvb-usb: schedule remote query interval to 150 msecs. [ 581.131655][ T5806] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 581.139246][ T29] audit: type=1400 audit(1786240131.981:3283): avc: denied { write } for pid=14861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 581.148337][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 581.169309][ T5806] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 581.185069][ T5806] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 581.353284][T14889] syzkaller0: entered promiscuous mode [ 581.381063][T14889] syzkaller0: entered allmulticast mode [ 582.238059][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 582.243948][ T10] dvb-usb: error while querying for an remote control event. [ 582.315394][ T29] audit: type=1326 audit(1786240133.091:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.4.3057" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79be79e019 code=0x0 [ 582.563959][ T5839] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 582.585074][ T5806] usb 3-1: config 220 has no interface number 2 [ 582.943372][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 583.024875][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 583.035078][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 583.045164][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 583.103848][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 583.113993][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 583.124073][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 583.192988][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 583.203119][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 583.264853][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 583.290166][ T5806] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 583.307940][ T5806] usb 3-1: config 220 interface 0 has no altsetting 0 [ 583.315879][ T5806] usb 3-1: config 220 interface 76 has no altsetting 0 [ 583.322856][ T5806] usb 3-1: config 220 interface 1 has no altsetting 0 [ 583.332378][ T5806] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 583.333112][ T29] audit: type=1400 audit(1786240134.181:3285): avc: denied { write } for pid=14907 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 583.341620][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.371757][ T5806] usb 3-1: Product: syz [ 583.375949][ T5806] usb 3-1: Manufacturer: syz [ 583.383246][ T5806] usb 3-1: SerialNumber: syz [ 583.428481][T14499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.450098][ T5839] dvb-usb: bulk message failed: -22 (1/0) [ 583.466637][T14499] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.521674][ T29] audit: type=1804 audit(1786240134.361:3286): pid=14913 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3058" name="/newroot/106/file0" dev="tmpfs" ino=588 res=1 errno=0 [ 583.560951][T10713] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.568151][T10713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.851008][T10713] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.858181][T10713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.774797][ T5839] dvb-usb: error while querying for an remote control event. [ 584.895355][ T5806] usb 3-1: selecting invalid altsetting 0 [ 584.917589][ T5806] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 584.925047][ T5806] uvcvideo 3-1:220.0: No valid video chain found. [ 584.932104][ T5806] usb 3-1: selecting invalid altsetting 0 [ 584.938854][ T5806] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 584.950864][ T5806] usb 3-1: USB disconnect, device number 125 [ 585.024141][ T5343] usb 4-1: USB disconnect, device number 115 [ 585.099627][ T29] audit: type=1400 audit(1786240135.941:3287): avc: denied { create } for pid=14919 comm="syz.3.3061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 585.154144][ T5343] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 585.258781][T14918] syzkaller0: entered promiscuous mode [ 585.289210][T14918] syzkaller0: entered allmulticast mode [ 585.313352][ T29] audit: type=1400 audit(1786240136.161:3288): avc: denied { bind } for pid=14919 comm="syz.3.3061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 585.480948][ T29] audit: type=1400 audit(1786240136.181:3289): avc: denied { connect } for pid=14919 comm="syz.3.3061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 585.664438][ T29] audit: type=1400 audit(1786240136.181:3290): avc: denied { write } for pid=14919 comm="syz.3.3061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 586.250654][ T29] audit: type=1400 audit(1786240137.091:3291): avc: denied { write } for pid=14929 comm="syz.4.3062" name="h" dev="configfs" ino=35030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 586.517545][ T29] audit: type=1400 audit(1786240137.121:3292): avc: denied { write } for pid=14929 comm="syz.4.3062" name="h" dev="configfs" ino=35030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 587.898013][T14951] syzkaller0: entered promiscuous mode [ 587.938826][T14951] syzkaller0: entered allmulticast mode [ 588.170085][ T5343] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 588.201451][ T29] audit: type=1804 audit(1786240139.031:3293): pid=14963 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.3069" name="/newroot/585/file0" dev="tmpfs" ino=3061 res=1 errno=0 [ 589.085153][T14969] input: syz0 as /devices/virtual/input/input47 [ 589.091829][ T29] audit: type=1400 audit(1786240139.931:3294): avc: denied { write } for pid=14934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 589.184992][ T29] audit: type=1400 audit(1786240140.001:3295): avc: denied { write } for pid=14973 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 589.246715][ T5343] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 589.261613][ T29] audit: type=1326 audit(1786240140.021:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14967 comm="syz.3.3071" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19ef19e019 code=0x0 [ 589.280026][ T5343] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 589.350823][ T5343] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 589.366701][T14499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.390991][ T5343] usb 3-1: config 220 has no interface number 2 [ 589.412872][ T5343] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 589.460721][ T5343] usb 3-1: config 220 interface 0 has no altsetting 0 [ 589.479531][T14499] veth0_vlan: entered promiscuous mode [ 589.485830][ T5343] usb 3-1: config 220 interface 76 has no altsetting 0 [ 589.505977][ T5343] usb 3-1: config 220 interface 1 has no altsetting 0 [ 589.526078][T14499] veth1_vlan: entered promiscuous mode [ 589.538219][ T5343] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 589.558035][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.584766][T14989] syzkaller0: entered promiscuous mode [ 589.588355][ T5343] usb 3-1: Product: syz [ 589.599342][ T5343] usb 3-1: Manufacturer: syz [ 589.604176][T14989] syzkaller0: entered allmulticast mode [ 589.608580][ T5343] usb 3-1: SerialNumber: syz [ 589.710136][T14499] veth0_macvtap: entered promiscuous mode [ 589.735047][T14499] veth1_macvtap: entered promiscuous mode [ 589.738578][ T29] audit: type=1400 audit(1786240140.581:3297): avc: denied { write } for pid=14991 comm="syz.1.3075" name="h" dev="configfs" ino=35030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 589.796685][T14499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.802281][ T29] audit: type=1400 audit(1786240140.611:3298): avc: denied { write } for pid=14991 comm="syz.1.3075" name="h" dev="configfs" ino=35030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 589.837678][T14499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.855209][ T29] audit: type=1400 audit(1786240140.701:3299): avc: denied { create } for pid=14999 comm="syz.4.3076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 589.918938][ T29] audit: type=1400 audit(1786240140.761:3300): avc: denied { write } for pid=14978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 590.025341][ T5343] usb 3-1: selecting invalid altsetting 0 [ 590.033311][ T5343] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 590.049510][ T5343] uvcvideo 3-1:220.0: No valid video chain found. [ 590.068824][ T5343] usb 3-1: selecting invalid altsetting 0 [ 590.070807][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.076688][ T5343] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 590.114798][ T5343] usb 3-1: USB disconnect, device number 126 [ 590.249836][ T29] audit: type=1400 audit(1786240140.003:3301): avc: denied { create } for pid=14999 comm="syz.4.3076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 590.543766][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.617478][T10355] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.659963][T10355] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.761135][T11606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.788760][T11606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.800923][ T29] audit: type=1400 audit(1786240140.653:3302): avc: denied { write } for pid=15005 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 590.912675][T11606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.946084][T11606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.032735][T15014] syzkaller0: entered promiscuous mode [ 591.050086][T15014] syzkaller0: entered allmulticast mode [ 594.102246][T15043] syzkaller0: entered promiscuous mode [ 594.112103][T15043] syzkaller0: entered allmulticast mode [ 594.118521][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 594.118535][ T29] audit: type=1400 audit(1786240143.963:3304): avc: denied { write } for pid=15015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 594.274046][ T29] audit: type=1400 audit(1786240144.123:3305): avc: denied { write } for pid=15047 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 594.297395][ T5343] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 594.313378][ T29] audit: type=1400 audit(1786240144.163:3306): avc: denied { write } for pid=15048 comm="syz.0.3086" name="h" dev="configfs" ino=35030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 594.515886][ T29] audit: type=1400 audit(1786240144.163:3307): avc: denied { write } for pid=15048 comm="syz.0.3086" name="h" dev="configfs" ino=35030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 594.590236][ T5343] usb 3-1: Using ep0 maxpacket: 16 [ 594.605452][ T5343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 594.622501][ T5343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 594.659060][ T5343] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 594.670620][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.679177][ T5343] usb 3-1: Product: syz [ 594.686116][ T5343] usb 3-1: Manufacturer: syz [ 594.692312][ T5343] usb 3-1: SerialNumber: syz [ 594.787795][ T5343] usb 3-1: config 0 descriptor?? [ 594.817594][ T5343] hub 3-1:0.0: bad descriptor, ignoring hub [ 594.851784][ T5343] hub 3-1:0.0: probe with driver hub failed with error -5 [ 594.989156][ T5343] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 595.083832][ T5343] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 595.121421][ T5728] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 595.187714][T15070] syzkaller0: entered promiscuous mode [ 595.193352][T15070] syzkaller0: entered allmulticast mode [ 595.321761][ T5728] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 595.330327][ T5728] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 595.339212][ T5728] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 595.350515][ T5728] usb 5-1: config 220 has no interface number 2 [ 595.356891][ T5728] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 595.371516][ T5728] usb 5-1: config 220 interface 0 has no altsetting 0 [ 595.379967][ T5728] usb 5-1: config 220 interface 76 has no altsetting 0 [ 595.388249][ T5728] usb 5-1: config 220 interface 1 has no altsetting 0 [ 595.399469][ T5728] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 595.409025][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.417830][ T5728] usb 5-1: Product: syz [ 595.422704][ T5728] usb 5-1: Manufacturer: syz [ 595.427328][ T5728] usb 5-1: SerialNumber: syz [ 595.490108][ T50] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 595.517280][ T5343] usb 3-1: USB disconnect, device number 127 [ 595.534228][T15071] udevd[15071]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 595.660490][ T50] usb 2-1: Using ep0 maxpacket: 16 [ 596.003310][ T50] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 596.006428][ T5728] usb 5-1: selecting invalid altsetting 0 [ 596.013732][ T50] usb 2-1: config 0 has no interface number 0 [ 596.024133][ T50] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 596.036532][ T5728] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 596.058930][ T50] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 596.065327][ T5728] uvcvideo 5-1:220.0: No valid video chain found. [ 596.084919][ T50] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 596.095153][ T50] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 596.099052][ T5728] usb 5-1: selecting invalid altsetting 0 [ 596.104227][ T50] usb 2-1: Product: syz [ 596.113050][ T5728] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 596.113931][ T50] usb 2-1: SerialNumber: syz [ 596.125793][ T5728] usb 5-1: USB disconnect, device number 118 [ 596.157722][ T50] usb 2-1: config 0 descriptor?? [ 596.171313][ T50] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 596.186053][ T50] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input48 [ 596.216607][T15081] 9pnet_virtio: no channels available for device syz [ 596.320074][ T5343] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 596.561431][ T5343] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 596.642376][ T5343] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.748179][ T5343] usb 3-1: config 0 has no interface number 0 [ 596.815851][ T5343] usb 3-1: config 0 interface 205 has no altsetting 0 [ 596.871060][T15068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.967433][T15068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.027918][ T5343] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 597.114590][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.183662][ T5343] usb 3-1: Product: syz [ 597.221465][ T5343] usb 3-1: Manufacturer: syz [ 597.273201][ T5343] usb 3-1: SerialNumber: syz [ 597.334004][ T5608] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 597.565513][ T5343] usb 3-1: config 0 descriptor?? [ 597.774761][ T5343] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 598.013961][ T29] audit: type=1804 audit(1786240146.642:3308): pid=15094 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.3097" name="/newroot/592/file0" dev="tmpfs" ino=3098 res=1 errno=0 [ 600.316127][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 600.325135][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 600.332272][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 600.339442][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 600.346641][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 600.353753][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 600.360905][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 600.367981][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 600.375074][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 600.382145][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 600.416443][ T5712] usb 2-1: USB disconnect, device number 96 [ 600.422425][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 600.476487][ T5343] dvb-usb: bulk message failed: -22 (3/0) [ 600.505426][ T5343] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 600.520026][ T5712] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 600.555313][ T5343] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 600.569315][ T5343] usb 3-1: media controller created [ 600.575871][ T5343] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 600.601759][ T5343] dvb-usb: bulk message failed: -22 (6/0) [ 600.607578][ T5343] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 600.623722][ T5343] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input49 [ 600.646978][ T5343] dvb-usb: schedule remote query interval to 150 msecs. [ 600.657482][ T5343] dvb-usb: bulk message failed: -22 (3/0) [ 600.712315][T15104] input: syz0 as /devices/virtual/input/input50 [ 600.786992][ T5343] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 600.852564][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 600.925732][T15088] syzkaller0: entered promiscuous mode [ 600.989752][ T50] dvb-usb: error while querying for an remote control event. [ 601.024406][T15088] syzkaller0: entered allmulticast mode [ 601.228636][ T5343] usb 3-1: USB disconnect, device number 2 [ 601.270297][ T5712] dvb-usb: bulk message failed: -22 (1/0) [ 601.366394][ T5712] dvb-usb: error while querying for an remote control event. [ 601.680754][ T50] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 602.220282][ T50] usb 2-1: Using ep0 maxpacket: 16 [ 602.324057][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 602.500888][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 602.529625][ T5343] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 602.588167][ T50] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 602.627631][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.657698][ T50] usb 2-1: Product: syz [ 602.674093][ T50] usb 2-1: Manufacturer: syz [ 602.710499][ T50] usb 2-1: SerialNumber: syz [ 602.734279][ T50] usb 2-1: config 0 descriptor?? [ 602.766611][ T50] hub 2-1:0.0: bad descriptor, ignoring hub [ 602.804332][ T50] hub 2-1:0.0: probe with driver hub failed with error -5 [ 602.860404][ T50] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 603.034339][ T50] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 603.070304][ T5839] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 603.070590][ T50] usb 2-1: USB disconnect, device number 97 [ 603.156706][T14476] udevd[14476]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 603.263502][ T5839] usb 5-1: config 0 has no interfaces? [ 603.291113][ T5839] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 603.300240][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.308255][ T5839] usb 5-1: Product: syz [ 603.321643][ T5839] usb 5-1: Manufacturer: syz [ 603.326281][ T5839] usb 5-1: SerialNumber: syz [ 603.345126][ T5839] usb 5-1: config 0 descriptor?? [ 603.656815][ T5706] usb 5-1: USB disconnect, device number 119 [ 604.759651][T15134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 605.024106][ T5839] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 605.193343][ T5839] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 605.221852][ T5839] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 605.253380][ T5839] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 605.290307][ T5839] usb 5-1: config 220 has no interface number 2 [ 605.311270][ T5839] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 605.362961][ T5839] usb 5-1: config 220 interface 0 has no altsetting 0 [ 605.386400][ T5839] usb 5-1: config 220 interface 76 has no altsetting 0 [ 605.413847][ T5839] usb 5-1: config 220 interface 1 has no altsetting 0 [ 605.447989][ T5839] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 605.474622][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.496884][ T5839] usb 5-1: Product: syz [ 605.524289][ T5839] usb 5-1: Manufacturer: syz [ 605.547365][ T5839] usb 5-1: SerialNumber: syz [ 605.812636][ T5839] usb 5-1: selecting invalid altsetting 0 [ 605.850451][ T5839] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 605.857843][ T5806] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 605.896629][ T5839] uvcvideo 5-1:220.0: No valid video chain found. [ 605.939442][ T5839] usb 5-1: selecting invalid altsetting 0 [ 605.952060][ T5839] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 605.995531][ T5839] usb 5-1: USB disconnect, device number 120 [ 606.033230][ T5806] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 606.052625][ T5806] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.076578][ T5806] usb 1-1: config 0 has no interface number 0 [ 606.083239][ T5806] usb 1-1: config 0 interface 205 has no altsetting 0 [ 606.133564][ T5806] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 606.153360][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.161987][ T5806] usb 1-1: Product: syz [ 606.166723][ T5806] usb 1-1: Manufacturer: syz [ 606.175019][ T5806] usb 1-1: SerialNumber: syz [ 606.190296][ T5806] usb 1-1: config 0 descriptor?? [ 606.199233][ T5806] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 606.212452][ T5806] dvb-usb: bulk message failed: -22 (3/0) [ 606.293986][ T5806] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 606.307959][ T5806] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 606.338308][ T5806] usb 1-1: media controller created [ 606.354617][ T5806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 608.402238][ T5806] dvb-usb: bulk message failed: -22 (6/0) [ 608.408124][ T5806] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 608.427658][ T5806] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input51 [ 608.444062][ T5806] dvb-usb: schedule remote query interval to 150 msecs. [ 608.451123][ T5806] dvb-usb: bulk message failed: -22 (3/0) [ 608.470167][ T5806] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 608.591495][ T29] audit: type=1804 audit(1786240157.432:3309): pid=15146 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.3111" name="/newroot/597/file0" dev="tmpfs" ino=3125 res=1 errno=0 [ 608.617452][ T5728] dvb-usb: bulk message failed: -22 (1/0) [ 608.628572][ T5806] usb 1-1: USB disconnect, device number 8 [ 608.658459][ T5728] dvb-usb: error while querying for an remote control event. [ 608.695541][ T5806] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 608.955721][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3112'. [ 609.507177][ T5712] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 609.763372][ T5712] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 609.818567][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.855946][ T5712] usb 5-1: Product: syz [ 609.870614][ T5712] usb 5-1: Manufacturer: syz [ 609.885261][ T5712] usb 5-1: SerialNumber: syz [ 610.210869][ T5343] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 610.419846][ T29] audit: type=1400 audit(1786240159.262:3310): avc: denied { write } for pid=15162 comm="syz.2.3116" name="cluster" dev="configfs" ino=1161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 610.449036][ T29] audit: type=1400 audit(1786240159.292:3311): avc: denied { write } for pid=15162 comm="syz.2.3116" name="heartbeat" dev="configfs" ino=58647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 610.494148][ T29] audit: type=1400 audit(1786240159.332:3312): avc: denied { mounton } for pid=15162 comm="syz.2.3116" path="mnt:[4026532790]" dev="nsfs" ino=4026532790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 610.532062][T15151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.557697][T15151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.572395][T15151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.588722][T15151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.601976][ T5706] usb 5-1: USB disconnect, device number 121 [ 610.610104][ T5712] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 610.861811][ T5712] usb 4-1: Using ep0 maxpacket: 16 [ 610.877197][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 610.920311][ T50] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 611.050970][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 611.193475][ T50] usb 3-1: config 0 has no interfaces? [ 611.216609][ T5712] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 611.249918][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.255327][T15173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 611.259267][ T50] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 611.274185][ T5343] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 611.281220][ T5712] usb 4-1: Product: syz [ 611.287338][ T5343] ath9k_htc: Failed to initialize the device [ 611.293497][ T5712] usb 4-1: Manufacturer: syz [ 611.298194][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.306299][ T5712] usb 4-1: SerialNumber: syz [ 611.312807][ T5706] usb 5-1: ath9k_htc: USB layer deinitialized [ 611.314322][ T50] usb 3-1: Product: syz [ 611.323764][ T50] usb 3-1: Manufacturer: syz [ 611.328449][ T50] usb 3-1: SerialNumber: syz [ 611.334149][ T5712] usb 4-1: config 0 descriptor?? [ 611.344391][ T5712] hub 4-1:0.0: bad descriptor, ignoring hub [ 611.350427][ T5712] hub 4-1:0.0: probe with driver hub failed with error -5 [ 611.360345][ T50] usb 3-1: config 0 descriptor?? [ 611.369738][ T5712] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 611.428285][ T5712] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 611.465249][T14476] udevd[14476]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 611.511425][ T5839] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 611.592144][ T5806] usb 3-1: USB disconnect, device number 3 [ 611.660392][ T5706] usb 4-1: USB disconnect, device number 116 [ 611.673502][ T5839] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 611.684683][ T5839] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 611.694000][ T5839] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 611.704539][ T5839] usb 1-1: config 220 has no interface number 2 [ 611.711740][ T5839] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 611.724955][ T5839] usb 1-1: config 220 interface 0 has no altsetting 0 [ 611.732166][ T5839] usb 1-1: config 220 interface 76 has no altsetting 0 [ 611.741372][ T5839] usb 1-1: config 220 interface 1 has no altsetting 0 [ 611.765043][ T5839] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 611.774538][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.783054][ T5839] usb 1-1: Product: syz [ 611.787892][ T5839] usb 1-1: Manufacturer: syz [ 611.794039][ T5839] usb 1-1: SerialNumber: syz [ 612.014388][ T5839] usb 1-1: selecting invalid altsetting 0 [ 612.021680][ T5839] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 612.041075][ T5839] uvcvideo 1-1:220.0: No valid video chain found. [ 612.054333][ T5839] usb 1-1: selecting invalid altsetting 0 [ 612.062056][ T5839] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 612.079370][ T5839] usb 1-1: USB disconnect, device number 9 [ 612.811046][ T29] audit: type=1326 audit(1786240161.252:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.3.3123" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 612.890501][ T29] audit: type=1326 audit(1786240161.252:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.3.3123" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 612.931844][ T5839] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 612.974364][ T29] audit: type=1326 audit(1786240161.252:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.3.3123" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 613.127653][ T29] audit: type=1326 audit(1786240161.252:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.3.3123" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 613.173592][ T5839] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 613.173622][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.185220][T15189] syzkaller0: entered promiscuous mode [ 613.200072][ T29] audit: type=1326 audit(1786240161.262:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.3.3123" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 613.238236][T15189] syzkaller0: entered allmulticast mode [ 613.264362][ T5839] usb 3-1: config 0 has no interface number 0 [ 613.274550][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 613.288291][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 613.298648][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 613.306582][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 613.316242][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 613.348492][ T5839] usb 3-1: config 0 interface 205 has no altsetting 0 [ 613.368345][ T5839] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 613.379679][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.385921][ T29] audit: type=1326 audit(1786240161.262:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15180 comm="syz.3.3123" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19ef19e019 code=0x7ffc0000 [ 613.397883][ T5839] usb 3-1: Product: syz [ 613.451154][ T5839] usb 3-1: Manufacturer: syz [ 613.455827][ T5839] usb 3-1: SerialNumber: syz [ 613.490315][ T5839] usb 3-1: config 0 descriptor?? [ 613.507563][ T5839] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 613.532282][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 613.553144][ T5614] bridge0: port 4(syz_tun) entered disabled state [ 613.569069][ T5839] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 613.614174][ T5839] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 613.643272][ T5614] syz_tun (unregistering): left allmulticast mode [ 613.654638][ T5839] usb 3-1: media controller created [ 613.663708][ T5614] syz_tun (unregistering): left promiscuous mode [ 613.675208][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 613.693903][ T5614] bridge0: port 4(syz_tun) entered disabled state [ 615.199118][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 615.213627][ T5839] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 615.243624][ T5839] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input52 [ 615.258717][ T5839] dvb-usb: schedule remote query interval to 150 msecs. [ 615.267093][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 615.291559][ T5839] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 615.329630][ T5343] usb 3-1: USB disconnect, device number 4 [ 615.430041][ T49] Bluetooth: hci1: command tx timeout [ 615.553631][ T5343] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 615.639001][T15204] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.810679][T15204] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.974191][T15204] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.037518][T15192] lo speed is unknown, defaulting to 1000 [ 616.047334][T15192] lo speed is unknown, defaulting to 1000 [ 616.053517][ T5343] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 616.103543][T15204] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.236106][ T5343] usb 3-1: Using ep0 maxpacket: 16 [ 616.951438][ T5343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 616.951469][ T5343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 616.954171][ T5343] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 616.954201][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.954225][ T5343] usb 3-1: Product: syz [ 616.954243][ T5343] usb 3-1: Manufacturer: syz [ 616.954260][ T5343] usb 3-1: SerialNumber: syz [ 616.960192][ T5343] usb 3-1: config 0 descriptor?? [ 616.961943][ T5343] hub 3-1:0.0: bad descriptor, ignoring hub [ 616.961968][ T5343] hub 3-1:0.0: probe with driver hub failed with error -5 [ 616.970331][ T5343] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 617.112516][ T5343] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 617.217049][T14476] udevd[14476]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 617.310694][ T5343] usb 3-1: USB disconnect, device number 5 [ 617.460222][T10356] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.485265][T10356] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.500064][ T49] Bluetooth: hci1: command tx timeout [ 617.541134][T10713] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.559911][T10713] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.586695][T15241] ieee802154 phy0 wpan0: encryption failed: -22 [ 617.634618][T15242] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15242 comm=syz.1.3137 [ 617.677150][T15240] syzkaller0: entered promiscuous mode [ 617.684263][T15240] syzkaller0: entered allmulticast mode [ 617.692237][ T49] Bluetooth: hci5: unexpected event for opcode 0x202b [ 617.862321][T15252] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15252 comm=syz.1.3137 [ 617.880237][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 617.880713][ T29] audit: type=1804 audit(1786240166.722:3342): pid=15251 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3142" name="/newroot/548/file0" dev="tmpfs" ino=2877 res=1 errno=0 [ 617.976469][T15242] hub 8-0:1.0: USB hub found [ 617.996444][T15242] hub 8-0:1.0: 1 port detected [ 618.765173][T15192] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.799352][T15192] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.832532][T15192] bridge_slave_0: entered allmulticast mode [ 618.864878][T15192] bridge_slave_0: entered promiscuous mode [ 618.895438][T15192] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.911806][T15192] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.936915][T15192] bridge_slave_1: entered allmulticast mode [ 618.963520][T15192] bridge_slave_1: entered promiscuous mode [ 619.147585][T15192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.179712][T15192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.238576][T15192] team0: Port device team_slave_0 added [ 619.255466][T15192] team0: Port device team_slave_1 added [ 619.333002][T15192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.341767][T15192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.384385][T15192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.474142][T15192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.481733][T15192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.509203][T15192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.580160][ T49] Bluetooth: hci1: command tx timeout [ 620.444731][T15192] hsr_slave_0: entered promiscuous mode [ 620.451358][T15192] hsr_slave_1: entered promiscuous mode [ 620.457554][T15192] debugfs: 'hsr0' already exists in 'hsr' [ 620.507522][T15192] Cannot create hsr debugfs directory [ 621.469881][ T29] audit: type=1400 audit(1786240170.302:3343): avc: denied { write } for pid=15278 comm="syz.0.3150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 621.661627][ T49] Bluetooth: hci1: command tx timeout [ 621.880747][ T29] audit: type=1326 audit(1786240170.602:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.1.3151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6aa59e019 code=0x7ffc0000 [ 622.134939][T15192] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.170604][ T29] audit: type=1326 audit(1786240170.602:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.1.3151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6aa59e019 code=0x7ffc0000 [ 622.202048][ T29] audit: type=1326 audit(1786240170.602:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.1.3151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fc6aa59e019 code=0x7ffc0000 [ 622.293486][ T29] audit: type=1326 audit(1786240170.612:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.1.3151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6aa59e019 code=0x7ffc0000 [ 622.435216][ T29] audit: type=1326 audit(1786240170.612:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.1.3151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6aa59e019 code=0x7ffc0000 [ 622.488734][ T29] audit: type=1326 audit(1786240170.612:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.1.3151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6aa59e019 code=0x7ffc0000 [ 622.519243][ T29] audit: type=1326 audit(1786240170.612:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.1.3151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6aa59e019 code=0x7ffc0000 [ 622.565382][ T29] audit: type=1326 audit(1786240170.612:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.1.3151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6aa59e019 code=0x7ffc0000 [ 622.628320][T15192] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.788612][T15192] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.088284][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 624.088302][ T29] audit: type=1804 audit(1786240172.682:3373): pid=15306 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3153" name="/newroot/129/file0" dev="tmpfs" ino=712 res=1 errno=0 [ 624.163952][T15192] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.356395][T15316] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.523424][T15316] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.544568][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.551102][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.618809][T15316] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.952068][T15316] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.606446][T15192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 626.619024][T15192] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 626.634002][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.734731][ T29] audit: type=1326 audit(1786240175.532:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15329 comm="syz.2.3162" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee559e019 code=0x7ffc0000 [ 627.084026][ T29] audit: type=1326 audit(1786240175.532:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15329 comm="syz.2.3162" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee559e019 code=0x7ffc0000 [ 627.113582][T15192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 627.124524][ T29] audit: type=1326 audit(1786240175.532:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15329 comm="syz.2.3162" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7faee559e019 code=0x7ffc0000 [ 627.125464][T15192] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 627.165300][T15192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 627.185583][T15192] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 627.194756][ T29] audit: type=1326 audit(1786240175.532:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15329 comm="syz.2.3162" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee559e019 code=0x7ffc0000 [ 627.251105][T10355] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.266041][ T29] audit: type=1326 audit(1786240175.542:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15329 comm="syz.2.3162" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee559e019 code=0x7ffc0000 [ 627.283618][T15192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 627.343882][ T29] audit: type=1326 audit(1786240175.542:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15329 comm="syz.2.3162" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faee559e019 code=0x7ffc0000 [ 627.407992][T15192] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 627.466334][ T29] audit: type=1326 audit(1786240175.542:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15329 comm="syz.2.3162" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee559e019 code=0x7ffc0000 [ 627.510509][ T29] audit: type=1326 audit(1786240175.542:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15329 comm="syz.2.3162" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee559e019 code=0x7ffc0000 [ 627.543294][ T29] audit: type=1326 audit(1786240175.542:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15329 comm="syz.2.3162" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7faee559e019 code=0x7ffc0000 [ 627.590467][T10355] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.599144][T10355] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.608812][T10355] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.764553][T15339] syzkaller0: entered promiscuous mode [ 627.776555][T15339] syzkaller0: entered allmulticast mode [ 630.738597][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 630.738653][ T29] audit: type=1400 audit(1786240179.582:3403): avc: denied { mounton } for pid=15378 comm="syz.2.3174" path="/proc/1537/task" dev="proc" ino=60492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 635.134110][T15192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.283889][T15192] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.334712][T11606] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.341899][T11606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.398534][T11606] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.405722][T11606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.513971][T15420] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3184'. [ 637.904484][T15192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.299863][T15420] net_ratelimit: 14 callbacks suppressed [ 638.299893][T15420] Set syz1 is full, maxelem 65536 reached [ 638.448654][T15456] syzkaller0: entered promiscuous mode [ 638.461563][T15456] syzkaller0: entered allmulticast mode [ 639.616215][T15192] veth0_vlan: entered promiscuous mode [ 639.645247][T15192] veth1_vlan: entered promiscuous mode [ 639.756748][T15192] veth0_macvtap: entered promiscuous mode [ 639.925705][T15192] veth1_macvtap: entered promiscuous mode [ 639.955682][T15192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.967316][T15192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.085057][T10713] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.141704][T11602] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.203526][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.216121][ T29] audit: type=1400 audit(1786240189.042:3404): avc: denied { write } for pid=15476 comm="syz.0.3196" name="h" dev="configfs" ino=35030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 640.251051][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.271750][T11602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.287505][T11602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.299000][ T29] audit: type=1400 audit(1786240189.042:3405): avc: denied { write } for pid=15476 comm="syz.0.3196" name="h" dev="configfs" ino=35030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 640.487881][T11606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.501321][T11606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.117831][T15492] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3200'. [ 641.161964][T15492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3200'. [ 641.183531][T15492] hsr_slave_0: left promiscuous mode [ 641.197179][T15492] hsr_slave_1: left promiscuous mode [ 641.460803][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 641.652208][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 641.682579][ T10] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 641.693579][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.693997][ T29] audit: type=1326 audit(1786240190.542:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.4.3204" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5d759e019 code=0x0 [ 641.805640][T15515] fuse: Bad value for 'fd' [ 641.984148][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 642.674528][ T10] qmi_wwan 1-1:1.0: probe with driver qmi_wwan failed with error -71 [ 642.689641][ T10] usb 1-1: USB disconnect, device number 10 [ 644.379455][T15537] syzkaller1: entered promiscuous mode [ 644.559780][T15537] syzkaller1: entered allmulticast mode [ 645.860312][ T29] audit: type=1326 audit(1786240193.706:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15559 comm="syz.2.3217" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faee559e019 code=0x0 [ 646.269470][T15569] fuse: Bad value for 'fd' [ 646.287678][ T5608] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 646.330325][ T49] Bluetooth: hci3: command 0x1003 tx timeout [ 648.993515][T15588] retu-mfd 0-0001: could not read Retu revision: -5 [ 649.014139][T15588] retu-mfd 0-0001: probe with driver retu-mfd failed with error -5 [ 649.036158][T15588] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 650.390127][ T5712] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 650.490148][ T5706] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 650.540090][ T5712] usb 1-1: Using ep0 maxpacket: 8 [ 650.548334][ T5712] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 650.571573][ T5712] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 650.600007][ T5712] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 650.609945][ T5712] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 650.623702][ T5712] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 650.633033][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.650180][ T5706] usb 4-1: Using ep0 maxpacket: 32 [ 650.660259][ T5706] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 650.675101][ T5706] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.685628][ T5706] usb 4-1: config 0 has no interface number 0 [ 650.691970][ T5706] usb 4-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 650.705373][ T5706] usb 4-1: config 0 interface 12 has no altsetting 0 [ 650.714303][ T5706] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 650.724037][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.732304][ T5706] usb 4-1: Product: syz [ 650.736780][ T5706] usb 4-1: Manufacturer: syz [ 650.741541][ T5706] usb 4-1: SerialNumber: syz [ 650.751448][ T5706] usb 4-1: config 0 descriptor?? [ 650.762011][ T5706] f81534 4-1:0.12: required endpoints missing [ 650.850783][ T5712] usb 1-1: GET_CAPABILITIES returned 0 [ 650.870044][ T5712] usbtmc 1-1:16.0: can't read capabilities [ 650.944352][T15609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3233'. [ 650.988224][T15611] netlink: 'syz.1.3234': attribute type 1 has an invalid length. [ 651.011048][T15611] 8021q: adding VLAN 0 to HW filter on device bond2 [ 651.027640][T15611] macvlan2: entered promiscuous mode [ 651.033336][T15611] macvlan2: entered allmulticast mode [ 651.053760][T15611] bond2: (slave ip6gretap1): making interface the new active one [ 651.121398][ T29] audit: type=1400 audit(1786240197.969:3408): avc: denied { mounton } for pid=15598 comm="syz.0.3229" path="/syzcgroup/net/syz0/devices.allow" dev="cgroup" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 651.334900][T15611] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 651.433328][T15618] fuse: Bad value for 'fd' [ 654.199200][ T29] audit: type=1326 audit(1786240201.039:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15628 comm="syz.4.3238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5d759e019 code=0x0 [ 654.202929][ T5712] usb 1-1: USB disconnect, device number 11 [ 654.420940][ T5343] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 654.590279][ T5343] usb 2-1: Using ep0 maxpacket: 8 [ 654.635991][ T5343] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 654.853623][ T5343] usb 2-1: config 0 has no interface number 0 [ 654.979059][ T5343] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 655.065751][ T5343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.392956][ T5343] usb 2-1: config 0 descriptor?? [ 655.458983][ T5720] usb 4-1: USB disconnect, device number 117 [ 655.535232][ T5343] viperboard 2-1:0.143: version 0.00 found at bus 002 address 098 [ 655.684005][ T5343] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 655.695983][ T5343] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 655.726503][T15652] WARNING! power/level is deprecated; use power/control instead [ 656.671834][ T29] audit: type=1400 audit(1786240203.519:3410): avc: denied { set_context_mgr } for pid=15657 comm="syz.4.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 656.759935][ T5720] usb 2-1: USB disconnect, device number 98 [ 656.773370][T15661] binder: 15657:15661 ioctl c0306201 2000000004c0 returned -14 [ 656.810177][T15661] binder_alloc: 15657: binder_alloc_buf, no vma [ 656.810561][ T29] audit: type=1400 audit(1786240203.659:3411): avc: denied { call } for pid=15657 comm="syz.4.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 658.074200][ T5706] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 658.231288][ T5706] usb 3-1: Using ep0 maxpacket: 8 [ 658.310769][ T5706] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 658.337361][ T5706] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 658.352717][ T5706] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 658.457707][ T5706] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 658.474847][ T5706] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 658.769625][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.871841][ T5343] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 659.006002][ T29] audit: type=1326 audit(1786240205.849:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15686 comm="syz.0.3256" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe13fd9e019 code=0x0 [ 659.070232][ T5343] usb 2-1: Using ep0 maxpacket: 32 [ 659.085606][ T5343] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 659.125822][ T5343] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.139719][ T5706] usb 3-1: GET_CAPABILITIES returned 0 [ 659.157316][ T5343] usb 2-1: config 0 has no interface number 0 [ 659.167872][ T5706] usbtmc 3-1:16.0: can't read capabilities [ 659.191831][ T5343] usb 2-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 659.231969][ T5343] usb 2-1: config 0 interface 12 has no altsetting 0 [ 659.259485][ T5343] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 659.269783][ T5343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.279278][ T5343] usb 2-1: Product: syz [ 659.291192][ T5343] usb 2-1: Manufacturer: syz [ 659.298695][ T5343] usb 2-1: SerialNumber: syz [ 659.314696][ T5343] usb 2-1: config 0 descriptor?? [ 659.331161][ T5343] f81534 2-1:0.12: required endpoints missing [ 660.519024][ T5343] usb 3-1: USB disconnect, device number 6 [ 661.688616][T15721] binder: 15715:15721 ioctl c0306201 2000000004c0 returned -14 [ 661.752047][ T10] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 661.948691][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 661.982486][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 662.033455][ T10] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 662.065197][ T10] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 662.139288][ T10] usb 5-1: config 14 has no interface number 0 [ 662.159513][ T10] usb 5-1: config 14 has no interface number 1 [ 662.171017][ T10] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 662.194395][ T10] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 662.223761][ T10] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 662.252569][ T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 662.278772][ T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 662.301909][ T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 662.322128][ T10] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.344986][ T10] usb 5-1: config 14 interface 57 has no altsetting 0 [ 662.364897][ T10] usb 5-1: config 14 interface 228 has no altsetting 0 [ 662.384132][ T10] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 662.393545][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.401940][ T10] usb 5-1: Product: syz [ 662.406843][ T10] usb 5-1: Manufacturer: syz [ 662.421521][ T10] usb 5-1: SerialNumber: syz [ 662.629235][ T29] audit: type=1326 audit(1786240209.469:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15738 comm="syz.3.3272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19ef19e019 code=0x0 [ 662.856275][ T50] usb 2-1: USB disconnect, device number 99 [ 662.866479][ T10] legousbtower 5-1:14.57: interrupt endpoints not found [ 663.287814][ T10] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 663.401283][ T10] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 664.767668][ T29] audit: type=1400 audit(1786240211.569:3414): avc: denied { recv } for pid=15754 comm="syz.1.3277" saddr=10.128.0.169 src=33220 daddr=10.128.1.122 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 665.277417][ T5343] usb 5-1: USB disconnect, device number 122 [ 665.313162][ T5343] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 665.475949][T15770] binder: 15763:15770 ioctl c0306201 2000000004c0 returned -14 [ 666.203098][ T5343] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 666.511262][ T5343] usb 4-1: Using ep0 maxpacket: 32 [ 666.522351][T15778] input: syz0 as /devices/virtual/input/input54 [ 666.595283][ T5343] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 666.632330][ T5343] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.647294][ T5343] usb 4-1: config 0 has no interface number 0 [ 666.653477][ T5343] usb 4-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 666.667135][ T5343] usb 4-1: config 0 interface 12 has no altsetting 0 [ 666.676008][ T5343] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 666.686408][ T5343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.694943][ T5343] usb 4-1: Product: syz [ 666.699516][ T5343] usb 4-1: Manufacturer: syz [ 666.704917][ T5343] usb 4-1: SerialNumber: syz [ 666.727250][ T5343] usb 4-1: config 0 descriptor?? [ 666.734891][ T5343] f81534 4-1:0.12: required endpoints missing [ 666.766041][T15785] tipc: Enabling of bearer rejected, failed to enable media [ 666.851670][T15787] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3288'. [ 666.928683][ T29] audit: type=1326 audit(1786240213.769:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15788 comm="syz.0.3289" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe13fd9e019 code=0x0 [ 669.097148][T15818] binder: 15812:15818 ioctl c0306201 2000000004c0 returned -14 [ 669.168586][T15820] input: syz0 as /devices/virtual/input/input55 [ 669.411604][T15825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3299'. [ 670.125707][ T5728] usb 4-1: USB disconnect, device number 118 [ 671.313798][ T29] audit: type=1326 audit(1786240218.159:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15844 comm="syz.3.3306" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19ef19e019 code=0x0 [ 671.420943][ T5728] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 673.253753][T15861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3311'. [ 673.590033][ T5728] usb 2-1: Using ep0 maxpacket: 16 [ 673.715189][ T5728] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 673.726944][ T5728] usb 2-1: config 0 has no interface number 0 [ 673.733185][ T5728] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 673.744126][ T5728] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 673.755316][ T5728] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 673.764517][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 673.772749][ T5728] usb 2-1: Product: syz [ 673.776944][ T5728] usb 2-1: SerialNumber: syz [ 673.789013][ T5728] usb 2-1: config 0 descriptor?? [ 673.797283][ T5728] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 673.805900][ T5728] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input56 [ 673.879372][T15863] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 674.047535][T15843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.078026][T15843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.103762][ C0] cm109_urb_ctl_callback: 152 callbacks suppressed [ 674.103786][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.110574][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.125392][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.132907][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.140428][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.147930][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.155519][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.162856][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.170302][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.177431][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.185211][ T10] usb 2-1: USB disconnect, device number 100 [ 674.191268][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 674.214456][ T10] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 675.409021][ T29] audit: type=1400 audit(1786240222.249:3417): avc: denied { write } for pid=15875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.605375][T15903] input: syz0 as /devices/virtual/input/input57 [ 675.631415][ T5720] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 675.917962][ T5720] usb 1-1: device descriptor read/64, error -71 [ 675.925069][ T29] audit: type=1400 audit(1786240222.719:3418): avc: denied { write } for pid=15899 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 676.270345][ T5720] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 676.546539][ T5720] usb 1-1: device descriptor read/64, error -71 [ 676.623285][T15907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3322'. [ 676.670281][ T5720] usb usb1-port1: attempt power cycle [ 676.986986][ T29] audit: type=1400 audit(1786240223.829:3419): avc: denied { write } for pid=15908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 677.040150][ T5720] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 677.071870][ T29] audit: type=1326 audit(1786240223.919:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.3.3325" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19ef19e019 code=0x0 [ 677.132570][ T5720] usb 1-1: device descriptor read/8, error -71 [ 677.160035][ T29] audit: type=1400 audit(1786240223.969:3421): avc: denied { write } for pid=15928 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 677.370049][ T5720] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 677.402349][ T5720] usb 1-1: device descriptor read/8, error -71 [ 677.533612][ T5720] usb usb1-port1: unable to enumerate USB device [ 677.555207][T15869] ------------[ cut here ]------------ [ 677.560938][T15869] dev->config->get_status(dev) [ 677.560961][T15869] WARNING: drivers/virtio/virtio.c:378 at virtio_dev_remove+0x131/0x170, CPU#1: syz.2.3313/15869 [ 677.577363][T15869] Modules linked in: [ 677.581599][T15869] CPU: 1 UID: 0 PID: 15869 Comm: syz.2.3313 Tainted: G L syzkaller #0 PREEMPT(full) [ 677.592589][T15869] Tainted: [L]=SOFTLOCKUP [ 677.596921][T15869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 677.607237][T15869] RIP: 0010:virtio_dev_remove+0x131/0x170 [ 677.613166][T15869] Code: c3 89 c6 e8 11 a1 7c fc 84 db 75 18 e8 f8 a6 7c fc 48 89 ef 5b be 01 00 00 00 5d 41 5c 41 5d e9 f5 fd ff ff e8 e0 a6 7c fc 90 <0f> 0b 90 eb dd e8 15 31 ed fc e9 36 ff ff ff e8 ab 30 ed fc eb b1 [ 677.633092][ T29] audit: type=1400 audit(1786240224.479:3422): avc: denied { write } for pid=15930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 677.633108][T15869] RSP: 0018:ffffc900067bf868 EFLAGS: 00010246 [ 677.662898][T15869] RAX: 0000000000080000 RBX: 00000000000000ff RCX: ffffc90006881000 [ 677.671249][T15869] RDX: 0000000000080000 RSI: ffffffff858dbb00 RDI: ffff888038672540 [ 677.679237][T15869] RBP: ffff8880213a0000 R08: 0000000000000001 R09: 0000000000000000 [ 677.687518][T15869] R10: 00000000000000ff R11: ffffffff81000130 R12: ffffffff8fe277c0 [ 677.695569][T15869] R13: ffff8880213a0008 R14: ffff8880213a00f0 R15: ffffffff8fe277c0 [ 677.703797][T15869] FS: 00007faee65036c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 677.712936][T15869] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 677.719532][T15869] CR2: 00007fe5d77ef2f8 CR3: 000000007d752000 CR4: 00000000003526f0 [ 677.727567][T15869] Call Trace: [ 677.730874][T15869] [ 677.733809][T15869] ? __pfx_virtio_dev_remove+0x10/0x10 [ 677.739286][T15869] device_remove+0xcb/0x180 [ 677.743964][T15869] device_release_driver_internal+0x44e/0x620 [ 677.749401][ T29] audit: type=1400 audit(1786240224.589:3423): avc: denied { write } for pid=15943 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 677.750080][T15869] bus_remove_device+0x2bc/0x560 [ 677.750115][T15869] ? __pfx_bus_remove_device+0x10/0x10 [ 677.750141][T15869] ? __pfx_device_remove_attrs+0x10/0x10 [ 677.788126][T15869] device_del+0x376/0x9b0 [ 677.792518][T15869] ? __pfx_device_del+0x10/0x10 [ 677.797393][T15869] ? __pfx___might_resched+0x10/0x10 [ 677.802751][T15869] ? __pfx_pci_device_is_present+0x10/0x10 [ 677.808803][T15869] device_unregister+0x1d/0xe0 [ 677.813760][T15869] unregister_virtio_device+0x39/0x60 [ 677.819152][T15869] virtio_pci_remove+0x7c/0x110 [ 677.824082][T15869] pci_device_remove+0xb2/0x1d0 [ 677.828962][T15869] ? __pfx_pci_device_remove+0x10/0x10 [ 677.834453][T15869] device_remove+0xcb/0x180 [ 677.838969][T15869] device_release_driver_internal+0x44e/0x620 [ 677.845093][T15869] pci_stop_bus_device+0x120/0x160 [ 677.850265][T15869] pci_stop_and_remove_bus_device+0x58/0xa0 [ 677.856177][T15869] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 677.862744][T15869] remove_store+0x123/0x140 [ 677.867256][T15869] ? __pfx_remove_store+0x10/0x10 [ 677.872358][T15869] ? find_held_lock+0x2b/0x80 [ 677.877043][T15869] ? sysfs_file_kobj+0xe4/0x290 [ 677.881946][T15869] ? sysfs_file_kobj+0xe4/0x290 [ 677.886818][T15869] ? __pfx_remove_store+0x10/0x10 [ 677.891905][T15869] dev_attr_store+0x58/0x80 [ 677.896441][T15869] ? __pfx_dev_attr_store+0x10/0x10 [ 677.902185][T15869] sysfs_kf_write+0xf2/0x150 [ 677.907050][T15869] kernfs_fop_write_iter+0x3e0/0x5f0 [ 677.912559][T15869] ? __pfx_sysfs_kf_write+0x10/0x10 [ 677.917786][T15869] vfs_write+0x6ac/0x1050 [ 677.922198][T15869] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 677.928024][T15869] ? __pfx_vfs_write+0x10/0x10 [ 677.932873][T15869] ksys_write+0x12a/0x250 [ 677.937222][T15869] ? __pfx_ksys_write+0x10/0x10 [ 677.942164][T15869] do_syscall_64+0x115/0x870 [ 677.946777][T15869] ? clear_bhb_loop+0x40/0x90 [ 677.951508][T15869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.957410][T15869] RIP: 0033:0x7faee559e019 [ 677.961878][T15869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.981617][T15869] RSP: 002b:00007faee6503028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 677.990089][T15869] RAX: ffffffffffffffda RBX: 00007faee5825fa0 RCX: 00007faee559e019 [ 677.998068][T15869] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 000000000000000a [ 678.006086][T15869] RBP: 00007faee563500c R08: 0000000000000000 R09: 0000000000000000 [ 678.014306][T15869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.022481][T15869] R13: 00007faee5826038 R14: 00007faee5825fa0 R15: 00007ffd561c0808 [ 678.030529][T15869] [ 678.033562][T15869] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 678.040846][T15869] CPU: 1 UID: 0 PID: 15869 Comm: syz.2.3313 Tainted: G L syzkaller #0 PREEMPT(full) [ 678.051786][T15869] Tainted: [L]=SOFTLOCKUP [ 678.056097][T15869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 678.066137][T15869] Call Trace: [ 678.069402][T15869] [ 678.072328][T15869] dump_stack_lvl+0x100/0x190 [ 678.077001][T15869] vpanic+0x552/0x970 [ 678.080970][T15869] ? __pfx_vpanic+0x10/0x10 [ 678.085469][T15869] panic+0xd1/0xe0 [ 678.089178][T15869] ? __pfx_panic+0x10/0x10 [ 678.093593][T15869] check_panic_on_warn.cold+0x19/0x34 [ 678.098956][T15869] ? virtio_dev_remove+0x131/0x170 [ 678.104059][T15869] __warn.cold+0x191/0x318 [ 678.108465][T15869] __report_bug+0x30f/0x440 [ 678.112962][T15869] ? virtio_dev_remove+0x131/0x170 [ 678.118075][T15869] ? __pfx___report_bug+0x10/0x10 [ 678.123102][T15869] ? kasan_quarantine_put+0x104/0x240 [ 678.128467][T15869] ? virtio_dev_remove+0x131/0x170 [ 678.133575][T15869] report_bug+0xb2/0x220 [ 678.137811][T15869] ? virtio_dev_remove+0x131/0x170 [ 678.142916][T15869] handle_bug+0x16a/0x2a0 [ 678.147251][T15869] exc_invalid_op+0x17/0x50 [ 678.151756][T15869] asm_exc_invalid_op+0x1a/0x20 [ 678.156598][T15869] RIP: 0010:virtio_dev_remove+0x131/0x170 [ 678.162312][T15869] Code: c3 89 c6 e8 11 a1 7c fc 84 db 75 18 e8 f8 a6 7c fc 48 89 ef 5b be 01 00 00 00 5d 41 5c 41 5d e9 f5 fd ff ff e8 e0 a6 7c fc 90 <0f> 0b 90 eb dd e8 15 31 ed fc e9 36 ff ff ff e8 ab 30 ed fc eb b1 [ 678.181910][T15869] RSP: 0018:ffffc900067bf868 EFLAGS: 00010246 [ 678.187969][T15869] RAX: 0000000000080000 RBX: 00000000000000ff RCX: ffffc90006881000 [ 678.195925][T15869] RDX: 0000000000080000 RSI: ffffffff858dbb00 RDI: ffff888038672540 [ 678.203880][T15869] RBP: ffff8880213a0000 R08: 0000000000000001 R09: 0000000000000000 [ 678.211838][T15869] R10: 00000000000000ff R11: ffffffff81000130 R12: ffffffff8fe277c0 [ 678.219795][T15869] R13: ffff8880213a0008 R14: ffff8880213a00f0 R15: ffffffff8fe277c0 [ 678.227761][T15869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.233825][T15869] ? virtio_dev_remove+0x130/0x170 [ 678.238933][T15869] ? virtio_dev_remove+0x130/0x170 [ 678.244038][T15869] ? __pfx_virtio_dev_remove+0x10/0x10 [ 678.249489][T15869] device_remove+0xcb/0x180 [ 678.253988][T15869] device_release_driver_internal+0x44e/0x620 [ 678.260055][T15869] bus_remove_device+0x2bc/0x560 [ 678.264983][T15869] ? __pfx_bus_remove_device+0x10/0x10 [ 678.270430][T15869] ? __pfx_device_remove_attrs+0x10/0x10 [ 678.276058][T15869] device_del+0x376/0x9b0 [ 678.280382][T15869] ? __pfx_device_del+0x10/0x10 [ 678.285225][T15869] ? __pfx___might_resched+0x10/0x10 [ 678.290502][T15869] ? __pfx_pci_device_is_present+0x10/0x10 [ 678.296309][T15869] device_unregister+0x1d/0xe0 [ 678.301064][T15869] unregister_virtio_device+0x39/0x60 [ 678.306433][T15869] virtio_pci_remove+0x7c/0x110 [ 678.311280][T15869] pci_device_remove+0xb2/0x1d0 [ 678.316119][T15869] ? __pfx_pci_device_remove+0x10/0x10 [ 678.321568][T15869] device_remove+0xcb/0x180 [ 678.326067][T15869] device_release_driver_internal+0x44e/0x620 [ 678.332136][T15869] pci_stop_bus_device+0x120/0x160 [ 678.337240][T15869] pci_stop_and_remove_bus_device+0x58/0xa0 [ 678.343130][T15869] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 678.349624][T15869] remove_store+0x123/0x140 [ 678.354120][T15869] ? __pfx_remove_store+0x10/0x10 [ 678.359136][T15869] ? find_held_lock+0x2b/0x80 [ 678.363800][T15869] ? sysfs_file_kobj+0xe4/0x290 [ 678.368647][T15869] ? sysfs_file_kobj+0xe4/0x290 [ 678.373493][T15869] ? __pfx_remove_store+0x10/0x10 [ 678.378509][T15869] dev_attr_store+0x58/0x80 [ 678.383005][T15869] ? __pfx_dev_attr_store+0x10/0x10 [ 678.388199][T15869] sysfs_kf_write+0xf2/0x150 [ 678.392787][T15869] kernfs_fop_write_iter+0x3e0/0x5f0 [ 678.398065][T15869] ? __pfx_sysfs_kf_write+0x10/0x10 [ 678.403266][T15869] vfs_write+0x6ac/0x1050 [ 678.407598][T15869] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 678.413401][T15869] ? __pfx_vfs_write+0x10/0x10 [ 678.418181][T15869] ksys_write+0x12a/0x250 [ 678.422512][T15869] ? __pfx_ksys_write+0x10/0x10 [ 678.427368][T15869] do_syscall_64+0x115/0x870 [ 678.431952][T15869] ? clear_bhb_loop+0x40/0x90 [ 678.436621][T15869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.442501][T15869] RIP: 0033:0x7faee559e019 [ 678.446904][T15869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.466496][T15869] RSP: 002b:00007faee6503028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 678.474899][T15869] RAX: ffffffffffffffda RBX: 00007faee5825fa0 RCX: 00007faee559e019 [ 678.482942][T15869] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 000000000000000a [ 678.490895][T15869] RBP: 00007faee563500c R08: 0000000000000000 R09: 0000000000000000 [ 678.498848][T15869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.506804][T15869] R13: 00007faee5826038 R14: 00007faee5825fa0 R15: 00007ffd561c0808 [ 678.514778][T15869] [ 678.518013][T15869] Kernel Offset: disabled [ 678.522319][T15869] Rebooting in 86400 seconds..