last executing test programs: 17.071900315s ago: executing program 3 (id=203): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x4, 0xf9, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x700, 0x8, 0xea, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r1, r0, 0x7, 0x4, 0x4}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xd, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x2, 0x2, 0x8000, 0x9, 0x1, 0x3, 0xb, 0x8, 0x0, 0xfff, 0x1, 0x3, 0x7, 0x1ff, 0xe, 0xee, 0x4, 0xfffffff6, 0x3, 0x0, 0x3, 0x9, 0x1, 0xffffffff, 0x80, 0xe0, 0x200, 0x0, 0xf, 0x800, 0x8, 0x8, 0xfffffff9, 0x3228, 0x2, 0xfffffff8, 0x80000001, 0x8, 0x791, 0x5, 0x6b, 0x1, 0x0, 0xd, 0x2d6, 0x4, 0x800, 0xe91, 0x2, 0x3, 0x6, 0xac0, 0x1, 0xf28, 0x8001, 0x10001, 0x3, 0x2, 0x0, 0xa, 0x0, 0x2, 0x7, 0x1, 0xc, 0x8, 0x0, 0x0, 0x7fff, 0xffff, 0x0, 0x3, 0x2, 0x200, 0xda2, 0x0, 0x1, 0x7, 0x3, 0x8, 0x1, 0x0, 0x7fffffff, 0x9, 0x8, 0xffff, 0x5, 0x6, 0x2, 0x1000, 0x5, 0x8, 0x5, 0x2174be9c, 0x81, 0x0, 0x1, 0xb13, 0x1, 0x3, 0x3, 0x7, 0xffffffff, 0x62, 0xffffffff, 0x4, 0x40, 0xffff, 0x0, 0x2, 0x7, 0x1cb4f5ed, 0xffff, 0x5, 0x5, 0x0, 0x5, 0x0, 0x1, 0x3, 0x2, 0x6, 0x6, 0xd3a2, 0x5, 0xfffffffd, 0xfffffff7, 0xcc, 0x6db, 0x0, 0x1, 0xfbd6, 0x7, 0x0, 0x6, 0x8, 0x401, 0x7, 0x6, 0x5, 0x2, 0x0, 0x7, 0x0, 0x3, 0x7, 0x1, 0xfff, 0xded, 0x7, 0x9, 0x40, 0x80000000, 0x2, 0x5, 0x5, 0x8, 0xffc00, 0x8, 0x9b, 0x9210, 0x8, 0xff, 0xcf11, 0x81, 0x6, 0x8001, 0x7fff, 0x7ff, 0xffffffff, 0x5c2c, 0x6, 0x2, 0x6, 0x0, 0x6, 0x10001, 0xffff, 0xdee, 0x3, 0x3, 0x8, 0x6, 0x1, 0x8, 0x0, 0x0, 0x52f, 0x9, 0x0, 0x8001, 0x5, 0xb, 0x4, 0x54, 0xe0000, 0x7ff, 0x0, 0x7, 0x6, 0x3, 0xfffffffe, 0xffffffff, 0xf, 0x7, 0x0, 0x5, 0x2, 0x800, 0xfffffff7, 0x634, 0x0, 0x22, 0xe, 0x1, 0x200, 0x5, 0x6, 0x6, 0x9, 0x2, 0x401, 0x10, 0x0, 0x9, 0x1, 0x3, 0x3, 0x7, 0x0, 0x3, 0x0, 0xffff, 0x8, 0x4, 0x30, 0x6, 0x7, 0x4, 0x5, 0x4, 0xfffffffb, 0x76, 0x0, 0x2, 0x2, 0x9, 0x7, 0x80000001, 0x4, 0x7fff, 0x8, 0xf, 0x100, 0x80000006]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011002d062bbd7000ffdbdf25ffffffff000000000000000000000000000004d3020032"], 0x34}, 0x1, 0x0, 0x0, 0x50800}, 0x4004010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r8}, 0x94) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/245], 0x119) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x53, 0x7, 0x2008, {0x1000, 0x1}, {0x74, 0x2}, @ramp={0x6, 0x1, {0x1c33, 0xf, 0x4, 0x5}}}) r11 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r13 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {'wfdno', 0x3d, r12}}) write$char_usb(r11, &(0x7f0000000040)="e2", 0xff0f) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r14 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r14, 0xc0404806, &(0x7f0000000040)) 16.507768159s ago: executing program 0 (id=204): r0 = syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="062c077685"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x83, 0x2, "179f"}, 0x0, 0x0}) r2 = syz_usb_connect$midi(0x2, 0xaf, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xef, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x1, 0x1, 0x9, 0x40, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x20, 0x6, [@midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x6, 0x1, [{0x1}], 0x5}, @midi_out_jack={0x7, 0x24, 0x3, 0x2, 0x2, 0x0, [], 0x2}], [{{0x9, 0x5, 0xf, 0x2, 0x10, 0x0, 0x7f, 0xec, {0x12, 0x25, 0x1, 0xe, "22faacf7f1cb3640005081c012af"}}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x9, 0xa7, 0x1, {0xd, 0x25, 0x1, 0x9, "b23720d3f75a186c05"}}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0x1, 0xf, 0x9, {0x14, 0x25, 0x1, 0x10, "d5c08bdecf3d470f4b40c209c3044085"}}}, {{0x9, 0x5, 0xb, 0x4, 0x8, 0x3, 0x8, 0x3, {0xd, 0x25, 0x1, 0x9, "ab8fc095621a1177cd"}}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x8, 0x0, 0x2, {0xe, 0x25, 0x1, 0xa, "cca9eb5f3a9c4a4a4191"}}}]}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x1, 0xc, 0x4, 0x20, 0x7}, 0x12, &(0x7f0000000300)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x68, 0x4}, @ptm_cap={0x3}]}, 0x1, [{0x2a, &(0x7f0000000340)=@string={0x2a, 0x3, "fff23d0f6bc94c7c092b6928aa4c369d810544c702f982c5e085c909205eab84244ca1ea330e41d9"}}]}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x10a0, &(0x7f0000000700)={[{0xac, 0x4e00, "3fedacbb518620d0d217226a7b1c2714dac58557d1dd55e4330d6a1077d369722a531c99811631da5d923676861650db10be846025d492dda978981f329daffbae2524d5cb89c379658d11a90a10b8cf97ed6b53aa00b19078e4c439c34242ed458e64c6877fb9474ee90f6d17a67b0604d42c494567b9f7c45a32833fbf387e37593b6e0a269abf2513aeb64d0f485b8d5a2bdb2073b8a18981e9b4edfa283d3a67b73fcba77d9294bcfcc1"}, {0x76, 0x4e00, "c67bc65b239395ee85284a16a59b0bce677b0cfda6165ead388b7516ad97b0dd47898a9b49321be8143b3271c2072cf422ae8f804e3d2f09790d124b8d90a40e1b2147f9f9bb66355ba2629fa5376b902f558e0f2618e26cc49a36ce63d327510401e280eefc3d1298d0fecc554dbc51385f28c066f0"}, {0xf70, 0x4e00, "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"}]}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x40, 0x12, 0x2, "bf47"}, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001"], 0x0) syz_usb_disconnect(r3) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040580403"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x3, 0x32e, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x82, 0x6e, 0xe9, 0xff, 0x10c4, 0x814a, 0x64a4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31c, 0x2, 0x2, 0x1, 0x1a0, 0xd, "", [{{0x9, 0x4, 0x1a, 0xf0, 0x7, 0xe, 0x66, 0x95, 0x6, [], [{{0x9, 0x5, 0xa, 0xc, 0x20, 0x40, 0x40, 0xb}}, {{0x9, 0x5, 0x3, 0xc77bfa4f2e4be804, 0x10, 0x3, 0x6, 0x9e}}, {{0x9, 0x5, 0xd1b068fea4471545, 0x10, 0x400, 0x1, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x30, 0x80}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x9, 0x3f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x62}]}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0x0, 0xfb, 0x1, [@generic={0xc9, 0x23, "e1af208aaf945c7c8a04d94f3df02af0708318191e331fa31fab25e381ec64bec74e7ec6ec67a2dd8b07238c23b78354e0603591e4d8b2b083ce699b5eb493482b36cac9dec7e4f19dd5ed7c871ccd11a1828de579369de503bf10af73343827997421247cfd1d6737c72725a25d68a106bb5e6b7b4c68677b0abd130d360d7db4038bac29f8f82e30938ff832a8c1c2c26906b9eff806b7ae0f1be1278ec4adcc90840ae9f233b5e0d988d858932d971368f64e3d07ddbd67826201e887b0b29bd9788ee8d33f"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x10, 0x4, 0x8, [@generic={0x43, 0x24, "d0d643e7696ef39b4c14417169638a6917a078d2a80f98abd91141d10a9586c4b633659ce936e01889a1fbd7eb7658b459475fc33e68070105ee3cfd2a945fe3f8"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x7, 0xaf, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xb1, 0x0, 0x9, 0x2, 0xa, 0x0, 0x7, [], [{{0x9, 0x5, 0xe, 0x10, 0x3ff, 0xfe, 0x10, 0x7b}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x9, 0x27, 0xf4, [@generic={0x9b, 0xe, "a6a1d853a8801b6062e8c54382c7535aad6a4afc41c806e34d7254210e5be98ee3d2e79cf7319824dc6b9028a6687f26d7343e141a4a355ed9ed89a10039633f88f5f7256f8c0d8b17396575ffe4da69152ce01badce77c70ec544aca76ae393d2e5516f8fde6a314fda626a0afa311113f46b067afa85f3f20adad4136ef2230649bd86104d5152c9f5caa67fb55610956624d5fc3fc2b17e"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x2f}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x8, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x7}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x0, 0x6d, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0xf8, 0x4, 0xf8}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x49, 0xa4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x16, 0x957}, @generic={0x82, 0x24, "b7277caf431d95562779aa9fbd3a903e22f18b3ebb35576fb39fe7a84d6003d500f2d42ce5d3d90ab254071e4f985d7a274abcec84df851d2895b15f39991a016b5106d087606557632950a530ce8747eccc475b3e1b146b74de69e455b598bcc5e676bf8ccd0ae5d5442745ec36a70bef32a1eb036f25ea401564323c5ed716"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x7, 0x5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x78, 0xca7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x2, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x1}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x2, 0x2, 0x9, [@generic={0x2, 0x23}]}}]}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0xef69d72e0f12ada9) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0xa6ab01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000000110f0010020000e8ff010907000019f4000000090452edfe07a4a1e31048cdbcdfd4b164ade98a1d0f4e2aef26c80d05b72d564a1951d1daf7e87e6209393f86e91c98c29b623a2450c161f1e92ab09c1bba5c6453dc9789f6dca8d1f92b09b7c9dc1b"], 0x0) syz_open_dev$hiddev(&(0x7f0000000180), 0x8000, 0xe0800) 14.86170892s ago: executing program 3 (id=209): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c032090400000208065000070501020002000705820200020009040001050806620007050102000200032401070502020002000324020705030200020003240307058402000200032404"], 0x0) ioctl(0xffffffffffffffff, 0x40104d05, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000600)="b56511e72c6cba780ce701ed0b2db27a336692892a6491e2488652ff00c468d353d809d5b20d8ee0f9fefa6cd7bd1036ed25f0e37053d291887c707a892884c2b4aa2ebac156ef8288264449eea05c4f51c3bb4355eb108744fe34e5d0e851d51a855854135f04dd5d854459226f090b6f0d6135e8f2824eed7469236cad2251116a381d8cd30bae59c1fe71e028a667cb910d523aa5d7208286755075ee8be937304cca20e234303df72ad4e2bdc71219456229460a7c6a2df61e8b21b4a4941dcba5c257", 0xc5) write$UHID_INPUT(r0, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r5, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) 11.374827846s ago: executing program 3 (id=215): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001e005f800040000000000000ff000000000000000000080008000100000000ff", 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c00209040000000101"], 0x0) syz_clone(0x2800, &(0x7f0000000000)="6c298961051adf94f80a90b464", 0xd, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="5cb41485cd35d21463557d4d68c3803e1ad090f39bfde6b7529d4f1f6fd46aa67833452eec3f96987d5806") modify_ldt$write2(0x11, 0x0, 0x0) r2 = io_uring_setup(0xf0a, &(0x7f0000000780)={0x0, 0x3c20, 0x38c1, 0x0, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x20, &(0x7f0000000300)=[r2, 0xffffffffffffffff], 0x2) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r3, 0x890b, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="40011e0000004d6150"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) 9.267459993s ago: executing program 0 (id=220): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon0/bind\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='0', 0x1) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0x90, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x7c, 0x1, [@m_ct={0x2c, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x4000d, 0x0, 0x6, 0x8}, 0xfffffffe}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0xa00000000000, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r4, 0x186a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_io_uring_setup(0x18d6, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x2, &(0x7f0000000180), 0xfe) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'macvtap0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "dc9b14135872301e6dce2615e41d4cf223fe3e5ea53cf85c58625758a1bb32db", "7633ce98abb90d70d5ff41d91f8323afb1dbb9db2c72238f4a585f6df17bf33b", "2a8bc33aaf8dd858614264a95b0f1199a0551237c78bc7a84de26dfbf575d0fd", "f621f1ae07ac12c0590359c110a80092ed45792422ba95ab0de1785a0f98601d", "6177acf87205fd647454b88389e9ff5db7eb51de28e5efae75edc5f28c461694", "35a098240d01f4127858f7ed", 0xfad6, 0x0, 0x9e57, 0xfff, 0x2}}) 9.154378048s ago: executing program 2 (id=222): openat$sequencer(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2817\x00', [0x3c8, 0x5, 0x2, 0x8, 0x14000000, 0x0, 0x3, 0xa, 0xefd, 0x7ffe, 0x9, 0x13, 0x400, 0x2, 0x13, 0xbd55, 0xffffffa7, 0x3c, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0x860, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x3]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) read(0xffffffffffffffff, &(0x7f0000000100), 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="850000008d0000009500000091c391e80b800c8e71000000004faa2b5b48b95c14759b9cbffb448a53790d8eca7080421defbea58a0673c42c2bbf33c3b5731692d070a22103c025c0ebb5a8530fbe64c50058a471ec878445dd59ce956cbaae72473ef4852757b0ed9277554c25d97d285a5a13989c8bc710c18ab90fec9839e86487f6da6b30f5aac69e8937f3c116a1ae21ccccfba8e469f03548388a67cf0a9f40f3274f248543"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a}, 0x94) ioctl(r1, 0xc138fd11, &(0x7f0000000200)="04") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000001c0)) 8.51733233s ago: executing program 1 (id=223): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, 0x1}}, 0x18) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x500, 0x0) ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f0000000100)={0x14, &(0x7f00000000c0)}) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) 8.200070691s ago: executing program 0 (id=224): sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x120, 0x0, 0x10, 0x4, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x24024044}, 0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x800003fc, 0x9, 0x32, 0x0, 0x4}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000"], 0x0) write(r0, &(0x7f00000002c0)="b4d6aa30cebf6baa8f55bfef112bf20b459944b78ade81a3737c7e6caac60c1af4c122f2acc44997dfb00e411c43dbed3fcaaa56e73a3093238a87f995095f05305dfb79ced1d06442728b323cfe2aeb8f6fbe925681c1832297dbe1b2a784cde16e6281cc0357ee88e66be138f65477a9a952e85aa65eb151ce8acca6772453f23913fc", 0x84) r1 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r1, 0x402, 0x8000003b) fcntl$notify(0xffffffffffffffff, 0x402, 0x40000029) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xcc, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000380)={'syz0\x00', {0x4, 0xfffb, 0xa}, 0x55, [0x6, 0xd, 0x6ce, 0xed, 0x9, 0x400, 0xd8c, 0x5, 0x4452, 0x3e38, 0x407, 0x101, 0x0, 0xe662, 0xfffffffa, 0x6, 0x4, 0x7fff, 0x5, 0xb0, 0xfffffffe, 0xd07, 0x0, 0x9, 0x6, 0x8, 0x2, 0x6, 0x6, 0x80000000, 0x0, 0x4, 0xfff, 0x1, 0x79, 0x80000000, 0x8, 0x2, 0x7, 0x8, 0x1, 0xd, 0x401, 0x4, 0x1, 0x1, 0xff, 0x2, 0x101, 0x5c, 0x1, 0x1000000, 0x6, 0x7f, 0x6, 0x49758c69, 0x5, 0xca2, 0x3, 0x800, 0x82e, 0x40000000, 0x1, 0xff6d], [0xfffffffb, 0x85, 0x437d, 0x68, 0x0, 0x5, 0x40, 0x2, 0xfffffffd, 0x7f, 0x5, 0x8f44, 0x6, 0x3aa, 0x7, 0x0, 0x10, 0x1, 0xc, 0x1, 0x7, 0x5, 0x4, 0xfffffffc, 0x8001, 0x6, 0x6, 0x2, 0x8, 0x80000000, 0xd, 0x1, 0x9, 0x3, 0x8171, 0x1, 0xcf34, 0xc9c, 0x1, 0x316c0eca, 0x8, 0x1, 0x5eb7981f, 0x8, 0xb, 0x8, 0x5, 0x0, 0xfffffe00, 0xffff8001, 0x8000, 0x7f, 0x40, 0x9, 0x8, 0x2, 0x3, 0x40ba, 0x7, 0x2, 0x8914, 0x3, 0x2, 0x35c3], [0x57b, 0xfffff000, 0x8001, 0x80000001, 0x9, 0xc, 0x6, 0x9dba, 0xc2e, 0x6, 0x1, 0x2, 0x5, 0x723fffb6, 0x6, 0x80000000, 0x1e3, 0xff, 0x5, 0x4, 0x10000, 0x25, 0x81, 0x9, 0x7, 0x7b, 0xd, 0x9, 0x3, 0x7ad, 0x4, 0x8, 0x40, 0x6, 0x7fff, 0x7, 0xffffe1be, 0x80000001, 0xb1, 0x10000, 0x7f, 0x10001, 0x2, 0x8, 0x1bf, 0x6, 0x0, 0x1, 0x80000000, 0x7, 0x2, 0x7f, 0x38, 0x7, 0x1, 0x8001, 0x10000, 0x721f, 0x1, 0xc57f, 0xfffffff8, 0x6, 0x6, 0x5], [0x3f, 0x4, 0x6, 0x301, 0x8, 0x2, 0x3, 0x9af00000, 0xf2, 0x4, 0x10, 0x4, 0x101, 0xfffffff9, 0x89, 0x3, 0x0, 0x0, 0x5d0, 0x1, 0xa6, 0x5, 0x1e1e2a0c, 0x7, 0xfffffffb, 0x6, 0x6, 0x400, 0x10001, 0x10000, 0x4, 0x6, 0xff, 0xe, 0xfffff517, 0x0, 0x457, 0xda, 0x1, 0x400, 0x5, 0x7, 0x8, 0x40, 0x8, 0x3, 0xffff, 0xc526, 0x0, 0x9, 0x7, 0x6, 0x7fff, 0x7ced, 0x7, 0x9, 0x6, 0x1, 0x36, 0xfff, 0x4, 0x1, 0x101, 0x3]}, 0x45c) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r3 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$P9_RREADDIR(r3, &(0x7f0000000440)={0xb, 0x29, 0x2, {0x403}}, 0xb) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000003c0)={0xb, @pix_mp={0x7, 0x3, 0x31384142, 0x7, 0x9, [{0xd45, 0x8}, {0x800, 0x3}, {0x3, 0xb}, {0x5, 0xfffffff7}, {0x9512, 0xffffffff}, {0xc, 0x8}, {0x2, 0x2}, {0x6, 0x7}], 0x0, 0x4, 0x6, 0x0, 0x6}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3f7, 0x800, 0x70bd25, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 8.022637538s ago: executing program 2 (id=225): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time={0x3, 0x1}, {0x4}, {0x6}, @addr={0x7, 0x3}}, {0xd, 0x8, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0xc}, {}, @control={0x0, 0x40}}, {0x0, 0xfb, 0x0, 0x3, @time, {0x3, 0x1}, {0x4}, @raw32={[0x7ff, 0x6, 0x3]}}], 0x70) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x300, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RTT={0x8, 0x7, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000059c0)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2, 0x0, 0xfffd, 0xfbfe, 0x1}, {@in6=@empty, 0x0, 0x3c}, @in=@loopback, {0xfffffffffffffffe, 0x1, 0x0, 0x400000000000, 0x9, 0x0, 0x1000080000}, {0x0, 0x2000000000000000, 0x0, 0x100000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x50000}, 0x20004000) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_RDWR(r5, 0x541b, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r4) r8 = fcntl$dupfd(r3, 0x406, r6) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000080)={0x0, r7}) 7.863213248s ago: executing program 1 (id=226): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r3, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r3, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r2, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r2, 0x3ba0, &(0x7f0000000000)={0x48, 0x6, r4, 0x0, r5}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x6, r1, 0x0, r5}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {0xfff3}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 7.762238405s ago: executing program 3 (id=227): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(r0, 0x40000000) landlock_create_ruleset(0x0, 0x0, 0x0) r2 = syz_open_dev$I2C(0x0, 0x6, 0x204600) ioctl$I2C_SLAVE(r2, 0x703, 0x291) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r5 = fsopen(0x0, 0x1) r6 = fsmount(r5, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000400)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000200)={@remote, @rand_addr=0x64010102}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x3, 0x0, 0x0) openat$tcp_congestion(0xffffff9c, 0x0, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000000000)=0xffffffff, 0x4) 7.272478205s ago: executing program 1 (id=229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) syz_usb_disconnect(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r7 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f00000000c0)=0x7f, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "440101", 0x0, 0xff, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local}}}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200088c0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x0) mkdirat$cgroup(r9, &(0x7f0000000000)='syz1\x00', 0x1ff) setsockopt$RDS_GET_MR_FOR_DEST(r9, 0x114, 0x7, &(0x7f00000003c0)={@llc={0x1a, 0x230, 0x6, 0xee, 0x6, 0xd2, @broadcast}, {0x0}, 0x0, 0x10}, 0xa0) ioctl$VIDIOC_QUERYMENU(r9, 0xc02c5625, &(0x7f0000000300)={0x6, 0xfffffc00, @value=0x2}) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) 7.211049791s ago: executing program 2 (id=230): r0 = syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="062c077685"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x83, 0x2, "179f"}, 0x0, 0x0}) r2 = syz_usb_connect$midi(0x2, 0xaf, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xef, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x1, 0x1, 0x9, 0x40, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x20, 0x6, [@midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x6, 0x1, [{0x1}], 0x5}, @midi_out_jack={0x7, 0x24, 0x3, 0x2, 0x2, 0x0, [], 0x2}], [{{0x9, 0x5, 0xf, 0x2, 0x10, 0x0, 0x7f, 0xec, {0x12, 0x25, 0x1, 0xe, "22faacf7f1cb3640005081c012af"}}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x9, 0xa7, 0x1, {0xd, 0x25, 0x1, 0x9, "b23720d3f75a186c05"}}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0x1, 0xf, 0x9, {0x14, 0x25, 0x1, 0x10, "d5c08bdecf3d470f4b40c209c3044085"}}}, {{0x9, 0x5, 0xb, 0x4, 0x8, 0x3, 0x8, 0x3, {0xd, 0x25, 0x1, 0x9, "ab8fc095621a1177cd"}}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x8, 0x0, 0x2, {0xe, 0x25, 0x1, 0xa, "cca9eb5f3a9c4a4a4191"}}}]}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x1, 0xc, 0x4, 0x20, 0x7}, 0x12, &(0x7f0000000300)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x68, 0x4}, @ptm_cap={0x3}]}, 0x1, [{0x2a, &(0x7f0000000340)=@string={0x2a, 0x3, "fff23d0f6bc94c7c092b6928aa4c369d810544c702f982c5e085c909205eab84244ca1ea330e41d9"}}]}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x10a0, &(0x7f0000000700)={[{0xac, 0x4e00, "3fedacbb518620d0d217226a7b1c2714dac58557d1dd55e4330d6a1077d369722a531c99811631da5d923676861650db10be846025d492dda978981f329daffbae2524d5cb89c379658d11a90a10b8cf97ed6b53aa00b19078e4c439c34242ed458e64c6877fb9474ee90f6d17a67b0604d42c494567b9f7c45a32833fbf387e37593b6e0a269abf2513aeb64d0f485b8d5a2bdb2073b8a18981e9b4edfa283d3a67b73fcba77d9294bcfcc1"}, {0x76, 0x4e00, "c67bc65b239395ee85284a16a59b0bce677b0cfda6165ead388b7516ad97b0dd47898a9b49321be8143b3271c2072cf422ae8f804e3d2f09790d124b8d90a40e1b2147f9f9bb66355ba2629fa5376b902f558e0f2618e26cc49a36ce63d327510401e280eefc3d1298d0fecc554dbc51385f28c066f0"}, {0xf70, 0x4e00, "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"}]}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x40, 0x12, 0x2, "bf47"}, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001"], 0x0) syz_usb_disconnect(r3) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040580403"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x3, 0x32e, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x82, 0x6e, 0xe9, 0xff, 0x10c4, 0x814a, 0x64a4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31c, 0x2, 0x2, 0x1, 0x1a0, 0xd, "", [{{0x9, 0x4, 0x1a, 0xf0, 0x7, 0xe, 0x66, 0x95, 0x6, [], [{{0x9, 0x5, 0xa, 0xc, 0x20, 0x40, 0x40, 0xb}}, {{0x9, 0x5, 0x3, 0xc77bfa4f2e4be804, 0x10, 0x3, 0x6, 0x9e}}, {{0x9, 0x5, 0xd1b068fea4471545, 0x10, 0x400, 0x1, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x30, 0x80}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x9, 0x3f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x62}]}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0x0, 0xfb, 0x1, [@generic={0xc9, 0x23, "e1af208aaf945c7c8a04d94f3df02af0708318191e331fa31fab25e381ec64bec74e7ec6ec67a2dd8b07238c23b78354e0603591e4d8b2b083ce699b5eb493482b36cac9dec7e4f19dd5ed7c871ccd11a1828de579369de503bf10af73343827997421247cfd1d6737c72725a25d68a106bb5e6b7b4c68677b0abd130d360d7db4038bac29f8f82e30938ff832a8c1c2c26906b9eff806b7ae0f1be1278ec4adcc90840ae9f233b5e0d988d858932d971368f64e3d07ddbd67826201e887b0b29bd9788ee8d33f"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x10, 0x4, 0x8, [@generic={0x43, 0x24, "d0d643e7696ef39b4c14417169638a6917a078d2a80f98abd91141d10a9586c4b633659ce936e01889a1fbd7eb7658b459475fc33e68070105ee3cfd2a945fe3f8"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x7, 0xaf, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xb1, 0x0, 0x9, 0x2, 0xa, 0x0, 0x7, [], [{{0x9, 0x5, 0xe, 0x10, 0x3ff, 0xfe, 0x10, 0x7b}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x9, 0x27, 0xf4, [@generic={0x9b, 0xe, "a6a1d853a8801b6062e8c54382c7535aad6a4afc41c806e34d7254210e5be98ee3d2e79cf7319824dc6b9028a6687f26d7343e141a4a355ed9ed89a10039633f88f5f7256f8c0d8b17396575ffe4da69152ce01badce77c70ec544aca76ae393d2e5516f8fde6a314fda626a0afa311113f46b067afa85f3f20adad4136ef2230649bd86104d5152c9f5caa67fb55610956624d5fc3fc2b17e"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x2f}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x8, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x7}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x0, 0x6d, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0xf8, 0x4, 0xf8}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x49, 0xa4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x16, 0x957}, @generic={0x82, 0x24, "b7277caf431d95562779aa9fbd3a903e22f18b3ebb35576fb39fe7a84d6003d500f2d42ce5d3d90ab254071e4f985d7a274abcec84df851d2895b15f39991a016b5106d087606557632950a530ce8747eccc475b3e1b146b74de69e455b598bcc5e676bf8ccd0ae5d5442745ec36a70bef32a1eb036f25ea401564323c5ed716"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x7, 0x5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x78, 0xca7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x2, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x1}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x2, 0x2, 0x9, [@generic={0x2, 0x23}]}}]}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0xef69d72e0f12ada9) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0xa6ab01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000000110f0010020000e8ff010907000019f4000000090452edfe07a4a1e31048cdbcdfd4b164ade98a1d0f4e2aef26c80d05b72d564a1951d1daf7e87e6209393f86e91c98c29b623a2450c161f1e92ab09c1bba5c6453dc9789f6dca8d1f92b09b7c9dc1b"], 0x0) syz_open_dev$hiddev(&(0x7f0000000180), 0x8000, 0xe0800) 6.974836953s ago: executing program 4 (id=231): r0 = socket(0xa, 0x5, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xf, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cd2cf5df7773f7a4c72ae167485315c326281efc400"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='erspan0\x00', 0x10) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000000)=0xe) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000980)=[@in6={0xa, 0x4e20, 0x20, @local}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1a"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x100}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x10b, 0x0, 0x100000001}]}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 6.351934766s ago: executing program 4 (id=232): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x2000000, 0x0, 'id0\x00', 'timer0\x00'}) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = epoll_create1(0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5400faffffffffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r3, @ANYBLOB="9d68a8015d926cf62022428c9585dd00ffe71b3c4213dc8559d1dad3", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x1974}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}]}}}]}, 0x44}}, 0x0) 6.146786395s ago: executing program 0 (id=233): r0 = syz_io_uring_setup(0x6c8b, &(0x7f00000011c0)={0x0, 0xac0c, 0x800, 0x400000, 0x3c1}, &(0x7f0000001340), &(0x7f0000001380), &(0x7f0000000100)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) semctl$SETVAL(0x0, 0x6, 0x10, &(0x7f0000018f40)=0xc6a) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r1, &(0x7f0000001480)=""/265, 0x109, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x4c, 0x0, 0x1, 0xffffffff, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x19, 0xc8, "8ca6b3fd0f34416c"}}}, 0xe) 5.642119718s ago: executing program 4 (id=234): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0xfe, 0x4, 0xff, 0x1, 0x20002400}}, 0x1c}, 0x1, 0x0, 0x0, 0x4e044}, 0x4090) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000001c0)={0x8, 'gretap0\x00', {'pimreg\x00'}, 0x7f}) read(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'pimreg1\x00'}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) mount$pvfs2(&(0x7f0000000240), &(0x7f0000000280)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', &(0x7f0000000340), 0x1448a0, &(0x7f0000000500)={[{'*'}], [{@permit_directio}, {@appraise_type}, {@smackfsdef={'smackfsdef', 0x3d, '[\xf0\\\'*]'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@uid_gt={'uid>', r5}}]}) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x1, 0x0) 5.528893536s ago: executing program 1 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x1b, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x4, 0x13}]}, 0x24}}, 0x0) 3.991110511s ago: executing program 3 (id=236): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x1, 0x106) r3 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b5, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2040, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000280)={0xfffffffffffffffe, 0x30000, 0x8, 0xffffffffffffffff, 0x508}) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 3.969451203s ago: executing program 2 (id=237): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xc9, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000300)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0xeb8, 0x724f, 0x2000f, 0xffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000780)={'gretap0\x00', 0x0, 0x40, 0x10, 0xbef9, 0xffffffff, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0x1, 0x4, 0x0, @multicast2, @rand_addr=0x64010101}}}}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/193, 0xc1}], 0x1}, 0x3}], 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r5}, 0x20) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r3) getrlimit(0x5, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf3aeb0bfc767a338, 0xe, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)={0x20, r6, 0x1, 0x70bd25, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x901, 0x11}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x6004008}, 0x4040000) 3.962598728s ago: executing program 0 (id=238): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0x8, 0xdd35, 0x5, 0x1df, 0x1000, r1}) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x3800) 3.931415778s ago: executing program 1 (id=239): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001e005f800040000000000000ff000000000000000000080008000100000000ff", 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c00209040000000101"], 0x0) syz_clone(0x2800, &(0x7f0000000000)="6c298961051adf94f80a90b464", 0xd, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="5cb41485cd35d21463557d4d68c3803e1ad090f39bfde6b7529d4f1f6fd46aa67833452eec3f96987d5806") modify_ldt$write2(0x11, 0x0, 0x0) r2 = io_uring_setup(0xf0a, &(0x7f0000000780)={0x0, 0x3c20, 0x38c1, 0x0, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x20, &(0x7f0000000300)=[r2, 0xffffffffffffffff], 0x2) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r3, 0x890b, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="40011e0000004d6150"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0x1c}, 0x18) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) 3.779654494s ago: executing program 4 (id=240): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x801, 0x0) writev(r3, &(0x7f0000001a00)=[{&(0x7f0000000800)="3589d396", 0x4}], 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_int(r1, &(0x7f00000000c0)=0x7, 0x12) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./merge/file\x00', 0x41, 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='./merge/file\x00', &(0x7f00000002c0)=ANY=[@ANYRESOCT], &(0x7f0000000300), 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0x5, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYRES64=r4], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) syslog(0x2, &(0x7f0000000280)=""/27, 0x1b) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x1, 0x0, &(0x7f0000000240)) connect$inet(r5, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) socket$tipc(0x1e, 0x2, 0x0) syslog(0x3, &(0x7f0000000080)=""/49, 0x31) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) 2.814529947s ago: executing program 0 (id=241): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_connect$uac1(0x1, 0x72, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x22, 0x50, {0x50, 0x30, "1be18eed6a6ef61fdf1bbebfb576d9ceb8fd2024cde8a0a921d4d641c719809ab104e0a4ed68dcd52f25d7a9bf4d8230c7ef676f31668e8c0dc51ca2f9c53c4011e2fc843b7856407e96cbd48cf0"}}, &(0x7f00000000c0)={0x0, 0x3, 0x6f, @string={0x6f, 0x3, "d94766f94b3c48faefad087fc743dc85553edfe588cc5c60e48bd63f3d4225dc5f50b0cc21e49b0b37d4e16c1e0d27ec761cf345972fd784f643349bbb3c3a8d87a97d3f1f53e9b9b1d3eccea4fe128cea01c0e299e04e0a48497a87c3461d485d99a5085302e73a9b3ad16bf8"}}}, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x0, 0x5, 0x14, "ea35ebec4ae78f4761b995a03095bb80f90481a6"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000280)={0x20, 0x0, 0x6f, {0x6d, "34c031aa208ba645fe80a57fd363e182b124d61d92114f0f2182febdbab41b758594e90cb38f13bf1b9ea5d4e5c75c2ec71f76f58a510b33d5577ae934dbe347ba76bff0797939f4b91c08e4c5386f8719436b40765c3b5373943e9f4462b224bdfbf6afeacaa35496575c3242"}}, &(0x7f0000000300)={0x20, 0x1, 0x1, 0x1d}, &(0x7f0000000340)={0x20, 0x0, 0x1}}) read$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="070004000000feffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 809.441165ms ago: executing program 2 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) sendmmsg(r0, &(0x7f0000001b80)=[{{&(0x7f00000000c0)=@generic={0x1e, "b115093bfacddaf169d0333a8ad932ff459b112c6ced66163226151b1b27b420c858db949aa01b64c5ccf93e0c6c462471dc1f937ba78937e3e478b85ad7424c4b45e66f2b1f99ad3c7ad36968c2975015a30075086b4cf10b35c06a28e797bf20a146b678ae4eb86ef4cdcd392b178248ab06660b81ba7879725a7f1eb8"}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000008c0)="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", 0x1000}], 0x1, &(0x7f0000001900)=[{0x18, 0x84, 0x4b, "468e9998fa"}, {0x100, 0x1, 0x2, "48e0a5c20725d05f3636ded700ef57f83caea83b66d8a4279584f7d8a28d56bd0a830c00740f85a6023dd48c096d71955fd27d75df249723cfdd6060029dd055e7635e64ed2ee250958b3e71d7cf5ccbe5108657a0a9ad478d6ce34ec96aa3e8f210ae6d86eb284a7ac747ef06d9a763e5455dfd8537507b9f5c030000a0f22ec8dd27b91f2788a6ef17620cc4bbc29d0360395bbfc430d248695b2aa7734cee558c257b5e3f8a26c8ed5916420cbf3a281a6624cfb83a330882d76cc0e5e0b3b1fd809f937509edbd005f5ce223cc00c63a17a7e10221bbb2837e3a400b2a991f2115c2e33f7cb8e936d945"}, {0xb0, 0x11, 0xfffff174, "63c80a82b951788801651572180fc2b11be714eacae3cca07e679e68f43e696f213544e6b502f5d748a7cd915308b01bb9f7d50fd572b68ad10be1b89572fae722355f80a5cae9d494e1ed18ef3ff8c2d608595db64a20ca8c4df2c629d09add55df3d14a46cada2d1428ab6feb9d06d56222b724626868dc0b8ff0321ab65abb9bf1c374189a8bb9960b093151cda84815f811b29a31cc7d7e2"}, {0x38, 0x1, 0x5, "0822308726fb7966e421f8a245bd90f751910a56bde8120054fe79ce0f542d5b4bf7a2b8f74b"}, {0x68, 0x101, 0x1ff, "7065731fa7a3e55ef254a46969a57d33b7e3f149be0bd52c041880be28799a122647568932bc8debd254504779e49b627374ab6abd7aae41fb68837b91c7fd49ed7b27d0040e552ef22a9023982bb4bb034d69d168"}], 0x268}}], 0x1, 0x20000340) r1 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000004}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f00000003c0)={{0x8, 0x400}}, 0x10) 754.854428ms ago: executing program 1 (id=243): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c032090400000208065000070501020002000705820200020009040001050806620007050102000200032401070502020002000324020705030200020003240307058402000200032404"], 0x0) ioctl(0xffffffffffffffff, 0x40104d05, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000600)="b56511e72c6cba780ce701ed0b2db27a336692892a6491e2488652ff00c468d353d809d5b20d8ee0f9fefa6cd7bd1036ed25f0e37053d291887c707a892884c2b4aa2ebac156ef8288264449eea05c4f51c3bb4355eb108744fe34e5d0e851d51a855854135f04dd5d854459226f090b6f0d6135e8f2824eed7469236cad2251116a381d8cd30bae59c1fe71e028a667cb910d523aa5d7208286755075ee8be937304cca20e234303df72ad4e2bdc71219456229460a7c6a2df61e8b21b4a4941dcba5c257", 0xc5) write$UHID_INPUT(r0, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r5, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) 677.961701ms ago: executing program 4 (id=244): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) r1 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x3800) 448.674544ms ago: executing program 2 (id=245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r7) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r6, 0xaa3a6000) socket$xdp(0x2c, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r9, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_TRANSMIT(r9, 0xc0386105, &(0x7f00000001c0)={0x1, 0x5453, 0xe, 0xffff, 0x0, 0x3, "e77a52b50e78f1e2cf9c2a2315bef545", 0x1, 0xa, 0x2, 0xb, 0x52, 0x6, 0x6b}) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x15, 0x0, 0x3, 0x3000006, 'U\x00', "1575a859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "000400000000000000000040", "fa0700f22b42a3023be516d1"]}) setsockopt$inet6_int(r8, 0x29, 0x1a, 0x0, 0x0) 76.306592ms ago: executing program 4 (id=246): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001e005f800040000000000000ff000000000000000000080008000100000000ff", 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c00209040000000101"], 0x0) syz_clone(0x2800, &(0x7f0000000000)="6c298961051adf94f80a90b464", 0xd, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="5cb41485cd35d21463557d4d68c3803e1ad090f39bfde6b7529d4f1f6fd46aa67833452eec3f96987d5806") modify_ldt$write2(0x11, 0x0, 0x0) r2 = io_uring_setup(0xf0a, &(0x7f0000000780)={0x0, 0x3c20, 0x38c1, 0x0, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x20, &(0x7f0000000300)=[r2, 0xffffffffffffffff], 0x2) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r3, 0x890b, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="40011e0000004d6150"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) 0s ago: executing program 3 (id=247): syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) bind$tipc(r0, &(0x7f0000001180)=@name={0x1e, 0x2, 0x2, {{0x43}}}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto(r1, 0x0, 0x0, 0x20004008, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0xfff5, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x10000000, 0x1, 0xfff}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x6c}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='dummy_udc.0', 0xb) getsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) write(0xffffffffffffffff, &(0x7f0000000440)="64756d6d795f7564632e3082ac79e5bfb8d8e624c46be2aa46ba8c015ef5058c9aeb057e63fbe53034c60af7c63f88c348b34a17d7f5b99dda08f95e0b9e3d00c58e6778bc61901ca162fbf2f4489acb0c4c21cba638a222c05786350365658bdb1ff084b57be839a5b7b76bbd43bcf6e30bb0436f50c2c1ab468080d6bce7d83a52", 0x82) socket$nl_generic(0x10, 0x3, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000024c0)=ANY=[], 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) kernel console output (not intermixed with test programs): [ 56.572544][ T29] audit: type=1400 audit(1786277934.961:113): avc: denied { write } for pid=5463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.628851][ T29] audit: type=1400 audit(1786277935.011:114): avc: denied { write } for pid=5474 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.842479][ T29] audit: type=1400 audit(1786277935.231:115): avc: denied { write } for pid=5477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.909701][ T29] audit: type=1400 audit(1786277935.301:116): avc: denied { write } for pid=5488 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.250199][ T29] audit: type=1400 audit(1786277935.641:117): avc: denied { write } for pid=5491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.311227][ T29] audit: type=1400 audit(1786277935.701:118): avc: denied { write } for pid=5502 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.523293][ T29] audit: type=1400 audit(1786277935.911:119): avc: denied { write } for pid=5505 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.584785][ T29] audit: type=1400 audit(1786277935.971:120): avc: denied { write } for pid=5516 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.788510][ T29] audit: type=1400 audit(1786277936.171:121): avc: denied { write } for pid=5519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.844668][ T29] audit: type=1400 audit(1786277936.231:122): avc: denied { write } for pid=5530 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. [ 64.029644][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 64.029662][ T29] audit: type=1400 audit(1786277942.421:129): avc: denied { mounton } for pid=5584 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.061870][ T29] audit: type=1400 audit(1786277942.451:130): avc: denied { mount } for pid=5584 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.065677][ T5584] cgroup: Unknown subsys name 'net' [ 64.092187][ T29] audit: type=1400 audit(1786277942.481:131): avc: denied { unmount } for pid=5584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.222841][ T5584] cgroup: Unknown subsys name 'cpuset' [ 64.232037][ T5584] cgroup: Unknown subsys name 'rlimit' [ 64.344865][ T29] audit: type=1400 audit(1786277942.731:132): avc: denied { setattr } for pid=5584 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.387559][ T29] audit: type=1400 audit(1786277942.731:133): avc: denied { create } for pid=5584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.408418][ T29] audit: type=1400 audit(1786277942.731:134): avc: denied { write } for pid=5584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.429321][ T29] audit: type=1400 audit(1786277942.731:135): avc: denied { read } for pid=5584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.450359][ T29] audit: type=1400 audit(1786277942.731:136): avc: denied { mounton } for pid=5584 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.452026][ T5586] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 64.475795][ T29] audit: type=1400 audit(1786277942.731:137): avc: denied { mount } for pid=5584 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 64.507416][ T29] audit: type=1400 audit(1786277942.881:138): avc: denied { relabelto } for pid=5586 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 65.585545][ T5584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.510660][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 69.510681][ T29] audit: type=1400 audit(1786277947.901:143): avc: denied { create } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.579754][ T29] audit: type=1400 audit(1786277947.901:144): avc: denied { read write } for pid=5594 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 69.584843][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.604005][ T29] audit: type=1400 audit(1786277947.901:145): avc: denied { open } for pid=5594 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 69.604053][ T29] audit: type=1400 audit(1786277947.931:146): avc: denied { ioctl } for pid=5594 comm="syz-executor" path="socket:[4487]" dev="sockfs" ino=4487 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.664246][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.672014][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.682039][ T5605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.688196][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.690933][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.699524][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.704825][ T5605] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.720285][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.725867][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.728937][ T5605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.734770][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.750327][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.751807][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.761487][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.766777][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.772880][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.780771][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.788846][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.795850][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.820309][ T4916] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.820578][ T29] audit: type=1400 audit(1786277948.201:147): avc: denied { read } for pid=5596 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 69.828764][ T4916] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.853877][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.860992][ T4916] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.870962][ T4916] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.891212][ T29] audit: type=1400 audit(1786277948.201:148): avc: denied { open } for pid=5595 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 69.920975][ T29] audit: type=1400 audit(1786277948.201:149): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 69.968876][ T29] audit: type=1400 audit(1786277948.241:150): avc: denied { module_request } for pid=5596 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 70.020735][ T29] audit: type=1400 audit(1786277948.351:151): avc: denied { sys_module } for pid=5594 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 71.322408][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.329697][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.367053][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.374358][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.381623][ T5596] bridge_slave_0: entered allmulticast mode [ 71.388477][ T5596] bridge_slave_0: entered promiscuous mode [ 71.409666][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.416819][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.424074][ T5594] bridge_slave_0: entered allmulticast mode [ 71.431020][ T5594] bridge_slave_0: entered promiscuous mode [ 71.450307][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.457481][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.464877][ T5596] bridge_slave_1: entered allmulticast mode [ 71.472024][ T5596] bridge_slave_1: entered promiscuous mode [ 71.490473][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.497758][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.505065][ T5594] bridge_slave_1: entered allmulticast mode [ 71.512023][ T5594] bridge_slave_1: entered promiscuous mode [ 71.602127][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.611470][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.620577][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.627758][ T5601] bridge_slave_0: entered allmulticast mode [ 71.635092][ T5601] bridge_slave_0: entered promiscuous mode [ 71.644743][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.667600][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.677094][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.684827][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.692239][ T5601] bridge_slave_1: entered allmulticast mode [ 71.699458][ T5601] bridge_slave_1: entered promiscuous mode [ 71.708675][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.760151][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.767334][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.774676][ T5595] bridge_slave_0: entered allmulticast mode [ 71.781666][ T5595] bridge_slave_0: entered promiscuous mode [ 71.820151][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.827360][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.834836][ T5595] bridge_slave_1: entered allmulticast mode [ 71.841709][ T5595] bridge_slave_1: entered promiscuous mode [ 71.850213][ T5594] team0: Port device team_slave_0 added [ 71.857981][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.869469][ T5596] team0: Port device team_slave_0 added [ 71.875194][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.883703][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.884201][ T5615] Bluetooth: hci1: command tx timeout [ 71.891054][ T5608] bridge_slave_0: entered allmulticast mode [ 71.897332][ T5603] Bluetooth: hci2: command tx timeout [ 71.902640][ T4916] Bluetooth: hci4: command tx timeout [ 71.910324][ T5608] bridge_slave_0: entered promiscuous mode [ 71.930199][ T5594] team0: Port device team_slave_1 added [ 71.937150][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.954629][ T5596] team0: Port device team_slave_1 added [ 71.959387][ T4916] Bluetooth: hci3: command tx timeout [ 71.960450][ T5603] Bluetooth: hci0: command tx timeout [ 71.976391][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.983739][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.991092][ T5608] bridge_slave_1: entered allmulticast mode [ 71.997856][ T5608] bridge_slave_1: entered promiscuous mode [ 72.038824][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.045855][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.071996][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.093749][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.111649][ T5601] team0: Port device team_slave_0 added [ 72.117983][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.125066][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.151231][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.171627][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.181259][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.188198][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.214590][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.226825][ T5601] team0: Port device team_slave_1 added [ 72.241022][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.258077][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.265286][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.291800][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.320813][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.352018][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.359052][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.385405][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.405710][ T5595] team0: Port device team_slave_0 added [ 72.413457][ T5595] team0: Port device team_slave_1 added [ 72.426243][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.433322][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.459355][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.496417][ T5596] hsr_slave_0: entered promiscuous mode [ 72.502700][ T5596] hsr_slave_1: entered promiscuous mode [ 72.515989][ T5608] team0: Port device team_slave_0 added [ 72.538913][ T5608] team0: Port device team_slave_1 added [ 72.548798][ T5594] hsr_slave_0: entered promiscuous mode [ 72.555026][ T5594] hsr_slave_1: entered promiscuous mode [ 72.561776][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 72.568032][ T5594] Cannot create hsr debugfs directory [ 72.583390][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.590520][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.616485][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.654465][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.661523][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.687889][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.709990][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.717062][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.743020][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.758617][ T5601] hsr_slave_0: entered promiscuous mode [ 72.764902][ T5601] hsr_slave_1: entered promiscuous mode [ 72.771131][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 72.776852][ T5601] Cannot create hsr debugfs directory [ 72.799822][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.806861][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.832920][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.951709][ T5595] hsr_slave_0: entered promiscuous mode [ 72.957996][ T5595] hsr_slave_1: entered promiscuous mode [ 72.964364][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 72.970799][ T5595] Cannot create hsr debugfs directory [ 72.993398][ T5608] hsr_slave_0: entered promiscuous mode [ 72.999948][ T5608] hsr_slave_1: entered promiscuous mode [ 73.005917][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 73.011813][ T5608] Cannot create hsr debugfs directory [ 73.303154][ T5594] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.314091][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.323270][ T5594] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.333552][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.357724][ T5594] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.367304][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.393797][ T5594] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.404242][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.455400][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.466948][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.479341][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.492323][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.500236][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.509107][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.517309][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.527048][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.605903][ T5601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.619073][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.627470][ T5601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.638435][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.657528][ T5601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.667677][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.676181][ T5601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.686873][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.769874][ T5595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.782730][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.791295][ T5595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.800830][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.822589][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.831622][ T5595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.841268][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.848926][ T5595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.857645][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.922276][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.941606][ T5608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.952305][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.960054][ T5603] Bluetooth: hci2: command tx timeout [ 73.960253][ T4916] Bluetooth: hci1: command tx timeout [ 73.966039][ T5615] Bluetooth: hci4: command tx timeout [ 73.983942][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.991486][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.004307][ T5608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.014257][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.022440][ T5608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.032210][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.039500][ T5603] Bluetooth: hci0: command tx timeout [ 74.045039][ T5615] Bluetooth: hci3: command tx timeout [ 74.053772][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.060928][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.074646][ T5608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.084276][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.174896][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.248437][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.265563][ T29] audit: type=1400 audit(1786277952.651:152): avc: denied { sys_module } for pid=5594 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.318551][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.333674][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.340852][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.374545][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.381738][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.412621][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.432807][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.441904][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.449049][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.476038][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.483168][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.558490][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.571845][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.617223][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.624533][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.680667][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.706411][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.713626][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.746070][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.753358][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.821779][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.829032][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.866045][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.101404][ T5594] veth0_vlan: entered promiscuous mode [ 75.135044][ T5594] veth1_vlan: entered promiscuous mode [ 75.263012][ T5594] veth0_macvtap: entered promiscuous mode [ 75.284173][ T5594] veth1_macvtap: entered promiscuous mode [ 75.348841][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.386031][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.482262][ T1159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.533978][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.726420][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.730732][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.753877][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.756441][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.859513][ T1159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.874585][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.883642][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.900658][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.909907][ T63] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.921270][ T5596] veth0_vlan: entered promiscuous mode [ 75.940533][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.972421][ T29] audit: type=1400 audit(1786277954.361:153): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/root/syzkaller.x4Kbz5/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 75.973419][ T5596] veth1_vlan: entered promiscuous mode [ 76.027066][ T29] audit: type=1400 audit(1786277954.391:154): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.049497][ T5615] Bluetooth: hci2: command tx timeout [ 76.049785][ T5603] Bluetooth: hci4: command tx timeout [ 76.054908][ T4916] Bluetooth: hci1: command tx timeout [ 76.072047][ T29] audit: type=1400 audit(1786277954.391:155): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/root/syzkaller.x4Kbz5/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.100054][ T29] audit: type=1400 audit(1786277954.391:156): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.122971][ T4916] Bluetooth: hci0: command tx timeout [ 76.128429][ T4916] Bluetooth: hci3: command tx timeout [ 76.134033][ T29] audit: type=1400 audit(1786277954.401:157): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/root/syzkaller.x4Kbz5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 76.160707][ T29] audit: type=1400 audit(1786277954.401:158): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/root/syzkaller.x4Kbz5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 76.188332][ T29] audit: type=1400 audit(1786277954.411:159): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.209359][ T29] audit: type=1400 audit(1786277954.411:160): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 76.232727][ T29] audit: type=1400 audit(1786277954.421:161): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="gadgetfs" ino=7669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 76.255271][ T29] audit: type=1400 audit(1786277954.421:162): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 76.297671][ T5595] veth0_vlan: entered promiscuous mode [ 76.312788][ T5594] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.328569][ T5608] veth0_vlan: entered promiscuous mode [ 76.347230][ T5595] veth1_vlan: entered promiscuous mode [ 76.358399][ T5596] veth0_macvtap: entered promiscuous mode [ 76.382742][ T5608] veth1_vlan: entered promiscuous mode [ 76.401766][ T5596] veth1_macvtap: entered promiscuous mode [ 76.472810][ T5791] syzkaller0: entered promiscuous mode [ 76.478427][ T5791] syzkaller0: entered allmulticast mode [ 76.508794][ T5601] veth0_vlan: entered promiscuous mode [ 76.511206][ T5791] Zero length message leads to an empty skb [ 76.534578][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.558882][ T5791] bond1 (unregistering): Released all slaves [ 76.586628][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.597140][ T5595] veth0_macvtap: entered promiscuous mode [ 76.608505][ T5601] veth1_vlan: entered promiscuous mode [ 76.628459][ T5608] veth0_macvtap: entered promiscuous mode [ 76.641872][ T5595] veth1_macvtap: entered promiscuous mode [ 76.670688][ T63] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.682715][ T5608] veth1_macvtap: entered promiscuous mode [ 76.745006][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.798320][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.821888][ T1338] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.834145][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.869582][ T5601] veth0_macvtap: entered promiscuous mode [ 76.901892][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.915482][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.933514][ T5601] veth1_macvtap: entered promiscuous mode [ 76.936361][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.034792][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.081074][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.091287][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.104639][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.209491][ T1004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.325777][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.347178][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.363191][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.372370][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.429796][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.446133][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.466402][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.500700][ T1004] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.533274][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.540935][ T63] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.545662][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.567062][ T63] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.589583][ T1004] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.622881][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.657273][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.821631][ T5809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.119359][ T5615] Bluetooth: hci4: command tx timeout [ 78.130507][ T5615] Bluetooth: hci1: command tx timeout [ 78.131665][ T4916] Bluetooth: hci2: command tx timeout [ 78.209501][ T4916] Bluetooth: hci3: command tx timeout [ 78.209520][ T5615] Bluetooth: hci0: command tx timeout [ 78.700030][ T1159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.721768][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.736454][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.751122][ T5817] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size. [ 78.836793][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.878449][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.964951][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.232040][ T1159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.343992][ T5818] process 'syz.2.3' launched './file0' with NULL argv: empty string added [ 79.358146][ T5818] netlink: Conntrack attr has 4 unknown bytes [ 79.364352][ T5818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.750748][ T1159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.782172][ T3311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.217735][ T5828] bond1 (unregistering): Released all slaves [ 80.365772][ T5829] syzkaller0: entered promiscuous mode [ 80.397732][ T5829] syzkaller0: entered allmulticast mode [ 80.640364][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.752124][ T5836] overlayfs: failed to resolve './bus': -2 [ 80.850121][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.083482][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 81.130221][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 81.130238][ T29] audit: type=1400 audit(1786277959.511:235): avc: denied { mmap_zero } for pid=5834 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 81.182626][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.218141][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.245061][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 81.277806][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 81.287117][ T24] usb 5-1: Product: syz [ 81.291442][ T24] usb 5-1: Manufacturer: syz [ 81.310576][ T5863] bridge0: port 3(netdevsim0) entered blocking state [ 81.313186][ T24] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 81.340245][ T24] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 81.354300][ T24] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 81.363088][ T5863] bridge0: port 3(netdevsim0) entered disabled state [ 81.457216][ T5864] netlink: 'syz.2.19': attribute type 10 has an invalid length. [ 81.501736][ T5863] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 81.583139][ T979] cfg80211: failed to load regulatory.db [ 81.600882][ T5863] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 81.654068][ T5863] bridge0: port 3(netdevsim0) entered blocking state [ 81.661637][ T5863] bridge0: port 3(netdevsim0) entered forwarding state [ 81.780997][ T29] audit: type=1400 audit(1786277960.171:236): avc: denied { watch watch_reads } for pid=5848 comm="syz.4.16" path="/1" dev="tmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.834323][ T5849] input: syz0 as /devices/virtual/input/input5 [ 81.839961][ T5864] bridge0: port 3(netdevsim0) entered disabled state [ 81.848348][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.856461][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.911978][ T29] audit: type=1400 audit(1786277960.201:237): avc: denied { write } for pid=5848 comm="syz.4.16" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.936620][ T29] audit: type=1400 audit(1786277960.211:238): avc: denied { ioctl } for pid=5848 comm="syz.4.16" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.013360][ T29] audit: type=1400 audit(1786277960.361:239): avc: denied { unlink } for pid=5848 comm="syz.4.16" name="#1" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.061076][ T29] audit: type=1400 audit(1786277960.381:240): avc: denied { mount } for pid=5848 comm="syz.4.16" name="/" dev="overlay" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 82.093806][ T5864] bridge0: port 3(netdevsim0) entered blocking state [ 82.100659][ T5864] bridge0: port 3(netdevsim0) entered forwarding state [ 82.108501][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.115662][ T5864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.123098][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.130298][ T5864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.153837][ T29] audit: type=1400 audit(1786277960.431:241): avc: denied { nlmsg_write } for pid=5848 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 82.201183][ T29] audit: type=1326 audit(1786277960.431:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.4.16" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 82.204078][ T5864] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 82.246595][ T29] audit: type=1326 audit(1786277960.431:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.4.16" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 82.364761][ T979] usb 5-1: USB disconnect, device number 2 [ 82.422870][ T979] garmin_gps 5-1:1.0: device disconnected [ 82.474735][ T29] audit: type=1326 audit(1786277960.431:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5848 comm="syz.4.16" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 82.503030][ T5873] jffs2: notice: (5873) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 82.552481][ T5875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 83.219319][ T5727] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.279695][ T5720] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.419374][ T5727] usb 3-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.40 [ 83.450994][ T5727] usb 3-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.470940][ T5720] usb 1-1: Using ep0 maxpacket: 16 [ 83.502229][ T5727] usb 3-1: config 1 interface 0 has no altsetting 0 [ 83.502588][ T5720] usb 1-1: New USB device found, idVendor=0499, idProduct=474b, bcdDevice= 0.40 [ 83.552181][ T5720] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.577310][ T5720] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 83.579463][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.623029][ T5720] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 83.645737][ T5727] usb 3-1: Product: ꧘駭î»é–›é¿ŒíŽ¼â—‚刷멶훂ჸ繄➆ 瑦後꼗⼪疛ä®ê°¾ë•¾è •æ²®áº“㚇닻닚╞分ᜢ冥䩲䣫ë¿é¦•ã‰Šä¦†ï«Šâ“¼ï™ã§¤å„„ [ 83.660756][ T5720] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 83.716750][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.734735][ T5727] usb 3-1: Manufacturer: 듃謖편ꂅ㳎ì¨ï„…뛞⯛튋뫂ç˜á¾ à¸Œê€“ïžï¸Ÿè®½ä…°å‡§ä¤ªà§¾ì¬¨é¹€ã¸³ãž¥æ¤¡ç·ŽÎ¹ç›‘甹镃迈噲뾊ꦧꒃî¹éŸ”劖橧빀ḻճ鹆펾逻⾵ꊛ춋꜡æ€å‚‹è‰‘æ´éª”㌓Ւ䗽ä­ï´§ã”•ë½’咖ݔᒥȷî·é ¾ëƒ´â¾³â©¤î¦ éµÝ®î‚ã–Šï»­ä› è‹å‚–é©£æ¡²ï˜‹ï¤¯è„…é‘ [ 83.736296][ T5720] usb 1-1: Product: syz [ 83.824651][ T5720] usb 1-1: Manufacturer: syz [ 83.843254][ T5720] usb 1-1: SerialNumber: syz [ 83.867500][ T5727] usb 3-1: SerialNumber: ï“¿ [ 84.227650][ T5727] usbhid 3-1:1.0: can't add hid device: -71 [ 84.249914][ T5727] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 84.296387][ T5727] usb 3-1: USB disconnect, device number 2 [ 84.679591][ T4916] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.686394][ T24] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 84.733415][ T24] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 84.955597][ T5918] binder: 5914:5918 ioctl 4018620d 0 returned -22 [ 85.200746][ T5907] kvm: pic: non byte write [ 85.383580][ T5720] usb 1-1: USB disconnect, device number 2 [ 85.420843][ T5727] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.494150][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.622900][ T5727] usb 2-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 85.667177][ T5727] usb 2-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 85.722621][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.742867][ T5727] usb 2-1: Product: syz [ 85.756876][ T5727] usb 2-1: Manufacturer: syz [ 85.770720][ T5727] usb 2-1: SerialNumber: syz [ 85.899677][ T5720] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 86.079989][ T5720] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.120026][ T5720] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.160851][ T5720] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.195066][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.224060][ T5720] usb 1-1: Product: syz [ 86.241968][ T5720] usb 1-1: Manufacturer: syz [ 86.315777][ T5720] usb 1-1: SerialNumber: syz [ 86.435210][ T5720] usb 1-1: 0:2 : does not exist [ 86.459032][ T5720] usb 1-1: unit 9 not found! [ 86.475616][ T5948] qrtr: Invalid version 76 [ 87.201508][ T5720] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 87.266075][ T5720] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 87.332879][ T4916] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.340042][ T24] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 87.375571][ T24] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 87.435020][ T5727] usb 2-1: USB disconnect, device number 2 [ 87.926744][ T5720] usb 1-1: USB disconnect, device number 3 [ 88.022693][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 88.022704][ T29] audit: type=1400 audit(1786277966.411:291): avc: denied { write } for pid=5943 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.129892][ T5706] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.300320][ T5706] usb 3-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 88.318992][ T29] audit: type=1400 audit(1786277966.701:292): avc: denied { write } for pid=5964 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.347614][ T5706] usb 3-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 88.371991][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.381426][ T5706] usb 3-1: Product: syz [ 88.391573][ T5706] usb 3-1: Manufacturer: syz [ 88.414236][ T5706] usb 3-1: SerialNumber: syz [ 88.546384][ T29] audit: type=1400 audit(1786277966.931:293): avc: denied { create } for pid=5969 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.598734][ T5972] omfs: Invalid superblock (0) [ 88.609933][ T5974] jffs2: notice: (5974) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 88.823916][ T5972] xt_connbytes: Forcing CT accounting to be enabled [ 88.864851][ T29] audit: type=1400 audit(1786277966.981:294): avc: denied { mount } for pid=5965 comm="syz.3.36" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 88.959035][ T5974] syz_tun: entered allmulticast mode [ 89.091709][ T5974] syz_tun: left allmulticast mode [ 89.114005][ T29] audit: type=1400 audit(1786277967.501:295): avc: denied { bind } for pid=5973 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.164685][ T29] audit: type=1400 audit(1786277967.501:296): avc: denied { setopt } for pid=5973 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.234782][ T5706] usb 3-1: USB disconnect, device number 3 [ 89.483980][ T29] audit: type=1400 audit(1786277967.871:297): avc: denied { append } for pid=5965 comm="syz.3.36" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.689021][ T29] audit: type=1400 audit(1786277968.071:298): avc: denied { create } for pid=6000 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 89.739873][ T29] audit: type=1400 audit(1786277968.131:299): avc: denied { getopt } for pid=6000 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 89.816732][ T29] audit: type=1400 audit(1786277968.201:300): avc: denied { write } for pid=5968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.875594][ T5983] nbd3: detected capacity change from 0 to 8 [ 89.959652][ T5615] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.967999][ T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 89.982728][ T24] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 92.084760][ T5983] block nbd3: shutting down sockets [ 92.104760][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.114491][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 92.123142][ T4916] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.160990][ T2071] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.170885][ T2071] Buffer I/O error on dev nbd3, logical block 0, async page read [ 92.181431][ T2071] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.192486][ T2071] Buffer I/O error on dev nbd3, logical block 0, async page read [ 92.201583][ T2071] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.211790][ T2071] Buffer I/O error on dev nbd3, logical block 0, async page read [ 92.220613][ T2071] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.230337][ T2071] Buffer I/O error on dev nbd3, logical block 0, async page read [ 92.238332][ T2071] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.248740][ T2071] Buffer I/O error on dev nbd3, logical block 0, async page read [ 92.257584][ T24] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 92.257629][ T24] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 92.273040][ T2071] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.282903][ T2071] Buffer I/O error on dev nbd3, logical block 0, async page read [ 92.291198][ T2071] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.300788][ T2071] Buffer I/O error on dev nbd3, logical block 0, async page read [ 92.309669][ T5904] ldm_validate_partition_table(): Disk read failed. [ 92.326461][ T2071] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.336049][ T2071] Buffer I/O error on dev nbd3, logical block 0, async page read [ 92.344115][ T2071] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.353685][ T2071] Buffer I/O error on dev nbd3, logical block 0, async page read [ 92.361842][ T5904] Dev nbd3: unable to read RDB block 0 [ 92.477537][ T5904] nbd3: unable to read partition table [ 92.524334][ T5904] nbd3: partition table beyond EOD, truncated [ 92.551333][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.48'. [ 92.565967][ T4966] ldm_validate_partition_table(): Disk read failed. [ 92.598489][ T4966] Dev nbd3: unable to read RDB block 0 [ 92.599554][ T5720] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 92.615053][ T4966] nbd3: unable to read partition table [ 92.647164][ T4966] nbd3: partition table beyond EOD, truncated [ 92.655338][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.48'. [ 92.680543][ T5904] ldm_validate_partition_table(): Disk read failed. [ 92.693915][ T6044] netlink: 'syz.4.48': attribute type 11 has an invalid length. [ 92.708735][ T5904] Dev nbd3: unable to read RDB block 0 [ 92.739789][ T5904] nbd3: unable to read partition table [ 92.747768][ T6044] netlink: 'syz.4.48': attribute type 7 has an invalid length. [ 92.766630][ T5904] nbd3: partition table beyond EOD, truncated [ 92.790912][ T5720] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 92.842711][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.902712][ T5720] usb 3-1: config 0 descriptor?? [ 92.986552][ T5720] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 93.166277][ T6058] syz.4.51 uses obsolete (PF_INET,SOCK_PACKET) [ 93.175788][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 93.175807][ T29] audit: type=1400 audit(1786277971.561:320): avc: denied { bind } for pid=6057 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.368178][ T29] audit: type=1400 audit(1786277971.751:321): avc: denied { write } for pid=6061 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.492306][ T29] audit: type=1400 audit(1786277971.881:322): avc: denied { write } for pid=6064 comm="syz.1.52" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 93.784496][ T5720] usb 3-1: USB disconnect, device number 4 [ 93.920908][ T29] audit: type=1400 audit(1786277972.311:323): avc: denied { map } for pid=6051 comm="syz.3.50" path="socket:[10368]" dev="sockfs" ino=10368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 94.237773][ T6081] binder: 6078:6081 ioctl c0306201 0 returned -14 [ 94.255914][ T29] audit: type=1400 audit(1786277972.601:324): avc: denied { set_context_mgr } for pid=6078 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 94.508059][ T29] audit: type=1400 audit(1786277972.891:325): avc: denied { read write } for pid=6082 comm="syz.1.54" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 94.606029][ T29] audit: type=1400 audit(1786277972.891:326): avc: denied { open } for pid=6082 comm="syz.1.54" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 94.673401][ T29] audit: type=1400 audit(1786277972.961:327): avc: denied { read } for pid=6082 comm="syz.1.54" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 94.731802][ T1209] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.748274][ T29] audit: type=1400 audit(1786277972.961:328): avc: denied { open } for pid=6082 comm="syz.1.54" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 94.842532][ T29] audit: type=1400 audit(1786277972.961:329): avc: denied { ioctl } for pid=6082 comm="syz.1.54" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x7009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 94.998769][ T1209] usb 1-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 95.073569][ T1209] usb 1-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 95.171074][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.199230][ T1209] usb 1-1: Product: syz [ 95.209281][ T1209] usb 1-1: Manufacturer: syz [ 95.215944][ T1209] usb 1-1: SerialNumber: syz [ 95.319554][ T4916] Bluetooth: hci4: command 0x0405 tx timeout [ 95.319828][ T24] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 95.332062][ T24] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 95.429466][ T5706] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 95.687624][ T1209] usb 1-1: USB disconnect, device number 5 [ 95.721176][ T5706] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.737011][ T5706] usb 2-1: not running at top speed; connect to a high speed hub [ 95.758365][ T5706] usb 2-1: New USB device found, idVendor=1410, idProduct=a006, bcdDevice=f7.4e [ 95.780518][ T5706] usb 2-1: config 5 has an invalid interface number: 89 but max is 2 [ 95.798888][ T5706] usb 2-1: config 5 has an invalid descriptor of length 255, skipping remainder of the config [ 95.819638][ T5706] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 3 [ 95.845370][ T5706] usb 2-1: config 5 has no interface number 0 [ 95.863187][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.882296][ T5706] usb 2-1: Product: syz [ 95.894884][ T5706] usb 2-1: Manufacturer: syz [ 95.903234][ T5706] usb 2-1: SerialNumber: syz [ 95.964903][ T6110] base or size exceeds the MTRR width [ 95.977664][ T6110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.60'. [ 95.987736][ T6110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.60'. [ 96.143800][ T6117] netlink: 'syz.4.62': attribute type 10 has an invalid length. [ 96.180103][ T6117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.346271][ T6101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 96.432605][ T6101] openvswitch: netlink: EtherType 0 is less than min 600 [ 96.479124][ T6117] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 97.379516][ T1209] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 97.560481][ T1209] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 97.594797][ T1209] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 97.628596][ T1209] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 97.664880][ T1209] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.706760][ T1209] usb 5-1: config 0 has no interface number 0 [ 97.745693][ T1209] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 97.778229][ T1209] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 97.824729][ T1209] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 12398, setting to 1023 [ 97.858985][ T1209] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 97.910953][ T5727] hid-generic A180:68592:A1800000.0001: hidraw0: HID v685.91 Device [syz1] on syz0 [ 97.934643][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.965376][ T1209] usb 5-1: config 0 descriptor?? [ 98.050178][ T1209] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 98.248999][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 98.249037][ T29] audit: type=1400 audit(1786277976.631:354): avc: denied { create } for pid=6111 comm="syz.4.62" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.336669][ T29] audit: type=1400 audit(1786277976.661:355): avc: denied { map } for pid=6111 comm="syz.4.62" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.425426][ T29] audit: type=1400 audit(1786277976.661:356): avc: denied { write } for pid=6111 comm="syz.4.62" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.528905][ T29] audit: type=1400 audit(1786277976.701:357): avc: denied { sqpoll } for pid=6111 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 99.080679][ T3311] usb 5-1: Failed to submit usb control message: -110 [ 99.107097][ T3311] usb 5-1: unable to send the bmi data to the device: -110 [ 99.139133][ T3311] usb 5-1: unable to get target info from device [ 99.162327][ T3311] usb 5-1: could not get target info (-110) [ 99.182266][ T3311] usb 5-1: could not probe fw (-110) [ 99.234355][ T5706] usb 2-1: USB disconnect, device number 3 [ 99.486044][ T29] audit: type=1400 audit(1786277977.871:358): avc: denied { mount } for pid=6167 comm="syz.2.73" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 99.509025][ T29] audit: type=1400 audit(1786277977.871:359): avc: denied { search } for pid=6167 comm="syz.2.73" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.537157][ T29] audit: type=1400 audit(1786277977.871:360): avc: denied { search } for pid=6167 comm="syz.2.73" name="per_cpu" dev="tracefs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.588778][ T29] audit: type=1400 audit(1786277977.871:361): avc: denied { search } for pid=6167 comm="syz.2.73" name="cpu0" dev="tracefs" ino=472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.621371][ T29] audit: type=1400 audit(1786277977.871:362): avc: denied { read } for pid=6167 comm="syz.2.73" name="trace_pipe" dev="tracefs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 99.647590][ T29] audit: type=1400 audit(1786277977.871:363): avc: denied { open } for pid=6167 comm="syz.2.73" path="/17/dir0/per_cpu/cpu0/trace_pipe" dev="tracefs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 99.699835][ T5706] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.863701][ T6174] binder: 6172:6174 ioctl c0306201 0 returned -14 [ 100.301068][ T5706] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 100.313500][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.336373][ T5706] usb 4-1: config 0 descriptor?? [ 100.413509][ T9] usb 5-1: USB disconnect, device number 3 [ 100.442397][ T5727] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 100.758136][ T5706] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 100.790998][ T5727] usb 3-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 101.049776][ T5727] usb 3-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 101.233948][ T6185] netlink: 'syz.3.72': attribute type 1 has an invalid length. [ 101.282623][ T6190] fuse: Bad value for 'fd' [ 101.339745][ T6181] tmpfs: Unknown parameter 'grpquota_iÚrØA' [ 101.958465][ T6192] Invalid source name [ 101.962687][ T6192] UBIFS error (pid: 6192): cannot open "./file0", error -22 [ 102.129196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.159191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.356555][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.366569][ T5727] usb 3-1: Product: syz [ 102.526762][ T5727] usb 3-1: Manufacturer: syz [ 102.549684][ T5727] usb 3-1: SerialNumber: syz [ 102.909191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 103.011898][ T5727] usb 3-1: can't set config #1, error -71 [ 103.046262][ T5727] usb 3-1: USB disconnect, device number 5 [ 103.334424][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 103.334445][ T29] audit: type=1400 audit(1786277981.721:379): avc: denied { unlink } for pid=5594 comm="syz-executor" name="file0" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.482535][ T29] audit: type=1400 audit(1786277981.871:380): avc: denied { bind } for pid=6209 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.517562][ T29] audit: type=1400 audit(1786277981.901:381): avc: denied { write } for pid=6209 comm="syz.2.81" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 104.183964][ T29] audit: type=1400 audit(1786277982.571:382): avc: denied { append } for pid=6212 comm="syz.1.83" name="comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.338093][ T5706] usb 4-1: USB disconnect, device number 2 [ 105.482545][ T29] audit: type=1400 audit(1786277983.851:383): avc: denied { map_create } for pid=6226 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.502347][ T29] audit: type=1400 audit(1786277983.851:384): avc: denied { map_read map_write } for pid=6226 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.526114][ T6232] qrtr: Invalid version 76 [ 107.281341][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.874819][ T29] audit: type=1400 audit(1786277986.251:385): avc: denied { allowed } for pid=6254 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 108.000759][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 108.015754][ T29] audit: type=1400 audit(1786277986.401:386): avc: denied { read write } for pid=6255 comm="syz.2.91" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 108.054470][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.066312][ T24] usb 1-1: config 0 descriptor?? [ 108.075991][ T24] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 108.077462][ T29] audit: type=1400 audit(1786277986.401:387): avc: denied { open } for pid=6255 comm="syz.2.91" path="/22/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 108.179866][ T5332] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.206911][ T29] audit: type=1400 audit(1786277986.431:388): avc: denied { ioctl } for pid=6255 comm="syz.2.91" path="/22/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 108.339795][ T5332] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 108.369254][ T5692] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 108.377928][ T5332] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.409596][ T5332] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.428265][ T5332] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 108.462678][ T5332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 108.477391][ T5332] usb 5-1: Product: syz [ 108.489243][ T5332] usb 5-1: Manufacturer: syz [ 108.517259][ T5332] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 108.539935][ T5332] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 108.550576][ T5692] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 108.568618][ T5332] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 108.584184][ T5692] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.611252][ T5692] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 108.649961][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 108.649976][ T29] audit: type=1400 audit(1786277987.041:392): avc: denied { setopt } for pid=6270 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.651221][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.705299][ T5692] usb 3-1: Product: syz [ 108.712285][ T5692] usb 3-1: Manufacturer: syz [ 108.729660][ T5692] usb 3-1: SerialNumber: syz [ 108.767971][ T5692] usb-storage 3-1:1.0: USB Mass Storage device detected [ 108.806841][ T6260] input: syz0 as /devices/virtual/input/input6 [ 108.817948][ T5692] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 108.834288][ T5692] scsi host1: usb-storage 3-1:1.0 [ 108.892443][ T24] usb 1-1: USB disconnect, device number 6 [ 108.963593][ T29] audit: type=1326 audit(1786277987.351:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6259 comm="syz.4.93" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 109.049058][ T29] audit: type=1326 audit(1786277987.391:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6259 comm="syz.4.93" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 109.082863][ T5727] usb 5-1: USB disconnect, device number 4 [ 109.102209][ T5727] garmin_gps 5-1:1.0: device disconnected [ 109.124023][ T29] audit: type=1326 audit(1786277987.391:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6259 comm="syz.4.93" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 109.183914][ T29] audit: type=1326 audit(1786277987.391:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6259 comm="syz.4.93" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 109.248725][ T29] audit: type=1326 audit(1786277987.391:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6259 comm="syz.4.93" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 109.324779][ T29] audit: type=1326 audit(1786277987.391:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6259 comm="syz.4.93" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 109.386403][ T29] audit: type=1326 audit(1786277987.391:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6259 comm="syz.4.93" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 109.413110][ T29] audit: type=1326 audit(1786277987.391:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6259 comm="syz.4.93" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 109.502966][ T29] audit: type=1326 audit(1786277987.391:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6259 comm="syz.4.93" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 110.411882][ T6297] qrtr: Invalid version 76 [ 111.973467][ T1209] usb 3-1: USB disconnect, device number 6 [ 113.007629][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 113.103684][ T6327] kvm: pic: non byte write [ 113.219622][ T979] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.399938][ T979] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 113.424425][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.450024][ T979] usb 1-1: config 0 descriptor?? [ 113.482385][ T979] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 114.027818][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 114.027958][ T29] audit: type=1400 audit(1786277992.411:420): avc: denied { bind } for pid=6332 comm="syz.3.111" lport=64 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.290005][ T6334] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 114.290655][ T29] audit: type=1400 audit(1786277992.451:421): avc: denied { node_bind } for pid=6332 comm="syz.3.111" saddr=8003:0:20:0:232f:6672:6f6e:7465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 114.418043][ T29] audit: type=1400 audit(1786277992.801:422): avc: denied { listen } for pid=6331 comm="syz.2.112" path="/24/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 114.490671][ T29] audit: type=1400 audit(1786277992.851:423): avc: denied { accept } for pid=6331 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 114.543092][ T29] audit: type=1400 audit(1786277992.851:424): avc: denied { write } for pid=6331 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 114.565823][ T29] audit: type=1400 audit(1786277992.921:425): avc: denied { read } for pid=6331 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 114.596321][ T979] usb 1-1: USB disconnect, device number 7 [ 114.622425][ T29] audit: type=1400 audit(1786277992.931:426): avc: denied { read } for pid=6337 comm="syz.1.113" name="sg0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 114.652868][ T29] audit: type=1400 audit(1786277992.931:427): avc: denied { open } for pid=6337 comm="syz.1.113" path="/dev/sg0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 114.746407][ T29] audit: type=1400 audit(1786277993.131:428): avc: denied { ioctl } for pid=6337 comm="syz.1.113" path="/dev/sg0" dev="devtmpfs" ino=805 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 115.064283][ T6350] qrtr: Invalid version 76 [ 115.641547][ T29] audit: type=1400 audit(1786277994.021:429): avc: denied { write } for pid=6353 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 115.725540][ T6354] CIFS mount error: No usable UNC path provided in device string! [ 115.725540][ T6354] [ 115.752269][ T6357] ======================================================= [ 115.752269][ T6357] WARNING: The mand mount option has been deprecated and [ 115.752269][ T6357] and is ignored by this kernel. Remove the mand [ 115.752269][ T6357] option from the mount to silence this warning. [ 115.752269][ T6357] ======================================================= [ 115.794714][ T6354] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 115.817164][ T6362] overlayfs: failed to resolve './bus:uuid=on': -2 [ 115.836252][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 115.933362][ T6364] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6364 comm=syz.0.121 [ 115.945910][ T6364] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6364 comm=syz.0.121 [ 116.432655][ T6344] overlayfs: failed to resolve './bus': -2 [ 116.489472][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.122'. [ 116.772684][ T6354] smpboot: CPU 1 is now offline [ 117.112283][ T6358] overlayfs: failed to resolve './bus': -2 [ 117.519266][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 117.719796][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 117.750370][ T6371] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 117.795218][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.847305][ T10] usb 3-1: config 0 descriptor?? [ 117.908633][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 118.373578][ T1209] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.509139][ T6395] qrtr: Invalid version 76 [ 118.539383][ T1209] usb 4-1: Using ep0 maxpacket: 16 [ 118.596180][ T1209] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 118.631007][ T1209] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 118.657508][ T1209] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 118.698575][ T1209] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.741283][ T1209] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 118.771524][ T1209] usb 4-1: config 0 has no interface number 0 [ 118.793358][ T10] usb 3-1: USB disconnect, device number 7 [ 118.808649][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.908365][ T1209] usb 4-1: Product: syz [ 118.938549][ T1209] usb 4-1: Manufacturer: syz [ 118.963111][ T1209] usb 4-1: SerialNumber: syz [ 118.989733][ T1209] usb 4-1: config 0 descriptor?? [ 119.005269][ T6399] syzkaller0: entered promiscuous mode [ 119.030737][ T6399] syzkaller0: entered allmulticast mode [ 119.120718][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 119.120730][ T29] audit: type=1400 audit(1786277997.511:435): avc: denied { create } for pid=6401 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.154810][ T6402] netlink: 'syz.4.133': attribute type 8 has an invalid length. [ 119.297824][ T1209] usb 4-1: USB disconnect, device number 3 [ 119.348900][ T6397] overlay: filesystem on ./file0 not supported as upperdir [ 119.461783][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'. [ 119.614690][ T29] audit: type=1400 audit(1786277998.001:436): avc: denied { append } for pid=6413 comm="syz.4.137" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.656243][ T6414] syz.4.137 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 119.801236][ T29] audit: type=1400 audit(1786277998.041:437): avc: denied { ioctl } for pid=6413 comm="syz.4.137" path="/dev/usbmon0" dev="devtmpfs" ino=715 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.190600][ T29] audit: type=1400 audit(1786277998.571:438): avc: denied { listen } for pid=6422 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 120.239238][ T5727] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.319348][ T1209] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 120.368982][ T6434] qrtr: Invalid version 76 [ 120.542982][ T5727] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 120.573317][ T5727] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.600732][ T1209] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 120.616308][ T5727] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 120.640501][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.670942][ T5727] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 120.692617][ T1209] usb 1-1: config 0 descriptor?? [ 120.785063][ T1209] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 120.797532][ T5727] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.860645][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.123916][ T6421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.165672][ T6421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.472414][ T5727] gud 2-1:1.0: probe with driver gud failed with error -71 [ 121.546907][ T5727] usb 2-1: USB disconnect, device number 4 [ 121.598509][ T6449] overlayfs: failed to resolve './bus': -2 [ 121.615162][ T1209] usb 1-1: USB disconnect, device number 8 [ 122.086254][ T29] audit: type=1400 audit(1786278000.471:439): avc: denied { append } for pid=6462 comm="syz.4.152" name="frontend0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 122.206279][ T29] audit: type=1400 audit(1786278000.551:440): avc: denied { relabelfrom } for pid=6462 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 122.312944][ T29] audit: type=1400 audit(1786278000.561:441): avc: denied { relabelto } for pid=6462 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 122.717581][ T6473] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 122.749225][ T1209] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 122.923614][ T1209] usb 1-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 122.954099][ T1209] usb 1-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 123.007748][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.027433][ T1209] usb 1-1: Product: syz [ 123.037998][ T1209] usb 1-1: Manufacturer: syz [ 123.047485][ T1209] usb 1-1: SerialNumber: syz [ 123.571156][ T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 123.780010][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.813093][ T6483] overlay: filesystem on ./file0 not supported as upperdir [ 123.839718][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.892790][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.955801][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.976726][ T1209] usb 1-1: USB disconnect, device number 9 [ 124.003400][ T10] usb 4-1: Product: syz [ 124.027997][ T10] usb 4-1: Manufacturer: syz [ 124.063153][ T10] usb 4-1: SerialNumber: syz [ 124.117256][ T10] usb 4-1: 0:2 : does not exist [ 124.148327][ T10] usb 4-1: unit 9 not found! [ 124.206526][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 124.250685][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 124.276787][ T6498] netlink: 'syz.1.163': attribute type 11 has an invalid length. [ 124.349805][ T10] usb 4-1: 4:0: cannot get min/max values for control 1 (id 4) [ 124.370020][ T6498] netlink: 'syz.1.163': attribute type 7 has an invalid length. [ 124.396456][ T10] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4) [ 124.575332][ T10] usb 4-1: USB disconnect, device number 4 [ 124.685490][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.977561][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.386343][ T29] audit: type=1400 audit(1786278006.771:442): avc: denied { read } for pid=6516 comm="syz.1.169" name="mouse0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 128.554397][ T29] audit: type=1400 audit(1786278006.771:443): avc: denied { open } for pid=6516 comm="syz.1.169" path="/dev/input/mouse0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 128.611079][ T6520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.170'. [ 128.659769][ T1209] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 128.751075][ T29] audit: type=1400 audit(1786278006.831:444): avc: denied { ioctl } for pid=6516 comm="syz.1.169" path="/dev/input/mouse0" dev="devtmpfs" ino=922 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 128.898861][ T1209] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 129.007399][ T1209] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.055491][ T29] audit: type=1400 audit(1786278006.881:445): avc: denied { write } for pid=6519 comm="syz.2.170" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 129.116798][ T1209] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 129.265905][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.298342][ T29] audit: type=1400 audit(1786278006.881:446): avc: denied { open } for pid=6519 comm="syz.2.170" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 129.375872][ T1209] usb 1-1: Product: syz [ 129.409230][ T1209] usb 1-1: Manufacturer: syz [ 129.446387][ T1209] usb 1-1: SerialNumber: syz [ 130.015368][ T29] audit: type=1400 audit(1786278007.321:447): avc: denied { mount } for pid=6515 comm="syz.3.168" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 131.417536][ T29] audit: type=1400 audit(1786278007.411:448): avc: denied { bind } for pid=6526 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.513069][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.529520][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.703522][ T29] audit: type=1400 audit(1786278007.481:449): avc: denied { write } for pid=6526 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.942363][ T29] audit: type=1400 audit(1786278009.441:450): avc: denied { node_bind } for pid=6537 comm="syz.4.175" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 132.108932][ T29] audit: type=1400 audit(1786278009.671:451): avc: denied { map } for pid=6535 comm="syz.3.174" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.208594][ T6551] qrtr: Invalid version 76 [ 132.320566][ T6553] capability: warning: `syz.3.178' uses deprecated v2 capabilities in a way that may be insecure [ 132.550728][ T5706] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 132.765139][ T5706] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.816155][ T5706] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.878608][ T1209] usb 1-1: can't set config #1, error -71 [ 132.888186][ T5706] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.947373][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 132.965317][ T1209] usb 1-1: USB disconnect, device number 10 [ 132.996395][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.194546][ T5706] usb 3-1: Product: syz [ 133.221714][ T5706] usb 3-1: Manufacturer: syz [ 133.251566][ T5706] usb 3-1: SerialNumber: syz [ 133.295671][ T5706] usb 3-1: 0:2 : does not exist [ 133.329955][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 133.340391][ T5706] usb 3-1: unit 9 not found! [ 133.363343][ T10] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 133.423204][ T10] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 133.678924][ T5706] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 133.689513][ T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 134.017739][ T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 134.032412][ T5706] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4) [ 134.060991][ T6576] netlink: 'syz.0.186': attribute type 11 has an invalid length. [ 134.088116][ T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 135.352030][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 135.491678][ T10] usb 2-1: config 0 has no interface number 0 [ 135.552164][ T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 135.607357][ T5706] usb 3-1: USB disconnect, device number 8 [ 135.673508][ T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 135.794175][ T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 135.884617][ T10] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.930421][ T29] audit: type=1400 audit(1786278014.311:452): avc: denied { read write } for pid=6593 comm="syz.1.190" name="video8" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 135.970207][ T5727] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 136.018807][ T10] usb 2-1: config 0 interface 125 has no altsetting 0 [ 136.035127][ T6581] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 136.067802][ T10] usb 2-1: config 0 interface 125 has no altsetting 2 [ 136.093294][ T10] usb 2-1: string descriptor 0 read error: -71 [ 136.100488][ T29] audit: type=1400 audit(1786278014.311:453): avc: denied { open } for pid=6593 comm="syz.1.190" path="/dev/video8" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 136.170924][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.199024][ T5727] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 136.255232][ T10] usb 2-1: config 0 descriptor?? [ 136.269737][ T5706] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 136.281995][ T5727] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.330041][ T10] usb 2-1: can't set config #0, error -71 [ 136.348980][ T29] audit: type=1400 audit(1786278014.351:454): avc: denied { ioctl } for pid=6593 comm="syz.1.190" path="/dev/video8" dev="devtmpfs" ino=952 ioctlcmd=0x5604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 136.396848][ T5727] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.478052][ T10] usb 2-1: USB disconnect, device number 6 [ 136.510042][ T5706] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 136.519881][ T5727] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 136.578171][ T6601] netlink: 11870 bytes leftover after parsing attributes in process `syz.0.192'. [ 136.592978][ T5706] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.617912][ T29] audit: type=1400 audit(1786278014.821:455): avc: denied { create } for pid=6596 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 136.651441][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 136.660218][ T5706] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.684218][ T5727] usb 5-1: Product: syz [ 136.707488][ T5727] usb 5-1: Manufacturer: syz [ 136.728850][ T5706] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 136.753350][ T29] audit: type=1400 audit(1786278014.821:456): avc: denied { read } for pid=6596 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 136.790732][ T5727] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 136.841756][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 136.854026][ T5727] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 136.874274][ T5706] usb 3-1: Product: syz [ 136.902159][ T29] audit: type=1400 audit(1786278014.941:457): avc: denied { associate } for pid=6598 comm="syz.0.192" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 136.932608][ T5706] usb 3-1: Manufacturer: syz [ 136.946166][ T5727] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 136.985102][ T5706] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 137.003020][ T6588] input: syz0 as /devices/virtual/input/input7 [ 137.412924][ T6591] input: syz0 as /devices/virtual/input/input8 [ 137.428317][ T5706] garmin_gps ttyUSB1: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 137.512076][ T29] audit: type=1326 audit(1786278015.901:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.4.188" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 137.568617][ T5706] garmin_gps ttyUSB1: probe with driver garmin_gps failed with error -8 [ 138.033005][ T6615] netlink: Conntrack attr has 4 unknown bytes [ 138.039432][ T6615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.213153][ T29] audit: type=1326 audit(1786278015.941:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.4.188" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 138.325778][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.196'. [ 138.463859][ T5706] usb 5-1: USB disconnect, device number 5 [ 138.476376][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.196'. [ 138.489787][ T29] audit: type=1326 audit(1786278015.941:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.4.188" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 138.518852][ T5706] garmin_gps 5-1:1.0: device disconnected [ 138.530374][ T6622] audit: audit_backlog=65 > audit_backlog_limit=64 [ 138.617228][ T5699] usb 3-1: USB disconnect, device number 9 [ 138.646540][ T5699] garmin_gps 3-1:1.0: device disconnected [ 138.799190][ T5727] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 138.949716][ T5727] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 138.961128][ T5727] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.973572][ T5727] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7 [ 138.987123][ T5727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 138.998757][ T5727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 139.009096][ T5727] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 139.024171][ T5727] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.032901][ T5727] usb 2-1: Manufacturer: syz [ 139.041022][ T5727] usb 2-1: config 0 descriptor?? [ 139.270670][ T6622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.336295][ T6622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.355994][ T6631] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 139.413834][ T6622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.515116][ T6622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.329102][ T5727] usb 2-1: USB disconnect, device number 7 [ 141.277538][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'. [ 141.371345][ T6647] program syz.4.205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.453664][ T5699] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 141.495869][ T6647] warning: `syz.4.205' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 141.641964][ T5699] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.668442][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 141.668466][ T29] audit: type=1400 audit(1786278020.051:543): avc: denied { map } for pid=6644 comm="syz.4.205" path="socket:[12495]" dev="sockfs" ino=12495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 141.731267][ T5699] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.773134][ T5699] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.841617][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.874746][ T5699] usb 1-1: Product: syz [ 141.904254][ T5699] usb 1-1: Manufacturer: syz [ 141.980889][ T5699] usb 1-1: SerialNumber: syz [ 142.027196][ T5699] usb 1-1: 0:2 : does not exist [ 142.052744][ T5699] usb 1-1: unit 9 not found! [ 142.232435][ T5699] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 142.428194][ T5699] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 142.469521][ T5727] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.577260][ T5699] usb 1-1: USB disconnect, device number 11 [ 142.643405][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.674286][ T5727] usb 4-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 142.707962][ T5727] usb 4-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 142.749609][ T6599] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 142.781741][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.819092][ T5727] usb 4-1: Product: syz [ 142.834909][ T5727] usb 4-1: Manufacturer: syz [ 142.856065][ T5727] usb 4-1: SerialNumber: syz [ 142.897471][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.906962][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.950879][ T6599] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 142.969675][ T5699] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 142.995119][ T6599] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.054829][ T6599] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.359357][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 143.375024][ T6599] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 143.398675][ T5699] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.449003][ T5699] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.492609][ T6599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 143.519320][ T5699] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.556027][ T6599] usb 5-1: Product: syz [ 143.580632][ T6599] usb 5-1: Manufacturer: syz [ 143.600990][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.644953][ T6599] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 143.659848][ T5699] usb 1-1: Product: syz [ 143.692508][ T5699] usb 1-1: Manufacturer: syz [ 143.707086][ T6599] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 143.824090][ T5699] usb 1-1: SerialNumber: syz [ 143.850252][ T6668] input: syz0 as /devices/virtual/input/input9 [ 143.896375][ T5699] usb 1-1: 0:2 : does not exist [ 143.907651][ T6599] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 143.934514][ T6653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.961191][ T5699] usb 1-1: unit 9 not found! [ 144.053203][ T6653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.099349][ T29] audit: type=1326 audit(1786278022.461:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.4.211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 144.237455][ T5727] usb 4-1: USB disconnect, device number 6 [ 144.321338][ T29] audit: type=1326 audit(1786278022.461:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.4.211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 144.349723][ T6643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.365778][ T9] usb 5-1: USB disconnect, device number 6 [ 144.416429][ T6643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.435132][ T9] garmin_gps 5-1:1.0: device disconnected [ 144.514658][ T29] audit: type=1326 audit(1786278022.461:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.4.211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 144.666139][ T29] audit: type=1326 audit(1786278022.461:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.4.211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 144.884387][ T6643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.923646][ T6643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.259658][ T3381] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.295111][ T29] audit: type=1326 audit(1786278022.461:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.4.211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 145.324183][ T3381] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.369953][ T3381] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.417645][ T3381] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.428381][ T6643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.457302][ T6643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.478133][ T29] audit: type=1326 audit(1786278022.481:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.4.211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 145.675108][ T5699] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 145.803759][ T29] audit: type=1326 audit(1786278022.481:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.4.211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 145.907021][ T5699] usb 1-1: USB disconnect, device number 12 [ 146.029241][ T5788] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 146.966762][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.297680][ T29] audit: type=1326 audit(1786278022.481:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.4.211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 147.443454][ T5788] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 147.532850][ T5788] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.723092][ T29] audit: type=1326 audit(1786278022.481:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.4.211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 147.976130][ T5788] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 148.066003][ T6704] binder: 6699:6704 unknown command 0 [ 148.073499][ T6704] binder: 6699:6704 ioctl c0306201 200000000180 returned -22 [ 148.427076][ T5788] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 148.597860][ T5788] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.621201][ T29] audit: type=1326 audit(1786278022.481:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.4.211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 148.713895][ T5788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.756301][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 148.815575][ T29] audit: type=1326 audit(1786278022.481:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.4.211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 148.854291][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'. [ 148.868369][ T5788] usb 4-1: can't set config #1, error -71 [ 148.911702][ T5788] usb 4-1: USB disconnect, device number 7 [ 148.940263][ T5699] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 149.001471][ T6713] netlink: 'syz.2.225': attribute type 11 has an invalid length. [ 149.023281][ T29] audit: type=1326 audit(1786278022.481:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.4.211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 149.071568][ T6713] netlink: 'syz.2.225': attribute type 7 has an invalid length. [ 149.150690][ T5699] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 149.184073][ T5699] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.197560][ T29] audit: type=1326 audit(1786278022.481:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.4.211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f818b79e0d9 code=0x7ffc0000 [ 149.249568][ T5699] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.295875][ T5699] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 149.352272][ T29] audit: type=1326 audit(1786278022.591:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.4.211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f818b75e90e code=0x7ffc0000 [ 149.438270][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 149.451885][ T5788] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 149.488682][ T5699] usb 1-1: Product: syz [ 149.519005][ T5699] usb 1-1: Manufacturer: syz [ 149.551705][ T5699] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 149.569001][ T29] audit: type=1326 audit(1786278022.691:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.4.211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f818b75e90e code=0x7ffc0000 [ 149.607172][ T5699] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 149.637199][ T5699] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 149.659358][ T5788] usb 4-1: device descriptor read/64, error -71 [ 149.725782][ T29] audit: type=1326 audit(1786278022.791:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.4.211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f818b75e90e code=0x7ffc0000 [ 149.778180][ T6710] input: syz0 as /devices/virtual/input/input10 [ 149.801833][ T5787] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 149.872211][ T29] audit: type=1326 audit(1786278022.891:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.4.211" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f818b75e90e code=0x7ffc0000 [ 149.914630][ T5699] usb 1-1: USB disconnect, device number 13 [ 149.923464][ T5699] garmin_gps 1-1:1.0: device disconnected [ 149.960365][ T5788] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 149.982509][ T5787] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.021115][ T5787] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.055998][ T5787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.092655][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.112059][ T5787] usb 3-1: Product: syz [ 150.127646][ T6731] binder: 6730:6731 ioctl c0306201 2000000004c0 returned -22 [ 150.135627][ T5788] usb 4-1: device descriptor read/64, error -71 [ 150.143340][ T5787] usb 3-1: Manufacturer: syz [ 150.156368][ T5787] usb 3-1: SerialNumber: syz [ 150.182615][ T5787] usb 3-1: 0:2 : does not exist [ 150.208528][ T5787] usb 3-1: unit 9 not found! [ 150.270755][ T5788] usb usb4-port1: attempt power cycle [ 150.363298][ T6736] syzkaller0: entered promiscuous mode [ 150.392265][ T6736] syzkaller0: entered allmulticast mode [ 150.400723][ T5787] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 150.432928][ T5787] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4) [ 150.602779][ T5787] usb 3-1: USB disconnect, device number 10 [ 150.629369][ T5788] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 150.650647][ T6736] bond1 (unregistering): Released all slaves [ 150.710158][ T5788] usb 4-1: device descriptor read/8, error -71 [ 150.983975][ T5788] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 151.043870][ T5787] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 151.061581][ T5788] usb 4-1: device descriptor read/8, error -71 [ 151.449878][ T5788] usb usb4-port1: unable to enumerate USB device [ 151.595249][ T5787] usb 3-1: Using ep0 maxpacket: 16 [ 152.517620][ T5787] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.621302][ T5787] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 152.706089][ T5787] usb 3-1: can't read configurations, error -71 [ 153.079284][ T5788] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 153.867306][ T6755] capability: warning: `syz.2.237' uses 32-bit capabilities (legacy support in use) [ 153.963494][ T6759] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 154.264163][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 154.264186][ T29] audit: type=1400 audit(1786278032.651:586): avc: denied { create } for pid=6760 comm="syz.4.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.384090][ T5788] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 155.564941][ T6759] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 155.600595][ T5788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.645810][ T29] audit: type=1400 audit(1786278033.791:587): avc: denied { write } for pid=6760 comm="syz.4.240" name="mouse0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 155.676273][ T5788] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.728796][ T5788] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 155.770178][ T1209] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 155.788440][ T5788] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.869810][ T29] audit: type=1400 audit(1786278034.261:588): avc: denied { block_suspend } for pid=6770 comm="syz.2.242" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.898166][ T5788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.131087][ T1209] usb 1-1: Using ep0 maxpacket: 32 [ 156.164544][ T5788] usb 2-1: can't set config #1, error -71 [ 156.181323][ T1209] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 156.204471][ T5788] usb 2-1: USB disconnect, device number 8 [ 156.254170][ T1209] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 156.380731][ T1209] usb 1-1: config 0 has no interface number 0 [ 156.518895][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.562603][ T1209] usb 1-1: Product: syz [ 156.590127][ T1209] usb 1-1: Manufacturer: syz [ 156.628762][ T1209] usb 1-1: SerialNumber: syz [ 156.659535][ T1209] usb 1-1: config 0 descriptor?? [ 156.726084][ T6787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'. [ 156.735613][ T6787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'. [ 156.745162][ T6787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'. [ 156.754424][ T6787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'. [ 156.781234][ T1209] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 156.805353][ T1209] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 156.826026][ T1209] usb 1-1: USB disconnect, device number 14 [ 156.889217][ T5787] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 156.897147][ T5788] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 156.914974][ T6765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.928788][ T6765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.942129][ T6765] ================================================================== [ 156.950213][ T6765] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 156.957130][ T6765] Read of size 1 at addr ffff88802b84a320 by task syz.0.241/6765 [ 156.964816][ T6765] [ 156.967119][ T6765] CPU: 0 UID: 0 PID: 6765 Comm: syz.0.241 Not tainted syzkaller #0 PREEMPT(full) [ 156.967135][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 156.967145][ T6765] Call Trace: [ 156.967149][ T6765] [ 156.967155][ T6765] dump_stack_lvl+0x100/0x190 [ 156.967174][ T6765] print_report+0x13d/0x4b0 [ 156.967194][ T6765] ? __virt_addr_valid+0x239/0x430 [ 156.967214][ T6765] ? string+0x471/0x4d0 [ 156.967228][ T6765] kasan_report+0xdf/0x1c0 [ 156.967247][ T6765] ? string+0x471/0x4d0 [ 156.967263][ T6765] string+0x471/0x4d0 [ 156.967277][ T6765] ? __pfx_string+0x10/0x10 [ 156.967295][ T6765] vsnprintf+0x422/0x1300 [ 156.967313][ T6765] ? __pfx_vsnprintf+0x10/0x10 [ 156.967329][ T6765] ? kernel_text_address+0x8d/0x100 [ 156.967344][ T6765] ? __kernel_text_address+0xd/0x30 [ 156.967359][ T6765] ? unwind_get_return_address+0x59/0xa0 [ 156.967374][ T6765] snprintf+0xc7/0x100 [ 156.967389][ T6765] ? __pfx_snprintf+0x10/0x10 [ 156.967406][ T6765] ? stack_trace_save+0x8e/0xc0 [ 156.967420][ T6765] ? __pfx_stack_trace_save+0x10/0x10 [ 156.967434][ T6765] ? stack_depot_save_flags+0x27/0x9d0 [ 156.967455][ T6765] dev_vprintk_emit+0x375/0x3e0 [ 156.967472][ T6765] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 156.967488][ T6765] ? raw_ioctl+0x13a5/0x2b80 [ 156.967511][ T6765] dev_printk_emit+0xd2/0x10d [ 156.967528][ T6765] ? __pfx_dev_printk_emit+0x10/0x10 [ 156.967547][ T6765] ? __lock_acquire+0x49f/0x1a40 [ 156.967565][ T6765] __dev_printk+0xcb/0x100 [ 156.967581][ T6765] _dev_err+0xef/0x127 [ 156.967597][ T6765] ? __pfx__dev_err+0x10/0x10 [ 156.967613][ T6765] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 156.967633][ T6765] ? dummy_enable+0x354/0x960 [ 156.967650][ T6765] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 156.967668][ T6765] raw_ioctl.cold+0x10e/0x3a6 [ 156.967688][ T6765] ? __pfx_raw_ioctl+0x10/0x10 [ 156.967708][ T6765] ? security_file_ioctl+0x51/0x230 [ 156.967727][ T6765] ? __sanitizer_cov_trace_pc+0x3f/0x70 [ 156.967744][ T6765] ? __pfx_raw_ioctl+0x10/0x10 [ 156.967763][ T6765] __x64_sys_ioctl+0x18e/0x210 [ 156.967783][ T6765] do_syscall_64+0x115/0x870 [ 156.967800][ T6765] ? clear_bhb_loop+0x70/0xc0 [ 156.967815][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.967829][ T6765] RIP: 0033:0x7f125c79dd6b [ 156.967840][ T6765] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 156.967854][ T6765] RSP: 002b:00007f125d6daef0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.967868][ T6765] RAX: ffffffffffffffda RBX: 00007f125cb50320 RCX: 00007f125c79dd6b [ 156.967876][ T6765] RDX: 00007f125cb5034c RSI: 0000000040095505 RDI: 0000000000000003 [ 156.967884][ T6765] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000043 [ 156.967892][ T6765] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 156.967900][ T6765] R13: 00007f125cb50530 R14: 0000000000000000 R15: 00007f125cb5034e [ 156.967911][ T6765] [ 156.967916][ T6765] [ 157.258176][ T6765] Allocated by task 1: [ 157.262215][ T6765] kasan_save_stack+0x30/0x50 [ 157.266871][ T6765] kasan_save_track+0x14/0x30 [ 157.271520][ T6765] __kasan_kmalloc+0xaa/0xb0 [ 157.276082][ T6765] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 157.282471][ T6765] kvasprintf+0xbc/0x150 [ 157.286697][ T6765] kvasprintf_const+0x66/0x1a0 [ 157.291436][ T6765] kobject_set_name_vargs+0x5a/0x140 [ 157.296701][ T6765] dev_set_name+0xc7/0x100 [ 157.301102][ T6765] usb_add_gadget+0x520/0x920 [ 157.305765][ T6765] usb_add_gadget_udc+0x26/0x70 [ 157.310591][ T6765] dummy_udc_probe+0x69e/0x960 [ 157.315349][ T6765] platform_probe+0x106/0x1d0 [ 157.320001][ T6765] really_probe+0x241/0xa60 [ 157.324483][ T6765] __driver_probe_device+0x20e/0x450 [ 157.329773][ T6765] driver_probe_device+0x4a/0x140 [ 157.334775][ T6765] __device_attach_driver+0x1df/0x320 [ 157.340137][ T6765] bus_for_each_drv+0x159/0x1e0 [ 157.344970][ T6765] __device_attach+0x1e4/0x4d0 [ 157.349718][ T6765] device_initial_probe+0xaf/0xd0 [ 157.354720][ T6765] bus_probe_device+0x64/0x160 [ 157.359474][ T6765] device_add+0x121d/0x1970 [ 157.363962][ T6765] platform_device_add+0x35a/0x800 [ 157.369047][ T6765] dummy_hcd_init+0x803/0xc00 [ 157.373703][ T6765] do_one_initcall+0x11d/0x700 [ 157.378457][ T6765] kernel_init_freeable+0x6ea/0x7b0 [ 157.383647][ T6765] kernel_init+0x1f/0x1e0 [ 157.387948][ T6765] ret_from_fork+0x72b/0xd50 [ 157.392598][ T6765] ret_from_fork_asm+0x1a/0x30 [ 157.397409][ T6765] [ 157.399720][ T6765] Freed by task 6787: [ 157.403708][ T6765] kasan_save_stack+0x30/0x50 [ 157.408394][ T6765] kasan_save_track+0x14/0x30 [ 157.413080][ T6765] kasan_save_free_info+0x3b/0x70 [ 157.418113][ T6765] __kasan_slab_free+0x5f/0x80 [ 157.422872][ T6765] kfree+0x22b/0x6c0 [ 157.426764][ T6765] kfree_const+0x5a/0x70 [ 157.431007][ T6765] kobject_put+0x218/0x640 [ 157.435439][ T6765] put_device+0x1f/0x30 [ 157.439593][ T6765] platform_remove+0x5f/0x80 [ 157.444174][ T6765] device_remove+0xcb/0x180 [ 157.448659][ T6765] device_release_driver_internal+0x44e/0x620 [ 157.454724][ T6765] unbind_store+0xf8/0x110 [ 157.459125][ T6765] drv_attr_store+0x74/0xb0 [ 157.463612][ T6765] sysfs_kf_write+0xf2/0x150 [ 157.468179][ T6765] kernfs_fop_write_iter+0x3e0/0x5f0 [ 157.473447][ T6765] vfs_write+0x6ac/0x1050 [ 157.477751][ T6765] ksys_write+0x12a/0x250 [ 157.482053][ T6765] do_syscall_64+0x115/0x870 [ 157.486636][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.492522][ T6765] [ 157.494837][ T6765] The buggy address belongs to the object at ffff88802b84a320 [ 157.494837][ T6765] which belongs to the cache kmalloc-16 of size 16 [ 157.508709][ T6765] The buggy address is located 0 bytes inside of [ 157.508709][ T6765] freed 16-byte region [ffff88802b84a320, ffff88802b84a330) [ 157.522219][ T6765] [ 157.524516][ T6765] The buggy address belongs to the physical page: [ 157.530907][ T6765] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b84a [ 157.539639][ T6765] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 157.546729][ T6765] page_type: f5(slab) [ 157.550704][ T6765] raw: 00fff00000000000 ffff88813fe21640 dead000000000100 dead000000000122 [ 157.559273][ T6765] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 157.567853][ T6765] page dumped because: kasan: bad access detected [ 157.574256][ T6765] page_owner tracks the page as allocated [ 157.579956][ T6765] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8328755208, free_ts 0 [ 157.598790][ T6765] post_alloc_hook+0xfd/0x120 [ 157.603458][ T6765] get_page_from_freelist+0xf48/0x3530 [ 157.608897][ T6765] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 157.614764][ T6765] new_slab+0xa2/0x640 [ 157.618824][ T6765] refill_objects+0xe3/0x410 [ 157.623389][ T6765] __pcs_replace_empty_main+0x376/0x680 [ 157.628926][ T6765] __kmalloc_noprof+0x66d/0x820 [ 157.633751][ T6765] usb_hcd_submit_urb+0x5e8/0x2150 [ 157.638869][ T6765] usb_submit_urb+0x827/0x19b0 [ 157.643617][ T6765] usb_start_wait_urb+0x10e/0x580 [ 157.648615][ T6765] usb_control_msg+0x328/0x4b0 [ 157.653366][ T6765] hub_probe.cold+0xd03/0x2ed9 [ 157.658110][ T6765] usb_probe_interface+0x303/0x8f0 [ 157.663287][ T6765] really_probe+0x241/0xa60 [ 157.667781][ T6765] __driver_probe_device+0x20e/0x450 [ 157.673043][ T6765] driver_probe_device+0x4a/0x140 [ 157.678043][ T6765] page_owner free stack trace missing [ 157.683378][ T6765] [ 157.685679][ T6765] Memory state around the buggy address: [ 157.691281][ T6765] ffff88802b84a200: 00 04 fc fc 00 04 fc fc 00 04 fc fc 00 04 fc fc [ 157.699313][ T6765] ffff88802b84a280: 00 04 fc fc 00 04 fc fc 00 00 fc fc 00 01 fc fc [ 157.707347][ T6765] >ffff88802b84a300: 00 01 fc fc fa fb fc fc 00 00 fc fc 00 04 fc fc [ 157.715377][ T6765] ^ [ 157.720462][ T6765] ffff88802b84a380: 00 04 fc fc fa fb fc fc fa fb fc fc 00 04 fc fc [ 157.728494][ T6765] ffff88802b84a400: 00 04 fc fc 00 04 fc fc 00 01 fc fc 00 01 fc fc [ 157.736522][ T6765] ================================================================== [ 157.744560][ T6765] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 157.751728][ T6765] CPU: 0 UID: 0 PID: 6765 Comm: syz.0.241 Not tainted syzkaller #0 PREEMPT(full) [ 157.760894][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 157.770937][ T6765] Call Trace: [ 157.774208][ T6765] [ 157.777115][ T6765] dump_stack_lvl+0x100/0x190 [ 157.781787][ T6765] vpanic+0x552/0x970 [ 157.785749][ T6765] ? __pfx_vpanic+0x10/0x10 [ 157.790225][ T6765] ? __pfx_vprintk_emit+0x10/0x10 [ 157.795225][ T6765] ? string+0x471/0x4d0 [ 157.799362][ T6765] panic+0xd1/0xe0 [ 157.803061][ T6765] ? __pfx_panic+0x10/0x10 [ 157.807460][ T6765] ? end_report.part.0+0x23/0x90 [ 157.812378][ T6765] ? rcu_is_watching+0x12/0xc0 [ 157.817126][ T6765] ? end_report.part.0+0x23/0x90 [ 157.822045][ T6765] check_panic_on_warn.cold+0x19/0x34 [ 157.827390][ T6765] end_report.part.0+0x3a/0x90 [ 157.832133][ T6765] kasan_report.cold+0xe/0x18 [ 157.836794][ T6765] ? string+0x471/0x4d0 [ 157.840924][ T6765] string+0x471/0x4d0 [ 157.844882][ T6765] ? __pfx_string+0x10/0x10 [ 157.849358][ T6765] vsnprintf+0x422/0x1300 [ 157.853662][ T6765] ? __pfx_vsnprintf+0x10/0x10 [ 157.858401][ T6765] ? kernel_text_address+0x8d/0x100 [ 157.863574][ T6765] ? __kernel_text_address+0xd/0x30 [ 157.868764][ T6765] ? unwind_get_return_address+0x59/0xa0 [ 157.874377][ T6765] snprintf+0xc7/0x100 [ 157.878426][ T6765] ? __pfx_snprintf+0x10/0x10 [ 157.883088][ T6765] ? stack_trace_save+0x8e/0xc0 [ 157.887911][ T6765] ? __pfx_stack_trace_save+0x10/0x10 [ 157.893286][ T6765] ? stack_depot_save_flags+0x27/0x9d0 [ 157.898782][ T6765] dev_vprintk_emit+0x375/0x3e0 [ 157.903612][ T6765] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 157.908968][ T6765] ? raw_ioctl+0x13a5/0x2b80 [ 157.913558][ T6765] dev_printk_emit+0xd2/0x10d [ 157.918212][ T6765] ? __pfx_dev_printk_emit+0x10/0x10 [ 157.923478][ T6765] ? __lock_acquire+0x49f/0x1a40 [ 157.928406][ T6765] __dev_printk+0xcb/0x100 [ 157.932808][ T6765] _dev_err+0xef/0x127 [ 157.936858][ T6765] ? __pfx__dev_err+0x10/0x10 [ 157.941521][ T6765] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 157.946889][ T6765] ? dummy_enable+0x354/0x960 [ 157.951546][ T6765] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 157.957427][ T6765] raw_ioctl.cold+0x10e/0x3a6 [ 157.962096][ T6765] ? __pfx_raw_ioctl+0x10/0x10 [ 157.966850][ T6765] ? security_file_ioctl+0x51/0x230 [ 157.972044][ T6765] ? __sanitizer_cov_trace_pc+0x3f/0x70 [ 157.977574][ T6765] ? __pfx_raw_ioctl+0x10/0x10 [ 157.982326][ T6765] __x64_sys_ioctl+0x18e/0x210 [ 157.987127][ T6765] do_syscall_64+0x115/0x870 [ 157.991715][ T6765] ? clear_bhb_loop+0x70/0xc0 [ 157.996386][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.002260][ T6765] RIP: 0033:0x7f125c79dd6b [ 158.006651][ T6765] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 158.026335][ T6765] RSP: 002b:00007f125d6daef0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.034749][ T6765] RAX: ffffffffffffffda RBX: 00007f125cb50320 RCX: 00007f125c79dd6b [ 158.042739][ T6765] RDX: 00007f125cb5034c RSI: 0000000040095505 RDI: 0000000000000003 [ 158.050704][ T6765] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000043 [ 158.058654][ T6765] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 158.066602][ T6765] R13: 00007f125cb50530 R14: 0000000000000000 R15: 00007f125cb5034e [ 158.074602][ T6765] [ 158.077664][ T6765] Kernel Offset: disabled [ 158.081970][ T6765] Rebooting in 86400 seconds..