last executing test programs: 8m43.904594305s ago: executing program 1 (id=21): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f00000007c0)=[@request_death={0x400c630e, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 8m43.78956684s ago: executing program 1 (id=22): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0xc0046209, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x201800d, &(0x7f0000002140)=ANY=[]) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000000100)={0x14, 0x34, 0x51eb40323bf4c37f, 0x70bd2d, 0x25dfdbfd, {0x3}}, 0x14}}, 0x4000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) statx(r5, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x9400000, 0x0, 0x0, 0x81, 0x7, 0x0, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r6}, 0x10) 8m43.715216104s ago: executing program 1 (id=24): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) setns(0xc9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6003, 0x5000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xfffffffffffffcff}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x75d5}]}, 0x95}}, 0x10000800) 8m43.409266557s ago: executing program 1 (id=26): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/fs/file-max\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='0', 0x1) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000380)={0x7, 0x7, 0x4, 0x1ff, 0x101, 0x1}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) 8m39.782298899s ago: executing program 1 (id=40): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x2e00, 0x0) poll(&(0x7f0000000180)=[{r0, 0x5121}], 0x1, 0x4) 8m39.037850576s ago: executing program 1 (id=44): mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='stm32g0-typec 0x3', 0x11) socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r2, 0x1488f346e7c00b43, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2400c846}, 0x4004004) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x3, 0x1, 0xd}, 0x20) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x13) r3 = fanotify_init(0xf00, 0x80000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r4, r4, 0x2) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x441, 0x0) fanotify_mark(r3, 0x2, 0x4800103b, r5, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000010280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x4008010) 8m23.632825304s ago: executing program 32 (id=44): mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='stm32g0-typec 0x3', 0x11) socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r2, 0x1488f346e7c00b43, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2400c846}, 0x4004004) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x3, 0x1, 0xd}, 0x20) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x13) r3 = fanotify_init(0xf00, 0x80000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r4, r4, 0x2) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x441, 0x0) fanotify_mark(r3, 0x2, 0x4800103b, r5, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000010280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x4008010) 6m29.667306393s ago: executing program 4 (id=580): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e25, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3ff}}}, 0x84) 6m28.525303999s ago: executing program 4 (id=581): socket(0x40000000015, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x200088a0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) 6m23.548992288s ago: executing program 4 (id=588): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) process_mrelease(0xffffffffffffffff, 0x700000002000000) syz_emit_ethernet(0x2e, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) pipe2(&(0x7f00000001c0), 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x40104d06, &(0x7f0000000040)="00000200000000000000020001") 6m22.307193655s ago: executing program 4 (id=594): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811, 0x49851}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @broadcast}, 0x14) 6m22.064154393s ago: executing program 4 (id=596): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r0, 0xc0386105, 0x0) 6m20.216766856s ago: executing program 4 (id=600): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e9"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 6m3.762508694s ago: executing program 33 (id=600): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e9"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 1m9.285937392s ago: executing program 6 (id=1564): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cd000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) 1m7.410618846s ago: executing program 6 (id=1578): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m4.01009151s ago: executing program 6 (id=1586): r0 = fsopen(&(0x7f00000010c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0x2000775) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000001080)=""/79, 0x4f) 1m3.332812053s ago: executing program 0 (id=1587): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) write$sndseq(r0, 0x0, 0x0) creat(0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='children\x00') lseek(r3, 0x100000008, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711809000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1m2.965643637s ago: executing program 6 (id=1588): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) syz_80211_join_ibss(&(0x7f0000000080)='wlan0\x00', &(0x7f00000000c0)=@default_ibss_ssid, 0x6, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r4, 0x0, 0x1, 0x2000402) lseek(r4, 0x3ff, 0x3) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) 1m0.67600682s ago: executing program 0 (id=1591): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="513b5a9c070000fb4842417c", 0xc}, {&(0x7f0000000240)="05a9ced63169802d4d93", 0xa}], 0x2}, 0x40080) 59.822247994s ago: executing program 3 (id=1596): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d8bcd00005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766c1cb010052f436dd2a", 0x2a}, {&(0x7f0000000440)="b11d484e0a4e130000008133d502000000cb31a5fc977c2e4891f7c08bfcd111", 0x20}], 0x2) 59.645839524s ago: executing program 5 (id=1598): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ftruncate(0xffffffffffffffff, 0x1) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x41, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fchdir(0xffffffffffffffff) chdir(0x0) fanotify_init(0x40, 0x80000) 59.553266527s ago: executing program 2 (id=1599): syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xebdf4000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x284280, 0x0) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0x86e, 0x81) syz_emit_ethernet(0x6c, &(0x7f0000000340)={@remote, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fa0800", 0x36, 0x6, 0x0, @mcast1, @local, {[], {{0x4e20, 0x4e22, 0x41424344, r4, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x5}, {"83654a530a439e0e8387c524aa080593d0d09259cc2df7669efbde07a3da9fdda8aa"}}}}}}}, 0x0) 59.523391081s ago: executing program 3 (id=1600): socket(0x40000000015, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x200088a0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) 58.779866828s ago: executing program 2 (id=1601): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000080000000000000000000000085000000"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x13) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) 58.685917451s ago: executing program 0 (id=1602): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.swap.current\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 58.574186421s ago: executing program 5 (id=1603): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) recvmsg(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f0000000280)=""/100, 0x64}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000300)=""/73, 0x49}, {&(0x7f00000003c0)=""/121, 0x79}], 0x6}, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='0', 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') shmget$private(0x0, 0x13000, 0xfffe, &(0x7f0000feb000/0x13000)=nil) r7 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r7, 0x7a4, 0x0) 58.084292266s ago: executing program 6 (id=1604): open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000340)) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000020c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) ftruncate(0xffffffffffffffff, 0x2007ffc) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fspick(0xffffffffffffff9c, 0x0, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) mount(0x0, 0x0, 0x0, 0x5000, 0x0) open(0x0, 0x0, 0x139) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xc, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xeb, &(0x7f0000000140)=""/235}, 0x94) chroot(0x0) fallocate(0xffffffffffffffff, 0x10, 0x3, 0x1b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 57.917848648s ago: executing program 0 (id=1605): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x64103, 0x0) 57.244703708s ago: executing program 0 (id=1606): r0 = syz_open_dev$usbfs(&(0x7f0000000380), 0x201, 0x610402) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x767, 0x1, 0x0, 0x1000005, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$setregset(0x4205, r2, 0x200, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0x3}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000580)={[0xa, 0x0, 0x10020b, 0xa, 0x200, 0xfffffefffffffffe, 0xb3, 0x8, 0x2, 0x2, 0x0, 0x2081, 0x2, 0x1fd, 0xe6, 0x100000001], 0xeeee8000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync() socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 57.133508003s ago: executing program 5 (id=1607): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r2, 0xb4) 56.85454207s ago: executing program 3 (id=1608): socket$netlink(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe8000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) set_mempolicy(0x8006, 0x0, 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x3e, {0x81, 0x5}, 0x77}, 0x1) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x40) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c00024000000000000000010900030003000000000000001400000011"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xa00965, 0x2}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000440)={r2, r2, 0x8, 0x0, 0x0, 0x6, 0x5, 0x10cf, 0x5, 0x8b, 0x3, 0x1, 'syz0\x00'}) shutdown(r2, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 56.715788072s ago: executing program 5 (id=1609): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 56.715166084s ago: executing program 2 (id=1610): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x14f882) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000002500), 0x10000000008, 0xd18135cf55169abc) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000000)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x7, 0x4, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe10803894822cad55afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd4060000006100", "90be8b1c55f9640000000000000000000000000002000000efffffffff11e4ff", [0x80800]}}) 56.494026588s ago: executing program 5 (id=1611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0x6, &(0x7f0000000040)) 56.492100095s ago: executing program 2 (id=1612): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x48401) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x25, 0x0, @buffer={0x0, 0x5f, &(0x7f0000000100)=""/95}, &(0x7f00000001c0)="3bc914c2e99eb0e1b73b56365fbff01789ded00bdff2f7abd9f0934bf1512a012d0c0ab7e2", 0x0, 0x3, 0x10017, 0x2, 0x0}) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0xa) 55.723609665s ago: executing program 5 (id=1613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x810) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x7b36, 0x4) sendto$inet6(r1, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}, 0xf0}], 0x1, 0x22061, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x800) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000180)=""/44) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 55.453544832s ago: executing program 2 (id=1614): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) symlink(&(0x7f0000000000)='.\x00', 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) 55.233100276s ago: executing program 3 (id=1615): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000000)) 55.157254813s ago: executing program 2 (id=1616): r0 = openat$vim2m(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000180)={0x3, 0x0, 0x3, {0x2, @raw_data="f73067ab987e18d64946d83360f164e54932c924173c426d4ac79c43b40c2ac934d22c1987eddb8a666aeaae4dfa8c90556dc1279800f0736e2a50633825a708305eef6461778c24c350e1a78c725ce4c2424a6f7e02b0fa381e684acae36e68e58a894e115f8a4045f23b211285a8a1fd3791cc236c039742d415a449ca6b1e4ad546bba1deea715b44879185e26c63317efeb12de77aeaa78ba3965a16946836a688610f4e299919775d2cfed4172d42aafdb8e74d88bb4627e7dd9c5e0d4cbf85423d52a3e7d3"}, 0x8001}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r3, 0x0, 0x4004) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWPHYS(r6, 0x80404805, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES32, @ANYBLOB="00000000000000f0a91500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000005f40)={0x43, 0x9, 0x1, {0x4, 0x8, 0x9107, 0xfffb, 0xc, 0x0, 0x5, 0x9, 0x1000005}}, 0x43) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 55.045639838s ago: executing program 3 (id=1617): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) write$binfmt_format(r1, &(0x7f00000001c0)='-1\x00', 0x3) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) 52.982866707s ago: executing program 3 (id=1618): socket(0x40000000015, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x200088a0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) 52.559714869s ago: executing program 0 (id=1619): socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getneightbl={0x14, 0x42, 0xe00, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x40090) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/file0\x00', 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/file0\x00', 0x89901) syz_fuse_handle_req(r0, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbb78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d155a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3315fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783f13cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b000000001034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db234687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a5aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e500", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x90, 0x0, 0x4, {0x4, 0x3, 0x0, 0x7e34, 0xf, 0x0, {0x0, 0xfffffffffffffff7, 0x4b6, 0x1, 0x9, 0x1, 0x1, 0x200, 0x0, 0x2000, 0xf8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 52.482687933s ago: executing program 6 (id=1620): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = dup(r0) write$UHID_INPUT(r5, &(0x7f0000000000)={0xfc, {"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", 0xfffffffffffffec0}}, 0x1006) 0s ago: executing program 34 (id=1613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x810) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x7b36, 0x4) sendto$inet6(r1, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}, 0xf0}], 0x1, 0x22061, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x800) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000180)=""/44) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) kernel console output (not intermixed with test programs): 2.807257][ T5717] usb 3-1: SerialNumber: syz [ 182.839036][ T5717] pl2303 3-1:1.0: required endpoints missing [ 182.898135][ T7455] random: crng reseeded on system resumption [ 182.908433][ T30] audit: type=1400 audit(1786396006.321:534): avc: denied { write } for pid=7431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.980809][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.482'. [ 183.073054][ T30] audit: type=1400 audit(1786396006.481:535): avc: denied { write } for pid=7460 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.168682][ T5717] usb 3-1: USB disconnect, device number 10 [ 183.999170][ T7488] netlink: 188 bytes leftover after parsing attributes in process `syz.4.489'. [ 184.018101][ T30] audit: type=1400 audit(1786396007.431:536): avc: denied { write } for pid=7468 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.305606][ T30] audit: type=1400 audit(1786396007.711:537): avc: denied { write } for pid=7499 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.323184][ T7501] gre1: entered promiscuous mode [ 184.405464][ T5600] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 184.465954][ T29] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 184.494465][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 184.667897][ T29] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 184.698725][ T29] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 184.722429][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 184.763056][ T29] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 184.811688][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 184.863572][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 184.897668][ T29] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 184.917429][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 184.948613][ T29] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 184.982064][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 185.009605][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 185.037385][ T29] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 185.056930][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 185.075863][ T5717] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 185.101013][ T29] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.144951][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 185.181484][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 185.222127][ T29] usb 6-1: string descriptor 0 read error: -22 [ 185.239574][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.249842][ T5717] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 185.275171][ T5717] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 185.299492][ T5717] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 185.311339][ T29] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 185.330661][ T5717] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 185.374961][ T5717] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 185.417929][ T5717] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 185.467815][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 185.486194][ T5717] usb 5-1: Product: syz [ 185.497401][ T5717] usb 5-1: Manufacturer: syz [ 185.543553][ T5717] cdc_wdm 5-1:1.0: skipping garbage [ 185.571165][ T5717] cdc_wdm 5-1:1.0: skipping garbage [ 185.613183][ T5717] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 185.633157][ T5717] cdc_wdm 5-1:1.0: Unknown control protocol [ 185.666191][ T5600] Bluetooth: hci2: command 0x0406 tx timeout [ 185.666465][ T4917] Bluetooth: hci0: command 0x0406 tx timeout [ 185.673167][ T5600] Bluetooth: hci1: command 0x0406 tx timeout [ 185.679272][ T5609] Bluetooth: hci3: command 0x0406 tx timeout [ 185.815153][ T5704] usb 5-1: USB disconnect, device number 11 [ 186.617658][ T7524] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 188.768645][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.925081][ T30] audit: type=1400 audit(1786396012.331:538): avc: denied { create } for pid=7539 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.892346][ T30] audit: type=1400 audit(1786396012.361:539): avc: denied { connect } for pid=7539 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.937262][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'. [ 190.046864][ T5598] Bluetooth: hci1: unexpected event for opcode 0x200a [ 190.373462][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.516'. [ 190.423574][ T7564] bridge_slave_1: left allmulticast mode [ 190.432769][ T7564] bridge_slave_1: left promiscuous mode [ 190.453224][ T7564] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.520731][ T7564] bridge_slave_0: left allmulticast mode [ 190.535911][ T7564] bridge_slave_0: left promiscuous mode [ 190.560313][ T7564] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.632739][ T5724] usb 6-1: USB disconnect, device number 4 [ 190.693470][ T7572] netlink: 'syz.4.518': attribute type 29 has an invalid length. [ 191.049970][ T7572] netlink: 'syz.4.518': attribute type 1 has an invalid length. [ 191.107985][ T7572] netlink: 756 bytes leftover after parsing attributes in process `syz.4.518'. [ 191.943320][ T30] audit: type=1326 audit(1786396015.321:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7578 comm="syz.3.520" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77f939e0d9 code=0x0 [ 191.990692][ T5724] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 192.184280][ T7570] geneve2: entered allmulticast mode [ 192.216418][ T5724] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 192.227336][ T5724] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 192.235482][ T5724] usb 5-1: config 0 has no interface number 0 [ 192.268210][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'. [ 192.268533][ T5724] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.341033][ T30] audit: type=1400 audit(1786396015.751:541): avc: denied { read write } for pid=7587 comm="syz.3.524" name="video1" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 192.370316][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.383194][ T5724] usb 5-1: Product: syz [ 192.416384][ T30] audit: type=1400 audit(1786396015.751:542): avc: denied { open } for pid=7587 comm="syz.3.524" path="/dev/video1" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 192.450403][ T5724] usb 5-1: Manufacturer: syz [ 192.466866][ T5724] usb 5-1: SerialNumber: syz [ 192.528974][ T5724] usb 5-1: config 0 descriptor?? [ 192.608332][ T30] audit: type=1400 audit(1786396015.781:543): avc: denied { ioctl } for pid=7587 comm="syz.3.524" path="/dev/video1" dev="devtmpfs" ino=932 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 192.680019][ T5724] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 193.180757][ T5598] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15 [ 193.191802][ T5598] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 194.266569][ C0] usb 5-1: yurex_control_callback - control failed: -2 [ 194.321060][ T5704] usb 5-1: USB disconnect, device number 12 [ 194.345532][ T5704] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 194.433648][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.531'. [ 196.854479][ T5598] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15 [ 196.861866][ T5598] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 196.985443][ T30] audit: type=1400 audit(1786396020.391:544): avc: denied { write } for pid=7631 comm="syz.5.539" name="idVendor" dev="configfs" ino=18325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 197.151926][ T30] audit: type=1400 audit(1786396020.421:545): avc: denied { open } for pid=7631 comm="syz.5.539" path="/61/config/usb_gadget/g1/idVendor" dev="configfs" ino=18325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 197.266008][ T7633] MTRR 0 not used [ 197.272861][ T30] audit: type=1400 audit(1786396020.421:546): avc: denied { write } for pid=7631 comm="syz.5.539" name="functions" dev="configfs" ino=8140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.393859][ T30] audit: type=1400 audit(1786396020.421:547): avc: denied { create } for pid=7631 comm="syz.5.539" name="uvc.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 197.486856][ T30] audit: type=1400 audit(1786396020.421:548): avc: denied { write } for pid=7624 comm="syz.4.537" name="configs" dev="configfs" ino=8141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.549393][ T30] audit: type=1400 audit(1786396020.531:549): avc: denied { write } for pid=7624 comm="syz.4.537" name="functions" dev="configfs" ino=8140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.625668][ T30] audit: type=1400 audit(1786396020.531:550): avc: denied { write } for pid=7631 comm="syz.5.539" name="fs" dev="configfs" ino=18338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.725096][ T30] audit: type=1400 audit(1786396020.551:551): avc: denied { write } for pid=7631 comm="syz.5.539" name="header" dev="configfs" ino=18342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.805535][ T30] audit: type=1400 audit(1786396020.611:552): avc: denied { write } for pid=7631 comm="syz.5.539" name="fs" dev="configfs" ino=18349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.185461][ T30] audit: type=1400 audit(1786396020.611:553): avc: denied { write } for pid=7631 comm="syz.5.539" name="fs" dev="configfs" ino=18349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.228207][ T5598] Bluetooth: hci5: unexpected subevent 0x0e length: 30 > 15 [ 198.237202][ T5598] Bluetooth: hci5: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 198.292694][ T7665] random: crng reseeded on system resumption [ 198.431224][ T7665] input: syz0 as /devices/virtual/input/input7 [ 202.040361][ T5717] IPVS: starting estimator thread 0... [ 202.213681][ T7678] IPVS: using max 46 ests per chain, 110400 per kthread [ 202.415690][ T7686] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 203.436711][ T7693] MTRR 0 not used [ 203.938511][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 203.938525][ T30] audit: type=1326 audit(1786396027.351:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.5.562" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff61879e0d9 code=0x0 [ 204.003880][ T5598] Bluetooth: hci0: unexpected event for opcode 0x200a [ 204.090673][ T30] audit: type=1400 audit(1786396027.501:561): avc: denied { create } for pid=7727 comm="syz.4.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 204.180827][ T30] audit: type=1400 audit(1786396027.501:562): avc: denied { write } for pid=7727 comm="syz.4.563" path="socket:[16991]" dev="sockfs" ino=16991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 204.255390][ T30] audit: type=1400 audit(1786396027.591:563): avc: denied { setopt } for pid=7727 comm="syz.4.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 205.306575][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 207.025796][ T7746] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9 [ 207.495322][ T7757] tipc: Started in network mode [ 207.514350][ T30] audit: type=1400 audit(1786396030.901:564): avc: denied { ioctl } for pid=7749 comm="syz.4.570" path="/135/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 207.553280][ T7757] tipc: Node identity 7f000001, cluster identity 4711 [ 207.618736][ T7757] tipc: Enabled bearer , priority 10 [ 207.676236][ T7757] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 207.707194][ T7757] tipc: Enabled bearer , priority 10 [ 207.733680][ T7766] netlink: 'syz.2.574': attribute type 29 has an invalid length. [ 207.789563][ T7768] netlink: 'syz.2.574': attribute type 1 has an invalid length. [ 207.836072][ T5717] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 207.848653][ T7768] netlink: 756 bytes leftover after parsing attributes in process `syz.2.574'. [ 208.031568][ T5717] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 208.197200][ T5717] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 208.282622][ T5717] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 208.362072][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.577'. [ 208.451207][ T5717] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 208.515635][ T7773] bridge_slave_1: left allmulticast mode [ 208.592042][ T7773] bridge_slave_1: left promiscuous mode [ 208.616149][ T5717] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 208.687262][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.776694][ T5717] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 209.257264][ T5717] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 209.334078][ T5717] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 209.471870][ T5717] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 209.607012][ T5717] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 209.669824][ T7773] bridge_slave_0: left allmulticast mode [ 209.678545][ T5717] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 209.691853][ T7773] bridge_slave_0: left promiscuous mode [ 209.697671][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.790061][ T5717] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 209.797857][ T5717] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 209.809018][ T5717] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 209.820808][ T5717] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 209.832082][ T5717] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 209.948146][ T5717] usb 4-1: string descriptor 0 read error: -22 [ 209.979159][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.592341][ T9] tipc: Node number set to 2130706433 [ 213.855908][ T5717] usb 4-1: can't set config #168, error -71 [ 213.916657][ T5717] usb 4-1: USB disconnect, device number 13 [ 215.394330][ T7824] netlink: 'syz.3.589': attribute type 1 has an invalid length. [ 215.442359][ T7824] netlink: 756 bytes leftover after parsing attributes in process `syz.3.589'. [ 215.654631][ T7816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.681667][ T7816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.863257][ T30] audit: type=1400 audit(1786396039.271:565): avc: denied { read write } for pid=7832 comm="syz.5.593" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 215.892112][ T30] audit: type=1400 audit(1786396039.271:566): avc: denied { open } for pid=7832 comm="syz.5.593" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 215.900487][ T7833] random: crng reseeded on system resumption [ 215.919432][ T30] audit: type=1400 audit(1786396039.301:567): avc: denied { write } for pid=7832 comm="syz.5.593" name="functions" dev="configfs" ino=8140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.012786][ T30] audit: type=1400 audit(1786396039.421:568): avc: denied { ioctl } for pid=7832 comm="syz.5.593" path="/72/myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate" dev="configfs" ino=17315 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 216.108198][ T7816] geneve2: left allmulticast mode [ 216.120122][ T7822] netlink: 'syz.3.589': attribute type 29 has an invalid length. [ 216.166005][ T3268] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.182857][ T3268] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.220126][ T3268] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.220453][ T30] audit: type=1400 audit(1786396039.621:569): avc: denied { ioctl } for pid=7832 comm="syz.5.593" path="socket:[18801]" dev="sockfs" ino=18801 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 216.362266][ T3268] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.588961][ T30] audit: type=1400 audit(1786396043.991:570): avc: denied { listen } for pid=7859 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 220.724826][ T7858] wg2 speed is unknown, defaulting to 1000 [ 220.734732][ T7858] wg2 speed is unknown, defaulting to 1000 [ 220.742506][ T7858] wg2 speed is unknown, defaulting to 1000 [ 221.484245][ T7882] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 221.630252][ T30] audit: type=1400 audit(1786396045.001:571): avc: denied { bind } for pid=7879 comm="syz.2.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 221.805540][ T30] audit: type=1400 audit(1786396045.121:572): avc: denied { read } for pid=7879 comm="syz.2.610" path="socket:[18874]" dev="sockfs" ino=18874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.043645][ T30] audit: type=1400 audit(1786396045.151:573): avc: denied { mount } for pid=7879 comm="syz.2.610" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 222.910132][ T30] audit: type=1400 audit(1786396046.321:574): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 223.002067][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.615'. [ 223.077008][ T5797] wg2 speed is unknown, defaulting to 1000 [ 223.088558][ T7858] infiniband syz2: set active [ 223.109773][ T7858] infiniband syz2: added wg2 [ 223.124563][ T30] audit: type=1400 audit(1786396046.531:575): avc: denied { write } for pid=7901 comm="syz.2.618" name="configs" dev="configfs" ino=8141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 223.186178][ T7858] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 223.235760][ T7858] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 223.300662][ T7858] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 223.739785][ T7858] RDS/IB: syz2: added [ 223.746355][ T7858] smc: adding ib device syz2 with port count 1 [ 223.757692][ T7858] smc: ib device syz2 port 1 has no pnetid [ 223.798932][ T5797] wg2 speed is unknown, defaulting to 1000 [ 223.814250][ T7858] wg2 speed is unknown, defaulting to 1000 [ 224.017888][ T30] audit: type=1400 audit(1786396047.431:576): avc: denied { getopt } for pid=7915 comm="syz.5.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 224.075165][ T7922] binder: 7920:7922 ioctl 4018620d 0 returned -22 [ 225.345098][ T7858] wg2 speed is unknown, defaulting to 1000 [ 225.566181][ T5797] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 225.726237][ T5797] usb 3-1: not running at top speed; connect to a high speed hub [ 225.731199][ T7858] wg2 speed is unknown, defaulting to 1000 [ 225.734269][ T5797] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 225.791220][ T5797] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 225.803265][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.850096][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 225.854058][ T5797] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 226.096364][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 226.165504][ T5797] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 226.375810][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 226.448930][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 226.465782][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.480300][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 226.491930][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 226.501890][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.515522][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.693534][ T7952] binder: 7951:7952 ioctl 4018620d 0 returned -22 [ 226.709550][ T7858] wg2 speed is unknown, defaulting to 1000 [ 226.737296][ T9] usb 4-1: usb_control_msg returned -32 [ 226.749277][ T30] audit: type=1400 audit(1786396050.161:577): avc: denied { setattr } for pid=7948 comm="syz.3.638" name="secretmem" dev="secretmem" ino=19029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 226.783915][ T9] usbtmc 4-1:16.0: can't read capabilities [ 226.843488][ T30] audit: type=1400 audit(1786396050.251:578): avc: denied { nlmsg_read } for pid=7955 comm="syz.5.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 226.949107][ T7858] wg2 speed is unknown, defaulting to 1000 [ 227.005383][ T5724] usb 3-1: USB disconnect, device number 11 [ 227.039859][ T5724] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 227.051767][ T5724] garmin_gps 3-1:1.0: device disconnected [ 227.145885][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 227.161510][ T7858] wg2 speed is unknown, defaulting to 1000 [ 227.206571][ T5704] usb 4-1: USB disconnect, device number 14 [ 227.313251][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 227.399525][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 227.491535][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 227.619697][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.060744][ T7958] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 228.240999][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 231.669724][ T5717] usb 6-1: USB disconnect, device number 5 [ 234.573821][ T5598] Bluetooth: hci5: unexpected event 0x18 length: 247 > 23 [ 234.668101][ T7989] gre1: entered promiscuous mode [ 235.769330][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.780345][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.789339][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.798250][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.807244][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.826048][ T5610] Bluetooth: hci4: command tx timeout [ 237.990296][ T8035] tipc: Started in network mode [ 238.007744][ T8035] tipc: Node identity 7f000001, cluster identity 4711 [ 238.028198][ T8035] tipc: Enabled bearer , priority 10 [ 239.209658][ T5599] tipc: Node number set to 2130706433 [ 240.107047][ T5598] Bluetooth: hci4: command tx timeout [ 240.920709][ T5598] Bluetooth: hci5: command 0x0406 tx timeout [ 241.256458][ T5898] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.280918][ T8006] wg2 speed is unknown, defaulting to 1000 [ 241.447776][ T5898] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.146922][ T5610] Bluetooth: hci4: command tx timeout [ 244.459216][ T5610] Bluetooth: hci4: command tx timeout [ 244.546386][ T5898] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.838795][ T8086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.675'. [ 246.202934][ T8087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.675'. [ 247.182099][ T5898] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.894243][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 248.054650][ T30] audit: type=1400 audit(1786396071.461:579): avc: denied { sys_admin } for pid=5261 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 248.088764][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.678'. [ 248.170224][ T5610] Bluetooth: hci5: unexpected cc 0x0c05 length: 4 > 1 [ 248.178873][ T5610] Bluetooth: hci5: unexpected event for opcode 0x0c05 [ 249.544018][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 249.589016][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 249.619592][ T5898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.685976][ T5898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.711299][ T5898] bond0 (unregistering): Released all slaves [ 249.715846][ T5599] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 249.749896][ T5704] wg2 speed is unknown, defaulting to 1000 [ 249.776265][ T5704] syz2: Port: 1 Link DOWN [ 249.842842][ T5704] wg2 speed is unknown, defaulting to 1000 [ 249.909627][ T5599] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 249.928880][ T5599] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 249.950127][ T5599] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 249.971854][ T5599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.023855][ T8115] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 250.072711][ T5599] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 250.147986][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.317086][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'. [ 253.688913][ T5797] usb 4-1: USB disconnect, device number 15 [ 254.143239][ T30] audit: type=1400 audit(1786396077.541:580): avc: denied { write } for pid=8152 comm="syz.5.694" name="header" dev="configfs" ino=18329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 254.166786][ T8157] binder: BINDER_SET_CONTEXT_MGR already set [ 254.180471][ T30] audit: type=1400 audit(1786396077.591:581): avc: denied { write } for pid=8152 comm="syz.5.694" name="fs" dev="configfs" ino=18338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 254.202468][ T8157] binder: 8156:8157 ioctl 4018620d 200000004a80 returned -16 [ 254.204356][ T30] audit: type=1400 audit(1786396077.591:582): avc: denied { write } for pid=8152 comm="syz.5.694" name="fs" dev="configfs" ino=18338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 254.344036][ T30] audit: type=1400 audit(1786396077.751:583): avc: denied { write } for pid=8130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.370036][ T8164] netlink: 'syz.0.697': attribute type 2 has an invalid length. [ 254.794267][ T30] audit: type=1400 audit(1786396078.191:584): avc: denied { write } for pid=8175 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.097129][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 255.351053][ T8184] random: crng reseeded on system resumption [ 256.408345][ T8186] input: syz0 as /devices/virtual/input/input10 [ 256.443304][ T8192] netlink: 'syz.2.704': attribute type 2 has an invalid length. [ 256.452038][ T8192] netlink: 'syz.2.704': attribute type 2 has an invalid length. [ 256.595264][ T8006] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.649038][ T8006] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.691936][ T8006] bridge_slave_0: entered allmulticast mode [ 256.711382][ T8006] bridge_slave_0: entered promiscuous mode [ 256.747861][ T8006] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.766777][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.774815][ T8006] bridge_slave_1: entered allmulticast mode [ 256.822974][ T8006] bridge_slave_1: entered promiscuous mode [ 256.884456][ T5898] hsr_slave_0: left promiscuous mode [ 256.894179][ T5898] hsr_slave_1: left promiscuous mode [ 256.910472][ T5898] veth1_macvtap: left promiscuous mode [ 256.924125][ T5898] veth0_macvtap: left promiscuous mode [ 256.935575][ T5898] veth1_vlan: left promiscuous mode [ 256.953520][ T5898] veth0_vlan: left promiscuous mode [ 257.082460][ T30] audit: type=1400 audit(1786396080.501:585): avc: denied { write } for pid=8196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.172501][ T30] audit: type=1400 audit(1786396080.581:586): avc: denied { write } for pid=8220 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.185793][ T5717] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 257.373534][ T5717] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 257.513172][ T5717] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 257.638724][ T5717] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 257.764416][ T5717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.873667][ T8229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.777162][ T8212] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 258.807429][ T5717] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 258.814903][ T5898] team0 (unregistering): Port device team_slave_1 removed [ 258.895363][ T5898] team0 (unregistering): Port device team_slave_0 removed [ 258.962119][ T30] audit: type=1400 audit(1786396082.371:587): avc: denied { mount } for pid=8236 comm="syz.3.715" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 259.043744][ T30] audit: type=1400 audit(1786396082.401:588): avc: denied { ioctl } for pid=8236 comm="syz.3.715" path="/143/tracing/uprobe_events" dev="tracefs" ino=1073 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 259.506254][ T30] audit: type=1400 audit(1786396082.891:589): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 260.513956][ T3268] smc: removing ib device syz2 [ 260.722910][ T30] audit: type=1400 audit(1786396084.131:590): avc: denied { setopt } for pid=8247 comm="syz.3.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 260.782544][ T3268] smbdirect: ib_dev[syz2] removed [ 260.858897][ T8254] netlink: 'syz.0.722': attribute type 2 has an invalid length. [ 260.868350][ T8254] netlink: 'syz.0.722': attribute type 2 has an invalid length. [ 260.904873][ T30] audit: type=1400 audit(1786396084.311:591): avc: denied { read write } for pid=8250 comm="syz.3.721" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 260.942391][ T30] audit: type=1400 audit(1786396084.311:592): avc: denied { open } for pid=8250 comm="syz.3.721" path="/146/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 260.969443][ T30] audit: type=1400 audit(1786396084.311:593): avc: denied { ioctl } for pid=8250 comm="syz.3.721" path="/146/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 261.125980][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 261.161556][ T8006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.189758][ T1218] usb 6-1: USB disconnect, device number 6 [ 262.097264][ T8270] tmpfs: Unknown parameter 'sizÁe' [ 262.149026][ T8006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.074654][ T8280] binder: 8278:8280 ioctl c0306201 0 returned -14 [ 265.107682][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.729'. [ 265.915446][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 266.152770][ T8298] netlink: 'syz.5.733': attribute type 2 has an invalid length. [ 266.162012][ T8298] netlink: 'syz.5.733': attribute type 2 has an invalid length. [ 266.276484][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 266.283242][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 266.340039][ T8006] team0: Port device team_slave_0 added [ 266.345729][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 266.362452][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.377786][ T8006] team0: Port device team_slave_1 added [ 266.392677][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 266.395136][ T8304] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 266.465553][ T30] audit: type=1400 audit(1786396089.871:594): avc: denied { read } for pid=4951 comm="acpid" name="event2" dev="devtmpfs" ino=3036 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.497409][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.552701][ T30] audit: type=1400 audit(1786396089.871:595): avc: denied { open } for pid=4951 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=3036 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.594573][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.675760][ T30] audit: type=1400 audit(1786396089.871:596): avc: denied { ioctl } for pid=4951 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=3036 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.678967][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.748688][ T8006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.763160][ T8006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.791336][ T30] audit: type=1400 audit(1786396090.131:597): avc: denied { getopt } for pid=8276 comm="syz.3.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 266.831116][ T30] audit: type=1400 audit(1786396090.241:598): avc: denied { write } for pid=8274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.880859][ T8006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.961363][ T8006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.962529][ T9] usb 3-1: usb_control_msg returned -71 [ 266.990762][ T30] audit: type=1400 audit(1786396090.271:599): avc: denied { write } for pid=8307 comm="syz.0.735" name="functions" dev="configfs" ino=8140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 267.014280][ T9] usbtmc 3-1:16.0: can't read capabilities [ 267.022138][ T8006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.078984][ T30] audit: type=1400 audit(1786396090.271:600): avc: denied { write } for pid=8307 comm="syz.0.735" name="configs" dev="configfs" ino=8141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 267.088776][ T9] usb 3-1: USB disconnect, device number 12 [ 267.118131][ T8006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.839411][ T30] audit: type=1400 audit(1786396090.531:601): avc: denied { write } for pid=8318 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.225132][ T8006] hsr_slave_0: entered promiscuous mode [ 268.245150][ T8006] hsr_slave_1: entered promiscuous mode [ 268.260154][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 269.709074][ T8338] tmpfs: Unknown parameter 'sizÁe' [ 272.556646][ T8361] binder: 8360:8361 ioctl c0306201 0 returned -14 [ 272.833141][ T1218] IPVS: starting estimator thread 0... [ 273.069359][ T8371] IPVS: using max 37 ests per chain, 88800 per kthread [ 273.809190][ T30] audit: type=1400 audit(1786396097.221:602): avc: denied { write } for pid=8339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.201057][ T8394] tmpfs: Unknown parameter 'sizÁe' [ 275.440277][ T1218] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 277.210917][ T8402] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.759'. [ 277.263789][ T30] audit: type=1400 audit(1786396100.671:603): avc: denied { write } for pid=8397 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.353011][ T8006] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 277.382382][ T8006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 277.391722][ T8006] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 277.433885][ T8006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 277.460070][ T8407] binder: 8406:8407 ioctl c0306201 0 returned -14 [ 277.464903][ T8006] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 277.524225][ T8006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 277.582505][ T8006] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 277.681179][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.5.762'. [ 278.497874][ T8006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 278.511696][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 279.610284][ T8439] tmpfs: Unknown parameter 'sizÁe' [ 279.622612][ T8006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.646649][ T8006] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.664537][ T8440] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.770'. [ 279.694220][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.701355][ T5894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.741035][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.748190][ T5914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.651229][ T8447] autofs: Unknown parameter '0x0000000000000000' [ 280.719982][ T8454] binder: 8453:8454 ioctl c0306201 0 returned -14 [ 280.914625][ T8466] netlink: 'syz.2.778': attribute type 10 has an invalid length. [ 280.934518][ T8466] team0: Port device dummy0 added [ 281.095777][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 282.101836][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 282.263668][ T8006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.066118][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 283.113842][ T8487] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.782'. [ 283.132642][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 283.170086][ T8491] tmpfs: Unknown parameter 'sizÁe' [ 283.181209][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.512452][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 284.154814][ T8497] binder: BINDER_SET_CONTEXT_MGR already set [ 284.165868][ T8497] binder: 8496:8497 ioctl 4018620d 200000000040 returned -16 [ 284.187376][ T9] usb 6-1: can't set config #27, error -71 [ 284.210846][ T9] usb 6-1: USB disconnect, device number 8 [ 284.320712][ T8006] veth0_vlan: entered promiscuous mode [ 284.345556][ T8006] veth1_vlan: entered promiscuous mode [ 284.384944][ T8006] veth0_macvtap: entered promiscuous mode [ 284.415538][ T8006] veth1_macvtap: entered promiscuous mode [ 284.445374][ T8006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.477962][ T8006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.537173][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.567562][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.615770][ T9] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 284.657028][ T3268] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.670154][ T3268] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.693056][ T3268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.705431][ T3268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.766529][ T3268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.774478][ T3268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.776243][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 284.794408][ T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 284.805519][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.817618][ T9] usb 6-1: config 0 has no interface number 0 [ 284.825106][ T9] usb 6-1: config 0 interface 55 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 284.838868][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.847601][ T5704] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 284.867694][ T9] usb 6-1: config 0 descriptor?? [ 284.885329][ T9] ldusb 6-1:0.55: Interrupt in endpoint not found [ 285.020229][ T5704] usb 3-1: not running at top speed; connect to a high speed hub [ 285.028167][ T5704] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 285.039011][ T5704] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 285.051052][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.072921][ T5704] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 285.120546][ T30] audit: type=1400 audit(1786396108.531:604): avc: denied { mount } for pid=8006 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 285.166080][ T5704] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 285.170551][ T1218] usb 6-1: USB disconnect, device number 9 [ 285.283424][ T5704] usb 3-1: USB disconnect, device number 13 [ 285.363251][ T5704] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 285.401239][ T5704] garmin_gps 3-1:1.0: device disconnected [ 286.421852][ T8520] input: syz1 as /devices/virtual/input/input12 [ 286.560710][ T30] audit: type=1400 audit(1786396109.941:605): avc: denied { read } for pid=8534 comm="syz.2.797" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 286.635384][ T30] audit: type=1400 audit(1786396109.941:606): avc: denied { open } for pid=8534 comm="syz.2.797" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 286.732842][ T30] audit: type=1400 audit(1786396109.941:607): avc: denied { ioctl } for pid=8534 comm="syz.2.797" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 286.856550][ T8548] random: crng reseeded on system resumption [ 286.903972][ T8548] Unrecognized hibernate image header format! [ 286.933171][ T8548] PM: hibernation: Image mismatch: architecture specific data [ 287.343598][ T8561] MTRR 0 not used [ 289.000323][ T8573] binder: 8572:8573 ioctl c0306201 0 returned -14 [ 289.261909][ T8580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.328391][ T8582] netlink: 'syz.5.816': attribute type 10 has an invalid length. [ 289.365384][ T8582] team0: Port device dummy0 added [ 289.563666][ T8586] MTRR 0 not used [ 289.725826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 290.504932][ T8600] netlink: 16 bytes leftover after parsing attributes in process `syz.6.824'. [ 290.728319][ T8608] random: crng reseeded on system resumption [ 290.927607][ T30] audit: type=1400 audit(1786396114.331:608): avc: denied { write } for pid=8593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.140456][ T30] audit: type=1400 audit(1786396114.541:609): avc: denied { write } for pid=8624 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.343750][ T8630] MTRR 0 not used [ 291.986104][ T5689] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 292.339912][ T5689] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 292.713557][ T5689] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 292.893079][ T5689] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 293.076210][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.190849][ T8632] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 293.218732][ T5689] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 293.305818][ T8651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.142852][ T5704] usb 3-1: USB disconnect, device number 14 [ 295.300702][ T8659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.836'. [ 295.750448][ T30] audit: type=1400 audit(1786396119.161:610): avc: denied { write } for pid=8638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.169495][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 297.275088][ T30] audit: type=1400 audit(1786396120.681:611): avc: denied { write } for pid=8673 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.351104][ T8676] netlink: 'syz.3.834': attribute type 29 has an invalid length. [ 297.360335][ T8676] netlink: 'syz.3.834': attribute type 1 has an invalid length. [ 297.368049][ T8676] netlink: 756 bytes leftover after parsing attributes in process `syz.3.834'. [ 297.452253][ T8669] random: crng reseeded on system resumption [ 297.474858][ T8669] Unrecognized hibernate image header format! [ 297.542189][ T8669] PM: hibernation: Image mismatch: architecture specific data [ 297.720939][ T8688] MTRR 0 not used [ 298.500795][ T8700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.847'. [ 299.993173][ T8719] random: crng reseeded on system resumption [ 300.004702][ T30] audit: type=1400 audit(1786396123.371:612): avc: denied { write } for pid=8693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.132728][ T8707] overlayfs: missing 'lowerdir' [ 300.139111][ T8708] input: syz1 as /devices/virtual/input/input13 [ 300.470917][ T8724] input: syz0 as /devices/virtual/input/input14 [ 300.505811][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 300.999349][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 302.977609][ T24] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 302.988055][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 302.999185][ T24] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.012189][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.034986][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 303.044521][ T24] usb 4-1: invalid MIDI out EP 0 [ 303.106448][ T30] audit: type=1400 audit(1786396126.511:613): avc: denied { write } for pid=8727 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.305024][ T8736] netlink: 'syz.0.853': attribute type 29 has an invalid length. [ 303.328550][ T24] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 303.403712][ T24] usb 4-1: USB disconnect, device number 16 [ 303.423510][ T8736] netlink: 'syz.0.853': attribute type 1 has an invalid length. [ 303.486183][ T8736] netlink: 756 bytes leftover after parsing attributes in process `syz.0.853'. [ 303.523981][ T5704] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 303.706798][ T5704] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 303.727146][ T5704] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 303.753951][ T5704] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 303.787830][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.032641][ T8738] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 304.971140][ T5704] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.136107][ T8770] random: crng reseeded on system resumption [ 305.198989][ T5704] usb 3-1: USB disconnect, device number 15 [ 305.548816][ T8771] input: syz0 as /devices/virtual/input/input15 [ 307.988861][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.873'. [ 308.830528][ T5703] IPVS: starting estimator thread 0... [ 308.926445][ T8802] IPVS: using max 47 ests per chain, 112800 per kthread [ 309.039899][ T30] audit: type=1400 audit(1786396132.451:614): avc: denied { write } for pid=8779 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.214577][ T30] audit: type=1400 audit(1786396132.621:615): avc: denied { write } for pid=8822 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.509618][ T8841] random: crng reseeded on system resumption [ 309.684330][ T8842] input: syz0 as /devices/virtual/input/input16 [ 311.176678][ T8849] input: syz1 as /devices/virtual/input/input17 [ 311.601193][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.646156][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.892'. [ 314.692942][ T5610] Bluetooth: hci4: unexpected event 0x18 length: 247 > 23 [ 314.823887][ T8891] input: syz1 as /devices/virtual/input/input18 [ 314.875756][ T5724] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 314.982639][ T8894] binder: 8893:8894 ioctl c0306201 0 returned -14 [ 315.071963][ T5724] usb 4-1: not running at top speed; connect to a high speed hub [ 315.112535][ T5724] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 315.140564][ T5724] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 315.173866][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.713355][ T5724] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 316.115343][ T5724] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 316.159062][ T5724] usb 4-1: USB disconnect, device number 17 [ 316.232168][ T5724] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 316.245385][ T5724] garmin_gps 4-1:1.0: device disconnected [ 316.296828][ T1218] libceph: connect (1)[c::]:6789 error -101 [ 316.303889][ T1218] libceph: mon0 (1)[c::]:6789 connect error [ 316.369756][ T8904] ceph: No mds server is up or the cluster is laggy [ 316.380590][ T1218] libceph: connect (1)[c::]:6789 error -101 [ 316.411129][ T1218] libceph: mon0 (1)[c::]:6789 connect error [ 316.579021][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 317.025855][ T5598] Bluetooth: hci4: command 0x0405 tx timeout [ 317.686350][ T5598] Bluetooth: hci5: unexpected event 0x18 length: 247 > 23 [ 317.766192][ T1218] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 318.004895][ T8939] input: syz1 as /devices/virtual/input/input19 [ 318.018028][ T1218] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 318.031481][ T1218] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.044313][ T1218] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 318.056685][ T1218] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 318.073893][ T1218] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 318.083575][ T1218] usb 4-1: Manufacturer: syz [ 318.095782][ T5797] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 318.104214][ T1218] usb 4-1: config 0 descriptor?? [ 318.119432][ T1218] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 318.267186][ T5797] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 318.286841][ T5797] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 318.315896][ T5797] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 318.351526][ T5797] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 318.386314][ T5797] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 318.437523][ T5797] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 318.467763][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 318.483563][ T5797] usb 3-1: Product: syz [ 318.496329][ T5797] usb 3-1: Manufacturer: syz [ 318.513381][ T5797] cdc_wdm 3-1:1.0: skipping garbage [ 318.527957][ T5797] cdc_wdm 3-1:1.0: skipping garbage [ 318.636159][ T8944] MTRR 0 not used [ 319.146480][ T5797] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 319.174640][ T5797] usb 3-1: USB disconnect, device number 16 [ 319.585936][ T1218] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 319.776855][ T1218] usb 7-1: not running at top speed; connect to a high speed hub [ 319.785388][ T1218] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 319.798337][ T1218] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 319.810862][ T1218] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.837457][ T1218] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 319.871107][ T1218] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 320.053393][ T1218] usb 7-1: USB disconnect, device number 2 [ 320.093931][ T1218] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 320.118638][ T1218] garmin_gps 7-1:1.0: device disconnected [ 320.239751][ T5610] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 320.366037][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'. [ 321.315180][ T5610] Bluetooth: hci4: command 0x0405 tx timeout [ 321.325364][ T5797] usb 4-1: USB disconnect, device number 18 [ 321.499218][ T8972] MTRR 0 not used [ 327.265829][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 327.503272][ T9023] random: crng reseeded on system resumption [ 327.576277][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 327.592755][ T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 327.604081][ T24] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 328.883092][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.640416][ T9011] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 329.760776][ T9035] MTRR 0 not used [ 330.343249][ T24] usb 7-1: can't set config #27, error -71 [ 330.356511][ T24] usb 7-1: USB disconnect, device number 3 [ 330.724276][ T9042] kAFS: No cell specified [ 331.001690][ T5598] Bluetooth: hci5: unexpected event 0x18 length: 247 > 23 [ 331.217852][ T9056] netlink: 'syz.5.950': attribute type 10 has an invalid length. [ 332.828987][ T30] audit: type=1400 audit(1786396156.231:616): avc: denied { write } for pid=9062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.023135][ T30] audit: type=1400 audit(1786396156.431:617): avc: denied { write } for pid=9093 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.128239][ T9100] random: crng reseeded on system resumption [ 337.475967][ T5703] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 337.607391][ T5797] IPVS: starting estimator thread 0... [ 337.709884][ T9120] IPVS: using max 41 ests per chain, 98400 per kthread [ 337.749231][ T5703] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 337.762791][ T5703] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.795949][ T5703] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 337.825167][ T5703] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 337.876306][ T5703] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 337.905345][ T5703] usb 7-1: Manufacturer: syz [ 340.424119][ T5703] usb 7-1: config 0 descriptor?? [ 340.445015][ T5703] usb 7-1: can't set config #0, error -71 [ 340.458116][ T5703] usb 7-1: USB disconnect, device number 4 [ 340.762822][ T30] audit: type=1400 audit(1786396164.171:618): avc: denied { write } for pid=9117 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.001404][ T30] audit: type=1400 audit(1786396164.411:619): avc: denied { write } for pid=9170 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.084902][ T9180] random: crng reseeded on system resumption [ 341.113174][ T9180] Unrecognized hibernate image header format! [ 341.149701][ T9180] PM: hibernation: Image mismatch: architecture specific data [ 343.895704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 343.959535][ T9196] netlink: 'syz.0.984': attribute type 2 has an invalid length. [ 344.005066][ T9196] netlink: 'syz.0.984': attribute type 2 has an invalid length. [ 344.059471][ T5724] IPVS: starting estimator thread 0... [ 344.078101][ T5704] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 344.165812][ T9203] IPVS: using max 46 ests per chain, 110400 per kthread [ 344.237267][ T5704] usb 3-1: not running at top speed; connect to a high speed hub [ 344.266600][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 344.509201][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 344.631886][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.692201][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 344.733798][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 344.951099][ T24] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 345.062549][ T24] usb 4-1: Manufacturer: syz [ 345.422988][ T24] usb 4-1: config 0 descriptor?? [ 345.628175][ T5704] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 345.640280][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 347.727558][ T5704] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 348.548188][ T24] libceph: connect (1)[c::]:6789 error -101 [ 348.575925][ T5704] usb 3-1: can't read configurations, error -71 [ 348.602533][ T9212] ceph: No mds server is up or the cluster is laggy [ 348.616942][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 348.637912][ T24] usb 4-1: USB disconnect, device number 19 [ 349.505688][ T1218] libceph: connect (1)[c::]:6789 error -101 [ 349.600954][ T1218] libceph: mon0 (1)[c::]:6789 connect error [ 350.697900][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.998'. [ 351.258120][ T9274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.368161][ T5717] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 351.536575][ T5717] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 352.417287][ T5717] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.427754][ T5717] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 352.438564][ T5717] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 352.452769][ T5717] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 352.461668][ T5717] usb 3-1: Manufacturer: syz [ 352.469635][ T5717] usb 3-1: config 0 descriptor?? [ 352.479171][ T5717] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 355.225978][ T9314] binder: 9313:9314 ioctl c0306201 200000000040 returned -22 [ 355.360109][ T9314] binder: 9313:9314 ioctl c0306201 200000000640 returned -22 [ 355.446089][ T5724] usb 3-1: USB disconnect, device number 19 [ 356.817866][ T9323] tmpfs: Bad value for 'nr_inodes' [ 356.823821][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 358.796074][ T9335] random: crng reseeded on system resumption [ 361.125493][ T9343] input: syz1 as /devices/virtual/input/input20 [ 362.710538][ T9372] tmpfs: Bad value for 'nr_inodes' [ 362.718919][ T9372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'. [ 362.740621][ T9375] random: crng reseeded on system resumption [ 362.838105][ T9378] input: syz0 as /devices/virtual/input/input21 [ 364.229653][ T9387] binder: BINDER_SET_CONTEXT_MGR already set [ 364.235835][ T9387] binder: 9386:9387 ioctl 4018620d 200000000040 returned -16 [ 365.041010][ T5610] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23 [ 369.403730][ T9399] input: syz1 as /devices/virtual/input/input22 [ 370.126038][ T5717] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 370.398931][ T5717] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 370.437611][ T5717] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 370.474087][ T5717] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 370.494736][ T9421] netlink: 'syz.3.1059': attribute type 10 has an invalid length. [ 370.516177][ T5717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.544423][ T9421] team0: Port device dummy0 added [ 370.560919][ T9406] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 370.585617][ T5717] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 370.769441][ T5610] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 370.991606][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 371.382606][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 371.523244][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 371.645879][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 371.904639][ T24] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 371.994250][ T24] usb 4-1: Manufacturer: syz [ 372.410732][ T24] usb 4-1: config 0 descriptor?? [ 373.031644][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.047078][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 374.018165][ T24] usb 6-1: USB disconnect, device number 10 [ 374.748544][ T9445] input: syz1 as /devices/virtual/input/input23 [ 374.831966][ T9454] netlink: 'syz.5.1073': attribute type 10 has an invalid length. [ 374.953676][ T5610] Bluetooth: hci4: unexpected event 0x18 length: 247 > 23 [ 374.963606][ T9459] syz.5.1077 uses obsolete (PF_INET,SOCK_PACKET) [ 375.135445][ T9470] jffs2: notice: (9470) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 375.164147][ T30] audit: type=1400 audit(1786396198.571:620): avc: denied { write } for pid=9469 comm="syz.5.1080" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 375.248436][ T30] audit: type=1400 audit(1786396198.571:621): avc: denied { add_name } for pid=9469 comm="syz.5.1080" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 375.282502][ T30] audit: type=1400 audit(1786396198.571:622): avc: denied { create } for pid=9469 comm="syz.5.1080" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 375.337224][ T30] audit: type=1400 audit(1786396198.581:623): avc: denied { write } for pid=9469 comm="syz.5.1080" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 375.636294][ T24] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 375.847908][ T5724] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 376.006161][ T5703] usb 4-1: USB disconnect, device number 20 [ 376.156497][ T5724] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 376.179071][ T5724] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 376.198142][ T24] usb 6-1: not running at top speed; connect to a high speed hub [ 376.210459][ T5724] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 376.234851][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.237679][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 376.267208][ T9478] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 376.275769][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 376.292217][ T5724] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 376.305178][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.347869][ T24] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 376.383337][ T24] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 376.515410][ T9491] input: syz1 as /devices/virtual/input/input24 [ 376.521556][ T9496] netlink: 'syz.0.1089': attribute type 10 has an invalid length. [ 376.641616][ T5610] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 379.484516][ T9496] team0: Port device dummy0 added [ 379.837202][ T24] usb 7-1: USB disconnect, device number 5 [ 380.431217][ T9] usb 6-1: USB disconnect, device number 11 [ 380.453580][ T9504] block nbd0: not configured, cannot reconfigure [ 380.455105][ T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 380.472643][ T9] garmin_gps 6-1:1.0: device disconnected [ 380.742634][ T9515] syzkaller1: entered promiscuous mode [ 380.749708][ T9515] syzkaller1: entered allmulticast mode [ 380.937924][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 381.372872][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 381.389820][ T5610] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 381.412866][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 381.414899][ T9529] netlink: 'syz.6.1103': attribute type 10 has an invalid length. [ 381.450420][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 381.638915][ T9] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 381.643208][ T9527] netlink: 'syz.3.1102': attribute type 2 has an invalid length. [ 381.654520][ T9529] team0: Port device dummy0 added [ 381.667046][ T9] usb 6-1: Manufacturer: syz [ 381.680290][ T9] usb 6-1: config 0 descriptor?? [ 381.690633][ T9527] netlink: 'syz.3.1102': attribute type 2 has an invalid length. [ 381.692285][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 381.861143][ T9536] input: syz1 as /devices/virtual/input/input25 [ 381.957275][ T5689] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 382.074005][ T30] audit: type=1400 audit(1786396205.481:624): avc: denied { read } for pid=9544 comm="syz.0.1109" name="usbmon5" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 382.100993][ T30] audit: type=1400 audit(1786396205.481:625): avc: denied { open } for pid=9544 comm="syz.0.1109" path="/dev/usbmon5" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 382.127289][ T5689] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 382.132825][ T30] audit: type=1400 audit(1786396205.511:626): avc: denied { ioctl } for pid=9544 comm="syz.0.1109" path="/dev/usbmon5" dev="devtmpfs" ino=730 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 382.136564][ T9] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 382.172728][ T5689] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.183861][ T5689] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 382.204621][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.210957][ T30] audit: type=1400 audit(1786396205.611:627): avc: denied { read } for pid=9544 comm="syz.0.1109" path="socket:[26489]" dev="sockfs" ino=26489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.239653][ T9534] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 382.254259][ T5689] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 382.316864][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 382.339400][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 382.358919][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 382.375925][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.418106][ T9] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 382.439224][ T9] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 382.491095][ T9560] syzkaller1: entered promiscuous mode [ 382.498123][ T9560] syzkaller1: entered allmulticast mode [ 383.446989][ T5797] usb 4-1: USB disconnect, device number 21 [ 384.921370][ T5797] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 385.313114][ T5797] garmin_gps 4-1:1.0: device disconnected [ 385.893076][ T24] usb 3-1: USB disconnect, device number 20 [ 386.073788][ T1218] usb 6-1: USB disconnect, device number 12 [ 386.747013][ T5610] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 386.837210][ T9575] netlink: 'syz.6.1118': attribute type 2 has an invalid length. [ 386.898848][ T9575] netlink: 'syz.6.1118': attribute type 2 has an invalid length. [ 387.182573][ T9584] input: syz1 as /devices/virtual/input/input26 [ 387.237783][ T9592] syzkaller1: entered promiscuous mode [ 387.243481][ T9592] syzkaller1: entered allmulticast mode [ 387.663114][ T24] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 388.024233][ T1218] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 388.079446][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 388.226484][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 388.483014][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 388.548190][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.656678][ T1218] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 389.058707][ T1218] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 389.171033][ T5610] Bluetooth: hci5: unexpected event 0x18 length: 247 > 23 [ 389.185364][ T24] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 389.203106][ T1218] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 389.250150][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.544192][ T24] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 389.590276][ T9601] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 389.630851][ T9] usb 3-1: USB disconnect, device number 21 [ 389.631012][ T1218] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 389.644690][ T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 389.743412][ T9] garmin_gps 3-1:1.0: device disconnected [ 389.966550][ T9618] netlink: 'syz.5.1134': attribute type 2 has an invalid length. [ 390.017227][ T9618] netlink: 'syz.5.1134': attribute type 2 has an invalid length. [ 393.242612][ T5689] usb 4-1: USB disconnect, device number 22 [ 393.727292][ T30] audit: type=1400 audit(1786396217.141:628): avc: denied { write } for pid=9625 comm="syz.5.1138" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 393.873827][ T9633] binder: BINDER_SET_CONTEXT_MGR already set [ 393.886094][ T9633] binder: 9632:9633 ioctl 4018620d 200000004a80 returned -16 [ 393.982662][ T30] audit: type=1400 audit(1786396217.391:629): avc: denied { open } for pid=9630 comm="syz.0.1140" path="/dev/ttyq4" dev="devtmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 394.039815][ T9636] tipc: Bearer : already 2 bearers with priority 10 [ 394.216179][ T9636] tipc: Bearer : trying with adjusted priority [ 394.667972][ T9640] input: syz1 as /devices/virtual/input/input27 [ 394.751376][ T9636] tipc: Enabled bearer , priority 9 [ 396.204326][ T9658] trusted_key: encrypted_key: keylen parameter is missing [ 396.375732][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 396.627926][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 398.682772][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 399.482850][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.493098][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 399.520728][ T9] usb 4-1: string descriptor 0 read error: -71 [ 399.535750][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 399.594215][ T9] usb 4-1: config 0 descriptor?? [ 399.600015][ T9] usb 4-1: can't set config #0, error -71 [ 399.623343][ T9] usb 4-1: USB disconnect, device number 23 [ 399.647416][ T9685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.936997][ T5689] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 400.258394][ T5689] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 400.985281][ T5689] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 400.996400][ T5689] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 401.006433][ T5689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.018351][ T9678] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 401.028739][ T5689] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 402.576555][ T5794] usb 6-1: USB disconnect, device number 13 [ 405.117906][ T5794] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 405.327288][ T5794] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 407.521492][ T5794] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 407.755741][ T5794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.765537][ T5794] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 407.804675][ T5794] usb 6-1: string descriptor 0 read error: -71 [ 407.825913][ T5794] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 407.836337][ T5794] usb 6-1: config 0 descriptor?? [ 407.846193][ T5794] usb 6-1: can't set config #0, error -71 [ 407.853435][ T30] audit: type=1400 audit(1786396231.261:630): avc: denied { read } for pid=9733 comm="syz.2.1174" name="/" dev="configfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 407.882031][ T5794] usb 6-1: USB disconnect, device number 14 [ 407.960039][ T30] audit: type=1400 audit(1786396231.261:631): avc: denied { read open } for pid=9733 comm="syz.2.1174" path="/263/config" dev="configfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 408.012073][ T30] audit: type=1400 audit(1786396231.261:632): avc: denied { read } for pid=9733 comm="syz.2.1174" name="g1" dev="configfs" ino=8139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 408.065566][ T30] audit: type=1400 audit(1786396231.261:633): avc: denied { read } for pid=9733 comm="syz.2.1174" name="c_ssize" dev="configfs" ino=27481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 408.105415][ T30] audit: type=1800 audit(1786396231.261:634): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1174" name="c_ssize" dev="configfs" ino=27481 res=0 errno=0 [ 408.402743][ T9743] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 408.897718][ T9743] binder: 9737:9743 ioctl c0306201 200000000040 returned -14 [ 409.052352][ T9743] ublk3: read batch cmd buffer failed [ 409.063257][ T9743] ublk3: read batch cmd buffer failed [ 409.187847][ T30] audit: type=1400 audit(1786396232.451:635): avc: denied { map } for pid=9737 comm="syz.5.1177" path="/dev/ublkc3" dev="devtmpfs" ino=3276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 410.916216][ T9749] overlayfs: missing 'lowerdir' [ 414.149030][ T9779] random: crng reseeded on system resumption [ 415.570873][ T30] audit: type=1400 audit(1786396238.971:636): avc: denied { create } for pid=9784 comm="syz.2.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 415.605805][ T30] audit: type=1400 audit(1786396238.981:637): avc: denied { bind } for pid=9784 comm="syz.2.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 415.690787][ T9789] overlayfs: missing 'lowerdir' [ 415.726990][ T30] audit: type=1400 audit(1786396239.141:638): avc: denied { ioctl } for pid=9790 comm="syz.2.1197" path="socket:[28028]" dev="sockfs" ino=28028 ioctlcmd=0x61f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 415.969087][ T9800] binder: 9799:9800 ioctl 4018620d 0 returned -22 [ 415.997467][ T9800] binder: 9799:9800 ioctl c0306201 200000000040 returned -22 [ 416.038504][ T9800] binder: 9799:9800 ioctl c0306201 200000000640 returned -22 [ 416.052215][ T30] audit: type=1400 audit(1786396239.461:639): avc: denied { read } for pid=9796 comm="syz.5.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 416.137181][ T971] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.155195][ T971] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.195306][ T971] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.224021][ T9815] 9p: Bad value for 'wfdno' [ 416.232575][ T9817] random: crng reseeded on system resumption [ 416.247486][ T971] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.267531][ T9817] Unrecognized hibernate image header format! [ 416.289848][ T9817] PM: hibernation: Image mismatch: architecture specific data [ 416.348389][ T9819] overlayfs: missing 'lowerdir' [ 416.362595][ T30] audit: type=1400 audit(1786396239.771:640): avc: denied { read } for pid=9820 comm="syz.3.1209" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 416.390719][ T30] audit: type=1400 audit(1786396239.771:641): avc: denied { open } for pid=9820 comm="syz.3.1209" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 416.419721][ T9823] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 416.474384][ T30] audit: type=1400 audit(1786396239.831:642): avc: denied { ioctl } for pid=9820 comm="syz.3.1209" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 416.582818][ T30] audit: type=1400 audit(1786396239.861:643): avc: denied { map } for pid=9820 comm="syz.3.1209" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 416.658650][ T30] audit: type=1400 audit(1786396239.861:644): avc: denied { execute } for pid=9820 comm="syz.3.1209" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 417.650875][ T1218] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 417.806375][ T1218] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 417.914552][ T1218] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 417.918182][ T9852] binder: 9848:9852 ioctl 4018620d 0 returned -22 [ 417.926569][ T1218] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 417.943652][ T1218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.956292][ T9833] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 417.971806][ T9854] binder: 9848:9854 ioctl c0306201 200000000040 returned -22 [ 417.980967][ T1218] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 418.197783][ T9852] binder: 9848:9852 ioctl c0306201 200000000640 returned -22 [ 421.061022][ T30] audit: type=1400 audit(1786396244.461:645): avc: denied { write } for pid=9826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.169279][ T5610] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 421.223528][ T1218] usb 6-1: USB disconnect, device number 15 [ 421.310774][ T9878] netlink: 'syz.5.1226': attribute type 10 has an invalid length. [ 421.334223][ T30] audit: type=1400 audit(1786396244.741:646): avc: denied { write } for pid=9879 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.392447][ T9891] binder: 9890:9891 ioctl c0306201 200000000040 returned -22 [ 422.465358][ T9897] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 422.513106][ T9897] VFS: file-max limit 0 reached [ 422.615738][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 422.667893][ T5724] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 422.671201][ T30] audit: type=1400 audit(1786396246.081:647): avc: denied { write } for pid=9886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.745072][ T30] audit: type=1400 audit(1786396246.151:648): avc: denied { write } for pid=9913 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.796431][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 422.810383][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 422.823092][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 422.823246][ T5724] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 422.842267][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.854490][ T9888] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 422.861946][ T5724] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 422.873007][ T5724] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 422.885318][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 422.893639][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.919957][ T9893] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 422.971461][ T5724] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 426.601379][ T9] usb 6-1: USB disconnect, device number 16 [ 427.688907][ T5724] usb 3-1: USB disconnect, device number 22 [ 428.014511][ T9927] tmpfs: Unknown parameter 'sizÁe' [ 428.987199][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1241'. [ 429.027642][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1240'. [ 429.129952][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1243'. [ 429.260522][ T30] audit: type=1400 audit(1786396252.671:649): avc: denied { name_bind } for pid=9948 comm="syz.3.1245" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 429.575745][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 429.665781][ T5724] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 429.737414][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 429.747794][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 429.758888][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 429.768756][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.779453][ T9952] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 429.790703][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 429.840345][ T5724] usb 7-1: not running at top speed; connect to a high speed hub [ 429.866344][ T5724] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 429.886032][ T5704] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 429.902149][ T5724] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 429.917061][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.930375][ T5724] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 429.941053][ T5724] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 430.085670][ T5704] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 430.142926][ T5704] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 430.233041][ T5704] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 430.319705][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.787493][ T9966] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 431.361516][ T5704] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 432.102063][ T5724] usb 7-1: USB disconnect, device number 6 [ 433.646409][ T5724] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 433.735792][ T5689] usb 6-1: USB disconnect, device number 17 [ 433.865581][ T5724] garmin_gps 7-1:1.0: device disconnected [ 433.960758][ T30] audit: type=1400 audit(1786396257.371:650): avc: denied { name_bind } for pid=9972 comm="syz.6.1253" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 433.997887][ T1218] usb 3-1: USB disconnect, device number 23 [ 434.500893][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.140442][ T9942] udevd[9942]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 436.156436][ T30] audit: type=1400 audit(1786396259.571:651): avc: denied { create } for pid=10003 comm="syz.2.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 436.193955][T10004] netlink: 'syz.2.1263': attribute type 1 has an invalid length. [ 436.225852][ T5598] Bluetooth: hci4: command 0x0405 tx timeout [ 436.264099][ T30] audit: type=1400 audit(1786396259.601:652): avc: denied { write } for pid=10003 comm="syz.2.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 436.434497][T10004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.445839][ T5724] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 436.473419][T10011] bond1: (slave geneve3): making interface the new active one [ 436.505851][ T5689] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 436.541843][T10011] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 436.595981][ T971] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.613962][ T971] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.639226][ T971] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.654908][ T5724] usb 7-1: not running at top speed; connect to a high speed hub [ 436.666595][ T5689] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 436.685554][ T971] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.700382][ T5724] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 436.731434][ T5689] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 436.751894][ T5724] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 436.771226][ T5689] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 436.785296][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.795969][ T5689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.811032][ T5724] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 436.829043][T10008] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 436.854641][ T5689] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 436.862212][ T5724] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 437.054063][ T1218] usb 7-1: USB disconnect, device number 7 [ 437.391983][ T1218] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 437.635264][ T1218] garmin_gps 7-1:1.0: device disconnected [ 440.449670][ T24] usb 6-1: USB disconnect, device number 18 [ 443.099105][T10041] netlink: 'syz.2.1277': attribute type 29 has an invalid length. [ 443.576132][ T5704] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 444.928725][ T5704] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 445.610250][ T5704] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 445.664166][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1284'. [ 445.677596][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.730923][T10063] netlink: 'syz.6.1284': attribute type 10 has an invalid length. [ 445.739971][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.769647][ T30] audit: type=1400 audit(1786396269.181:653): avc: denied { setopt } for pid=10064 comm="syz.2.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 445.788916][ T5704] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 445.980885][ T5704] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 446.145789][ T5704] usb 4-1: Manufacturer: syz [ 446.449326][ T5704] usb 4-1: config 0 descriptor?? [ 446.748564][ T30] audit: type=1400 audit(1786396269.541:654): avc: denied { read } for pid=10064 comm="syz.2.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 447.095437][ T5704] usb 4-1: can't set config #0, error -71 [ 447.255725][ T30] audit: type=1400 audit(1786396270.211:655): avc: denied { getopt } for pid=10064 comm="syz.2.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 447.845175][ T5704] usb 4-1: USB disconnect, device number 24 [ 448.053938][T10080] netlink: 'syz.6.1292': attribute type 29 has an invalid length. [ 448.222664][ T30] audit: type=1400 audit(1786396271.631:656): avc: denied { create } for pid=10081 comm="syz.0.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 448.357126][ T30] audit: type=1400 audit(1786396271.631:657): avc: denied { ioctl } for pid=10081 comm="syz.0.1290" path="socket:[28640]" dev="sockfs" ino=28640 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 450.417125][T10089] smpboot: CPU 1 is now offline [ 450.425756][T10097] 9p: Bad value for 'wfdno' [ 453.486781][ T5704] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 453.567306][T10120] netlink: 'syz.0.1305': attribute type 29 has an invalid length. [ 453.676175][ T5704] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 453.697616][ T5704] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 453.735298][ T5704] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.802657][ T30] audit: type=1400 audit(1786396277.201:658): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 453.822928][ T5704] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.885802][ T5704] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 454.451445][T10127] 9p: Bad value for 'wfdno' [ 455.645890][ T5704] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 455.693696][ T5704] usb 6-1: Manufacturer: syz [ 455.727178][ T5704] usb 6-1: config 0 descriptor?? [ 456.650971][ T5704] usbhid 6-1:0.0: can't add hid device: -71 [ 456.702632][ T5704] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 456.771874][ T5704] usb 6-1: USB disconnect, device number 19 [ 456.867998][T10148] syz.0.1317 (10148): /proc/10148/oom_adj is deprecated, please use /proc/10148/oom_score_adj instead. [ 457.043428][T10154] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 457.110925][ T30] audit: type=1400 audit(1786396280.511:659): avc: denied { audit_write } for pid=10144 comm="syz.5.1316" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 457.405699][ T5704] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 459.249646][ T5704] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 459.303670][ T5704] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 459.353531][T10176] 9p: Bad value for 'rfdno' [ 459.371384][ T5704] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 459.428982][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.483724][T10159] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 460.254398][ T5704] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 460.410283][ T30] audit: type=1400 audit(1786396283.821:660): avc: denied { write } for pid=10189 comm="syz.5.1329" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 460.456237][T10191] deleting an unspecified loop device is not supported. [ 460.518756][ T5704] usb 3-1: USB disconnect, device number 24 [ 460.564600][T10192] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 461.199552][ T30] audit: type=1400 audit(1786396283.871:661): avc: denied { ioctl } for pid=10189 comm="syz.5.1329" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 462.439587][ T5704] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 462.826148][ T5704] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 463.824952][ T30] audit: type=1400 audit(1786396284.071:662): avc: denied { write } for pid=10195 comm="syz.3.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 464.387001][ T5704] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 465.122331][T10209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10209 comm=syz.6.1335 [ 465.219017][ T5704] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.264942][ T30] audit: type=1400 audit(1786396288.531:663): avc: denied { write } for pid=10208 comm="syz.6.1335" name="configs" dev="configfs" ino=8141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 465.315263][ T5704] usb 6-1: config 0 has no interface number 0 [ 465.367124][ T5704] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 465.384396][T10212] 9p: Bad value for 'rfdno' [ 465.447688][ T5704] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.563144][ T5704] usb 6-1: string descriptor 0 read error: -71 [ 466.258504][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.325209][ T5704] usb 6-1: config 0 descriptor?? [ 466.367287][ T5704] usb 6-1: can't set config #0, error -71 [ 466.428629][ T5704] usb 6-1: USB disconnect, device number 20 [ 466.767482][ T30] audit: type=1400 audit(1786396290.181:664): avc: denied { write } for pid=10231 comm="syz.3.1347" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 466.848432][T10234] netlink: 'syz.5.1348': attribute type 10 has an invalid length. [ 469.565278][T10251] 9p: Bad value for 'rfdno' [ 470.134520][T10268] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 473.050687][T10288] netlink: 'syz.0.1366': attribute type 29 has an invalid length. [ 473.166140][ T5689] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 473.356203][ T5689] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 473.441423][ T5689] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 473.482983][ T5689] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 473.554501][ T5689] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 473.573250][ T5704] libceph: connect (1)[c::]:6789 error -101 [ 473.603798][ T5704] libceph: mon0 (1)[c::]:6789 connect error [ 473.613564][T10305] netlink: 'syz.5.1360': attribute type 10 has an invalid length. [ 473.623960][ T5689] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 473.646384][ T30] audit: type=1400 audit(1786396297.051:665): avc: denied { mount } for pid=10302 comm="syz.6.1371" name="/" dev="ramfs" ino=30501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 473.688787][T10299] ceph: No mds server is up or the cluster is laggy [ 473.701688][ T5689] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 473.755038][ T5689] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 473.875031][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 473.924968][ T5689] usb 3-1: Product: syz [ 473.956403][ T5689] usb 3-1: Manufacturer: syz [ 473.998109][ T5689] cdc_wdm 3-1:1.0: skipping garbage [ 474.036160][ T5689] cdc_wdm 3-1:1.0: skipping garbage [ 474.897028][ T5689] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 475.889869][ T5689] usb 3-1: USB disconnect, device number 25 [ 476.699858][T10326] netlink: 'syz.2.1378': attribute type 29 has an invalid length. [ 476.722020][ T30] audit: type=1400 audit(1786396300.131:666): avc: denied { create } for pid=10327 comm="syz.3.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 477.044111][ T30] audit: type=1400 audit(1786396300.451:667): avc: denied { setopt } for pid=10340 comm="syz.2.1384" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 477.155898][ T5704] libceph: connect (1)[c::]:6789 error -101 [ 477.193093][ T5704] libceph: mon0 (1)[c::]:6789 connect error [ 477.214020][T10343] ceph: No mds server is up or the cluster is laggy [ 477.439454][ T5610] Bluetooth: hci1: Malformed LE Event: 0x0d [ 477.506700][ T5724] libceph: connect (1)[c::]:6789 error -101 [ 477.532651][ T5724] libceph: mon0 (1)[c::]:6789 connect error [ 477.579824][ T5689] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 477.756316][ T5689] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 477.795745][ T5704] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 478.934344][ T5689] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 479.138034][ T30] audit: type=1400 audit(1786396302.501:668): avc: denied { mount } for pid=10359 comm="syz.0.1391" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 479.326140][ T5704] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 479.681544][ T5689] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 479.708356][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.731925][ T5689] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 479.751447][ T5704] usb 3-1: config 0 descriptor?? [ 479.763783][ T30] audit: type=1400 audit(1786396302.581:669): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 479.819083][ T5704] cp210x 3-1:0.0: cp210x converter detected [ 479.829280][ T5689] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 479.884963][ T5689] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 479.951975][ T5689] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 479.996444][T10370] netlink: 'syz.6.1394': attribute type 29 has an invalid length. [ 480.018770][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 480.045445][ T30] audit: type=1400 audit(1786396303.451:670): avc: denied { watch watch_reads } for pid=10371 comm="syz.5.1382" path="/231" dev="tmpfs" ino=1255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 480.073357][ T5689] usb 4-1: Product: syz [ 480.090525][ T5689] usb 4-1: Manufacturer: syz [ 480.113118][ T5689] cdc_wdm 4-1:1.0: skipping garbage [ 480.159227][ T5689] cdc_wdm 4-1:1.0: skipping garbage [ 480.184807][ T5689] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 480.234891][ T5704] usb 3-1: cp210x converter now attached to ttyUSB0 [ 480.306047][ T5598] Bluetooth: hci4: command 0x0405 tx timeout [ 480.363104][ T5704] usb 4-1: USB disconnect, device number 25 [ 480.437494][ T5689] usb 3-1: USB disconnect, device number 26 [ 480.484527][ T5689] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 481.273293][ T5689] cp210x 3-1:0.0: device disconnected [ 481.386789][T10385] input: syz1 as /devices/virtual/input/input29 [ 481.569901][ T5689] libceph: connect (1)[c::]:6789 error -101 [ 481.600079][ T5689] libceph: mon0 (1)[c::]:6789 connect error [ 481.644755][T10387] ceph: No mds server is up or the cluster is laggy [ 482.853229][T10409] Bluetooth: MGMT ver 1.23 [ 483.027853][T10414] input: syz1 as /devices/virtual/input/input30 [ 483.702787][T10413] ecryptfs: Unknown parameter '³(' [ 484.699955][ T5689] libceph: connect (1)[c::]:6789 error -101 [ 484.755462][ T5689] libceph: mon0 (1)[c::]:6789 connect error [ 484.782056][T10424] ceph: No mds server is up or the cluster is laggy [ 490.003708][T10457] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1428'. [ 490.078433][T10459] input: syz1 as /devices/virtual/input/input31 [ 491.498811][T10486] input: syz1 as /devices/virtual/input/input33 [ 491.528339][ T5724] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 491.679462][ T30] audit: type=1400 audit(1786396315.091:671): avc: denied { append } for pid=10491 comm="syz.6.1438" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 491.740557][ T5724] usb 3-1: Using ep0 maxpacket: 16 [ 491.774440][ T5724] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 491.827445][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.869264][T10497] input: syz1 as /devices/virtual/input/input34 [ 491.880784][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.934256][ T5724] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 492.007438][ T30] audit: type=1400 audit(1786396315.421:672): avc: denied { ioctl } for pid=10499 comm="syz.0.1441" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 492.036529][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.090784][ T5724] usb 3-1: config 0 descriptor?? [ 492.154799][ T30] audit: type=1400 audit(1786396315.521:673): avc: denied { search } for pid=10501 comm="syz.3.1442" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 493.590717][ T5724] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input35 [ 493.631630][ T30] audit: type=1400 audit(1786396315.521:674): avc: denied { write } for pid=10501 comm="syz.3.1442" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 493.770894][T10518] input: syz1 as /devices/virtual/input/input36 [ 493.908222][ T30] audit: type=1400 audit(1786396315.521:675): avc: denied { open } for pid=10501 comm="syz.3.1442" path="/275/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 494.072478][ T5724] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 494.148761][ T30] audit: type=1400 audit(1786396315.541:676): avc: denied { write } for pid=10501 comm="syz.3.1442" name="configs" dev="configfs" ino=8141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 494.207609][T10534] input: syz1 as /devices/virtual/input/input37 [ 494.233846][ T5724] usb 3-1: USB disconnect, device number 27 [ 495.909384][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.971488][T10528] fido_id[10528]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 496.047917][ T30] audit: type=1400 audit(1786396315.561:677): avc: denied { map } for pid=10503 comm="syz.0.1443" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 497.239168][T10552] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 497.538895][ T30] audit: type=1400 audit(1786396317.311:678): avc: denied { mount } for pid=10510 comm="syz.5.1445" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 498.602792][ T5724] libceph: connect (1)[c::]:6789 error -101 [ 498.645790][ T5724] libceph: mon0 (1)[c::]:6789 connect error [ 498.690372][T10566] ceph: No mds server is up or the cluster is laggy [ 498.866650][ T30] audit: type=1400 audit(1786396322.271:679): avc: denied { mounton } for pid=10574 comm="syz.5.1466" path="/248/file0" dev="tmpfs" ino=1348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 499.020582][ T30] audit: type=1326 audit(1786396322.391:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10576 comm="syz.0.1467" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f907919e0d9 code=0x0 [ 502.684215][ T30] audit: type=1400 audit(1786396326.051:681): avc: denied { connect } for pid=10594 comm="syz.6.1474" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 502.874803][ T30] audit: type=1400 audit(1786396326.281:682): avc: denied { associate } for pid=10599 comm="syz.3.1464" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 503.118630][ T30] audit: type=1400 audit(1786396326.531:683): avc: denied { bind } for pid=10603 comm="syz.3.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 503.219721][ T191] libceph: connect (1)[c::]:6789 error -101 [ 503.238419][ T191] libceph: mon0 (1)[c::]:6789 connect error [ 503.314900][T10610] ceph: No mds server is up or the cluster is laggy [ 503.532186][ T30] audit: type=1400 audit(1786396326.941:684): avc: denied { create } for pid=10620 comm="syz.5.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 503.702657][ T5704] libceph: connect (1)[c::]:6789 error -101 [ 504.793367][ T5704] libceph: mon0 (1)[c::]:6789 connect error [ 505.307961][ T30] audit: type=1326 audit(1786396327.971:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.3.1481" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77f939e0d9 code=0x0 [ 506.672204][T10638] input: syz1 as /devices/virtual/input/input38 [ 506.694551][ T5610] Bluetooth: hci0: connection err: -111 [ 506.759888][ T30] audit: type=1400 audit(1786396328.801:686): avc: denied { mount } for pid=10630 comm="syz.2.1482" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 509.034060][T10642] Bluetooth: hci4: command 0x0405 tx timeout [ 509.333691][ T5704] libceph: connect (1)[c::]:6789 error -101 [ 509.366558][ T5704] libceph: mon0 (1)[c::]:6789 connect error [ 509.402076][T10659] ceph: No mds server is up or the cluster is laggy [ 509.615341][ T30] audit: type=1326 audit(1786396333.021:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10668 comm="syz.5.1497" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff61879e0d9 code=0x0 [ 510.643156][ T30] audit: type=1400 audit(1786396333.711:688): avc: denied { write } for pid=10672 comm="syz.6.1498" laddr=::1 lport=2 faddr=::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 510.724048][T10684] input: syz1 as /devices/virtual/input/input39 [ 511.456956][T10686] syz.5.1501 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 513.451577][T10706] warning: `syz.0.1510' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 513.640637][ T30] audit: type=1326 audit(1786396337.051:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.3.1512" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77f939e0d9 code=0x0 [ 513.784704][ T30] audit: type=1400 audit(1786396337.101:690): avc: denied { setopt } for pid=10714 comm="syz.0.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 515.151377][T10721] Illegal XDP return value 256 on prog (id 123) dev N/A, expect packet loss! [ 515.262284][ T30] audit: type=1400 audit(1786396337.121:691): avc: denied { map } for pid=10714 comm="syz.0.1513" path="socket:[32302]" dev="sockfs" ino=32302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 515.462004][ T30] audit: type=1400 audit(1786396337.121:692): avc: denied { read write } for pid=10714 comm="syz.0.1513" path="socket:[32302]" dev="sockfs" ino=32302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 516.303310][ T5724] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 517.407456][ T5724] usb 6-1: not running at top speed; connect to a high speed hub [ 517.435548][ T5724] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 517.495283][ T5724] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 517.562629][ T30] audit: type=1400 audit(1786396340.971:693): avc: denied { ioctl } for pid=10750 comm="syz.3.1523" path="socket:[32526]" dev="sockfs" ino=32526 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 517.588435][T10751] veth0: entered promiscuous mode [ 517.597766][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.645890][ T5724] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 517.690802][ T5724] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 517.851066][ T5724] usb 6-1: USB disconnect, device number 21 [ 517.883843][ T5724] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 517.930314][ T5724] garmin_gps 6-1:1.0: device disconnected [ 518.033909][T10751] veth0: left promiscuous mode [ 518.146182][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 518.885815][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 518.914666][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 518.969171][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.048261][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.088593][ T9] usb 7-1: Product: syz [ 519.113763][ T9] usb 7-1: Manufacturer: syz [ 519.137264][ T9] usb 7-1: SerialNumber: syz [ 519.174518][ T9] usb 7-1: config 0 descriptor?? [ 519.330220][T10778] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1532'. [ 519.523326][T10784] input: syz1 as /devices/virtual/input/input41 [ 519.627378][T10788] Bluetooth: ISO socket layer initialized [ 519.769070][T10790] veth0: entered promiscuous mode [ 521.488315][ T5703] usb 7-1: USB disconnect, device number 8 [ 521.693719][T10809] veth0: left promiscuous mode [ 521.995989][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1546'. [ 522.297139][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1547'. [ 522.375527][T10820] bridge_slave_1: left allmulticast mode [ 522.432781][T10820] bridge_slave_1: left promiscuous mode [ 522.502980][T10820] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.615189][T10820] bridge_slave_0: left allmulticast mode [ 522.641042][T10830] input: syz1 as /devices/virtual/input/input42 [ 522.678667][T10820] bridge_slave_0: left promiscuous mode [ 523.280970][ T30] audit: type=1400 audit(1786396346.691:694): avc: denied { setopt } for pid=10831 comm="syz.0.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 523.409354][T10820] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.226053][T10642] Bluetooth: hci4: command 0x0405 tx timeout [ 528.371103][T10862] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 528.378604][T10862] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 529.419869][T10891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1569'. [ 530.553968][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 530.736134][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 530.774327][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 530.825917][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 530.883260][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.929491][T10900] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 530.975998][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 533.090187][ T5689] usb 6-1: USB disconnect, device number 22 [ 533.194038][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1581'. [ 535.101111][ T30] audit: type=1400 audit(1786396358.511:695): avc: denied { watch watch_reads } for pid=10930 comm="syz.6.1586" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 541.156243][ T30] audit: type=1400 audit(1786396364.561:696): avc: denied { getopt } for pid=10984 comm="syz.6.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 541.607599][T10997] binder: 10996:10997 ioctl 4018620d 0 returned -22 [ 541.650141][T10997] binder: 10996:10997 ioctl c0306201 0 returned -14 [ 542.599405][ T5704] libceph: connect (1)[c::]:6789 error -101 [ 542.643973][ T5704] libceph: mon0 (1)[c::]:6789 connect error [ 542.685439][T11005] ceph: No mds server is up or the cluster is laggy [ 543.106649][T10642] Bluetooth: hci4: command 0x0405 tx timeout [ 545.002769][ T30] audit: type=1400 audit(1786396368.411:697): avc: denied { execute } for pid=11018 comm="syz.3.1617" path="/314/file0" dev="tmpfs" ino=1717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 545.319445][ T30] audit: type=1400 audit(1786396368.441:698): avc: denied { append } for pid=11018 comm="syz.3.1617" name="uprobe_events" dev="tracefs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 550.953534][ C0] sched: DL replenish lagged too much [ 558.015825][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 621.085861][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.366209][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 714.115539][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 714.122493][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6128/1:b..l P5594/1:b..l P8006/1:b..l P5583/1:b..l [ 714.134113][ C0] rcu: (detected by 0, t=10502 jiffies, g=61789, q=946 ncpus=1) [ 714.141796][ C0] task:syz-executor state:R running task stack:22648 pid:5583 tgid:5583 ppid:5582 task_flags:0x400100 flags:0x00080000 [ 714.155641][ C0] Call Trace: [ 714.158897][ C0] [ 714.161801][ C0] __schedule+0x125c/0x6730 [ 714.166287][ C0] ? __pfx___schedule+0x10/0x10 [ 714.171119][ C0] ? mark_held_locks+0x40/0x70 [ 714.175858][ C0] preempt_schedule_irq+0x50/0x90 [ 714.180851][ C0] irqentry_exit+0x205/0xa00 [ 714.185414][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 714.191363][ C0] RIP: 0010:__orc_find+0x7e/0xf0 [ 714.196280][ C0] Code: ea 3f 48 c1 fe 02 48 01 f2 48 d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a 48 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 <40> 84 f6 75 4b 48 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 [ 714.215917][ C0] RSP: 0018:ffffc90003a47818 EFLAGS: 00000202 [ 714.221966][ C0] RAX: ffffffff91d44cf4 RBX: ffffffff9145b654 RCX: dffffc0000000000 [ 714.229925][ C0] RDX: 0000000000000007 RSI: 0000000000000000 RDI: ffffffff9145b654 [ 714.237882][ C0] RBP: ffffffff9145b654 R08: ffffffff91d44cfa R09: 0000000000000007 [ 714.245837][ C0] R10: 0000000000000200 R11: 0000000000018f92 R12: ffffffff9145b654 [ 714.253788][ C0] R13: ffffffff828f9272 R14: ffffffff9145b654 R15: ffffffff9145b654 [ 714.261742][ C0] ? alloc_file_pseudo+0x182/0x290 [ 714.266843][ C0] ? alloc_file_pseudo+0x182/0x290 [ 714.271943][ C0] unwind_next_frame+0x2ec/0x2090 [ 714.276945][ C0] ? alloc_file_pseudo+0x183/0x290 [ 714.282041][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 714.288179][ C0] arch_stack_walk+0x94/0xf0 [ 714.292751][ C0] ? alloc_file_pseudo+0x183/0x290 [ 714.297844][ C0] stack_trace_save+0x8e/0xc0 [ 714.302501][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 714.307842][ C0] ? __lock_acquire+0x49f/0x1a40 [ 714.312751][ C0] ? __lock_acquire+0x49f/0x1a40 [ 714.317666][ C0] save_stack+0x162/0x1e0 [ 714.321967][ C0] ? __pfx_save_stack+0x10/0x10 [ 714.326787][ C0] ? __free_frozen_pages+0x79f/0x1090 [ 714.332130][ C0] ? qlist_free_all+0x47/0xf0 [ 714.336782][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 714.342391][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 714.347392][ C0] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 714.353002][ C0] ? security_file_alloc+0x34/0x2c0 [ 714.358170][ C0] ? init_file+0x95/0x480 [ 714.362467][ C0] ? alloc_empty_file+0x79/0x1c0 [ 714.367378][ C0] ? alloc_file_pseudo+0x183/0x290 [ 714.372461][ C0] ? page_ext_put+0x3e/0xd0 [ 714.376936][ C0] __reset_page_owner+0x84/0x190 [ 714.381843][ C0] __free_frozen_pages+0x79f/0x1090 [ 714.387011][ C0] ? __free_slab+0xd0/0x220 [ 714.391482][ C0] qlist_free_all+0x47/0xf0 [ 714.395954][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 714.401390][ C0] __kasan_slab_alloc+0x69/0x90 [ 714.406210][ C0] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 714.411648][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 714.417084][ C0] ? security_file_alloc+0x34/0x2c0 [ 714.422261][ C0] security_file_alloc+0x34/0x2c0 [ 714.427255][ C0] init_file+0x95/0x480 [ 714.431380][ C0] alloc_empty_file+0x79/0x1c0 [ 714.436117][ C0] alloc_file_pseudo+0x183/0x290 [ 714.441026][ C0] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 714.446457][ C0] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 714.451810][ C0] create_pipe_files+0x360/0x970 [ 714.456717][ C0] do_pipe2+0xbd/0x1e0 [ 714.460753][ C0] ? __pfx_do_pipe2+0x10/0x10 [ 714.465397][ C0] ? xfd_validate_state+0x129/0x190 [ 714.470570][ C0] __x64_sys_pipe2+0x54/0x80 [ 714.475128][ C0] do_syscall_64+0x115/0x870 [ 714.479689][ C0] ? clear_bhb_loop+0x70/0xc0 [ 714.484335][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.490194][ C0] RIP: 0033:0x7fea7bb9d109 [ 714.494575][ C0] RSP: 002b:00007ffc28b0b198 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 714.502963][ C0] RAX: ffffffffffffffda RBX: 00005555741a88a0 RCX: 00007fea7bb9d109 [ 714.510902][ C0] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 00007ffc28b0b1a8 [ 714.518851][ C0] RBP: 00007ffc28b0b780 R08: 00007fea7bdf2e20 R09: 0000000000000000 [ 714.526790][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc28b0b2e0 [ 714.534736][ C0] R13: 00005555741b2670 R14: 00005555741ad3b8 R15: 00007ffc28b0b300 [ 714.542687][ C0] [ 714.545682][ C0] task:syz-executor state:R running task stack:22768 pid:8006 tgid:8006 ppid:7999 task_flags:0x400140 flags:0x00080000 [ 714.559116][ C0] Call Trace: [ 714.562366][ C0] [ 714.565280][ C0] __schedule+0x125c/0x6730 [ 714.569764][ C0] ? find_held_lock+0x2b/0x80 [ 714.574410][ C0] ? page_table_check_set+0x30f/0x580 [ 714.579750][ C0] ? page_table_check_set+0x30f/0x580 [ 714.585093][ C0] ? __pfx___schedule+0x10/0x10 [ 714.589922][ C0] ? find_held_lock+0x2b/0x80 [ 714.594568][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 714.599909][ C0] preempt_schedule_common+0x42/0xc0 [ 714.605162][ C0] preempt_schedule_thunk+0x16/0x40 [ 714.610330][ C0] _raw_spin_unlock+0x3e/0x50 [ 714.614978][ C0] copy_page_range+0x1c1f/0x5b20 [ 714.619901][ C0] ? mas_wr_store_entry+0xa1/0x1e80 [ 714.625080][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 714.630341][ C0] ? __pfx___might_resched+0x10/0x10 [ 714.635596][ C0] ? dup_mmap+0xcfe/0x21b0 [ 714.639986][ C0] ? down_write+0x146/0x1f0 [ 714.644460][ C0] ? up_write+0x2e5/0x5c0 [ 714.648772][ C0] dup_mmap+0xd44/0x21b0 [ 714.652998][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 714.657654][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 714.663430][ C0] ? __lock_acquire+0x49f/0x1a40 [ 714.668336][ C0] ? find_held_lock+0x2b/0x80 [ 714.672979][ C0] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 714.678851][ C0] copy_process+0x4588/0x8030 [ 714.683506][ C0] ? __pfx_copy_process+0x10/0x10 [ 714.688502][ C0] ? do_raw_spin_lock+0x128/0x260 [ 714.693515][ C0] kernel_clone+0x176/0x9d0 [ 714.698000][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 714.702998][ C0] ? find_held_lock+0x2b/0x80 [ 714.707642][ C0] ? __might_fault+0xc5/0x140 [ 714.712288][ C0] __do_sys_clone+0xd9/0x120 [ 714.716848][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 714.722027][ C0] do_syscall_64+0x115/0x870 [ 714.726585][ C0] ? clear_bhb_loop+0x70/0xc0 [ 714.731231][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.737099][ C0] RIP: 0033:0x7fd628dc6b52 [ 714.741479][ C0] RSP: 002b:00007ffcf033af10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 714.749856][ C0] RAX: ffffffffffffffda RBX: 00007ffcf033af10 RCX: 00007fd628dc6b52 [ 714.757795][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 714.765744][ C0] RBP: 00007ffcf033b09c R08: 0000000000000000 R09: 0000000000000001 [ 714.773682][ C0] R10: 0000555572eee7d0 R11: 0000000000000246 R12: 0000000000000001 [ 714.781620][ C0] R13: 0000555572f01a10 R14: 0000000000084334 R15: 00007ffcf033b0f0 [ 714.789572][ C0] [ 714.792562][ C0] task:syz-executor state:R running task stack:23016 pid:5594 tgid:5594 ppid:5589 task_flags:0x400140 flags:0x00080000 [ 714.806003][ C0] Call Trace: [ 714.809262][ C0] [ 714.812166][ C0] __schedule+0x125c/0x6730 [ 714.816638][ C0] ? arch_stack_walk+0xa6/0xf0 [ 714.821373][ C0] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 714.827420][ C0] ? stack_trace_save+0x8e/0xc0 [ 714.832251][ C0] ? __pfx___schedule+0x10/0x10 [ 714.837080][ C0] ? mark_held_locks+0x40/0x70 [ 714.841813][ C0] preempt_schedule_irq+0x50/0x90 [ 714.846806][ C0] irqentry_exit+0x205/0xa00 [ 714.851368][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 714.857316][ C0] RIP: 0010:lock_release+0x19e/0x310 [ 714.862570][ C0] Code: ff 65 0f c1 05 a3 7b 7d 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ad 34 7d 12 0f 85 4d 01 00 00 48 83 c4 [ 714.882153][ C0] RSP: 0018:ffffc900046b75f0 EFLAGS: 00000206 [ 714.888187][ C0] RAX: 0000000000000046 RBX: ffffffff8ebe8200 RCX: ffffc900046b75fc [ 714.896126][ C0] RDX: 0000000000000002 RSI: ffffffff8e1835cb RDI: ffffffff8c400480 [ 714.904064][ C0] RBP: ffffffff81b876be R08: 0000000000000001 R09: 0000000000000007 [ 714.912012][ C0] R10: 0000000000000200 R11: 0000000000017b19 R12: ffff888077ca0000 [ 714.919953][ C0] R13: ffffc900046b76a8 R14: 0000000000000202 R15: 0000000000000003 [ 714.927908][ C0] ? unwind_next_frame+0x3be/0x2090 [ 714.933095][ C0] unwind_next_frame+0x3c3/0x2090 [ 714.938098][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 714.943700][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 714.949831][ C0] arch_stack_walk+0x94/0xf0 [ 714.954389][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 714.959395][ C0] stack_trace_save+0x8e/0xc0 [ 714.964049][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 714.969390][ C0] ? __lock_acquire+0x49f/0x1a40 [ 714.974297][ C0] ? __lock_acquire+0x49f/0x1a40 [ 714.979204][ C0] save_stack+0x162/0x1e0 [ 714.983503][ C0] ? __pfx_save_stack+0x10/0x10 [ 714.988322][ C0] ? __free_frozen_pages+0x79f/0x1090 [ 714.993663][ C0] ? qlist_free_all+0x47/0xf0 [ 714.998309][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 715.003913][ C0] ? page_ext_put+0x3e/0xd0 [ 715.008398][ C0] __reset_page_owner+0x84/0x190 [ 715.013318][ C0] __free_frozen_pages+0x79f/0x1090 [ 715.018490][ C0] qlist_free_all+0x47/0xf0 [ 715.022961][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 715.028389][ C0] __kasan_slab_alloc+0x69/0x90 [ 715.033220][ C0] __kmalloc_noprof+0x2bf/0x820 [ 715.038047][ C0] ? rcu_is_watching+0x12/0xc0 [ 715.042793][ C0] ? tomoyo_realpath_from_path+0xb6/0x690 [ 715.048482][ C0] tomoyo_realpath_from_path+0xb6/0x690 [ 715.054005][ C0] tomoyo_path_perm+0x276/0x460 [ 715.058836][ C0] ? tomoyo_path_perm+0x262/0x460 [ 715.063830][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 715.069184][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 715.074362][ C0] ? putname+0xb1/0x110 [ 715.078496][ C0] ? kmem_cache_free+0x127/0x6b0 [ 715.083410][ C0] security_inode_getattr+0x116/0x280 [ 715.088753][ C0] vfs_fstat+0x4b/0xe0 [ 715.092801][ C0] __do_sys_newfstat+0x8b/0x110 [ 715.097626][ C0] ? __pfx___do_sys_newfstat+0x10/0x10 [ 715.103063][ C0] do_syscall_64+0x115/0x870 [ 715.107621][ C0] ? clear_bhb_loop+0x70/0xc0 [ 715.112268][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.118128][ C0] RIP: 0033:0x7f907919c6e7 [ 715.122520][ C0] RSP: 002b:00007ffebdf7b628 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 715.130899][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f907919c6e7 [ 715.138839][ C0] RDX: 0000000000000000 RSI: 00007ffebdf7b630 RDI: 0000000000000003 [ 715.146787][ C0] RBP: 00007ffebdf7c81c R08: 0000000000000000 R09: 0000000000000000 [ 715.154734][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffebdf7c830 [ 715.162674][ C0] R13: 00007f9079234474 R14: 0000000000085401 R15: 00007ffebdf7c870 [ 715.170619][ C0] [ 715.173610][ C0] task:syz-executor state:R running task stack:23672 pid:6128 tgid:6128 ppid:1 task_flags:0x40054c flags:0x00080003 [ 715.187043][ C0] Call Trace: [ 715.190292][ C0] [ 715.193200][ C0] __schedule+0x125c/0x6730 [ 715.197672][ C0] ? prepare_signal+0x154/0xe80 [ 715.202499][ C0] ? radix_tree_next_chunk+0x56b/0xad0 [ 715.207931][ C0] ? idr_get_next_ul+0x196/0x2e0 [ 715.212851][ C0] ? __pfx___schedule+0x10/0x10 [ 715.217681][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 715.224683][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 715.229863][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 715.235203][ C0] preempt_schedule_common+0x42/0xc0 [ 715.240459][ C0] preempt_schedule_thunk+0x16/0x40 [ 715.245638][ C0] _raw_read_unlock+0x3e/0x50 [ 715.250284][ C0] zap_pid_ns_processes+0x259/0x6a0 [ 715.255455][ C0] ? do_raw_write_lock+0x11e/0x260 [ 715.260538][ C0] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 715.266234][ C0] ? do_exit+0x2205/0x2ae0 [ 715.270618][ C0] ? rcu_is_watching+0x12/0xc0 [ 715.275355][ C0] do_exit+0x2377/0x2ae0 [ 715.279567][ C0] ? __pfx_do_exit+0x10/0x10 [ 715.284124][ C0] ? do_raw_spin_lock+0x128/0x260 [ 715.289135][ C0] ? find_held_lock+0x2b/0x80 [ 715.293778][ C0] ? get_signal+0x7e0/0x21e0 [ 715.298349][ C0] do_group_exit+0xd5/0x2a0 [ 715.302818][ C0] get_signal+0x1ec7/0x21e0 [ 715.307300][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 715.312292][ C0] ? __asan_memset+0x23/0x50 [ 715.316854][ C0] ? __pfx_get_signal+0x10/0x10 [ 715.321673][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 715.327102][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 715.332624][ C0] ? get_timespec64+0x147/0x240 [ 715.337443][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 715.343576][ C0] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 715.349364][ C0] exit_to_user_mode_loop+0x139/0x6f0 [ 715.354704][ C0] ? rcu_is_watching+0x12/0xc0 [ 715.359451][ C0] do_syscall_64+0x666/0x870 [ 715.364011][ C0] ? clear_bhb_loop+0x70/0xc0 [ 715.368667][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.374528][ C0] RIP: 0033:0x7ff61875e90e [ 715.378918][ C0] RSP: 002b:00007ffdc86820a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 715.387308][ C0] RAX: 0000000000000000 RBX: 0000555583d78500 RCX: 00007ff61875e90e [ 715.395247][ C0] RDX: 00007ffdc8682100 RSI: 0000000000000000 RDI: 0000000000000000 [ 715.403187][ C0] RBP: 00007ffdc868216c R08: 0000000000000000 R09: 0000000000000000 [ 715.411126][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000118 [ 715.419072][ C0] R13: 0000000000000063 R14: 0000000000085419 R15: 00007ffdc86821c0 [ 715.427027][ C0] [ 715.430016][ C0] rcu: rcu_preempt kthread starved for 1982 jiffies! g61789 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 715.441086][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 715.451019][ C0] rcu: RCU grace-period kthread stack dump: [ 715.456873][ C0] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 715.470309][ C0] Call Trace: [ 715.473557][ C0] [ 715.476459][ C0] __schedule+0x125c/0x6730 [ 715.480942][ C0] ? __pfx___schedule+0x10/0x10 [ 715.485761][ C0] ? find_held_lock+0x2b/0x80 [ 715.490406][ C0] ? schedule+0x225/0x2c0 [ 715.494706][ C0] schedule+0xdd/0x2c0 [ 715.498744][ C0] schedule_timeout+0x127/0x280 [ 715.503560][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 715.508899][ C0] ? __pfx_process_timeout+0x10/0x10 [ 715.514164][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 715.519949][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 715.525386][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 715.530130][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 715.535394][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 715.540300][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 715.545476][ C0] ? rcu_is_watching+0x12/0xc0 [ 715.550213][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 715.555990][ C0] rcu_gp_kthread+0x179/0x230 [ 715.560644][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 715.565812][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 715.571588][ C0] ? __kthread_parkme+0x18c/0x230 [ 715.576584][ C0] ? kthread+0x13a/0x450 [ 715.580805][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 715.585972][ C0] kthread+0x370/0x450 [ 715.590018][ C0] ? __pfx_kthread+0x10/0x10 [ 715.594577][ C0] ret_from_fork+0x72b/0xd50 [ 715.599150][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 715.604232][ C0] ? __switch_to+0x800/0x10f0 [ 715.608877][ C0] ? __pfx_kthread+0x10/0x10 [ 715.613434][ C0] ret_from_fork_asm+0x1a/0x30 [ 715.618174][ C0] [ 715.621165][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 715.627457][ C0] CPU: 0 UID: 0 PID: 3215 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 715.638703][ C0] Tainted: [L]=SOFTLOCKUP [ 715.642993][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 715.653027][ C0] Workqueue: bat_events batadv_tt_purge [ 715.658542][ C0] RIP: 0010:ip6_finish_output2+0xfac/0x1ce0 [ 715.664415][ C0] Code: 04 24 48 89 98 d8 00 00 00 48 39 eb 0f 82 51 08 00 00 e8 17 00 a8 f7 48 8b 54 24 40 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 0e 3c 03 7f 0a 48 8b 7c 24 40 e8 7e 8e 18 f8 [ 715.683989][ C0] RSP: 0018:ffffc900000071f8 EFLAGS: 00000a02 [ 715.690022][ C0] RAX: dffffc0000000000 RBX: ffff8882086c5e72 RCX: 1ffff11040f8eb0b [ 715.697961][ C0] RDX: 1ffff11040f8eafe RSI: ffffffff8a627369 RDI: ffff888033c7a540 [ 715.705908][ C0] RBP: ffff8882086c5d40 R08: 0000000000000005 R09: 0000000000000000 [ 715.713849][ C0] R10: 000000000000000e R11: dd860aaaaaaaaaaa R12: 0000000000000140 [ 715.721790][ C0] R13: 0000000000000010 R14: 000000000000000e R15: ffff888207c75858 [ 715.729729][ C0] FS: 0000000000000000(0000) GS:ffff888123dec000(0000) knlGS:0000000000000000 [ 715.738626][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 715.745179][ C0] CR2: 000055556c0a74e8 CR3: 000000000e994000 CR4: 00000000003526f0 [ 715.753121][ C0] Call Trace: [ 715.756369][ C0] [ 715.759187][ C0] __ip6_finish_output+0x357/0xdf0 [ 715.764273][ C0] ip6_output+0x2aa/0xa60 [ 715.768576][ C0] ? __pfx_ip6_output+0x10/0x10 [ 715.773397][ C0] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 715.779176][ C0] ? __pfx_ip6_finish_output+0x10/0x10 [ 715.784604][ C0] ? __pfx_ip6_output+0x10/0x10 [ 715.789425][ C0] ip6_local_out+0xcb/0x1f0 [ 715.793905][ C0] synproxy_send_tcp_ipv6+0x5f3/0x700 [ 715.799247][ C0] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 715.805113][ C0] ? __cookie_v6_init_sequence+0x2d7/0x3c0 [ 715.810890][ C0] synproxy_send_client_synack_ipv6+0x601/0x7a0 [ 715.817101][ C0] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 715.823840][ C0] ? net_generic+0xea/0x2a0 [ 715.828315][ C0] nft_synproxy_do_eval+0x911/0xce0 [ 715.833491][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 715.839187][ C0] ? __lock_acquire+0x49f/0x1a40 [ 715.844102][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 715.849528][ C0] nft_do_chain+0x2e5/0x19d0 [ 715.854087][ C0] ? ip6t_do_table+0xbed/0x1c90 [ 715.858907][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 715.863901][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 715.869771][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 715.874950][ C0] nft_do_chain_inet+0xf3/0x400 [ 715.879777][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 715.885203][ C0] ? dump_ipv4_packet+0x18c0/0x1bc0 [ 715.890380][ C0] ? lock_acquire+0x1b9/0x370 [ 715.895038][ C0] nf_hook_slow+0xbf/0x220 [ 715.899424][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 715.904510][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 715.909860][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 715.915463][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 715.920807][ C0] ip6_input+0xe0/0x2f0 [ 715.924932][ C0] ? __pfx_ip6_input+0x10/0x10 [ 715.929666][ C0] ipv6_rcv+0x263/0x3d0 [ 715.933792][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 715.938442][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 715.944304][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 715.950695][ C0] ? lock_acquire+0x1b9/0x370 [ 715.955341][ C0] ? process_backlog+0x32a/0x1580 [ 715.960334][ C0] ? process_backlog+0x32a/0x1580 [ 715.965335][ C0] __netif_receive_skb+0x1f/0x120 [ 715.970327][ C0] process_backlog+0x37a/0x1580 [ 715.975147][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 715.980487][ C0] net_rx_action+0xa40/0xf20 [ 715.985049][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 715.990128][ C0] ? mark_held_locks+0x40/0x70 [ 715.994870][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 716.000037][ C0] ? tmigr_handle_remote+0x132/0x380 [ 716.005296][ C0] ? mark_held_locks+0x40/0x70 [ 716.010030][ C0] handle_softirqs+0x1ea/0x9b0 [ 716.014764][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 716.020019][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 716.025283][ C0] ? batadv_tt_local_purge+0x21c/0x3d0 [ 716.030707][ C0] do_softirq+0xac/0xe0 [ 716.034844][ C0] [ 716.037744][ C0] [ 716.040646][ C0] __local_bh_enable_ip+0xf8/0x120 [ 716.045726][ C0] batadv_tt_local_purge+0x21c/0x3d0 [ 716.050988][ C0] ? __pfx_batadv_tt_local_purge+0x10/0x10 [ 716.056770][ C0] batadv_tt_purge+0x8b/0xbd0 [ 716.061416][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 716.067195][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 716.072448][ C0] ? rcu_is_watching+0x12/0xc0 [ 716.077185][ C0] process_one_work+0xa23/0x1940 [ 716.082095][ C0] ? __pfx_process_one_work+0x10/0x10 [ 716.087441][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 716.092703][ C0] rescuer_thread+0x905/0x14a0 [ 716.097449][ C0] ? rescuer_thread+0x240/0x14a0 [ 716.102355][ C0] ? rescuer_thread+0x118/0x14a0 [ 716.107271][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 716.112439][ C0] ? __kthread_parkme+0x18c/0x230 [ 716.117446][ C0] ? kthread+0x13a/0x450 [ 716.121655][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 716.126827][ C0] kthread+0x370/0x450 [ 716.130872][ C0] ? __pfx_kthread+0x10/0x10 [ 716.135434][ C0] ret_from_fork+0x72b/0xd50 [ 716.140012][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 716.145095][ C0] ? __switch_to+0x800/0x10f0 [ 716.149749][ C0] ? __pfx_kthread+0x10/0x10 [ 716.154307][ C0] ret_from_fork_asm+0x1a/0x30 [ 716.159049][ C0]