last executing test programs: 5m42.844397632s ago: executing program 1 (id=358): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x3, r3, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r1, 0x3b8c, &(0x7f0000000040)={0x30, r4, 0x1, 0x0, 0x0, 0x2080140000, 0x49bd, 0x0}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x4040040) connect$802154_dgram(r5, &(0x7f0000000240)={0x24, @short}, 0x14) sendmmsg(r5, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r0, 0x1) r7 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x48042) ioctl$FE_GET_PROPERTY(r7, 0x80086f53, &(0x7f0000000000)={0x3, 0x0}) r8 = syz_open_dev$mouse(&(0x7f00000008c0), 0x10000000002, 0x21a481) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) write$binfmt_elf64(r8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x504) socket$nl_generic(0x10, 0x3, 0x10) 5m41.085915605s ago: executing program 1 (id=364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000240)={0x0, 0x9, 0x6, "387622621100"}, 0x0, 0x0}) (rerun: 64) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="500f02"], 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac2(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) (async) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0x97, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010000001044060e80400001020301090285000301ffc00c080b0002010130070300000904010000010230000904010101010230001725010304000000ff7f0400000000000000070100fc0909090009200040d0040a2525ff7f00000104000904020101010230e70805820908"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) syz_usb_control_io(r2, &(0x7f0000000680)={0x2c, &(0x7f0000000080)={0x20, 0x2, 0xc, {0xc, 0x30, "6c376ecfc505db64c79e"}}, &(0x7f00000003c0)={0x0, 0x3, 0xe0, @string={0xe0, 0x3, "46782d93a61477dbd32034fc69e2f9bda3841db934a535397618dafc9b8e64a3fbaaafe9f03f3d937d3225a6a6b3a43b5fc362b27f243e87610f87b2969c196869bcfaccdf53c5b045b2a5a85fab8cde70ea0332a47fd18f4a61f98cc19fe31a5d3f57d582931fa79b0c438e62fc35043dda5b750301516b4bdc346d84f411c94d8e126dfbebc34cc42ab4968972fbcc43738f302f12000142d6b73ab03d6636197978ff9a5bd5c12be3340ee696aafde782e8ab4daf007b01bb5c8f1ef89ed43b474dc0512cc9c9c4f8372047c77120b5d956a1cd6542344a9aa44e7661"}}, &(0x7f00000004c0)={0x0, 0xf, 0x87, {0x5, 0xf, 0x87, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "a2020dfeecca3d20291e33f3115e2db3"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "c94e885d30e54fc4012b93960b24178f"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0xa, 0x3ff}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "93576c646cc8fc5ee448f828b78e8fea"}, @generic={0x3f, 0x10, 0xb, "28a0e9a74396a1c1a36945b5d81ceb1c01a24926a5475a232fbc1f017ffa9cbd15ba410e985bc131ce67d73d514a20c56eb4ab6c7dfbfd0b9ff45cc6"}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x0, 0x7, 0x9, "6c46c727", "152c949d"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x4, 0xc, 0x3, 0x7d, 0xe08a, 0x3}}}, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x40, 0x14, 0xdf, "a6d750db55c268847af427cacfbe27682292507eb38c8a8fe7c3d9e94ce9587c7de163657ac6fc8ad04bd4903253f08d766d11c90a1f5190c4114e96b621e3c09eb4cf93d11ca52c44930cd31ee2befb544dfc94b99491284c4fa94478e9ab2f72d7f17cb2196c295e09d536d6a06c054ab42f96875494c6b35a16223af7d3ad6e18173aeaab189c768979b241fee5d9a42767dfd9ec905da6d5fafd1a8800601165f0f8889afec54b99fde4f7fec401cd770d1efc203c930103e378ffff406b3992317e02cd2d0dc1682a98f53c85ff4ae570796ba673eb087726205e132e"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x1000, 0x2}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0xd7e3}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0xc0}, &(0x7f0000000940)={0x40, 0xb, 0x2, '\r$'}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @random="cbf7e7cfe293"}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "ae2b"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x5}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r9 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x4000) (async) recvmmsg(r7, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4080, 0xffffff16}], 0x3}, 0xfff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x10022, 0x0) (async) socket$key(0xf, 0x3, 0x2) 5m39.66889589s ago: executing program 1 (id=371): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b70400000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000300), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 5m39.595481803s ago: executing program 1 (id=372): syz_clone(0x4220400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x8854) socket$kcm(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000029000000070000001c000000000000000000000008000000", @ANYRES32=r2], 0x30}}], 0x1, 0xc0) 5m38.616132038s ago: executing program 1 (id=381): sendmsg$alg(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x208, 0x20048040}, 0x48010) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) r1 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f00000000c0)=0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) r3 = socket$netlink(0x10, 0x3, 0xf) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000cc0)=ANY=[], 0x3f5, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000005f00)=ANY=[@ANYBLOB="04040aaaaaaaaa"], 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/pci/drivers/lpc_ich/new_id\x00', 0x1, 0x0) write(r4, &(0x7f0000000a00)='FFFFFFFF FFFFFFFF F', 0x13) r5 = accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000100)={0x6, @rand_addr=0x64010102, 0x4e21, 0x3, 'nq\x00', 0x8, 0x8, 0x7c}, 0x2c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r6, 0xc138fd03, &(0x7f0000001000)="04000000320000000000000038010000") syz_clone(0x80800100, &(0x7f00000002c0)="0bc5640b680d19eb88e8234683ce644a8e7ef76a8a803176ec4eb74a82075ecdd70014e6089f2bbf156e5def2d79523df8cd42db01de448b8676fd604a3dd6b8b4c86c8b604884f17d897a56173d327de298b096db13aedbda2e795604708095f3f44747bf7567a2a0edc8c8814688acda6753787538dfc9c559ffd202065f4f8d051bedd13f75ac0a2374d7f59482bbbe7f051bc8e1a9e3145440a6549db14cf38f8419ea38c91245bb994cbc2b1f8ea9b4d43f7378c12135dafe210b3ce3baf38f96ef", 0xc4, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000480)="2feb7a2f446302a408ed3ea2cfb8e559a483dc6dc48915492a77b137c39d20ec89f40518800c330c5c5f1b617e7f6b5851346efaa8c6963d0100ffdcb66f5b6d6224c76b316881215c56f131ad00e300ff6a2a45d4f0edabab17375425db9632e873e4969e2e5bd040564668c1c727fcb9599ae110755e8e7e83804a6f4e40581f7f822cc5f8754d88797391828d037055aaba4fe9685bcb036a1522dfc7834146b4525c4b37d47142453b65158037c4a7a67c9ef5b950f96561774b5915") ioctl(r6, 0xc138fd01, &(0x7f0000002000)="0400000032000000000000006c01") 5m37.128943127s ago: executing program 1 (id=391): syz_clone(0x4220400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x8854) socket$kcm(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000029000000070000001c000000000000000000000008000000", @ANYRES32=r2], 0x30}}], 0x1, 0xc0) 5m21.229899427s ago: executing program 32 (id=391): syz_clone(0x4220400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x8854) socket$kcm(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000029000000070000001c000000000000000000000008000000", @ANYRES32=r2], 0x30}}], 0x1, 0xc0) 14.990070695s ago: executing program 4 (id=1223): memfd_create(0x0, 0x1) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000380)={{0x1000, 0x7, 0x4b, 0x8009}, 'syz1\x00', 0x8}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r2, r1, 0x80000) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x8c) close(0xffffffffffffffff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001100)={r3, 0x0, {0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8, 0x14, "339f020bbe82b398000100000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e8333c691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f044158d9744b66cc530000000400000001000000002200", [0x0, 0x245]}}) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0x4c09, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, 0x0) 12.223413921s ago: executing program 4 (id=1227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2092) syz_fuse_handle_req(r1, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0x0, 0x0, {0xfffffffe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f00000022c0)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x2161850, 0x2, 0xc, 0x0, 0x100, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006ec0)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004640)={0x78, 0x0, 0x5, {0xee9b, 0xffff9777, 0x0, {0x3, 0x7, 0x2, 0xd0d, 0x6, 0x70000000000, 0x9, 0x1, 0xe, 0x1000, 0xffff, r3, r4, 0xa, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_open_dev$ublk_chdev(&(0x7f00000000c0), 0x0, 0x81b7a5c841db71a0) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r12, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x20000254}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x34f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x100, 0x0, 0x1f0, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x2, 0x252, 0x0, r8}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) r15 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r15, &(0x7f00000002c0)={'#! ', '', [{0x20, '\xd9m\xf4\f00\xf4\xfa\t\t'}]}, 0xf) close(r15) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x94f9, 0x2000c, 0x1, 0x18b}, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x59e1, 0x8, 0x3, 0x30f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc643, 0x10, 0x1, 0x3ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5ae8, 0x8, 0x0, 0x137}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2d2c, 0x20000, 0x2, 0x21f}}], 0x4, &(0x7f0000001c80)={0x2e, 0x5a, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x5}, 0x0, 0x0, '\x00', {0x2, 0x9b, 0x0, &(0x7f0000000c80)=@buf_1k="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"}}, &(0x7f0000001d00)) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r17 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r17, r16, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) 11.158633826s ago: executing program 3 (id=1233): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001800800010005b60000260002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 11.03121292s ago: executing program 3 (id=1235): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000240)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r6, &(0x7f0000000140)=0x8, 0x9, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x4b, 0x2}, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x180, 0x7ffc, 0xcf, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x70, &(0x7f0000000680)={0x70, 0x3, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x0, 0xfffffffffffffffd}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x7) r9 = getpgrp(0x0) r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0xd27ffffe}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000000000001000004010000000a000004030000000600000000000000000000010500000020000000000000000000000d0000000000a3005f2a2e618c33265f02"], 0x0, 0x58}, 0x28) 10.833615481s ago: executing program 5 (id=1236): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4074, 0xfea}], 0x1, 0x8000740, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) socket(0x29, 0x5, 0xfffffffc) (async) r5 = socket(0x29, 0x5, 0xfffffffc) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x9, 0x5, 0x5, 0x4}, {0x7, 0x1, 0x3, 0x7fffffff}, {0x2, 0xd, 0x7, 0x8}, {0x6, 0x8, 0x7c, 0x3}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)=@ethtool_eee={0x44, 0x7, 0x10000004, 0x6, 0x9, 0x2, 0x7ff, 0x4, [0xc307, 0x8]}}) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)=@ethtool_eee={0x44, 0x7, 0x10000004, 0x6, 0x9, 0x2, 0x7ff, 0x4, [0xc307, 0x8]}}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x49811, 0x49851}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000001000000000000010000000000000001410000000a0017"], 0x30}}, 0x0) listen(r1, 0x101) listen(r2, 0x1) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000e7ff00"/28], 0x48) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$COMEDI_DEVINFO(r8, 0x80b06401, &(0x7f0000000300)) (async) ioctl$COMEDI_DEVINFO(r8, 0x80b06401, &(0x7f0000000300)) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r7, 0x0) getpriority(0x0, 0x0) mremap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async) mremap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 10.831138584s ago: executing program 4 (id=1237): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2, 0x0, 0xffffffffffffffff, 0xffffffffffffff0e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (fail_nth: 3) 10.424452989s ago: executing program 4 (id=1238): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x57, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x2, 0xc0, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x6, {{0xa, 0x24, 0x6, 0x0, 0x0, "52b49f0e63"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x40, 0x7, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xfa, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0x7, 0x7}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x9, 0x3, 0x1, 0xcf, 0x2}, 0x1ad, &(0x7f0000000440)={0x5, 0xf, 0x1ad, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x6, 0x6, 0x1, 0x1, 0x6}, @generic={0x7a, 0x10, 0xa, "12acb457856224c7ebacb3708d1a6f1df4c2536bec8c4f2d920e647c511799fce45288845dd82f44f187be6181e33881bc26611a5189b1f006d6801fdeab9d3744571ba125d56bcfc391236c36b1439ba8f9e43315bbc21bb15684b9480c2baa3218d9a21db07426883492ca69a020846c59bfa4c88419"}, @generic={0x8f, 0x10, 0x4, "4b945daa7e6a6f44dd126d63e0da33e73ce4262923d00e999215d878b950ad3b1f72f0f642bf5a46d597e5cf6568e418f2ec48b80ddfa7680ee038eefcea24d8b321ac987f1b4277a3b31ebe4396f7496558f99d595b8f1d4ad70d53a1a346519dcbe0e00f20a8312b7f9744232119ba65be0b708151d6a18bab7702d21fb6d913c0948646d00cbf0b54d01f"}, @ptm_cap={0x3}, @generic={0x91, 0x10, 0x2, "1e57ee60f8c901c9ef916cd7c69856e3f706bd0f03a81aaea6e4fc97f1630aaab5a3a274e1056c452aa4ead4d078ae9874d69776b838ff7888b96f6d94d9b0528d84a070af93a3fff85a99e14c97f802e8eb1a3df253c38eaf6052cd8ead67a20929e4dae51b96c2edf41eb58277dbc7ac44377a9d1c1cf1187a21751f73328c2a2f25c91669db9d2295fee26e12"}]}, 0x1, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41a}}]}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x20102, 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) write(r1, &(0x7f0000000240)="0000000000c9202527e6e53ea026f73cdd464ad53af114a63dfa6dd8a898c68f6edf4a6ff2c7c5bc3c24fc1887d33ebe5a2e6fff40e90c93de7197bcc5306bb0c048ef23eeff75e3b2b189789ecffe73f6b07ee8abab6f66346da1895bc108031f2e024cd9235383b06d038ccfc4ce3957c1ec652c3938de3e832b36aa29be57c92e15caa8f0a1142babc38581af8c96df6595cc2203fc6a0a", 0x99) 10.378713663s ago: executing program 5 (id=1239): socket$nl_xfrm(0x10, 0x3, 0x6) setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) bind(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x3210, @multicast2}, 0x80) memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xb000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r6, 0x11e, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db00", 0x34) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x40106183, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r7 = socket$inet(0x2, 0x800, 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000200)=[{&(0x7f00000002c0)="08001fc26692598d", 0x8}, {&(0x7f0000000400)}], 0x2, &(0x7f0000000240)}, 0x24048894) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000240)=0x101) 9.309380021s ago: executing program 5 (id=1240): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 9.032702659s ago: executing program 3 (id=1241): syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x2) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx}, 0x1c) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x41, 0x107, 0x70bd2c, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 8.425761007s ago: executing program 0 (id=1244): setuid(0xee01) socket$nl_xfrm(0x10, 0x3, 0x6) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40d8880, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @local}, 0x1c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0]}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) prlimit64(0x0, 0x8, &(0x7f0000000780)={0xfffffffffffffffc, 0xffffffffffffffff}, 0x0) mlockall(0x7) 8.248528214s ago: executing program 0 (id=1245): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x40080, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x24, r2, 0x1, 0x4070bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0xc, &(0x7f0000001300)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r0, @ANYBLOB="22acc60a011d254d1c1467bb8a5b1d6f13128c2ccd3d63b0cd3e07bba4275b06f102d578a0af465cebe8a0f824700bb0a53777a5a29984a1ac378054f25255947a08668e1013fc7c128e2462d596b2c4e55e4370fceca017bd4dad12f8bea1ef9d627614d26b60a885f256625f0981034e5bc5987ef9d29581865286146f8f0d4f267d1791c23f01ce99f5459a6063ed5cd783181f95c2607bf40088c9b380f5750cb9096bfa8be2da21522c84c42d74746842d3d54b077f721e1d241cc366fa0d255dac1cf10f940821abc7e1ccd2de3aedf78a570f6da0dc6d91d18fe5021df90b4f2343c9a101d486054be95b89ebb3919fd39f", @ANYRESDEC=r2, @ANYRES8=r1, @ANYRESDEC=r3, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) setns(0xc9, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x205}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) write(r0, 0x0, 0x0) syz_usb_connect$uac3(0x4, 0xf1, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdf, 0x3, 0x1, 0x8, 0xd0, 0x3, {0x8, 0xb, 0x2, 0x2, 0x1, 0x20, 0x30, 0xac}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x67, 0x5}, [@input_terminal={0x14, 0x24, 0x2, 0x4, 0x201, 0x4, 0x7f, 0xf3, 0xf, 0xa3, 0xc, 0x6}, @processing_unit={0x1d, 0x24, 0x9, 0x3, 0x4, [0x3, 0x2, 0x3, 0x2ba1a8efbe33045d, 0x0, 0x2]}, @cluster_info_segment={0x6, 0x20, 0x0, 0xb3, 0x4}, @selector_unit={0x8, 0x24, 0xc, 0x7c, 0x3, "8745f6"}, @multiply_unit={0xb, 0x24, 0xd, 0x0, 0xe3, 0x5, 0x9d}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x304, 0x6, 0x1, 0x6e, 0x80000001, 0x2, 0x7a5, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8000, 0x3, 0xe, 0x10}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x0, 0x4, {0xa, 0x25, 0x25, 0x307, 0xf, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x89ed, 0x80, 0x27}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x2, 0x9, {0xa, 0x25, 0x25, 0x9, 0x3, 0x3d}}}}}}}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x201, 0x10, 0x3, 0xa, 0xe3ba2aac870bc724, 0xac}, 0x32, &(0x7f00000004c0)={0x5, 0xf, 0x32, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x7, 0xf, 0x61, [0xffe0bf, 0xff0000, 0x0, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x6, 0xf001}, @ss_cap={0xa, 0x10, 0x3, 0x7c289a108df9f316, 0x8, 0x9, 0xa6, 0x5b}]}, 0x5, [{0x28, &(0x7f0000000500)=@string={0x28, 0x3, "98856f7eba5598097985e41d75d9858e6e9a8dbb7c61f7e76f682195ce7877c43807ae4ed561"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41b}}, {0x94, &(0x7f0000001240)=ANY=[@ANYBLOB="940348c9d794f6585b491f4f51539a8c91b416147d7f6f85aaae9fcac404c1df359398a4382feaa71c931d4dfa9272c33d50ee30a796cf503cccd70b456d41a0599f54a6b31e9418cfad9263eabdaf75030d8067099318485c644acf126976a9d96a4d059ccd974df49a605bcf02000000f1a5728fc4ea1ef2b53668496c3b26d21aefc78410c91bbc318dd3249e4159298b10c2634334d9bd519c03"]}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x100a}}]}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000180)=0x1f6, 0x5b) sendmmsg$inet(r6, &(0x7f0000001980), 0x2, 0x4000804) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2, 0x0, 0xffffffffffffffff, 0xffffffffffffff0e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000300)={0x20000002}) r10 = epoll_create1(0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r11, 0x84, 0xf, 0x0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)) 7.645018735s ago: executing program 2 (id=1250): epoll_create1(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x40086607, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x20) 7.540306788s ago: executing program 2 (id=1251): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x0, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000100)='smaps\x00') ptrace$pokeuser(0x6, r2, 0x9, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1], 0x140}}, 0x20008805) 7.437084434s ago: executing program 2 (id=1252): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x3, 0x804}}}, 0x7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) 7.392682182s ago: executing program 5 (id=1253): socket$can_raw(0x1d, 0x3, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000000)=@filename='./bus\x00', 0x0, &(0x7f0000000040)='binder\x00', 0x320080a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000280)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b') pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) socket$inet(0x2, 0x5, 0x0) execveat(r1, &(0x7f0000000080)='./bus\x00', &(0x7f00000009c0)={[&(0x7f0000000540)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b', &(0x7f0000000100)='\x00', 0x0, &(0x7f00000008c0)='{.\x00', &(0x7f0000000940)='/dev/sequencer\x00', &(0x7f0000000980)='/dev/sequencer\x00']}, &(0x7f0000000ac0)={[&(0x7f0000000a00)='nfs\x00', &(0x7f0000000a40)='(#\xf9-!+.\x16)@\x00', &(0x7f0000000a80)='v$\\\x00']}, 0x100) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10) close(0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000240)) mincore(&(0x7f0000223000/0x2000)=nil, 0x2000, &(0x7f0000000000)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x4000810, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) read(r3, &(0x7f0000000300)=""/4054, 0xffffffbd) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) 7.39201066s ago: executing program 0 (id=1254): syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880), 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000008000000000000000040000000010cfbf5bb7c66ec298c8f0cf9d76417f490cef18b7ea121b6ebf1b9c9dc69f21ee612a79cb551cbde10cf7f6d7ba4d23aa8a200cc9d830a433e31e1ebfd17e8df6f7070ef6fca57611d3e883a0e6d5b0d046cacb2553a3c20b61d74b253aaf33dc7eff0f22d5cdfa6e8b594eaa34", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000367fff3de636157dbd4b7900bd0b7255021d160d9e9626c0d043d7156003000000000000000400d4249500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000041000701feffffe300000000017c0000040042801800018010000400cab1893a20b8d2a93521800a04001c8004000280"], 0x34}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2]) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000002080)={0x1f, 0x4, @any, 0x0, 0x1}, 0xe) openat$kvm(0xffffffffffffff9c, 0x0, 0x248001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0400000004000000040000000500010000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0003c02d58ce007000"/31], 0x48) 6.514876718s ago: executing program 2 (id=1255): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x14, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3d}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_mtu(r1, 0x29, 0x50, 0x0, &(0x7f0000000000)=0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x4, 0xea, 0x440, 0x0, 0x10, 0x0, 0x4}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)=0x3dbc, 0x4) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20902, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x22202, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) r12 = getuid() setreuid(r12, 0xee00) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x2000, 0x1, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40) 6.174847359s ago: executing program 4 (id=1256): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xffffffff, 0x0, 0x3a5d, 0x18}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40045201, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000980)={'syz1\x00', {0x0, 0xcf0d}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0x4f5b1, 0xffffffff, 0x10000003, 0x9, 0x20000000, 0x4020, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xe20, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x0, 0x1], [0x3, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x4, 0xed, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x3, 0x5, 0x3, 0x80000000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x2000000, 0x200000, 0x80000000, 0x80000, 0x0, 0x0, 0x0, 0x84dc, 0x80000000, 0x0, 0xf, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10001], [0x2, 0x0, 0x6, 0x40000, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x800000, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0xfd2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000000e00)={'syz1\x00', {0x8, 0x3, 0x5, 0x5}, 0x6, [0x6, 0x8228, 0x400, 0xbd4, 0x2e09800, 0x100, 0x3, 0x40007, 0x3, 0xd, 0x100, 0x1, 0x4, 0x5, 0x2, 0xb788, 0x5a, 0x150, 0x4, 0x1, 0x4, 0x9, 0x3, 0x7, 0x6, 0x7f, 0x8af4, 0x3, 0x2, 0x6, 0x4, 0x33a2, 0x200, 0xffff7b22, 0x4, 0xe0, 0x7, 0x3, 0xff, 0x800, 0x7f, 0xffffff81, 0x7f, 0x5, 0x80000, 0x7, 0x23e, 0x9, 0x67, 0x9, 0x10, 0x1000000b, 0x2, 0xef, 0x5, 0x6, 0xb8e, 0x627, 0x6, 0x0, 0x9, 0x1, 0x10000004, 0x9], [0x3, 0x0, 0x1, 0x80000001, 0xffffffff, 0xff, 0x1, 0x3, 0x7, 0x9, 0xd502, 0x80000001, 0x4439, 0xffff, 0x7, 0x7, 0x5, 0x8, 0x4, 0x4, 0x1, 0x6, 0x0, 0x9, 0x800001, 0x7, 0x7, 0x7, 0x0, 0xae, 0xa8d, 0x4605, 0xfffffffe, 0x7fff, 0x100, 0xffffffff, 0x3, 0x3, 0x7ff, 0x8, 0x10000, 0x4, 0xfffffe00, 0xfff, 0x106, 0x3, 0x8, 0xf0, 0x5, 0x6, 0x400, 0x7, 0x3, 0x8, 0x1000, 0x8, 0x31, 0x81, 0x8, 0x401, 0x3, 0x9a, 0x10, 0x7], [0x5, 0xfffffffe, 0x800006, 0x6, 0xb0fa, 0x4, 0x7ef, 0xc, 0x5, 0xb79a, 0x2, 0x5, 0x2, 0x34000, 0x0, 0x0, 0x6, 0x1, 0x400, 0x1, 0x1, 0x9, 0x101, 0x7, 0xfa, 0x5a17, 0x42d, 0x3, 0xe8, 0x3, 0x85e, 0x8, 0x2, 0x2, 0x7fffffff, 0x9, 0x1, 0xa, 0x0, 0xf, 0x6, 0x10000000, 0x40, 0x8, 0x6, 0x4ea, 0x6, 0x100, 0x1, 0x7f, 0xf7, 0xfc, 0x8, 0x0, 0x5, 0x6, 0x6, 0x5455, 0x2, 0x1001, 0x2, 0x400, 0xffffff7f, 0x4219], [0x5, 0x3, 0x8, 0x2, 0x5043, 0x9, 0x2c, 0x3d, 0x400, 0xe, 0x3, 0x0, 0x8, 0x44a4e339, 0x499, 0x4, 0xc2383e8d, 0x40, 0x9, 0x9, 0x9, 0x3, 0xe, 0xfffffff8, 0x4, 0x3, 0x10, 0x9, 0x9e92, 0x0, 0x9, 0x1000, 0x2, 0xc845, 0x5, 0x6, 0x6, 0x3, 0x800, 0x1d, 0x6b66fc9f, 0x40000005, 0x0, 0xfffffff7, 0x0, 0x945, 0xb7, 0x4, 0xffff, 0x9, 0x4, 0x7ffffffc, 0xf2be, 0x7, 0x3, 0x7fff, 0x81, 0x1, 0x6, 0x5, 0x8, 0x2, 0x2, 0xfe]}, 0x45c) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000e40)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f00000004c0)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x0, 0x26}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1b}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r6, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000200)=0x2, 0x4) recvmmsg(r6, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x4) 4.26206262s ago: executing program 0 (id=1257): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132935}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x170, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x2, 0x427, 0x6e, 0xef, 0x3}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x4}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000080000000000000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000010400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000400)="882f1242b009007d39f301003c60", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x2d}, 0x28) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r4, 0x4008af74, &(0x7f00000004c0)={0x2, 0x87, "3d08c29f7e886c9eceec8dfcf16605ba2586b2f69bed8048777afdc7c33e6fa661284f5e6e64ef4125e54900f42bdbbc5c92465d4dfbd280520354a0cbad57eba9194730d4d99bdfa8d10a843d63dd65e0479a08970ef22cf3e94889af12a09dd1fab2339d08ef93cb12373c1a32fa45edd12231850d3137d5a967dcd02ddef62d15de667ac6a1"}) 4.246570531s ago: executing program 3 (id=1258): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xfffffffd) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x200000, 0x200003, 0x200000, 0x0, 0xfffc}) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) listen(r2, 0xfffffffd) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x1) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 4.144568323s ago: executing program 5 (id=1259): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002100), 0x1c019, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x21, 0x3, 0x8000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0xffffffffffffffda, r2}, 0x10) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x24002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@empty, @in6=@private1}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x7, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 3.965511057s ago: executing program 3 (id=1260): memfd_create(0x0, 0x1) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000380)={{0x1000, 0x7, 0x4b, 0x8009}, 'syz1\x00', 0x8}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r2, r1, 0x80000) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x8c) close(0xffffffffffffffff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001100)={r3, 0x0, {0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8, 0x14, "339f020bbe82b398000100000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e8333c691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f044158d9744b66cc530000000400000001000000002200", [0x0, 0x245]}}) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0x4c09, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, 0x0) 3.911573211s ago: executing program 2 (id=1261): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r0) unshare(0x2c020400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x18) symlinkat(0x0, r3, &(0x7f0000000140)='./file0\x00') openat2(r3, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000100000018110000d0985a66da77531fec3546f0c5f9bf147f6e05c71701c7d777ab6796775a9583b631702f77e6867fe43d1d5dafaae1bf5da5a3d0f5ecacae4d41bad0e2fe2e3d201475e5531c54cdc7e93e63fe3b9f065616e5214fb22c329d9b419de6e5e9b21236a508c8be0fd84348bf60a40da84f21c7b6d719899d4d89b054d35b13694ca9e78794197e2abe3a9d6d60bc41d694cf63", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60901000000002066000000646c6c251801000020646c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb70200"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200), 0x0, 0xfffffffffffffffe) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd1, &(0x7f0000000000)=0x2, 0x4) ioctl$XFS_IOC_SET_RESBLKS(r6, 0xc0105872, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x13, 0x4}) 3.901460652s ago: executing program 0 (id=1262): epoll_create1(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x40086607, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x20) 3.789749389s ago: executing program 3 (id=1263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x5, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r5, 0xb334, 0x2003) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x22) sched_setaffinity(r5, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0xa, 0x18, 0x1001, 0x0, 0x0, {[@generic={0x1, 0x2}, @fastopen={0x22, 0xf, "9aed3066f69795bc1ee1fe0c46"}]}}}}}}}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) close_range(r9, 0xffffffffffffffff, 0x0) 3.363684432s ago: executing program 0 (id=1264): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f513f847be754ed8ac270526c98ac47b1e5e702ee5b6070249b1728fa806d11fc60225eed6bc62e91ce22164f26c9fca63777dca5fc56607724ce1775950f40c624f43bf4c6a3c3b5eeff02b611956e4214887ad43bd9e1abb013ca59cc8a72929c68f310a415b90104c31f84d21cfde36225a74fd5e63e7b9f56d9ae2dbb917e2cd5c354591f08b1e3426ce2b0d05474c1b2e296a7f8f7055b73edf4b793a5c9100c29fc18d5bf86d4ba946f5e8d6952aa1f87f1ccaf66c0062e9fe81244bb7b4414dce4a4dc069445d494751b767c0495f3a09033378", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f513f847be754ed8ac270526c98ac47b1e5e702ee5b6070249b1728fa806d11fc60225eed6bc62e91ce22164f26c9fca63777dca5fc56607724ce1775950f40c624f43bf4c6a3c3b5eeff02b611956e4214887ad43bd9e1abb013ca59cc8a72929c68f310a415b90104c31f84d21cfde36225a74fd5e63e7b9f56d9ae2dbb917e2cd5c354591f08b1e3426ce2b0d05474c1b2e296a7f8f7055b73edf4b793a5c9100c29fc18d5bf86d4ba946f5e8d6952aa1f87f1ccaf66c0062e9fe81244bb7b4414dce4a4dc069445d494751b767c0495f3a09033378", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x19, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x3e, r3, 0x2}) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x200000b, 0x12, r5, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x200000b, 0x12, r5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x2000804d}, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000003b0001031dbdf00affdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000003b0001031dbdf00affdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r9, @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000002400030000000000000000000000000000000000000000000000000000000000000000000006088030000080080003000700000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff48000080200004000a004e220000000120010000000000000000000000000001fa14000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222c01008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c1400040002004e22ac1414aa00000000000000000800030004000000200004000a004e2300000005fe88000000000000000000000000010100100000060005000121000098000980940000800600010002000000080002007f0000010500030000000000060001000a00000014000200200100000000000000000000000000000500030002000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e000000205000300030000000600010002000000080002007f0000010500030003000000200004000a004e220000000dff020000000000000000000000000001020000000800030002"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r9, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001) r10 = socket$nl_generic(0x10, 0x3, 0x10) writev(r10, &(0x7f0000000200), 0x20) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r8) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) mount$binder(0x0, &(0x7f00000021c0)='.\x00', &(0x7f0000002200), 0x1200850, &(0x7f0000002240)={[{@stats}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.428565154s ago: executing program 2 (id=1265): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$amidi(&(0x7f00000002c0), 0xfffffffffffffff4, 0x40001) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000300)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0xfc}, 0x5}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0xb, 0x0, &(0x7f0000000200)) r4 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r4, 0x0, 0x4004804) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200)="816d0a61b21ea831bb34d7584f6788b3f3bece83058e8e50dfbbe3aa37f564ec6c81a9556cc812ed623b474ee145a801be5f89ac66f581a2510374e3192195580d6691c69805145d668a1b5d5d49720f69ad3963325ee9c9a785e9e6e4c1ff8b229c7aa3c59154732d10003af00b5032e44b40ca3e1a12594f7cb20cdeffb47720e4eddd12cd04ae83103f34814a3390aa", 0x91, r1}, 0x68) syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103"], 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @multicast1}, 0x3, 0x0, 0x3}}, 0x26) r6 = syz_open_procfs(0x0, &(0x7f0000000640)='coredump_filter\x00') writev(r6, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='0', 0x1}, {0x0, 0x2}], 0x2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa030002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xb}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000090) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg2\x00'}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e07050514"], 0xa) 9.010306ms ago: executing program 4 (id=1266): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) getpgrp(0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001800800010005b60000260002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 5 (id=1267): setuid(0xee01) socket$nl_xfrm(0x10, 0x3, 0x6) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40d8880, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @local}, 0x1c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prlimit64(0x0, 0x8, &(0x7f0000000780)={0xfffffffffffffffc, 0xffffffffffffffff}, 0x0) mlockall(0x7) kernel console output (not intermixed with test programs): =0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 382.932989][ T30] audit: type=1400 audit(2000000048.700:22400): avc: denied { write } for pid=8870 comm="syz.4.799" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 383.903809][ T8879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 383.984893][ T30] audit: type=1400 audit(2000000049.750:22401): avc: denied { ioctl } for pid=8876 comm="syz.5.800" path="socket:[22177]" dev="sockfs" ino=22177 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 384.016351][ T30] audit: type=1400 audit(2000000049.780:22402): avc: denied { getopt } for pid=8876 comm="syz.5.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 384.059952][ T30] audit: type=1400 audit(2000000049.830:22403): avc: denied { lock } for pid=8870 comm="syz.4.799" path="socket:[22669]" dev="sockfs" ino=22669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 384.768079][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.804'. [ 387.199438][ T5789] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 387.994173][ T5789] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 388.270809][ T5789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.270850][ T5789] usb 5-1: Product: syz [ 388.270877][ T5789] usb 5-1: Manufacturer: syz [ 388.270893][ T5789] usb 5-1: SerialNumber: syz [ 388.680371][ T5789] usb 5-1: config 0 descriptor?? [ 389.800856][ T8936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.811461][ T8936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.853379][ T5789] usb 5-1: Firmware version (0.0) predates our first public release. [ 389.853417][ T5789] usb 5-1: Please update to version 0.2 or newer [ 390.123756][ T5789] usb 5-1: USB disconnect, device number 40 [ 390.363821][ T30] audit: type=1400 audit(2000000056.120:22404): avc: denied { lock } for pid=8941 comm="syz.5.817" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 390.364115][ T30] audit: type=1400 audit(2000000056.130:22405): avc: denied { append } for pid=8941 comm="syz.5.817" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 392.436819][ T8945] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 392.436904][ T8945] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 392.471312][ T8945] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 392.471553][ T8945] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 392.507302][ T8945] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 392.507732][ T8945] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 393.138250][ T5604] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 393.139857][ T5819] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 393.309399][ T5819] usb 5-1: Using ep0 maxpacket: 8 [ 393.312123][ T5819] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 393.316107][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.316130][ T5819] usb 5-1: Product: syz [ 393.316143][ T5819] usb 5-1: Manufacturer: syz [ 393.316155][ T5819] usb 5-1: SerialNumber: syz [ 393.327965][ T5819] usb 5-1: config 0 descriptor?? [ 393.534755][ T5819] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 394.465464][ T5604] Bluetooth: hci3: command 0x0406 tx timeout [ 394.530037][ T5605] Bluetooth: hci4: command 0x0406 tx timeout [ 394.530146][ T5604] Bluetooth: hci5: command 0x0406 tx timeout [ 394.626623][ T5819] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 394.925162][ T8983] input: syz1 as /devices/virtual/input/input26 [ 395.040419][ T30] audit: type=1800 audit(2000000060.810:22406): pid=8984 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.829" name="file0" dev="overlay" ino=952 res=0 errno=0 [ 395.088439][ T8984] loop9: detected capacity change from 0 to 524287998 [ 396.549442][ T5604] Bluetooth: hci3: command 0x0406 tx timeout [ 396.609388][ T5605] Bluetooth: hci4: command 0x0406 tx timeout [ 396.615580][ T5604] Bluetooth: hci5: command 0x0406 tx timeout [ 397.436239][ T25] usb 5-1: USB disconnect, device number 41 [ 398.593835][ T30] audit: type=1326 audit(2000000064.360:22407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8997 comm="syz.0.832" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feea479e159 code=0x0 [ 398.854374][ T2340] pvrusb2: request_firmware fatal error with code=-110 [ 398.854401][ T2340] pvrusb2: Failure uploading firmware1 [ 398.854418][ T2340] pvrusb2: Device initialization was not successful. [ 398.854428][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 398.854439][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 398.857055][ T5817] pvrusb2: Device being rendered inoperable [ 398.915656][ T9006] overlayfs: failed to clone upperpath [ 398.948805][ T9009] fuse: Unknown parameter '0x0000000000000003' [ 398.972849][ T30] audit: type=1400 audit(2000000064.740:22408): avc: denied { unmount } for pid=7362 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 399.007459][ T9007] syzkaller0: entered promiscuous mode [ 399.007499][ T9007] syzkaller0: entered allmulticast mode [ 399.008744][ T30] audit: type=1400 audit(2000000064.770:22409): avc: denied { ioctl } for pid=9005 comm="syz.2.834" path="socket:[22984]" dev="sockfs" ino=22984 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 400.328872][ T5728] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 400.556438][ T5728] usb 5-1: Using ep0 maxpacket: 32 [ 400.612894][ T5728] usb 5-1: New USB device found, idVendor=2040, idProduct=2900, bcdDevice=a5.5c [ 400.643144][ T5728] usb 5-1: config 13 has an invalid interface number: 99 but max is 2 [ 400.651742][ T5728] usb 5-1: config 13 has an invalid interface number: 87 but max is 2 [ 400.651850][ T5728] usb 5-1: config 13 has an invalid interface number: 123 but max is 2 [ 400.676640][ T5728] usb 5-1: config 13 contains an unexpected descriptor of type 0x1, skipping [ 400.687801][ T5728] usb 5-1: config 13 has no interface number 0 [ 400.694385][ T5728] usb 5-1: config 13 has no interface number 1 [ 400.696091][ T5728] usb 5-1: config 13 has no interface number 2 [ 400.696918][ T5728] usb 5-1: config 13 interface 87 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 400.696974][ T5728] usb 5-1: config 13 interface 87 altsetting 13 bulk endpoint 0x7 has invalid maxpacket 16 [ 400.697115][ T5728] usb 5-1: config 13 interface 87 altsetting 13 bulk endpoint 0xA has invalid maxpacket 16 [ 400.697194][ T5728] usb 5-1: config 13 interface 87 altsetting 13 has a duplicate endpoint with address 0x7, skipping [ 400.697225][ T5728] usb 5-1: config 13 interface 87 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 400.697276][ T5728] usb 5-1: config 13 interface 87 altsetting 13 endpoint 0xF has invalid wMaxPacketSize 0 [ 400.697370][ T5728] usb 5-1: config 13 interface 87 altsetting 13 has a duplicate endpoint with address 0x7, skipping [ 400.697468][ T5728] usb 5-1: config 13 interface 87 altsetting 13 has a duplicate endpoint with address 0x5, skipping [ 400.697609][ T5728] usb 5-1: config 13 interface 123 altsetting 16 has a duplicate endpoint with address 0xF, skipping [ 400.697664][ T5728] usb 5-1: config 13 interface 123 altsetting 16 has a duplicate endpoint with address 0xF, skipping [ 400.697720][ T5728] usb 5-1: config 13 interface 123 altsetting 16 bulk endpoint 0x8 has invalid maxpacket 16 [ 400.697799][ T5728] usb 5-1: config 13 interface 123 altsetting 16 endpoint 0x6 has an invalid bInterval 223, changing to 11 [ 400.697855][ T5728] usb 5-1: config 13 interface 123 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64 [ 400.697936][ T5728] usb 5-1: config 13 interface 123 altsetting 16 has a duplicate endpoint with address 0x5, skipping [ 400.697990][ T5728] usb 5-1: config 13 interface 123 altsetting 16 has a duplicate endpoint with address 0x2, skipping [ 400.698071][ T5728] usb 5-1: config 13 interface 123 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 400.698100][ T5728] usb 5-1: config 13 interface 99 has no altsetting 0 [ 400.698125][ T5728] usb 5-1: config 13 interface 87 has no altsetting 0 [ 400.698150][ T5728] usb 5-1: config 13 interface 123 has no altsetting 0 [ 400.996413][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.004737][ T5728] usb 5-1: Product: ж [ 401.004779][ T5728] usb 5-1: Manufacturer: ÑŠ [ 401.004814][ T5728] usb 5-1: SerialNumber: syz [ 401.971541][ T5728] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 401.996084][ T5728] usb 5-1: selecting invalid altsetting 0 [ 402.003066][ T2340] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 402.003089][ T2340] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 402.076863][ T5728] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 402.077178][ T5728] usb 5-1: selecting invalid altsetting 0 [ 402.126404][ T5728] hub 5-1:13.123: Invalid hub with more than one config or interface [ 402.126478][ T5728] hub 5-1:13.123: probe with driver hub failed with error -22 [ 402.135755][ T5728] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 402.136154][ T5728] usb 5-1: selecting invalid altsetting 0 [ 402.169961][ T5728] usb 5-1: USB disconnect, device number 42 [ 402.639606][ T5819] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 402.969340][ T5819] usb 3-1: Using ep0 maxpacket: 32 [ 402.976283][ T5819] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 402.987297][ T5819] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.993448][ T30] audit: type=1400 audit(2000000068.760:22410): avc: denied { accept } for pid=9036 comm="syz.3.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 403.549959][ T5819] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 403.550027][ T5819] usb 3-1: config 1 interface 0 has no altsetting 0 [ 403.590130][ T5819] usb 3-1: string descriptor 0 read error: -22 [ 403.590248][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.618756][ T5819] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 403.648741][ T9041] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 403.648775][ T9041] audit: out of memory in audit_log_start [ 403.648886][ T9041] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.869466][ T30] audit: type=1800 audit(2000000069.630:22411): pid=9045 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.842" name="file" dev="configfs" ino=23029 res=0 errno=0 [ 404.000281][ T9048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32784 sclass=netlink_audit_socket pid=9048 comm=syz.5.842 [ 404.056474][ T9048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32800 sclass=netlink_audit_socket pid=9048 comm=syz.5.842 [ 404.081484][ T9048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32816 sclass=netlink_audit_socket pid=9048 comm=syz.5.842 [ 404.109662][ T9048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32832 sclass=netlink_audit_socket pid=9048 comm=syz.5.842 [ 404.139704][ T9048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32848 sclass=netlink_audit_socket pid=9048 comm=syz.5.842 [ 404.215555][ T9048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32864 sclass=netlink_audit_socket pid=9048 comm=syz.5.842 [ 404.238329][ T9048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32880 sclass=netlink_audit_socket pid=9048 comm=syz.5.842 [ 404.259524][ T9048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32896 sclass=netlink_audit_socket pid=9048 comm=syz.5.842 [ 404.290639][ T9048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4096 sclass=netlink_audit_socket pid=9048 comm=syz.5.842 [ 404.317253][ T9048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29008 sclass=netlink_audit_socket pid=9048 comm=syz.5.842 [ 405.071968][ T30] audit: type=1400 audit(2000000070.830:22412): avc: denied { connect } for pid=9058 comm="syz.0.850" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 405.093350][ T9060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.850'. [ 405.996438][ T9065] fuse: Unknown parameter '0x0000000000000003' [ 406.061416][ T5786] usb 3-1: USB disconnect, device number 28 [ 406.301746][ T9045] netlink: 80 bytes leftover after parsing attributes in process `syz.5.842'. [ 407.032836][ T9077] CUSE: info not properly terminated [ 407.121336][ T9081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.135607][ T9081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.541689][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.861'. [ 407.662283][ T25] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 407.824733][ T9092] overlayfs: failed to clone upperpath [ 408.392676][ T25] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 408.442046][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.442127][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.463827][ T25] usb 6-1: config 0 descriptor?? [ 408.467789][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 410.369550][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 410.429439][ T25] pwc: recv_control_msg error -32 req 02 val 2700 [ 410.472821][ T25] pwc: recv_control_msg error -32 req 02 val 2c00 [ 410.782960][ T25] pwc: recv_control_msg error -71 req 04 val 1300 [ 410.783356][ T25] pwc: recv_control_msg error -71 req 04 val 1400 [ 410.783673][ T25] pwc: recv_control_msg error -71 req 02 val 2000 [ 410.784012][ T25] pwc: recv_control_msg error -71 req 02 val 2100 [ 410.784334][ T25] pwc: recv_control_msg error -71 req 04 val 1500 [ 410.787273][ T25] pwc: recv_control_msg error -71 req 02 val 2500 [ 410.787593][ T25] pwc: recv_control_msg error -71 req 02 val 2400 [ 410.787941][ T25] pwc: recv_control_msg error -71 req 02 val 2600 [ 410.788253][ T25] pwc: recv_control_msg error -71 req 02 val 2900 [ 410.788565][ T25] pwc: recv_control_msg error -71 req 02 val 2800 [ 410.792045][ T25] pwc: recv_control_msg error -71 req 04 val 1100 [ 410.793352][ T25] pwc: recv_control_msg error -71 req 04 val 1200 [ 410.803071][ T25] pwc: Registered as video103. [ 410.808146][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input27 [ 410.824530][ T25] usb 6-1: USB disconnect, device number 16 [ 410.888713][ T9115] CUSE: info not properly terminated [ 411.739743][ T30] audit: type=1400 audit(2000000077.360:22413): avc: denied { create } for pid=9126 comm="syz.2.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 411.739940][ T30] audit: type=1400 audit(2000000077.370:22414): avc: denied { connect } for pid=9126 comm="syz.2.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 411.745392][ T30] audit: type=1400 audit(2000000077.370:22415): avc: denied { bind } for pid=9126 comm="syz.2.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 413.226355][ T30] audit: type=1400 audit(2000000078.990:22416): avc: denied { create } for pid=9145 comm="syz.5.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 413.597700][ T5786] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 413.771236][ T5786] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 413.782738][ T5786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.794771][ T5786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.804975][ T5786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.817233][ T5786] usb 3-1: config 0 descriptor?? [ 414.108800][ T30] audit: type=1800 audit(2000000079.870:22417): pid=9160 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.880" name="file" dev="configfs" ino=23258 res=0 errno=0 [ 414.451862][ T9162] selinux_netlink_send: 81 callbacks suppressed [ 414.451905][ T9162] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32784 sclass=netlink_audit_socket pid=9162 comm=syz.4.880 [ 414.452093][ T9162] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32800 sclass=netlink_audit_socket pid=9162 comm=syz.4.880 [ 414.452243][ T9162] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32816 sclass=netlink_audit_socket pid=9162 comm=syz.4.880 [ 414.452393][ T9162] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32832 sclass=netlink_audit_socket pid=9162 comm=syz.4.880 [ 414.452566][ T9162] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32848 sclass=netlink_audit_socket pid=9162 comm=syz.4.880 [ 414.452729][ T9162] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32864 sclass=netlink_audit_socket pid=9162 comm=syz.4.880 [ 414.452897][ T9162] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32880 sclass=netlink_audit_socket pid=9162 comm=syz.4.880 [ 414.453054][ T9162] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32896 sclass=netlink_audit_socket pid=9162 comm=syz.4.880 [ 414.453301][ T9162] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4096 sclass=netlink_audit_socket pid=9162 comm=syz.4.880 [ 414.453467][ T9162] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29008 sclass=netlink_audit_socket pid=9162 comm=syz.4.880 [ 414.971602][ T9150] Invalid ELF header magic: != ELF [ 414.971703][ T30] audit: type=1400 audit(2000000080.740:22418): avc: denied { module_load } for pid=9149 comm="syz.2.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 414.982945][ T5786] usbhid 3-1:0.0: can't add hid device: -71 [ 414.983040][ T5786] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 414.994679][ T5786] usb 3-1: USB disconnect, device number 29 [ 415.176935][ T9180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.177339][ T9180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.836617][ T152] IPVS: starting estimator thread 0... [ 417.844794][ T9194] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 417.919496][ T9197] IPVS: using max 50 ests per chain, 120000 per kthread [ 417.957894][ T9202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.970596][ T30] audit: type=1326 audit(2000000083.740:22419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9198 comm="syz.4.891" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ecf9e159 code=0x7ffc0000 [ 417.997356][ T30] audit: type=1326 audit(2000000083.740:22420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9198 comm="syz.4.891" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ecf9e159 code=0x7ffc0000 [ 417.997735][ T30] audit: type=1326 audit(2000000083.740:22421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9198 comm="syz.4.891" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ecf9e159 code=0x7ffc0000 [ 418.025366][ T30] audit: type=1326 audit(2000000083.800:22422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9198 comm="syz.4.891" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f21ecf9e159 code=0x7ffc0000 [ 418.087469][ T30] audit: type=1326 audit(2000000083.800:22423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9198 comm="syz.4.891" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ecf9e159 code=0x7ffc0000 [ 418.089010][ T30] audit: type=1326 audit(2000000083.830:22424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9198 comm="syz.4.891" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ecf9e159 code=0x7ffc0000 [ 418.148410][ T30] audit: type=1326 audit(2000000083.890:22425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9198 comm="syz.4.891" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ecf9e159 code=0x7ffc0000 [ 418.148612][ T30] audit: type=1326 audit(2000000083.890:22426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9198 comm="syz.4.891" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21ecf5e98e code=0x7ffc0000 [ 418.184319][ T30] audit: type=1326 audit(2000000083.920:22427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9198 comm="syz.4.891" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21ecf9ddeb code=0x7ffc0000 [ 418.184520][ T30] audit: type=1326 audit(2000000083.920:22428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9198 comm="syz.4.891" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21ecf9ddeb code=0x7ffc0000 [ 418.302903][ T9202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.850584][ T9210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.854789][ T9210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.346077][ T9216] netlink: 24 bytes leftover after parsing attributes in process `syz.5.897'. [ 420.407648][ T5717] hid_parser_main: 14 callbacks suppressed [ 420.407983][ T5717] hid-generic 0705:86000000:C8D6C0D7.000A: unknown main item tag 0x0 [ 420.414326][ T5717] hid-generic 0705:86000000:C8D6C0D7.000A: hidraw0: HID veb64f0.78 Device [syz1] on syz0 [ 422.833662][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'. [ 423.811285][ T9244] fuse: fd is not a fuse device [ 423.853304][ T9245] input: syz1 as /devices/virtual/input/input28 [ 424.081603][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 424.081702][ T30] audit: type=1800 audit(2000000089.820:22436): pid=9246 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.904" name="file0" dev="overlay" ino=996 res=0 errno=0 [ 424.521794][ T30] audit: type=1400 audit(2000000090.280:22437): avc: denied { create } for pid=9247 comm="syz.3.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 424.573667][ T30] audit: type=1400 audit(2000000090.340:22438): avc: denied { accept } for pid=9247 comm="syz.3.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 424.697787][ T30] audit: type=1400 audit(2000000090.460:22439): avc: denied { ioctl } for pid=9247 comm="syz.3.907" path="socket:[23827]" dev="sockfs" ino=23827 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 424.852191][ T9249] selinux_netlink_send: 246 callbacks suppressed [ 424.852239][ T9249] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=9249 comm=syz.3.907 [ 428.169407][ T5687] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 429.348159][ T30] audit: type=1400 audit(2000000095.110:22440): avc: denied { shutdown } for pid=9275 comm="syz.0.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 429.367779][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.368105][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.377392][ T9277] dummy0: entered promiscuous mode [ 429.377443][ T9277] dummy0: entered allmulticast mode [ 429.807406][ T9283] Cannot find add_set index 0 as target [ 430.219775][ T5687] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 430.270905][ T5687] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.270949][ T5687] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.270979][ T5687] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 430.271040][ T5687] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.611127][ T5687] usb 6-1: config 0 descriptor?? [ 430.712605][ T5687] usb 6-1: can't set config #0, error -71 [ 430.723247][ T5687] usb 6-1: USB disconnect, device number 17 [ 431.080450][ T25] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 431.149435][ T5687] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 431.252463][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 431.269961][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.270029][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.270053][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 431.270088][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.334433][ T25] usb 3-1: config 0 descriptor?? [ 431.339999][ T5687] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 431.350458][ T5687] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.350500][ T5687] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.350525][ T5687] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 431.350562][ T5687] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.404922][ T5687] usb 6-1: config 0 descriptor?? [ 431.699529][ T9300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.920'. [ 431.818789][ T25] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 431.826454][ T25] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 431.826474][ T25] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 431.826486][ T25] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 431.826517][ T25] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 431.826530][ T25] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 431.826543][ T25] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 431.885090][ T5687] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 431.893295][ T25] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 431.906861][ T5687] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 431.906898][ T5687] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 431.935962][ T5687] plantronics 0003:047F:FFFF.000C: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 432.104886][ T30] audit: type=1400 audit(2000000097.870:22441): avc: denied { create } for pid=9308 comm="syz.3.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 432.134541][ T5819] usb 6-1: USB disconnect, device number 18 [ 432.150082][ T25] usb 3-1: USB disconnect, device number 30 [ 432.325183][ T9316] Illegal XDP return value 4294967294 on prog (id 33) dev N/A, expect packet loss! [ 432.437865][ T30] audit: type=1400 audit(2000000098.200:22442): avc: denied { kexec_image_load } for pid=9319 comm="syz.3.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 434.101376][ T30] audit: type=1400 audit(2000000099.420:22443): avc: denied { setopt } for pid=9325 comm="syz.2.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 434.101437][ T30] audit: type=1400 audit(2000000099.430:22444): avc: denied { write } for pid=9325 comm="syz.2.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 434.178013][ T9333] process 'syz.3.929' launched '/dev/fd/7' with NULL argv: empty string added [ 434.195227][ T30] audit: type=1400 audit(2000000099.940:22445): avc: denied { execute } for pid=9327 comm="syz.3.929" dev="hugetlbfs" ino=23509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 434.195305][ T30] audit: type=1400 audit(2000000099.940:22446): avc: denied { execute_no_trans } for pid=9327 comm="syz.3.929" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=23509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 434.364676][ T9337] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 434.364712][ T9337] audit: out of memory in audit_log_start [ 435.751152][ T30] audit: type=1400 audit(2000000101.520:22447): avc: denied { mount } for pid=9334 comm="syz.0.930" name="/" dev="rpc_pipefs" ino=23968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 435.891372][ T9355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.937'. [ 435.905252][ T9336] netlink: 32 bytes leftover after parsing attributes in process `syz.0.930'. [ 436.079942][ T9359] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 436.079984][ T9359] audit: out of memory in audit_log_start [ 436.219945][ T30] audit: type=1400 audit(2000000101.850:22448): avc: denied { connect } for pid=9349 comm="syz.2.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 436.220153][ T30] audit: type=1400 audit(2000000101.850:22449): avc: denied { setopt } for pid=9349 comm="syz.2.936" lport=55879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 436.904805][ T9372] FAULT_INJECTION: forcing a failure. [ 436.904805][ T9372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.919551][ T9372] CPU: 0 UID: 0 PID: 9372 Comm: syz.4.941 Not tainted syzkaller #0 PREEMPT(full) [ 436.919577][ T9372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 436.919587][ T9372] Call Trace: [ 436.919593][ T9372] [ 436.919599][ T9372] dump_stack_lvl+0x100/0x190 [ 436.919621][ T9372] should_fail_ex.cold+0x5/0xa [ 436.919636][ T9372] _copy_from_user+0x2e/0xd0 [ 436.919653][ T9372] ____sys_sendmsg+0x1d1/0xbe0 [ 436.919675][ T9372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.919697][ T9372] ? _kstrtoull+0x144/0x200 [ 436.919713][ T9372] ? __pfx__kstrtoull+0x10/0x10 [ 436.919734][ T9372] ___sys_sendmsg+0x190/0x1e0 [ 436.919752][ T9372] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.919770][ T9372] ? __fget_files+0x34/0x3d0 [ 436.919792][ T9372] __sys_sendmmsg+0x20c/0x440 [ 436.919812][ T9372] ? __pfx___sys_sendmmsg+0x10/0x10 [ 436.919839][ T9372] ? ksys_write+0x190/0x250 [ 436.919882][ T9372] ? fput+0x7c/0x100 [ 436.919898][ T9372] ? ksys_write+0x1ac/0x250 [ 436.919914][ T9372] ? __pfx_ksys_write+0x10/0x10 [ 436.919933][ T9372] __x64_sys_sendmmsg+0x9c/0x100 [ 436.919949][ T9372] ? lockdep_hardirqs_on+0x7d/0x110 [ 436.919966][ T9372] do_syscall_64+0x123/0x790 [ 436.919986][ T9372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.920003][ T9372] RIP: 0033:0x7f21ecf9e159 [ 436.920018][ T9372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.920034][ T9372] RSP: 002b:00007f21edee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 436.920049][ T9372] RAX: ffffffffffffffda RBX: 00007f21ed225fa0 RCX: 00007f21ecf9e159 [ 436.920056][ T9372] RDX: 0000000000000001 RSI: 0000200000002f40 RDI: 0000000000000003 [ 436.920062][ T9372] RBP: 00007f21edee3090 R08: 0000000000000000 R09: 0000000000000000 [ 436.920069][ T9372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.920075][ T9372] R13: 00007f21ed226038 R14: 00007f21ed225fa0 R15: 00007ffca5881258 [ 436.920089][ T9372] [ 437.115629][ T30] audit: type=1400 audit(2000000102.870:22450): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 437.235134][ T30] audit: type=1400 audit(2000000103.000:22451): avc: denied { mount } for pid=9377 comm="syz.3.945" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 437.415012][ T30] audit: type=1400 audit(2000000103.180:22452): avc: denied { search } for pid=9381 comm="syz.0.943" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 437.554304][ T9383] 9pnet_virtio: no channels available for device syz [ 437.623773][ T9394] fuse: fd is not a fuse device [ 437.776654][ T9398] input: syz1 as /devices/virtual/input/input29 [ 437.819977][ T25] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 438.058423][ T25] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 438.066385][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.066823][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.786597][ T25] usb 3-1: config 0 descriptor?? [ 438.964835][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 439.155166][ T9408] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 439.236171][ T9408] 8021q: adding VLAN 0 to HW filter on device bond2 [ 439.252649][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 439.259968][ T25] pwc: recv_control_msg error -32 req 02 val 2700 [ 439.268270][ T25] pwc: recv_control_msg error -32 req 02 val 2c00 [ 439.292500][ T9410] bond2: (slave veth0_to_bond): making interface the new active one [ 439.320577][ T9410] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 439.570201][ T25] pwc: recv_control_msg error -71 req 04 val 1300 [ 439.579467][ T25] pwc: recv_control_msg error -71 req 04 val 1400 [ 439.586411][ T25] pwc: recv_control_msg error -71 req 02 val 2000 [ 439.593559][ T25] pwc: recv_control_msg error -71 req 02 val 2100 [ 439.601148][ T25] pwc: recv_control_msg error -71 req 04 val 1500 [ 439.609667][ T25] pwc: recv_control_msg error -71 req 02 val 2500 [ 439.616501][ T25] pwc: recv_control_msg error -71 req 02 val 2400 [ 439.624246][ T25] pwc: recv_control_msg error -71 req 02 val 2600 [ 439.632119][ T25] pwc: recv_control_msg error -71 req 02 val 2900 [ 439.639650][ T25] pwc: recv_control_msg error -71 req 02 val 2800 [ 439.646767][ T25] pwc: recv_control_msg error -71 req 04 val 1100 [ 439.654398][ T25] pwc: recv_control_msg error -71 req 04 val 1200 [ 439.670548][ T25] pwc: Registered as video103. [ 439.677808][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input30 [ 439.702817][ T25] usb 3-1: USB disconnect, device number 31 [ 439.823398][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.830083][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.886920][ T9427] 9pnet_virtio: no channels available for device syz [ 440.415913][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 440.415965][ T30] audit: type=1400 audit(2000000106.170:22462): avc: denied { watch watch_reads } for pid=9432 comm="syz.5.963" path="/proc/295" dev="proc" ino=24106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 440.466032][ T30] audit: type=1400 audit(2000000106.230:22463): avc: denied { shutdown } for pid=9432 comm="syz.5.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 440.467274][ T30] audit: type=1400 audit(2000000106.230:22464): avc: denied { getopt } for pid=9432 comm="syz.5.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 440.468529][ T9435] netlink: 'syz.5.963': attribute type 1 has an invalid length. [ 440.502319][ T9435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.535565][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'. [ 440.842694][ T30] audit: type=1326 audit(2000000106.610:22465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9441 comm="syz.0.966" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea479e159 code=0x7ffc0000 [ 440.843975][ T30] audit: type=1326 audit(2000000106.610:22466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9441 comm="syz.0.966" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea479e159 code=0x7ffc0000 [ 440.844575][ T30] audit: type=1326 audit(2000000106.610:22467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9441 comm="syz.0.966" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea479e159 code=0x7ffc0000 [ 440.845257][ T30] audit: type=1326 audit(2000000106.610:22468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9441 comm="syz.0.966" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7feea479e159 code=0x7ffc0000 [ 440.846048][ T30] audit: type=1326 audit(2000000106.610:22469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9441 comm="syz.0.966" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea479e159 code=0x7ffc0000 [ 440.847698][ T30] audit: type=1326 audit(2000000106.610:22470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9441 comm="syz.0.966" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea479e159 code=0x7ffc0000 [ 440.848363][ T30] audit: type=1326 audit(2000000106.610:22471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9441 comm="syz.0.966" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea479e159 code=0x7ffc0000 [ 440.859782][ T9446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.861396][ T9446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.094334][ T9459] syzkaller1: entered promiscuous mode [ 443.094402][ T9459] syzkaller1: entered allmulticast mode [ 445.362709][ T25] hid_parser_main: 2 callbacks suppressed [ 445.362784][ T25] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 445.368329][ T25] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 446.004549][ T9477] FAULT_INJECTION: forcing a failure. [ 446.004549][ T9477] name failslab, interval 1, probability 0, space 0, times 0 [ 446.004587][ T9477] CPU: 1 UID: 0 PID: 9477 Comm: syz.0.979 Not tainted syzkaller #0 PREEMPT(full) [ 446.004606][ T9477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 446.004616][ T9477] Call Trace: [ 446.004622][ T9477] [ 446.004630][ T9477] dump_stack_lvl+0x100/0x190 [ 446.004658][ T9477] should_fail_ex.cold+0x5/0xa [ 446.004682][ T9477] should_failslab+0xc2/0x120 [ 446.004701][ T9477] __kmalloc_noprof+0xfc/0x840 [ 446.004717][ T9477] ? __io_read+0x521/0x1470 [ 446.004737][ T9477] ? import_ubuf+0x1b6/0x220 [ 446.004757][ T9477] ? io_cache_alloc_new+0x45/0xe0 [ 446.004779][ T9477] io_cache_alloc_new+0x45/0xe0 [ 446.004796][ T9477] io_arm_apoll+0x8a2/0xa60 [ 446.004818][ T9477] ? io_read+0x111/0x230 [ 446.004839][ T9477] ? __pfx_io_arm_apoll+0x10/0x10 [ 446.004867][ T9477] ? __io_issue_sqe+0x14a/0x7a0 [ 446.004890][ T9477] io_arm_poll_handler+0x21f/0x2b0 [ 446.004915][ T9477] io_queue_async+0x159/0x290 [ 446.004938][ T9477] io_submit_sqes+0x1808/0x2480 [ 446.004971][ T9477] __do_sys_io_uring_enter+0xa88/0x1b10 [ 446.004997][ T9477] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 446.005015][ T9477] ? __fget_files+0x21f/0x3d0 [ 446.005033][ T9477] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 446.005059][ T9477] ? fput+0x7c/0x100 [ 446.005078][ T9477] ? ksys_write+0x1ac/0x250 [ 446.005101][ T9477] ? __pfx_ksys_write+0x10/0x10 [ 446.005131][ T9477] do_syscall_64+0x123/0x790 [ 446.005149][ T9477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.005166][ T9477] RIP: 0033:0x7feea479e159 [ 446.005179][ T9477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.005194][ T9477] RSP: 002b:00007feea55d0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 446.005211][ T9477] RAX: ffffffffffffffda RBX: 00007feea4a25fa0 RCX: 00007feea479e159 [ 446.005221][ T9477] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 446.005230][ T9477] RBP: 00007feea55d0090 R08: 0000000000000000 R09: 0000000000000000 [ 446.005240][ T9477] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 446.005250][ T9477] R13: 00007feea4a26038 R14: 00007feea4a25fa0 R15: 00007fff4e9f46c8 [ 446.005271][ T9477] [ 446.112667][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 446.112683][ T30] audit: type=1400 audit(2000000111.880:22540): avc: denied { write } for pid=9484 comm="syz.2.981" name="usb_gadget" dev="configfs" ino=2703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 446.160985][ T30] audit: type=1400 audit(2000000111.930:22541): avc: denied { write } for pid=9484 comm="syz.2.981" name="functions" dev="configfs" ino=24244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 446.229707][ T30] audit: type=1400 audit(2000000112.000:22542): avc: denied { write } for pid=9484 comm="syz.2.981" name="configs" dev="configfs" ino=24245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 446.239945][ T30] audit: type=1400 audit(2000000112.000:22543): avc: denied { write } for pid=9484 comm="syz.2.981" name="c.1" dev="configfs" ino=24254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 446.239990][ T30] audit: type=1400 audit(2000000112.000:22544): avc: denied { write } for pid=9484 comm="syz.2.981" name="c.1" dev="configfs" ino=24254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 446.642873][ T9491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.643268][ T9491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.081454][ T5604] Bluetooth: hci5: unexpected event for opcode 0x2011 [ 447.106494][ T30] audit: type=1400 audit(2000000112.870:22545): avc: denied { watch watch_reads } for pid=9497 comm="syz.2.984" path="/190" dev="tmpfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 447.149606][ T30] audit: type=1400 audit(2000000112.910:22546): avc: denied { write } for pid=9497 comm="syz.2.984" name="uac2.usb0" dev="configfs" ino=24251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 447.169538][ T30] audit: type=1400 audit(2000000112.930:22547): avc: denied { create } for pid=9497 comm="syz.2.984" name="p_volume_present" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 447.169585][ T30] audit: type=1800 audit(2000000112.930:22548): pid=9498 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.984" name="p_volume_present" dev="configfs" ino=24285 res=0 errno=0 [ 448.115433][ T9503] netlink: 'syz.0.986': attribute type 10 has an invalid length. [ 448.124048][ T9504] netlink: 'syz.0.986': attribute type 10 has an invalid length. [ 448.154947][ T9503] syz_tun: entered promiscuous mode [ 448.227502][ T9503] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 448.290444][ T30] audit: type=1400 audit(2000000114.060:22549): avc: denied { listen } for pid=9509 comm="syz.2.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 448.332573][ T9511] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9511 comm=syz.2.987 [ 449.684531][ T9525] fuse: Bad value for 'user_id' [ 449.684567][ T9525] fuse: Bad value for 'user_id' [ 449.760124][ T9529] fuse: fd is not a fuse device [ 451.591936][ T9543] netlink: 'syz.4.999': attribute type 1 has an invalid length. [ 451.591967][ T9543] netlink: 208 bytes leftover after parsing attributes in process `syz.4.999'. [ 451.591984][ T9543] netlink: 'syz.4.999': attribute type 1 has an invalid length. [ 451.591992][ T9543] netlink: 22 bytes leftover after parsing attributes in process `syz.4.999'. [ 452.833749][ T9576] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9576 comm=syz.2.1005 [ 452.905959][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 453.178932][ T9581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1006'. [ 453.488592][ T9587] FAULT_INJECTION: forcing a failure. [ 453.488592][ T9587] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 453.488678][ T9587] CPU: 0 UID: 0 PID: 9587 Comm: syz.2.1009 Not tainted syzkaller #0 PREEMPT(full) [ 453.488700][ T9587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 453.488711][ T9587] Call Trace: [ 453.488718][ T9587] [ 453.488726][ T9587] dump_stack_lvl+0x100/0x190 [ 453.488756][ T9587] should_fail_ex.cold+0x5/0xa [ 453.488783][ T9587] ? prepare_alloc_pages+0x16d/0x5b0 [ 453.488807][ T9587] should_fail_alloc_page+0xeb/0x140 [ 453.488828][ T9587] prepare_alloc_pages+0x1f0/0x5b0 [ 453.488854][ T9587] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 453.488884][ T9587] ? trace_contention_end.constprop.0+0x145/0x1a0 [ 453.488906][ T9587] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 453.488936][ T9587] ? __lock_acquire+0x4c5/0x1ec0 [ 453.488955][ T9587] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 453.488985][ T9587] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 453.489011][ T9587] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 453.489038][ T9587] ? sched_clock+0x3a/0x60 [ 453.489064][ T9587] ? sched_clock_cpu+0x6c/0x570 [ 453.489094][ T9587] ? __pfx_sched_clock_cpu+0x10/0x10 [ 453.489122][ T9587] ? update_irq_load_avg+0xae/0xe30 [ 453.489149][ T9587] ? find_held_lock+0x2b/0x80 [ 453.489172][ T9587] ? __schedule+0x315b/0x6920 [ 453.489197][ T9587] ? __schedule+0x315b/0x6920 [ 453.489224][ T9587] ? rcu_is_watching+0x13/0xc0 [ 453.489249][ T9587] ? trace_sched_exit_tp+0x120/0x160 [ 453.489271][ T9587] ? __schedule+0x126b/0x6920 [ 453.489295][ T9587] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 453.489315][ T9587] ? policy_nodemask+0xed/0x4f0 [ 453.489338][ T9587] alloc_pages_mpol+0x201/0x550 [ 453.489361][ T9587] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 453.489389][ T9587] alloc_pages_noprof+0x1a/0x160 [ 453.489415][ T9587] get_free_pages_noprof+0x10/0xb0 [ 453.489435][ T9587] __kasan_populate_vmalloc+0xa0/0x210 [ 453.489469][ T9587] alloc_vmap_area+0x95d/0x2bb0 [ 453.489496][ T9587] ? kasan_save_track+0x14/0x30 [ 453.489515][ T9587] ? __kasan_kmalloc+0xaa/0xb0 [ 453.489534][ T9587] ? __pfx_alloc_vmap_area+0x10/0x10 [ 453.489554][ T9587] ? __get_vm_area_node+0x124/0x350 [ 453.489578][ T9587] __get_vm_area_node+0x1ed/0x350 [ 453.489604][ T9587] __vmalloc_node_range_noprof+0x268/0x1420 [ 453.489627][ T9587] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 453.489651][ T9587] ? find_held_lock+0x2b/0x80 [ 453.489673][ T9587] ? __schedule+0x315b/0x6920 [ 453.489698][ T9587] ? __schedule+0x315b/0x6920 [ 453.489728][ T9587] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 453.489750][ T9587] ? lock_acquire+0x1d1/0x380 [ 453.489774][ T9587] ? find_held_lock+0x2b/0x80 [ 453.489798][ T9587] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 453.489819][ T9587] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 453.489844][ T9587] ? avc_has_perm_noaudit+0x145/0x3b0 [ 453.489864][ T9587] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 453.489885][ T9587] __vmalloc_node_noprof+0xad/0xf0 [ 453.489907][ T9587] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 453.489931][ T9587] __vmalloc_noprof+0xa3/0x120 [ 453.489952][ T9587] ? __pfx___vmalloc_noprof+0x10/0x10 [ 453.489976][ T9587] ? rcu_is_watching+0x13/0xc0 [ 453.489998][ T9587] ? cap_capable+0x107/0x430 [ 453.490022][ T9587] bpf_prog_alloc_no_stats+0x59/0x690 [ 453.490044][ T9587] ? security_capable+0x80/0x260 [ 453.490067][ T9587] bpf_prog_alloc+0x3b/0x200 [ 453.490085][ T9587] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 453.490106][ T9587] bpf_prog_load+0x49e/0x2a80 [ 453.490134][ T9587] ? __pfx_bpf_prog_load+0x10/0x10 [ 453.490158][ T9587] ? irqentry_exit+0x24d/0xa10 [ 453.490194][ T9587] __sys_bpf+0x1f46/0x4a30 [ 453.490226][ T9587] ? __pfx___sys_bpf+0x10/0x10 [ 453.490253][ T9587] ? find_held_lock+0x2b/0x80 [ 453.490275][ T9587] ? get_pid_task+0xfc/0x250 [ 453.490298][ T9587] ? get_pid_task+0xfc/0x250 [ 453.490328][ T9587] ? find_held_lock+0x2b/0x80 [ 453.490356][ T9587] ? rcu_read_lock_any_held+0x6a/0x90 [ 453.490381][ T9587] ? find_held_lock+0x2b/0x80 [ 453.490404][ T9587] ? ksys_write+0x190/0x250 [ 453.490432][ T9587] ? ksys_write+0x190/0x250 [ 453.490459][ T9587] ? lock_acquire+0x1d1/0x380 [ 453.490492][ T9587] ? fput+0x7c/0x100 [ 453.490513][ T9587] ? ksys_write+0x1ac/0x250 [ 453.490543][ T9587] ? __x64_sys_bpf+0xce/0x140 [ 453.490558][ T9587] __x64_sys_bpf+0xce/0x140 [ 453.490576][ T9587] ? do_syscall_64+0xae/0x790 [ 453.490595][ T9587] do_syscall_64+0x123/0x790 [ 453.490616][ T9587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.490634][ T9587] RIP: 0033:0x7fe931b9e159 [ 453.490651][ T9587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.490669][ T9587] RSP: 002b:00007fe932a63028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 453.490687][ T9587] RAX: ffffffffffffffda RBX: 00007fe931e26090 RCX: 00007fe931b9e159 [ 453.490699][ T9587] RDX: 0000000000000094 RSI: 0000200000000940 RDI: 0000000000000005 [ 453.490710][ T9587] RBP: 00007fe932a63090 R08: 0000000000000000 R09: 0000000000000000 [ 453.490722][ T9587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.490733][ T9587] R13: 00007fe931e26128 R14: 00007fe931e26090 R15: 00007fff150dc868 [ 453.490757][ T9587] [ 453.491155][ T9587] syz.2.1009: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 453.491469][ T9587] CPU: 0 UID: 0 PID: 9587 Comm: syz.2.1009 Not tainted syzkaller #0 PREEMPT(full) [ 453.491491][ T9587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 453.491501][ T9587] Call Trace: [ 453.491508][ T9587] [ 453.491514][ T9587] dump_stack_lvl+0x100/0x190 [ 453.491542][ T9587] warn_alloc.cold+0x9e/0xb2 [ 453.491563][ T9587] ? __pfx_warn_alloc+0x10/0x10 [ 453.491589][ T9587] ? lockdep_hardirqs_on+0x7d/0x110 [ 453.491609][ T9587] ? __get_vm_area_node+0x2f0/0x350 [ 453.491635][ T9587] ? __get_vm_area_node+0x22b/0x350 [ 453.491661][ T9587] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 453.491685][ T9587] ? find_held_lock+0x2b/0x80 [ 453.491709][ T9587] ? __schedule+0x315b/0x6920 [ 453.491734][ T9587] ? __schedule+0x315b/0x6920 [ 453.491762][ T9587] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 453.491791][ T9587] ? lock_acquire+0x1d1/0x380 [ 453.491811][ T9587] ? find_held_lock+0x2b/0x80 [ 453.491834][ T9587] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 453.491856][ T9587] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 453.491880][ T9587] ? avc_has_perm_noaudit+0x145/0x3b0 [ 453.491900][ T9587] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 453.491919][ T9587] __vmalloc_node_noprof+0xad/0xf0 [ 453.491942][ T9587] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 453.491966][ T9587] __vmalloc_noprof+0xa3/0x120 [ 453.491987][ T9587] ? __pfx___vmalloc_noprof+0x10/0x10 [ 453.492011][ T9587] ? rcu_is_watching+0x13/0xc0 [ 453.492033][ T9587] ? cap_capable+0x107/0x430 [ 453.492057][ T9587] bpf_prog_alloc_no_stats+0x59/0x690 [ 453.492077][ T9587] ? security_capable+0x80/0x260 [ 453.492102][ T9587] bpf_prog_alloc+0x3b/0x200 [ 453.492119][ T9587] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 453.492139][ T9587] bpf_prog_load+0x49e/0x2a80 [ 453.492166][ T9587] ? __pfx_bpf_prog_load+0x10/0x10 [ 453.492190][ T9587] ? irqentry_exit+0x24d/0xa10 [ 453.492225][ T9587] __sys_bpf+0x1f46/0x4a30 [ 453.492257][ T9587] ? __pfx___sys_bpf+0x10/0x10 [ 453.492284][ T9587] ? find_held_lock+0x2b/0x80 [ 453.492305][ T9587] ? get_pid_task+0xfc/0x250 [ 453.492328][ T9587] ? get_pid_task+0xfc/0x250 [ 453.492358][ T9587] ? find_held_lock+0x2b/0x80 [ 453.492387][ T9587] ? rcu_read_lock_any_held+0x6a/0x90 [ 453.492413][ T9587] ? find_held_lock+0x2b/0x80 [ 453.492434][ T9587] ? ksys_write+0x190/0x250 [ 453.492460][ T9587] ? ksys_write+0x190/0x250 [ 453.492486][ T9587] ? lock_acquire+0x1d1/0x380 [ 453.492520][ T9587] ? fput+0x7c/0x100 [ 453.492541][ T9587] ? ksys_write+0x1ac/0x250 [ 453.492569][ T9587] ? __x64_sys_bpf+0xce/0x140 [ 453.492584][ T9587] __x64_sys_bpf+0xce/0x140 [ 453.492602][ T9587] ? do_syscall_64+0xae/0x790 [ 453.492621][ T9587] do_syscall_64+0x123/0x790 [ 453.492641][ T9587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.492660][ T9587] RIP: 0033:0x7fe931b9e159 [ 453.492675][ T9587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.492691][ T9587] RSP: 002b:00007fe932a63028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 453.492707][ T9587] RAX: ffffffffffffffda RBX: 00007fe931e26090 RCX: 00007fe931b9e159 [ 453.492719][ T9587] RDX: 0000000000000094 RSI: 0000200000000940 RDI: 0000000000000005 [ 453.492730][ T9587] RBP: 00007fe932a63090 R08: 0000000000000000 R09: 0000000000000000 [ 453.492740][ T9587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.492751][ T9587] R13: 00007fe931e26128 R14: 00007fe931e26090 R15: 00007fff150dc868 [ 453.492798][ T9587] [ 453.492827][ T9587] Mem-Info: [ 453.492838][ T9587] active_anon:90729 inactive_anon:0 isolated_anon:0 [ 453.492838][ T9587] active_file:0 inactive_file:119737 isolated_file:0 [ 453.492838][ T9587] unevictable:0 dirty:163 writeback:0 [ 453.492838][ T9587] slab_reclaimable:12011 slab_unreclaimable:101709 [ 453.492838][ T9587] mapped:53525 shmem:80637 pagetables:1456 [ 453.492838][ T9587] sec_pagetables:0 bounce:0 [ 453.492838][ T9587] kernel_misc_reclaimable:0 [ 453.492838][ T9587] free:1153839 free_pcp:10208 free_cma:0 [ 453.492882][ T9587] Node 0 active_anon:362916kB inactive_anon:0kB active_file:0kB inactive_file:478748kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214100kB dirty:652kB writeback:0kB shmem:322548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13436kB pagetables:5704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 453.492984][ T9587] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 453.493044][ T9587] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.493131][ T9587] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 453.493269][ T9587] Node 0 DMA32 free:652112kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:362916kB inactive_anon:0kB active_file:0kB inactive_file:478748kB unevictable:0kB writepending:652kB zspages:0kB present:3129332kB managed:2530360kB mlocked:0kB bounce:0kB free_pcp:39736kB local_pcp:16408kB free_cma:0kB [ 453.493374][ T9587] lowmem_reserve[]: 0 0 0 0 0 [ 453.493582][ T9587] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:80kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.493669][ T9587] lowmem_reserve[]: 0 0 0 0 0 [ 453.493865][ T9587] Node 1 Normal free:3947884kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1088kB local_pcp:1024kB free_cma:0kB [ 453.493954][ T9587] lowmem_reserve[]: 0 0 0 0 0 [ 453.494147][ T9587] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 453.494610][ T9587] Node 0 DMA32: 1025*4kB (UME) 114*8kB (UME) 161*16kB (UME) 421*32kB (UME) 142*64kB (UME) 90*128kB (UME) 2*256kB (ME) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 147*4096kB (UM) = 651972kB [ 453.495409][ T9587] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 453.495867][ T9587] Node 1 Normal: 4*4kB (M) 6*8kB (UM) 4*16kB (UM) 7*32kB (UM) 11*64kB (UM) 9*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (M) 2*2048kB (UM) 961*4096kB (M) = 3947936kB [ 453.496582][ T9587] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.496633][ T9587] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 453.496663][ T9587] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.496679][ T9587] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 453.496695][ T9587] 200395 total pagecache pages [ 453.496722][ T9587] 0 pages in swap cache [ 453.496731][ T9587] Free swap = 124996kB [ 453.496758][ T9587] Total swap = 124996kB [ 453.496809][ T9587] 2097051 pages RAM [ 453.496854][ T9587] 0 pages HighMem/MovableOnly [ 453.496863][ T9587] 432825 pages reserved [ 453.496871][ T9587] 0 pages cma reserved [ 456.334591][ T9602] tipc: Enabling of bearer rejected, failed to enable media [ 456.426327][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 456.427109][ T30] audit: type=1400 audit(2000000122.190:22554): avc: denied { write } for pid=9605 comm="syz.4.1014" name="functions" dev="configfs" ino=9343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 456.530588][ T30] audit: type=1400 audit(2000000122.290:22556): avc: denied { write } for pid=9605 comm="syz.4.1014" name="fs" dev="configfs" ino=25130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 456.530677][ T30] audit: type=1400 audit(2000000122.300:22557): avc: denied { write } for pid=9605 comm="syz.4.1014" name="ss" dev="configfs" ino=25131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 456.576945][ T9606] FAULT_INJECTION: forcing a failure. [ 456.576945][ T9606] name failslab, interval 1, probability 0, space 0, times 0 [ 456.590259][ T9606] CPU: 0 UID: 0 PID: 9606 Comm: syz.4.1014 Not tainted syzkaller #0 PREEMPT(full) [ 456.590286][ T9606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 456.590297][ T9606] Call Trace: [ 456.590303][ T9606] [ 456.590310][ T9606] dump_stack_lvl+0x100/0x190 [ 456.590343][ T9606] should_fail_ex.cold+0x5/0xa [ 456.590369][ T9606] should_failslab+0xc2/0x120 [ 456.590391][ T9606] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 456.590412][ T9606] ? __d_alloc+0x35/0xa50 [ 456.590441][ T9606] __d_alloc+0x35/0xa50 [ 456.590466][ T9606] d_alloc+0x4a/0x1e0 [ 456.590490][ T9606] lookup_one_qstr_excl+0x171/0x250 [ 456.590515][ T9606] ? mnt_want_write+0x164/0x420 [ 456.590535][ T9606] filename_create+0x1cf/0x400 [ 456.590554][ T9606] ? __pfx_filename_create+0x10/0x10 [ 456.590574][ T9606] ? lock_acquire+0x1d1/0x380 [ 456.590593][ T9606] ? find_held_lock+0x2b/0x80 [ 456.590620][ T9606] filename_mkdirat+0xb9/0x5e0 [ 456.590645][ T9606] ? __pfx_filename_mkdirat+0x10/0x10 [ 456.590667][ T9606] ? strncpy_from_user+0x19d/0x2d0 [ 456.590696][ T9606] ? do_getname+0x191/0x390 [ 456.590724][ T9606] __x64_sys_mkdirat+0x89/0xc0 [ 456.590745][ T9606] do_syscall_64+0x123/0x790 [ 456.590768][ T9606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.590788][ T9606] RIP: 0033:0x7f21ecf9e159 [ 456.590804][ T9606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.590821][ T9606] RSP: 002b:00007f21edee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 456.590839][ T9606] RAX: ffffffffffffffda RBX: 00007f21ed225fa0 RCX: 00007f21ecf9e159 [ 456.590851][ T9606] RDX: 00000000000001ed RSI: 0000200000001300 RDI: ffffffffffffff9c [ 456.590862][ T9606] RBP: 00007f21edee3090 R08: 0000000000000000 R09: 0000000000000000 [ 456.590873][ T9606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.590883][ T9606] R13: 00007f21ed226038 R14: 00007f21ed225fa0 R15: 00007ffca5881258 [ 456.590909][ T9606] [ 456.710515][ T30] audit: type=1400 audit(2000000122.280:22555): avc: denied { write } for pid=9605 comm="syz.4.1014" name="header" dev="configfs" ino=25134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 456.721848][ T30] audit: type=1400 audit(2000000122.490:22558): avc: denied { write } for pid=9605 comm="syz.4.1014" name="fs" dev="configfs" ino=25141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 456.724690][ T30] audit: type=1400 audit(2000000122.490:22559): avc: denied { write } for pid=9605 comm="syz.4.1014" name="ss" dev="configfs" ino=25143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 456.745196][ T30] audit: type=1400 audit(2000000122.510:22560): avc: denied { write } for pid=9605 comm="syz.4.1014" name="ss" dev="configfs" ino=25131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 457.109369][ T30] audit: type=1326 audit(2000000122.860:22561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.5.1007" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9237b9e159 code=0x0 [ 457.351817][ T30] audit: type=1400 audit(2000000123.120:22562): avc: denied { read } for pid=9629 comm="syz.2.1011" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 457.352152][ T30] audit: type=1400 audit(2000000123.120:22563): avc: denied { open } for pid=9629 comm="syz.2.1011" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 457.737581][ T9614] netlink: 'syz.0.1015': attribute type 3 has an invalid length. [ 457.817981][ T9614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.856602][ T9614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.446176][ T9634] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9634 comm=syz.3.1019 [ 461.033139][ T9658] tipc: Enabling of bearer rejected, failed to enable media [ 461.999687][ T9667] netlink: 'syz.0.1029': attribute type 1 has an invalid length. [ 461.999735][ T9667] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1029'. [ 461.999786][ T9667] netlink: 'syz.0.1029': attribute type 1 has an invalid length. [ 461.999801][ T9667] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1029'. [ 462.156444][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 462.156469][ T30] audit: type=1400 audit(2000000127.170:22565): avc: denied { read } for pid=9666 comm="syz.0.1029" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 462.156508][ T30] audit: type=1400 audit(2000000127.170:22566): avc: denied { open } for pid=9666 comm="syz.0.1029" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 463.069342][ T5786] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 463.169545][ T25] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 463.207225][ T9685] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9685 comm=syz.4.1035 [ 463.226833][ T30] audit: type=1400 audit(2000000128.990:22567): avc: denied { name_bind } for pid=9686 comm="syz.0.1030" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 463.253206][ T5786] usb 3-1: Using ep0 maxpacket: 8 [ 463.259967][ T5786] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 463.261495][ T9689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.262745][ T9689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.288996][ T5786] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 463.289057][ T5786] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 463.289070][ T5786] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 463.289084][ T5786] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 463.289096][ T5786] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.289118][ T5786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.369370][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 463.375131][ T25] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 463.387813][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.387912][ T25] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 463.387955][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 463.387982][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 463.436965][ T25] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 463.445958][ T25] usb 6-1: Product: syz [ 463.445995][ T25] usb 6-1: Manufacturer: syz [ 463.446012][ T25] usb 6-1: SerialNumber: syz [ 463.467320][ T25] usb 6-1: config 0 descriptor?? [ 464.247767][ T5786] usb 3-1: GET_CAPABILITIES returned 0 [ 464.247819][ T5786] usbtmc 3-1:16.0: can't read capabilities [ 464.352648][ T25] rc_core: IR keymap rc-imon-rsc not found [ 464.358655][ T25] Registered IR keymap rc-empty [ 464.376342][ T25] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 464.392474][ T25] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input31 [ 464.408219][ T25] imon_raw 6-1:0.0: probe with driver imon_raw failed with error -90 [ 464.515293][ T5817] usb 6-1: USB disconnect, device number 19 [ 464.537914][ T25] usb 3-1: USB disconnect, device number 32 [ 464.593681][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1039'. [ 465.410853][ T2340] pvrusb2: request_firmware fatal error with code=-110 [ 465.410884][ T2340] pvrusb2: Failure uploading firmware1 [ 465.410903][ T2340] pvrusb2: Device initialization was not successful. [ 465.410913][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 465.410923][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 465.410950][ T2340] pvrusb2: Failed to submit write-control URB status=-19 [ 465.412728][ T2340] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 465.412915][ T2340] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 465.413684][ T30] audit: type=1400 audit(2000000131.180:22568): avc: denied { firmware_load } for pid=2340 comm="pvrusb2-context" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 465.536893][ T5728] pvrusb2: Device being rendered inoperable [ 466.429659][ T9706] netlink: 'syz.0.1040': attribute type 1 has an invalid length. [ 466.429705][ T9706] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1040'. [ 466.429755][ T9706] netlink: 'syz.0.1040': attribute type 1 has an invalid length. [ 466.429770][ T9706] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1040'. [ 466.972197][ T9712] syzkaller0: entered promiscuous mode [ 466.979697][ T9712] syzkaller0: entered allmulticast mode [ 467.051145][ T30] audit: type=1400 audit(2000000132.820:22569): avc: denied { ioctl } for pid=9713 comm="syz.2.1044" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 467.759867][ T5819] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 467.768736][ T9724] xt_hashlimit: size too large, truncated to 1048576 [ 467.940372][ T5819] usb 3-1: Using ep0 maxpacket: 32 [ 467.941094][ T5819] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 467.941935][ T5819] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.941969][ T5819] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 467.941992][ T5819] usb 3-1: config 1 interface 0 has no altsetting 0 [ 467.944299][ T5819] usb 3-1: string descriptor 0 read error: -22 [ 467.944389][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.950630][ T5819] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 468.022264][ T9725] bond0: option arp_interval: invalid value () [ 468.029177][ T9725] bond0: option arp_interval: allowed values 0 - 2147483647 [ 468.038533][ T9725] bond0: option arp_interval: invalid value (syz0) [ 468.045411][ T9725] bond0: option arp_interval: allowed values 0 - 2147483647 [ 468.053318][ T9725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1047'. [ 468.902441][ T30] audit: type=1400 audit(2000000134.600:22570): avc: denied { create } for pid=9731 comm="syz.3.1048" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 468.902514][ T30] audit: type=1400 audit(2000000134.610:22571): avc: denied { write } for pid=9731 comm="syz.3.1048" name="file2" dev="tmpfs" ino=1477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 468.902561][ T30] audit: type=1400 audit(2000000134.610:22572): avc: denied { open } for pid=9731 comm="syz.3.1048" path="/262/file2" dev="tmpfs" ino=1477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 468.902597][ T30] audit: type=1400 audit(2000000134.620:22573): avc: denied { ioctl } for pid=9731 comm="syz.3.1048" path="/262/file2" dev="tmpfs" ino=1477 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 469.000527][ T30] audit: type=1400 audit(2000000134.770:22574): avc: denied { unlink } for pid=5597 comm="syz-executor" name="file2" dev="tmpfs" ino=1477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 469.243725][ T30] audit: type=1326 audit(2000000135.010:22575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.0.1041" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feea479e159 code=0x0 [ 469.904559][ T9745] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9745 comm=syz.3.1049 [ 471.398856][ T5819] usb 3-1: USB disconnect, device number 33 [ 471.909405][ T5786] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 472.101299][ T5786] usb 3-1: Using ep0 maxpacket: 32 [ 472.515357][ T5786] usb 3-1: New USB device found, idVendor=2040, idProduct=2900, bcdDevice=a5.5c [ 472.526176][ T5786] usb 3-1: config 13 has an invalid interface number: 99 but max is 2 [ 472.535329][ T5786] usb 3-1: config 13 has an invalid interface number: 87 but max is 2 [ 472.535348][ T5786] usb 3-1: config 13 has an invalid interface number: 123 but max is 2 [ 472.535359][ T5786] usb 3-1: config 13 contains an unexpected descriptor of type 0x1, skipping [ 472.535370][ T5786] usb 3-1: config 13 has no interface number 0 [ 472.535378][ T5786] usb 3-1: config 13 has no interface number 1 [ 472.535387][ T5786] usb 3-1: config 13 has no interface number 2 [ 472.544366][ T5786] usb 3-1: config 13 interface 87 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 472.544385][ T5786] usb 3-1: config 13 interface 87 altsetting 13 bulk endpoint 0x7 has invalid maxpacket 16 [ 472.544399][ T5786] usb 3-1: config 13 interface 87 altsetting 13 bulk endpoint 0xA has invalid maxpacket 16 [ 472.544429][ T5786] usb 3-1: config 13 interface 87 altsetting 13 has a duplicate endpoint with address 0x7, skipping [ 472.544441][ T5786] usb 3-1: config 13 interface 87 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 472.544454][ T5786] usb 3-1: config 13 interface 87 altsetting 13 endpoint 0xF has invalid wMaxPacketSize 0 [ 472.544467][ T5786] usb 3-1: config 13 interface 87 altsetting 13 has a duplicate endpoint with address 0x7, skipping [ 472.544480][ T5786] usb 3-1: config 13 interface 87 altsetting 13 has a duplicate endpoint with address 0x5, skipping [ 472.544496][ T5786] usb 3-1: config 13 interface 123 altsetting 16 has a duplicate endpoint with address 0xF, skipping [ 472.544516][ T5786] usb 3-1: config 13 interface 123 altsetting 16 has a duplicate endpoint with address 0xF, skipping [ 472.544529][ T5786] usb 3-1: config 13 interface 123 altsetting 16 bulk endpoint 0x8 has invalid maxpacket 16 [ 472.544543][ T5786] usb 3-1: config 13 interface 123 altsetting 16 endpoint 0x6 has an invalid bInterval 223, changing to 11 [ 472.544572][ T5786] usb 3-1: config 13 interface 123 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64 [ 472.544586][ T5786] usb 3-1: config 13 interface 123 altsetting 16 has a duplicate endpoint with address 0x5, skipping [ 472.544599][ T5786] usb 3-1: config 13 interface 123 altsetting 16 has a duplicate endpoint with address 0x2, skipping [ 472.544611][ T5786] usb 3-1: config 13 interface 123 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 472.544623][ T5786] usb 3-1: config 13 interface 99 has no altsetting 0 [ 472.544633][ T5786] usb 3-1: config 13 interface 87 has no altsetting 0 [ 472.544643][ T5786] usb 3-1: config 13 interface 123 has no altsetting 0 [ 472.630436][ T5786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.630488][ T5786] usb 3-1: Product: ж [ 472.630502][ T5786] usb 3-1: Manufacturer: ÑŠ [ 472.630529][ T5786] usb 3-1: SerialNumber: syz [ 472.847298][ T9770] fuse: fd is not a fuse device [ 473.053477][ T5786] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 473.062330][ T5786] usb 3-1: selecting invalid altsetting 0 [ 473.073421][ T5786] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 473.081395][ T5786] usb 3-1: selecting invalid altsetting 0 [ 473.098133][ T5786] hub 3-1:13.123: Invalid hub with more than one config or interface [ 473.106527][ T5786] hub 3-1:13.123: probe with driver hub failed with error -22 [ 473.116032][ T5786] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 473.125689][ T5786] usb 3-1: selecting invalid altsetting 0 [ 473.141522][ T5786] usb 3-1: USB disconnect, device number 34 [ 473.149396][ T5786] pvrusb2: Device being rendered inoperable [ 473.170473][ T5786] pvrusb2: Device being rendered inoperable [ 473.186712][ T5786] pvrusb2: Device being rendered inoperable [ 474.803260][ T9789] input: syz1 as /devices/virtual/input/input32 [ 474.956835][ T30] audit: type=1400 audit(2000000140.720:22576): avc: denied { mount } for pid=9783 comm="syz.5.1063" name="/" dev="overlay" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 474.997796][ T9790] loop9: detected capacity change from 0 to 524287998 [ 475.389453][ T5786] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 475.555844][ T5786] usb 3-1: Using ep0 maxpacket: 32 [ 475.563807][ T5786] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 475.604234][ T5786] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.604433][ T5786] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 475.605286][ T5786] usb 3-1: config 1 interface 0 has no altsetting 0 [ 475.766428][ T5786] usb 3-1: string descriptor 0 read error: -22 [ 475.767007][ T5786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.201336][ T5786] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 476.609563][ T30] audit: type=1400 audit(2000000142.300:22577): avc: denied { write } for pid=9792 comm="syz.0.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 476.887036][ T30] audit: type=1400 audit(2000000142.650:22578): avc: denied { unmount } for pid=7362 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 477.222979][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1062'. [ 477.243718][ T5701] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 477.373358][ T9810] input: syz1 as /devices/virtual/input/input33 [ 477.420687][ T5701] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 477.485473][ T5701] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.485541][ T5701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.543635][ T9813] loop9: detected capacity change from 0 to 524287998 [ 477.648040][ T5701] usb 6-1: config 0 descriptor?? [ 478.147927][ T5701] pwc: Askey VC010 type 2 USB webcam detected. [ 478.374950][ T5701] pwc: recv_control_msg error -32 req 02 val 2b00 [ 478.382992][ T5701] pwc: recv_control_msg error -32 req 02 val 2700 [ 478.392773][ T5701] pwc: recv_control_msg error -32 req 02 val 2c00 [ 478.406250][ T5786] usb 3-1: USB disconnect, device number 35 [ 478.540356][ T30] audit: type=1400 audit(2000000144.310:22579): avc: denied { ioctl } for pid=9814 comm="syz.3.1072" path="socket:[25502]" dev="sockfs" ino=25502 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 478.622103][ T30] audit: type=1326 audit(2000000144.390:22580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9818 comm="syz.0.1073" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feea479e159 code=0x0 [ 478.657058][ T5701] pwc: recv_control_msg error -71 req 04 val 1300 [ 478.664002][ T5701] pwc: recv_control_msg error -71 req 04 val 1400 [ 478.670897][ T5701] pwc: recv_control_msg error -71 req 02 val 2000 [ 478.677720][ T5701] pwc: recv_control_msg error -71 req 02 val 2100 [ 478.684811][ T5701] pwc: recv_control_msg error -71 req 04 val 1500 [ 478.691594][ T5701] pwc: recv_control_msg error -71 req 02 val 2500 [ 478.698320][ T5701] pwc: recv_control_msg error -71 req 02 val 2400 [ 478.705799][ T5701] pwc: recv_control_msg error -71 req 02 val 2600 [ 478.706144][ T5701] pwc: recv_control_msg error -71 req 02 val 2900 [ 478.706447][ T5701] pwc: recv_control_msg error -71 req 02 val 2800 [ 478.706839][ T5701] pwc: recv_control_msg error -71 req 04 val 1100 [ 478.707134][ T5701] pwc: recv_control_msg error -71 req 04 val 1200 [ 478.709574][ T5701] pwc: Registered as video103. [ 478.711016][ T5701] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input34 [ 478.716257][ T5701] usb 6-1: USB disconnect, device number 20 [ 478.859374][ T5786] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 479.010064][ T5786] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 479.020191][ T5786] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.020279][ T5786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.022988][ T5786] usb 3-1: config 0 descriptor?? [ 479.326475][ T9828] overlayfs: failed to clone upperpath [ 479.437098][ T30] audit: type=1326 audit(2000000145.200:22581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.5.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9237b9e159 code=0x7ffc0000 [ 479.437251][ T30] audit: type=1326 audit(2000000145.200:22582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.5.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9237b9e159 code=0x7ffc0000 [ 479.437379][ T30] audit: type=1326 audit(2000000145.200:22583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.5.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9237b9e159 code=0x7ffc0000 [ 479.440566][ T30] audit: type=1326 audit(2000000145.200:22584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.5.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9237b9e159 code=0x7ffc0000 [ 479.441291][ T30] audit: type=1326 audit(2000000145.210:22585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.5.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f9237b9e159 code=0x7ffc0000 [ 479.899897][ T9835] netlink: 'syz.3.1078': attribute type 1 has an invalid length. [ 480.211925][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 480.211960][ T30] audit: type=1326 audit(2000000145.980:22597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.2.1074" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe931b9e159 code=0x50000 [ 480.212003][ T30] audit: type=1326 audit(2000000145.980:22598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.2.1074" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe931b9e159 code=0x50000 [ 480.212054][ T30] audit: type=1326 audit(2000000145.980:22599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.2.1074" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe931b9e159 code=0x50000 [ 480.212087][ T30] audit: type=1326 audit(2000000145.980:22600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.2.1074" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe931b9e159 code=0x50000 [ 480.212118][ T30] audit: type=1326 audit(2000000145.980:22601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.2.1074" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe931b9e159 code=0x50000 [ 480.212149][ T30] audit: type=1326 audit(2000000145.980:22602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.2.1074" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe931b9e159 code=0x50000 [ 480.212200][ T30] audit: type=1326 audit(2000000145.980:22603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.2.1074" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe931b9e159 code=0x50000 [ 480.212231][ T30] audit: type=1326 audit(2000000145.980:22604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.2.1074" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe931b9e159 code=0x50000 [ 480.212262][ T30] audit: type=1326 audit(2000000145.980:22605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.2.1074" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe931b9e159 code=0x50000 [ 480.212294][ T30] audit: type=1326 audit(2000000145.980:22606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.2.1074" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe931b9e159 code=0x50000 [ 480.235974][ T5786] elecom 0003:056E:010C.000E: unknown main item tag 0x0 [ 480.236004][ T5786] elecom 0003:056E:010C.000E: unknown main item tag 0x0 [ 480.236023][ T5786] elecom 0003:056E:010C.000E: unknown main item tag 0x0 [ 480.236060][ T5786] elecom 0003:056E:010C.000E: unknown main item tag 0x0 [ 480.236080][ T5786] elecom 0003:056E:010C.000E: unknown main item tag 0x0 [ 480.236098][ T5786] elecom 0003:056E:010C.000E: unknown main item tag 0x0 [ 480.236117][ T5786] elecom 0003:056E:010C.000E: unknown main item tag 0x0 [ 480.236134][ T5786] elecom 0003:056E:010C.000E: unknown main item tag 0x0 [ 480.236151][ T5786] elecom 0003:056E:010C.000E: unknown main item tag 0x0 [ 480.236168][ T5786] elecom 0003:056E:010C.000E: unknown main item tag 0x0 [ 480.249923][ T5701] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 480.267006][ T9835] 8021q: adding VLAN 0 to HW filter on device bond3 [ 480.276227][ T9836] bond3: (slave geneve2): making interface the new active one [ 480.280460][ T9836] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 480.438125][ T5786] elecom 0003:056E:010C.000E: hidraw0: USB HID v20.00 Device [HID 056e:010c] on usb-dummy_hcd.2-1/input0 [ 480.639349][ T5701] usb 6-1: device descriptor read/64, error -71 [ 480.909310][ T5701] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 481.049299][ T5701] usb 6-1: device descriptor read/64, error -71 [ 481.187163][ T5701] usb usb6-port1: attempt power cycle [ 481.720049][ T5701] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 481.750350][ T5701] usb 6-1: device descriptor read/8, error -71 [ 481.915859][ T9852] FAULT_INJECTION: forcing a failure. [ 481.915859][ T9852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.915897][ T9852] CPU: 0 UID: 0 PID: 9852 Comm: syz.0.1082 Not tainted syzkaller #0 PREEMPT(full) [ 481.915916][ T9852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 481.915926][ T9852] Call Trace: [ 481.915931][ T9852] [ 481.915937][ T9852] dump_stack_lvl+0x100/0x190 [ 481.915964][ T9852] should_fail_ex.cold+0x5/0xa [ 481.915987][ T9852] _copy_to_user+0x32/0xd0 [ 481.916010][ T9852] simple_read_from_buffer+0xcb/0x170 [ 481.916031][ T9852] proc_fail_nth_read+0x1af/0x230 [ 481.916050][ T9852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 481.916069][ T9852] ? rw_verify_area+0xce/0x6d0 [ 481.916091][ T9852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 481.916108][ T9852] vfs_read+0x1e4/0xb40 [ 481.916131][ T9852] ? lock_acquire+0x1d1/0x380 [ 481.916147][ T9852] ? __fget_files+0x34/0x3d0 [ 481.916165][ T9852] ? __pfx_vfs_read+0x10/0x10 [ 481.916186][ T9852] ? find_held_lock+0x2b/0x80 [ 481.916207][ T9852] ? __fget_files+0x215/0x3d0 [ 481.916230][ T9852] ? __fget_files+0x21f/0x3d0 [ 481.916254][ T9852] ksys_read+0x12a/0x250 [ 481.916276][ T9852] ? __pfx_ksys_read+0x10/0x10 [ 481.916312][ T9852] do_syscall_64+0x123/0x790 [ 481.916331][ T9852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.916348][ T9852] RIP: 0033:0x7feea475e98e [ 481.916361][ T9852] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 481.916377][ T9852] RSP: 002b:00007feea55aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 481.916393][ T9852] RAX: ffffffffffffffda RBX: 00007feea55af6c0 RCX: 00007feea475e98e [ 481.916404][ T9852] RDX: 000000000000000f RSI: 00007feea55af0a0 RDI: 0000000000000003 [ 481.916413][ T9852] RBP: 00007feea55af090 R08: 0000000000000000 R09: 0000000000000000 [ 481.916422][ T9852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.916432][ T9852] R13: 00007feea4a26128 R14: 00007feea4a26090 R15: 00007fff4e9f46c8 [ 481.916454][ T9852] [ 482.001598][ T5701] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 482.021954][ T5701] usb 6-1: device descriptor read/8, error -71 [ 482.139543][ T5701] usb usb6-port1: unable to enumerate USB device [ 482.172771][ T9854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.181802][ T9854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.282090][ T985] usb 3-1: USB disconnect, device number 36 [ 483.398602][ T9867] netlink: 'syz.3.1090': attribute type 10 has an invalid length. [ 483.429805][ T9867] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 483.434156][ T9867] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 484.170150][ T5701] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 484.339395][ T5701] usb 6-1: Using ep0 maxpacket: 8 [ 484.341778][ T5701] usb 6-1: unable to get BOS descriptor or descriptor too short [ 484.341814][ T5701] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 484.342621][ T5701] usb 6-1: config 4 interface 0 has no altsetting 0 [ 484.346251][ T5701] usb 6-1: string descriptor 0 read error: -22 [ 484.346615][ T5701] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 484.392429][ T5701] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 484.438620][ T5701] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 484.438997][ T5701] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 484.439031][ T5701] usb 6-1: media controller created [ 484.455584][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 484.536184][ T9890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.546273][ T9890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.636526][ T9872] netlink: 'syz.5.1089': attribute type 10 has an invalid length. [ 484.901429][ T9899] netlink: 'syz.4.1097': attribute type 1 has an invalid length. [ 484.980123][ T9899] 8021q: adding VLAN 0 to HW filter on device bond1 [ 485.446992][ T9903] sctp_transport_update_pmtu: 47 callbacks suppressed [ 485.447041][ T9903] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 485.450804][ T9903] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 485.457123][ T9903] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 485.459873][ T9903] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 485.473489][ T9903] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 485.476287][ T9903] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 485.478599][ T9903] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 485.481660][ T9903] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 485.514119][ T9903] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 485.517412][ T9903] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 486.003363][ T5701] zl10353_read_register: readreg error (reg=127, ret==0) [ 486.026354][ T9871] usb 6-1: dvb_usb_au6610: wlen=4100, aborting [ 486.339518][ T5817] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 486.490966][ T5817] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 486.491923][ T5817] usb 3-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 486.491960][ T5817] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 486.491983][ T5817] usb 3-1: config 0 interface 0 has no altsetting 0 [ 486.492008][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.580821][ T5817] usb 3-1: config 0 descriptor?? [ 488.718047][ T9913] fuse: fd is not a fuse device [ 491.726015][ T5817] usbhid 3-1:0.0: can't add hid device: -71 [ 491.726118][ T5817] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 491.742211][ T5817] usb 3-1: USB disconnect, device number 37 [ 493.019432][ T5817] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 493.215860][ T5817] usb 3-1: Using ep0 maxpacket: 32 [ 493.223553][ T5817] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 493.249407][ T5817] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.259835][ T5817] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 493.273010][ T5817] usb 3-1: config 1 interface 0 has no altsetting 0 [ 493.283881][ T5817] usb 3-1: string descriptor 0 read error: -22 [ 493.291195][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.314989][ T5817] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 493.585615][ T9942] trusted_key: encrypted_key: master key parameter 'defaul³°usWr:syz' is invalid [ 493.595722][ T9942] trusted_key: encrypted_key: master key parameter 'defaul³°usWr:syz' is invalid [ 494.186505][ T9954] FAULT_INJECTION: forcing a failure. [ 494.186505][ T9954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.199927][ T9954] CPU: 0 UID: 0 PID: 9954 Comm: syz.0.1113 Not tainted syzkaller #0 PREEMPT(full) [ 494.199952][ T9954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 494.199963][ T9954] Call Trace: [ 494.199969][ T9954] [ 494.199976][ T9954] dump_stack_lvl+0x100/0x190 [ 494.200014][ T9954] should_fail_ex.cold+0x5/0xa [ 494.200038][ T9954] _copy_from_user+0x2e/0xd0 [ 494.200063][ T9954] __sys_bpf+0x2f5/0x4a30 [ 494.200102][ T9954] ? __pfx___sys_bpf+0x10/0x10 [ 494.200119][ T9954] ? find_held_lock+0x2b/0x80 [ 494.200134][ T9954] ? get_pid_task+0xfc/0x250 [ 494.200149][ T9954] ? get_pid_task+0xfc/0x250 [ 494.200172][ T9954] ? find_held_lock+0x2b/0x80 [ 494.200201][ T9954] ? rcu_read_lock_any_held+0x6a/0x90 [ 494.200226][ T9954] ? find_held_lock+0x2b/0x80 [ 494.200247][ T9954] ? ksys_write+0x190/0x250 [ 494.200272][ T9954] ? ksys_write+0x190/0x250 [ 494.200291][ T9954] ? lock_acquire+0x1d1/0x380 [ 494.200311][ T9954] ? fput+0x7c/0x100 [ 494.200323][ T9954] ? ksys_write+0x1ac/0x250 [ 494.200341][ T9954] ? __x64_sys_bpf+0xce/0x140 [ 494.200366][ T9954] __x64_sys_bpf+0xce/0x140 [ 494.200383][ T9954] ? do_syscall_64+0xae/0x790 [ 494.200401][ T9954] do_syscall_64+0x123/0x790 [ 494.200420][ T9954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.200440][ T9954] RIP: 0033:0x7feea479e159 [ 494.200451][ T9954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.200462][ T9954] RSP: 002b:00007feea55d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 494.200473][ T9954] RAX: ffffffffffffffda RBX: 00007feea4a25fa0 RCX: 00007feea479e159 [ 494.200480][ T9954] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 494.200487][ T9954] RBP: 00007feea55d0090 R08: 0000000000000000 R09: 0000000000000000 [ 494.200496][ T9954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.200507][ T9954] R13: 00007feea4a26038 R14: 00007feea4a25fa0 R15: 00007fff4e9f46c8 [ 494.200536][ T9954] [ 495.126095][ T9956] fuse: fd is not a fuse device [ 495.239165][ T985] usb 3-1: USB disconnect, device number 38 [ 497.481064][ T9970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.490855][ T9970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.690557][ T5701] usb 6-1: USB disconnect, device number 25 [ 497.974372][ T9974] gadgetfs: bound to dummy_udc driver [ 498.209697][ T5701] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 498.209935][ C0] gadgetfs: connected [ 498.212426][ T5701] gadgetfs: disconnected [ 498.483328][ C0] gadgetfs: connected [ 498.599959][ T5701] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 498.642972][ T5701] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 498.643023][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.075019][ C0] gadgetfs: configuration #1 [ 501.250872][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.268591][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.516762][ T9973] gadgetfs: suspended from state 3 [ 501.526104][ T5786] usb 2-1: USB disconnect, device number 17 [ 501.536249][ T9973] gadgetfs: disconnected [ 501.703470][ T30] kauditd_printk_skb: 4072 callbacks suppressed [ 501.703526][ T30] audit: type=1400 audit(2000000167.470:26679): avc: denied { unmount } for pid=7362 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 501.827703][ T9990] netlink: 'syz.0.1125': attribute type 1 has an invalid length. [ 501.838570][ T9990] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1125'. [ 501.921612][ T30] audit: type=1400 audit(2000000167.690:26680): avc: denied { lock } for pid=9987 comm="syz.0.1125" path="socket:[26954]" dev="sockfs" ino=26954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 502.084373][ T9990] syz_tun: left promiscuous mode [ 502.142061][ T9990] dummy0: left promiscuous mode [ 502.142093][ T9990] dummy0: left allmulticast mode [ 505.411200][ T9990] ip6gre1: left promiscuous mode [ 505.411237][ T9990] ip6gre1: left allmulticast mode [ 505.423046][ T152] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.423078][ T152] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.433346][ T152] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.433400][ T152] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.433435][ T152] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.433457][ T152] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.433485][ T152] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.433507][ T152] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.459393][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1127'. [ 505.510882][T10017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.511242][T10017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.629547][ T5717] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 505.786379][ T5717] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 505.789008][ T5717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.789037][ T5717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.789055][ T5717] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 505.789088][ T5717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.796916][ T5717] usb 6-1: config 0 descriptor?? [ 505.910490][T10032] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10032 comm=syz.2.1137 [ 505.925873][T10033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=10033 comm=syz.3.1138 [ 505.928749][ T30] audit: type=1400 audit(2000000171.690:26681): avc: denied { create } for pid=10030 comm="syz.3.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 506.212571][ T5717] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 506.825749][T10045] CIFS: Attempting to mount //127.0.0.1/share [ 506.840162][T10045] CIFS: VFS: Error connecting to socket. Aborting operation. [ 506.847812][T10045] CIFS: VFS: cifs_mount failed w/return code = -101 [ 507.440364][T10052] loop9: detected capacity change from 0 to 524287998 [ 508.329366][ T985] usb 6-1: reset high-speed USB device number 26 using dummy_hcd [ 508.709415][ T985] usb 6-1: device descriptor read/64, error -32 [ 508.949340][ T985] usb 6-1: reset high-speed USB device number 26 using dummy_hcd [ 510.772394][ T5786] usb 6-1: USB disconnect, device number 26 [ 512.375090][ T30] audit: type=1400 audit(2000000178.140:26682): avc: denied { getopt } for pid=10089 comm="syz.5.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 512.430715][T10091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.443737][T10091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.644863][T10123] Cannot find add_set index 0 as target [ 514.719526][ T985] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 514.879555][ T985] usb 3-1: Using ep0 maxpacket: 8 [ 514.887144][ T985] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 514.906526][ T985] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 514.915864][ T985] usb 3-1: config 0 has no interface number 0 [ 514.925509][ T985] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 514.936936][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.963754][ T985] usb 3-1: config 0 descriptor?? [ 514.979402][ T985] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 515.534554][T10130] ip6gre2: entered allmulticast mode [ 515.543911][ T8177] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 515.585952][T10130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.586310][T10130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.705901][T10134] CUSE: info not properly terminated [ 516.017206][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1173'. [ 516.189963][T10159] overlay: ./file0 is not a directory [ 517.169415][ T985] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 517.228177][ T5789] usb 3-1: USB disconnect, device number 39 [ 517.302184][ T985] usb 6-1: device descriptor read/64, error -71 [ 517.549752][ T985] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 517.701281][ T985] usb 6-1: device descriptor read/64, error -71 [ 517.815050][ T985] usb usb6-port1: attempt power cycle [ 518.230832][ T985] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 518.270729][ T985] usb 6-1: device descriptor read/8, error -71 [ 518.519822][ T985] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 518.553406][ T985] usb 6-1: device descriptor read/8, error -71 [ 518.669581][ T985] usb usb6-port1: unable to enumerate USB device [ 518.679761][ T30] audit: type=1326 audit(2000000184.430:26683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.5.1176" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9237b9e159 code=0x7ffc0000 [ 518.679826][ T30] audit: type=1326 audit(2000000184.440:26684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.5.1176" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9237b9ddeb code=0x7ffc0000 [ 518.679861][ T30] audit: type=1326 audit(2000000184.440:26685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.5.1176" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9237b9e159 code=0x7ffc0000 [ 518.679906][ T30] audit: type=1326 audit(2000000184.450:26686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.5.1176" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9237b9e159 code=0x7ffc0000 [ 518.679939][ T30] audit: type=1326 audit(2000000184.450:26687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.5.1176" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9237b9e159 code=0x7ffc0000 [ 518.797922][T10163] bond0: (slave syz_tun): Releasing backup interface [ 518.972029][T10169] comedi comedi1: rti802: I/O base address not correctly aligned [ 519.165840][T10185] gadgetfs: bound to dummy_udc driver [ 519.199883][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 519.365454][ T9] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 519.415603][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 519.415646][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 519.415693][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.459415][ T985] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 519.467475][ C1] gadgetfs: connected [ 519.474040][ T985] gadgetfs: disconnected [ 519.569385][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 519.620171][ C1] gadgetfs: connected [ 519.627762][ T985] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 519.643094][ T985] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 519.653089][ T985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.737513][ C1] gadgetfs: configuration #1 [ 520.106791][T10184] gadgetfs: suspended from state 3 [ 520.107005][T10184] gadgetfs: disconnected [ 520.155259][ T9] ums-alauda 3-1:1.0: USB Mass Storage device detected [ 520.165156][ T985] usb 2-1: USB disconnect, device number 18 [ 520.178259][ T9] ums-alauda 3-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 520.178259][ T9] Please send a copy of this message to and [ 520.205037][ T9] scsi host1: usb-storage 3-1:1.0 [ 520.314497][T10187] CUSE: info not properly terminated [ 521.526480][ T8177] scsi 1:0:0:0: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 521.555566][ T8177] scsi 1:0:0:1: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 521.660341][ T8177] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 521.711265][ T30] audit: type=1326 audit(2000000187.470:26688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.3.1188" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543199e159 code=0x50000 [ 521.711340][ T30] audit: type=1326 audit(2000000187.470:26689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.3.1188" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543199e159 code=0x50000 [ 521.711373][ T30] audit: type=1326 audit(2000000187.470:26690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.3.1188" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543199e159 code=0x50000 [ 521.711406][ T30] audit: type=1326 audit(2000000187.470:26691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.3.1188" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543199e159 code=0x50000 [ 521.711439][ T30] audit: type=1326 audit(2000000187.470:26692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.3.1188" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543199e159 code=0x50000 [ 521.810870][T10164] usb 3-1: USB disconnect, device number 40 [ 521.847420][T10208] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10208 comm=syz.0.1189 [ 521.866292][ T8803] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 521.906359][ T8792] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 521.922632][ T8792] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 521.935504][ T8792] sd 1:0:0:1: [sdc] Sense not available. [ 521.986570][ T8177] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 522.003821][ T5604] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 522.008058][ T8792] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 522.008132][ T8792] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 522.010784][ T8792] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 522.017739][ T8792] sd 1:0:0:1: [sdc] Asking for cache data failed [ 522.017785][ T8792] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 522.258329][ T8792] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 522.267406][ T8803] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 522.300392][ T5599] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 522.565740][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1192'. [ 524.860673][ T30] kauditd_printk_skb: 693 callbacks suppressed [ 524.860721][ T30] audit: type=1400 audit(2000000190.630:27386): avc: denied { unmount } for pid=7362 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 524.962196][T10233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.974213][T10233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.055091][T10234] 9p: Bad value for 'rfdno' [ 527.045044][ T2340] pvrusb2: request_firmware fatal error with code=-110 [ 527.057149][ T2340] pvrusb2: Failure uploading firmware1 [ 527.057195][ T2340] pvrusb2: Device initialization was not successful. [ 527.057206][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 527.057212][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 527.057322][ T5728] pvrusb2: Device being rendered inoperable [ 527.075084][ T2340] pvrusb2: Failed to submit write-control URB status=-19 [ 527.075544][ T2340] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 527.075563][ T2340] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 527.489538][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 528.781999][T10268] input: syz1 as /devices/virtual/input/input35 [ 528.965554][T10269] loop9: detected capacity change from 0 to 524287998 [ 529.936615][ T30] audit: type=1326 audit(2000000195.700:27387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.3.1207" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f543199e159 code=0x0 [ 529.941924][T10276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.942283][T10276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.988823][T10271] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1205'. [ 530.429715][T10280] comedi comedi0: dt2801: I/O base address or length out of range [ 530.530853][T10285] gadgetfs: bound to dummy_udc driver [ 531.669393][ T5701] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 531.677582][ C0] gadgetfs: connected [ 531.682166][ T5701] gadgetfs: disconnected [ 531.909760][ C0] gadgetfs: connected [ 531.922473][ T5701] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 531.937165][ T5701] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 531.937331][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.990840][ C0] gadgetfs: configuration #1 [ 532.563130][T10284] gadgetfs: suspended from state 3 [ 532.563474][T10284] gadgetfs: disconnected [ 532.585259][ T5717] usb 2-1: USB disconnect, device number 19 [ 532.754648][ T30] audit: type=1400 audit(2000000198.480:27388): avc: denied { load_policy } for pid=10290 comm="syz.2.1210" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 532.804970][T10293] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 532.816280][T10293] SELinux: failed to load policy [ 535.013844][T10321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.023633][T10321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.082901][ T30] audit: type=1400 audit(2000000202.850:27389): avc: denied { wake_alarm } for pid=10330 comm="syz.3.1216" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 537.361219][T10344] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1219'. [ 538.612764][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 538.670652][T10364] input: syz1 as /devices/virtual/input/input36 [ 538.793446][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 538.800994][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 538.842165][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 538.842235][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 538.853730][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 538.853761][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.853832][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.012261][T10367] loop9: detected capacity change from 0 to 524287998 [ 541.380834][ T5604] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 541.405963][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1228'. [ 541.624673][T10388] block nbd2: shutting down sockets [ 541.825939][ T30] audit: type=1400 audit(2000000207.590:27390): avc: denied { cmd } for pid=10386 comm="iou-wrk-10387" path="socket:[28935]" dev="sockfs" ino=28935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 542.185530][ T9] usb 6-1: usb_control_msg returned -71 [ 542.185573][ T9] usbtmc 6-1:16.0: can't read capabilities [ 542.203556][ T9] usb 6-1: USB disconnect, device number 31 [ 542.807673][T10415] FAULT_INJECTION: forcing a failure. [ 542.807673][T10415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.825472][ T30] audit: type=1400 audit(2000000208.590:27391): avc: denied { listen } for pid=10411 comm="syz.5.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 542.848262][T10415] CPU: 0 UID: 0 PID: 10415 Comm: syz.4.1237 Not tainted syzkaller #0 PREEMPT(full) [ 542.848290][T10415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 542.848302][T10415] Call Trace: [ 542.848309][T10415] [ 542.848316][T10415] dump_stack_lvl+0x100/0x190 [ 542.848349][T10415] should_fail_ex.cold+0x5/0xa [ 542.848376][T10415] _copy_from_user+0x2e/0xd0 [ 542.848403][T10415] bpf_test_init.isra.0+0xaf/0x100 [ 542.848429][T10415] bpf_prog_test_run_skb+0x48e/0x3530 [ 542.848463][T10415] ? lock_acquire+0x1d1/0x380 [ 542.848482][T10415] ? __fget_files+0x34/0x3d0 [ 542.848504][T10415] ? find_held_lock+0x2b/0x80 [ 542.848530][T10415] ? __fget_files+0x141/0x3d0 [ 542.848554][T10415] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 542.848581][T10415] ? fput+0x7c/0x100 [ 542.848602][T10415] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 542.848624][T10415] __sys_bpf+0x2265/0x4a30 [ 542.848656][T10415] ? __pfx___sys_bpf+0x10/0x10 [ 542.848675][T10415] ? find_held_lock+0x2b/0x80 [ 542.848695][T10415] ? get_pid_task+0xfc/0x250 [ 542.848717][T10415] ? get_pid_task+0xfc/0x250 [ 542.848746][T10415] ? find_held_lock+0x2b/0x80 [ 542.848773][T10415] ? rcu_read_lock_any_held+0x6a/0x90 [ 542.848789][T10415] ? find_held_lock+0x2b/0x80 [ 542.848803][T10415] ? ksys_write+0x190/0x250 [ 542.848819][T10415] ? ksys_write+0x190/0x250 [ 542.848837][T10415] ? lock_acquire+0x1d1/0x380 [ 542.848870][T10415] ? fput+0x7c/0x100 [ 542.848889][T10415] ? ksys_write+0x1ac/0x250 [ 542.848916][T10415] ? __x64_sys_bpf+0xce/0x140 [ 542.848926][T10415] __x64_sys_bpf+0xce/0x140 [ 542.848936][T10415] ? do_syscall_64+0xae/0x790 [ 542.848952][T10415] do_syscall_64+0x123/0x790 [ 542.848965][T10415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.848977][T10415] RIP: 0033:0x7f21ecf9e159 [ 542.848992][T10415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.849009][T10415] RSP: 002b:00007f21edee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 542.849028][T10415] RAX: ffffffffffffffda RBX: 00007f21ed225fa0 RCX: 00007f21ecf9e159 [ 542.849040][T10415] RDX: 0000000000000048 RSI: 0000200000000640 RDI: 000000000000000a [ 542.849050][T10415] RBP: 00007f21edee3090 R08: 0000000000000000 R09: 0000000000000000 [ 542.849060][T10415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.849068][T10415] R13: 00007f21ed226038 R14: 00007f21ed225fa0 R15: 00007ffca5881258 [ 542.849082][T10415] [ 543.489422][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 544.331614][T10427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.331997][T10427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.336030][T10427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.336399][T10427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.524228][ T30] audit: type=1400 audit(2000000210.290:27392): avc: denied { ioctl } for pid=10430 comm="syz.2.1242" path="socket:[28059]" dev="sockfs" ino=28059 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 544.919200][ T5604] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 545.319003][T10444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1245'. [ 545.319061][T10444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1245'. [ 545.354812][T10444] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 545.453930][T10447] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10447 comm=syz.2.1246 [ 545.563980][ T30] audit: type=1400 audit(2000000211.330:27393): avc: denied { connect } for pid=10449 comm="syz.2.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 545.731285][ T30] audit: type=1400 audit(2000000211.500:27394): avc: denied { shutdown } for pid=10453 comm="syz.2.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 546.123406][T10465] overlayfs: missing 'lowerdir' [ 546.489589][ T5786] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 546.690579][ T5786] usb 6-1: device descriptor read/64, error -71 [ 546.930142][ T5786] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 547.000473][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1254'. [ 547.105589][ T5786] usb 6-1: device descriptor read/64, error -71 [ 547.210607][ T5786] usb usb6-port1: attempt power cycle [ 547.600874][ T5786] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 547.637341][ T5786] usb 6-1: device descriptor read/8, error -71 [ 547.879606][ T5786] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 547.910701][ T5786] usb 6-1: device descriptor read/8, error -71 [ 548.026182][ T5786] usb usb6-port1: unable to enumerate USB device [ 549.328428][T10483] xt_CT: You must specify a L4 protocol and not use inversions on it [ 549.368900][ T30] audit: type=1400 audit(2000000215.130:27395): avc: denied { write } for pid=10486 comm="syz.4.1256" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 549.402334][ T30] audit: type=1400 audit(2000000215.170:27396): avc: denied { ioctl } for pid=10486 comm="syz.4.1256" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 549.404174][ T30] audit: type=1400 audit(2000000215.170:27397): avc: denied { map } for pid=10486 comm="syz.4.1256" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 549.407509][T10489] binder: 10486:10489 ioctl c0306201 2000000003c0 returned -14 [ 549.416663][T10489] input: syz1 as /devices/virtual/input/input37 [ 549.456517][T10490] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10490 comm=syz.3.1258 [ 549.506394][ T30] audit: type=1400 audit(2000000215.270:27398): avc: denied { call } for pid=10486 comm="syz.4.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 549.595227][ T30] audit: type=1400 audit(2000000215.360:27399): avc: denied { read } for pid=10486 comm="syz.4.1256" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 549.700799][T10501] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1261'. [ 552.108579][ T30] audit: type=1400 audit(2000000217.870:27400): avc: denied { getopt } for pid=10512 comm="syz.2.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 553.030631][ T5717] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 553.275444][ T5717] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 553.277837][ T5717] usb 3-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 553.278279][ T5717] usb 3-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 553.280500][ T5717] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 553.280520][ T5717] usb 3-1: Manufacturer: syz [ 553.280532][ T5717] usb 3-1: SerialNumber: syz [ 553.526735][ T5604] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 553.530502][ T5717] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 553.533464][ T5717] usb 3-1: USB disconnect, device number 41 [ 553.569920][T10512] [ 553.572527][T10512] ============================================ [ 553.578649][T10512] WARNING: possible recursive locking detected [ 553.584771][T10512] syzkaller #0 Not tainted [ 553.589157][T10512] -------------------------------------------- [ 553.595294][T10512] syz.2.1265/10512 is trying to acquire lock: [ 553.601347][T10512] ffff888037034160 (&rmidi->open_mutex){+.+.}-{4:4}, at: rawmidi_release_priv+0x45/0x280 [ 553.611159][T10512] [ 553.611159][T10512] but task is already holding lock: [ 553.618514][T10512] ffff888057ccd560 (&rmidi->open_mutex){+.+.}-{4:4}, at: rawmidi_release_priv+0x45/0x280 [ 553.628325][T10512] [ 553.628325][T10512] other info that might help us debug this: [ 553.636379][T10512] Possible unsafe locking scenario: [ 553.636379][T10512] [ 553.643823][T10512] CPU0 [ 553.647098][T10512] ---- [ 553.650362][T10512] lock(&rmidi->open_mutex); [ 553.655016][T10512] lock(&rmidi->open_mutex); [ 553.659678][T10512] [ 553.659678][T10512] *** DEADLOCK *** [ 553.659678][T10512] [ 553.667812][T10512] May be due to missing lock nesting notation [ 553.667812][T10512] [ 553.676145][T10512] locks held by syz.2.1265/10512: 2, last CPU#0: [ 553.682473][T10512] #0: ffff888057ccd560 (&rmidi->open_mutex){+.+.}-{4:4}, at: rawmidi_release_priv+0x45/0x280 [ 553.692740][T10512] #1: ffff888037034460 (&ump->open_mutex){+.+.}-{4:4}, at: snd_ump_legacy_close+0x117/0x300 [ 553.702920][T10512] [ 553.702920][T10512] stack backtrace: [ 553.708803][T10512] CPU: 0 UID: 0 PID: 10512 Comm: syz.2.1265 Not tainted syzkaller #0 PREEMPT(full) [ 553.718155][T10512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 553.728209][T10512] Call Trace: [ 553.731675][T10512] [ 553.734601][T10512] dump_stack_lvl+0x100/0x190 [ 553.739456][T10512] print_deadlock_bug.cold+0xbd/0xca [ 553.744914][T10512] __lock_acquire+0x1343/0x1ec0 [ 553.749762][T10512] lock_acquire+0x1d1/0x380 [ 553.754248][T10512] ? rawmidi_release_priv+0x45/0x280 [ 553.759542][T10512] ? __pfx___might_resched+0x10/0x10 [ 553.764827][T10512] ? lock_acquire+0x1d1/0x380 [ 553.769494][T10512] ? snd_ump_legacy_close+0x117/0x300 [ 553.774881][T10512] __mutex_lock+0x1a4/0x1bc0 [ 553.779467][T10512] ? rawmidi_release_priv+0x45/0x280 [ 553.784746][T10512] ? rawmidi_release_priv+0x45/0x280 [ 553.790027][T10512] ? trace_contention_end+0x126/0x160 [ 553.795388][T10512] ? __pfx___mutex_lock+0x10/0x10 [ 553.800401][T10512] ? __pfx___mutex_lock+0x10/0x10 [ 553.805416][T10512] ? lock_acquire+0x1d1/0x380 [ 553.810085][T10512] ? rawmidi_release_priv+0x45/0x280 [ 553.815362][T10512] rawmidi_release_priv+0x45/0x280 [ 553.820496][T10512] snd_rawmidi_kernel_release+0x3a/0xd0 [ 553.826045][T10512] snd_ump_legacy_close+0x234/0x300 [ 553.831247][T10512] close_substream.part.0+0x16b/0x860 [ 553.836626][T10512] ? __pfx_close_substream.part.0+0x10/0x10 [ 553.842502][T10512] ? locks_remove_file+0xd1/0x600 [ 553.847526][T10512] rawmidi_release_priv+0x210/0x280 [ 553.852721][T10512] snd_rawmidi_release+0x5a/0xf0 [ 553.857649][T10512] ? __pfx_snd_rawmidi_release+0x10/0x10 [ 553.863260][T10512] __fput+0x3ff/0xb50 [ 553.867232][T10512] task_work_run+0x150/0x240 [ 553.871819][T10512] ? __pfx_task_work_run+0x10/0x10 [ 553.876910][T10512] exit_to_user_mode_loop+0x1d8/0x700 [ 553.882265][T10512] ? rcu_is_watching+0x13/0xc0 [ 553.887041][T10512] do_syscall_64+0x661/0x790 [ 553.891621][T10512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.897489][T10512] RIP: 0033:0x7fe931b9e159 [ 553.901883][T10512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.921469][T10512] RSP: 002b:00007fff150dc9c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 553.929864][T10512] RAX: 0000000000000000 RBX: 00007fff150dcab0 RCX: 00007fe931b9e159 [ 553.937827][T10512] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 553.945882][T10512] RBP: 0000000000086c69 R08: 0000000000000001 R09: 0000000000000000 [ 553.953847][T10512] R10: 0000001b31a20000 R11: 0000000000000246 R12: 00007fff150dcaf0 [ 553.961889][T10512] R13: 00007fe931e25fac R14: 000000000008724b R15: 00007fe931e25fa0 [ 553.969841][T10512] [ 554.162854][ T30] audit: type=1400 audit(2000000219.930:27401): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 554.248635][T10522] netlink: 'syz.4.1266': attribute type 1 has an invalid length. [ 554.248659][T10522] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1266'. [ 554.248673][T10522] netlink: 'syz.4.1266': attribute type 1 has an invalid length. [ 554.248680][T10522] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1266'. [ 557.575146][ T4969] udevd[4969]: worker [8953] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time [ 562.690319][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.690377][ T1307] ieee802154 phy1 wpan1: encryption failed: -22