last executing test programs: 19.093569775s ago: executing program 1 (id=1627): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x10082, 0xec67, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9024, 0x1000000000000, 0x7, 0x5, 0x5, 0x4c, 0x400, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x4a180c86, 0x1, 0x2, 0x6, 0x7, 0x96, 0xff7fffff, 0xffffffff00000000, 0x0, 0x4, 0x200000000007, 0x23b, 0x0, 0x2, 0x888f, 0x4, 0xb, 0x6, 0x6, 0x3, 0x93, 0x20000000006, 0x4, 0x8000000000000000, 0x3, 0x3, 0xfffefffffffffff7, 0x3, 0xfffffffffffffffe, 0xe, 0x7, 0x8, 0xe6, 0x200000000000101, 0x40005, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc01, 0x2, 0x4, 0xd, 0xcde, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x3, 0x8, 0x6, 0x3, 0x0, 0x4, 0xfff, 0xfdffffffffffff81, 0x9, 0x4, 0x2000000000000006, 0x4, 0x5, 0x400000000008061f, 0x3, 0x8, 0xf6, 0x6c4a, 0x6, 0xffffffffffffffff, 0x7, 0xe53e, 0x2c, 0x8, 0x80002293332d, 0x6, 0x4, 0x0, 0xd, 0x2, 0x5, 0x2000002, 0x2, 0x7, 0xdfd4, 0x10001, 0x0, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffff7, 0xb692, 0xcd, 0x9, 0x3]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200105}, 0x1c) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mq_unlink(0x0) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x2, 0x9c, 0x0, 0x2, 0x7f, 0x9, 0x5, 0x2, 0x5, 0x5, 0x5, 0x0, 0x9, 0x40, 0xe, 0x6, 0x8, 0x7, '\x00', 0x0, 0x3f92}) syz_emit_vhci(&(0x7f00000046c0)=ANY=[@ANYBLOB="041c"], 0x8) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 17.442483897s ago: executing program 1 (id=1632): syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000200)={0x40, 0x12, 0x2, "f541"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@gettaction={0xbc, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="18000000246837f73199aee6fdb9291b120000002d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115ad", 0xeb}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1268, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56171, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000b0400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004000}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r7, &(0x7f0000000080)='THAWED\x00', 0x7) shmctl$SHM_LOCK(0x0, 0xb) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 13.328590253s ago: executing program 1 (id=1641): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0xffffffda, 0x3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r2, 0x2000000, 0x300}, 0x38) syz_emit_vhci(0x0, 0x14) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xf) socket$kcm(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x81101000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x79}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x2000c050}, 0x4000010) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0xffffffff, 0x5, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x6, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x70bd25, 0x4000000, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 11.868993068s ago: executing program 1 (id=1645): listns(&(0x7f00000000c0)={0x20, 0x0, 0xc, 0x4000000, 0x0, 0x3}, 0x0, 0xf4240, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = timerfd_create(0x0, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x2, &(0x7f00000002c0)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r2, 0x0}]) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000140), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setns(0xc9, 0x0) r7 = socket(0x2a, 0x2, 0x9) bind$inet(r7, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) recvmsg(r7, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r9, 0x8010af78, &(0x7f0000000240)) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r8, 0x2799f5eec7981083, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x80) clock_adjtime(0x3, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x810000, 0x5a6c905, 0x8dbf, 0x80000000000000e9, 0x2, 0x8, 0x80000000000000, 0x1, 0x1, 0x10}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fcdbdf250500000008000500050000002000028014000100000000000000000000000000000000010800050003000000"], 0x3c}}, 0x800) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r11, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 11.722322071s ago: executing program 2 (id=1648): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mprotect(&(0x7f00006bb000/0x2000)=nil, 0x2000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r1, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x3210, @broadcast}, 0x80) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000240)=""/124, &(0x7f00000002c0)=0x7c) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) 10.747100274s ago: executing program 2 (id=1651): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x0, 0x1, 0xf1, 0x5, 0x0, 0x1, "bf231e4b"}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000400)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000001dc0)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x10, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0xa, 0x1, 0xc000, 0x4, r4, r5, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x4, 0x0, 0x7fffffff, 0xfffffffd, 0x6, {0x2, 0x8000000000000000, 0x8, 0x100000000000, 0x2000000000000db4, 0x85, 0x8, 0x6, 0x200c, 0xa000, 0xe44, r4, r5, 0x40fe, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], &(0x7f0000000340)=""/142, 0x1a, 0x8e, 0x1}, 0x28) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r8) getsockname$packet(r8, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r9, 0x108c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c000}, 0x4) sendmmsg$inet(r7, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$can_j1939(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r9, 0x3, {0x2}}, 0x18, &(0x7f0000000200)={&(0x7f0000000140)="98e767e492892818645401cc1bdc8866b1a00693e057d91256a86a95ff7ee5f08a3ebc84674a119984ac3cc73edaada6154184551ac5fc55108bd774752d3c902c589a186ed2f9a4e12813b1e3bb6a2aed82059f4cdb74326dffc9dc02ee780858701d569f62435c121c5664ec565d0c5c54895dd2ce05ba10d88b6117a5c6e7c1e644d08f402b41a2f431a86bbdff53bba3ce579ddb61d6560f86c1e0cbb7d20a44929ad9e04530dcbc", 0xaa}, 0x1, 0x0, 0x0, 0x40}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) 10.410850345s ago: executing program 1 (id=1652): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r6, &(0x7f0000000180)={0x24, @none={0x0, 0xffff}}, 0x14) sendmmsg(r6, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x101, 0x1038, r7, 0x0) fanotify_mark(r8, 0x102, 0x40001043, r7, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) 9.980138619s ago: executing program 4 (id=1653): r0 = request_key(&(0x7f0000000340)='.request_key_auth\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000440)='\xa1%\xff^^!@\\/$--)[\x00', 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500)="c6585631c9b0bca0466f4ffff5d10802ed5c3a4d8dffca68a7ccefbb44447bff32c6763f22", 0x25, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000540), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000ac0)="7797e18ee012a2d17a607576e89310b414b1b5ac523e54b979c69e3c85456b3a016fe11bc87e10f66360df64eb5357201fd704691cad3c7568ad668370e404bc15749ce70e2f20ee09688a", 0x4b, 0xfffffffffffffffa) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000d00), 0x2f00, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000b40)={r0, r1, r2}, &(0x7f0000000b80)=""/138, 0x8a, &(0x7f0000000cc0)={&(0x7f0000000c40)={'wp256-generic\x00'}, &(0x7f0000000c80)="a6e10b3758dba797cc8aaec835de68", 0xf}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x2, 0x3, 0xfffffffe, 'syz0\x00', 0x2}, 0x1, [0xd44, 0xfffffffffffffff7, 0x0, 0x8, 0x4, 0x4, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0xd, 0xf, 0x8, 0x1, 0x7, 0x4, 0x3, 0x2, 0x9, 0x0, 0xfffffffffefffffe, 0xfe7, 0x8000000000000000, 0x2, 0x8, 0x7ff, 0xaa, 0xfffffffffffffffa, 0x0, 0xfffffffffffffff7, 0x5, 0x7, 0x403, 0x8000000002, 0x10000, 0x1000000000e, 0x5, 0x7, 0x88, 0x2, 0x6, 0x4, 0x100000002, 0x0, 0x9, 0x7, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa1, 0x6, 0x10001, 0x1, 0xfffffffbfffff800, 0x242, 0x1, 0x20, 0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x4, 0x4, 0x4, 0xf, 0xae9, 0x3, 0xfffffffffffffffe, 0x0, 0x42, 0x7, 0x4000000000000000, 0x0, 0x7ff, 0x4, 0x400000000007, 0x205d, 0x9, 0x63, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x1000, 0x6, 0x4, 0x8000000000000000, 0x800000000209, 0x2, 0x803, 0x7, 0x8, 0x201, 0x0, 0x6, 0x3, 0x5, 0x1, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x2ad, 0x80000001, 0xfffffffffeffffff, 0x7]}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @sco={0x1f, @none}, @rc={0x1f, @none, 0xb3}, @rc={0x1f, @none, 0x3}, 0x9, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='caif0\x00', 0x5, 0x0, 0x8001}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x4040, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x50) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r5 = socket(0x14, 0x2, 0x4) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16], 0x38}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d40)={0x94, r7, 0x10a, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x48}}}}, [@NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x86}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3af}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x614}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xe}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x8002aa}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x30}]}, @NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x8, 0x9, 0x7fffffff, 0x7]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x24000880}, 0x40) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x20, r11, 0x311, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 9.848573252s ago: executing program 0 (id=1655): mount$nfs4(&(0x7f0000000180)='sysfs\x00', &(0x7f00000001c0)='./mysys/file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="292d26282d212b2df42d5d5d5e2c5e407b252c242c5d5b2d2c2f6465762f6275732f7573622f3030232f30", @ANYRESDEC, @ANYBLOB='R']) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048010) getdents64(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40040, 0x6ab858183a7ef63b) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) socket$igmp(0x2, 0x3, 0x2) 8.91745044s ago: executing program 0 (id=1656): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x77ed, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)='P', 0x1}], 0x1}}], 0x1, 0xc000) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f00000012c0)) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000002700010028bd7000ffdbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write(r3, &(0x7f0000000240)="94", 0x1) tee(r2, r6, 0x8f5, 0x100000000000000) write(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000a74000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x2, 0x1) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000200)={0x28, 0x6, r8, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8001}) ioctl(r7, 0x3b92, &(0x7f0000000000)="10") getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000eeffb7"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) socket(0x10, 0x3, 0x0) 5.06202636s ago: executing program 4 (id=1658): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c0015005b073500", @ANYRES64=r0], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0xc0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfa0c, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x470bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6a, 0x3, 0xffffffffffffffff, 0x3ff, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(0x3) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r9, 0x40405514, &(0x7f00000000c0)={0x3, 0x5, 0x8, 0x9, 'syz0\x00', 0x19}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c841}, 0x4080) syz_ublk_setup_queues(r11, r4, &(0x7f0000000180)={0x0, 0xfffffffe, 0x42, 0x1, 0x1f4}, 0x0, 0x1, 0x0, 0x0) 5.061006289s ago: executing program 3 (id=1659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x358d1744}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000e32b0000"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x8}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 5.058649747s ago: executing program 2 (id=1660): setreuid(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r4, &(0x7f0000000340)=ANY=[], 0x40) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x5}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f00000000c0)=[{r5, 0x9f712fd3135d632f}], 0x1, 0x0, 0x0, 0x0) 5.056933196s ago: executing program 3 (id=1661): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@multicast1, 0x4e24, 0x9, 0x4e23, 0x9, 0x2, 0x80, 0x80, 0x89, 0x0, r1}, {0x1, 0x98, 0x5, 0x9, 0x1, 0x8, 0x4, 0x5}, {0xffffffffffffff22, 0xe0, 0x823}, 0x68a4, 0x6e6bb9, 0x2, 0x1, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4d3, 0x3c}, 0x2, @in=@loopback, 0x3501, 0x1, 0x2, 0x1, 0xffff7fff, 0x3}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000002000010028bd7000fcdbdf250a14baaa807b3e4abe4c00001400020000000000ee0000000000000000000000140001002001000000000000000000000000000162af9bdb12295ae227e49f207498d03f8e4e931bcf0d9047cb49ccbc4f7c86bd1520993b6327248700ea11e0a409149edcc5dc83f124d5ffa54576ae4b0bdd13e74d5ce5f83d104d386b520fe6323ce9febea47a5bdac7686fc7ed8ed214e688976d2ef800625d72b3ab59843f9f617e1855fd4f376f2804f0145bded12c1031ba6d5ea6c1f953a1157460e2ab19eb858beecea1306824e39323"], 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0xff}, {}, @raw32={[0x0, 0x100]}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x5}, {}, {}, @quote}], 0x38) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {0x20}, {}, @ext={0x0, 0x0}}], 0x38) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000440)) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c0000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1) r7 = socket$kcm(0x10, 0x3, 0x10) r8 = socket(0x2d, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, 0x0, &(0x7f00000000c0)) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) syz_io_uring_setup(0x796d, &(0x7f0000000140)={0x0, 0x8772, 0x1, 0x0, 0x263}, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r9}}, 0x20) 5.053883839s ago: executing program 1 (id=1662): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @multicast2}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00', 0x32, r2}) close(r0) 5.048401794s ago: executing program 2 (id=1663): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ebb000/0x3000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x19) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x202000, 0x88) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x1) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2d) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x100000a, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400005}, 0x1c) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d40)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000501000000ec5ba2ec5b8c24ced04e9b897de2a1522c6557066dca39"], 0x0, 0x0, 0x0, 0x0}) 4.713722452s ago: executing program 4 (id=1664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001400)=[{{&(0x7f0000000340)=@caif=@util={0x25, "59917210d6d90137df72ee23d9048d31"}, 0x80, &(0x7f0000000680)=[{&(0x7f00000003c0)="f063e88d4de3e443435f4505b31b7680cf3dc551ad25c8eb5b885300cf74104c7ae76a6e26df0a81714c398c884db8f0a44deb1145d5b02e2a8e546205f3452e1f68bec1e1759aa3b23701ca43cfd9e6b6600aea9cca90303213d1bf5de1b625716b0930891fb265", 0x68}, {&(0x7f0000000500)="072cb79809512263d2844728fb65dce13f0ff2edba48c676786f14b14faa09c09f8bad3adcf41455b99d15aec26b616c172f2e8c168240e6be084964478f7f2be4970cc261d2c9340499795286051f860c26b19af1196d453cc8564d8329496062a67ac45850f0e353612331fd8dcf19891778762e506cabb69abf4c643f61667682dfe62da42421d99f1f4271d3d316a09431a913c827e1900726abd2f8566b268798e54e9132d836ab1d1977734426c2fb076cc7aae6968260ed45cbe92f0468da99a51b892511f917022af8", 0xcd}, {&(0x7f0000000600)="6679c89be271f3d05434f0f0a98f2cae1b8ae2de27652c13944059fef19d280bc3e99d4d6b1df14b70357d4e5e4e334c3d99bc113088db2d", 0x38}, {&(0x7f0000000640)}], 0x4, &(0x7f00000006c0)=[{0x50, 0x109, 0x8, "0f2276b3a6d384d74e2a5d9dce330f14df0b459cbaaee06773ae1fc8a562ffea83d7e716f4141b7626553d8cbbde33fc763c01e654f23043f7b0e820c0816f03"}, {0x20, 0x108, 0x2a7094f1, "5476a5c026eeb65648d243"}], 0x70}}, {{&(0x7f0000000740)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xc8, 0xfa, "1b9a209f7ef107431cad262d7eacfebbb46adf62903a129e0822f115186b70f71883f673d02288ca0862f4b070ba799ea4205054ae692d8adb4c6d100e88f7", 0x24}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000880)="75e4a8d2434257caf536c1032170184acf8a4eb96177249c4251e22dbede601e1da8e243f895fe69a9e7a1331cb2a9098b18f24a538c37bf0a04baaf7f66afb4e505726b86e5d3a5dd3527e6dd416f8bbc36f1d1f655a6e84ef1b0aaab4287067f066ce9864d68174908e6dad3070c63fe26e8648596ee660967c0386fae49f172e2e44287090eabee3501b980e61a205e9582cde5b9727699bf16e75df188", 0x9f}, {&(0x7f0000000940)="c90fb7bc8408f5f16b21fed9dbdc2bc653f93f46a26356f3c39f171571e7c0022d1f3499f105f626c9", 0x29}, {&(0x7f0000000980)="c770c56b00f03235af14645cff6bc86cd970bb61db6ce419a5ceaf57e492796c279e0ae64a5bba10a012a88ff151ce4df63b2c1b5adf20c32b054bf4447748fb829d689cc538da69ed2ac24ba2e78ab95567dc026384657f909c0f8677a428c54b27c9033f64a4e5dbc952d8eb0a0eb558c593b02aeb6255b72f5a653c202948029125d9d6c6a077d67d340ae34371bf2096f0e94a85124f53988576fd7394488ff2237151dc1f049cc6657c54247390183cebd9539591c330a6e62c5ed92e33ee0178cb23f465febdb47f730c4fe3dd84e8546eaa62d8", 0xd7}, {&(0x7f0000000a80)="257a278a967dba2dd5e3144ce79ed3781d116891773b6696bb5ec3ca35402cf7568736ba50003531693005ef", 0x2c}, {&(0x7f0000000ac0)="49257097be553bed967b1ae2a6b05924666aac2e43b95f5cede4117b82412ba336cd", 0x22}, {&(0x7f0000000b00)="e13e15ad0c451d4698d7d714ab6310faff543b303448b67a7e9fb4324867a26aa4c7a880591c06a59a6ba400c8cb6e93fda325c65ff58559f836a1196718e86b559980c5c66d248fb8524e08542d24581a1c3e4ffe9931ced5f6cdd75d311a06f9b4e77775ceac1909f741cbb4f50d04b38a0af0213ea3abfd37eb96e968a4bb52f466ad9b05b5", 0x87}], 0x6, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x568}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000440)="5355849f49a6f9ebca0f4f64164c7872c830f7fe24bee151eecb6e444d41182c210f6ca593c5c3a8866c0031645d2761a231690fd70457f4ae9e19f29e62195f1372d151bcacb21ebb403bbc6f44d1fc9039d89438d6386b24b6f2", 0x5b}, {&(0x7f00000007c0)="28171fa92bd45092e8ada1b644fbb677f526ae2619e8a016a0987b980bc373dd60656132483ee40a28f6418f12f07142ccdff280f4e2e3466df6e4ab3f34e0311782b8b0c7b9e88e71f88bf8eaf979da41e792fb1745a9d191154125", 0x5c}], 0x2, &(0x7f0000001280)=[{0x68, 0x101, 0x8, "eeaadd8dd7224f87467fc551582f0210a602767be24ec42feb283869808217e3296c03903201e7cf01fcede5f24fa8a3bbcabdeae57680dae1abc63359232795e2385521c48a56aa2e1fbcaa8141f5662f"}, {0x30, 0x103, 0x0, "a6192dc3d0a2588ee91451f65c73baf74a89b82f57927e54f0c4d033e1"}, {0xa8, 0x110, 0x8, "6a28a27251c880f435675a754687ed7daf7da19ac8be6e0f996220d624a587ced7ea4699c352643592d819c1f0dd4313e492191f01f99d067a5658dfe50552c35740dec90146e621bb14863bc1877b334f78b007fbc9e25dfa165712ea4725f824072a530683879fd570648cfe20219dde3d6d805cefd203502a8e58600df6ff5023131bd12489e72e3fc01bc55b669d79a54c1c94"}], 0x140}}], 0x3, 0x20004810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0xef6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1e13c2) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x10) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa4) openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) setns(0xc9, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002140), 0x40801, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40043d0d, 0x0) 4.507837446s ago: executing program 3 (id=1665): mmap$IORING_OFF_SQ_RING(0x0, 0xd00001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r3) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x208, 0x20048040}, 0x48010) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8, r4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) r5 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f00000000c0)=0x0) read$eventfd(r5, &(0x7f0000000000), 0x8) socket$netlink(0x10, 0x3, 0xf) io_submit(r6, 0x0, 0x0) mkdirat(r3, &(0x7f0000000080)='./dev\x00', 0x1f7) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000cc0)=ANY=[], 0x3f5, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000005f00)=ANY=[@ANYBLOB="04040aaaaaaaaa"], 0xd) r7 = accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r7, 0x0, 0x48f, &(0x7f0000000100)={0x6, @rand_addr=0x64010102, 0x4e21, 0x3, 'nq\x00', 0x8, 0x8, 0x7c}, 0x2c) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r8, 0xc138fd03, &(0x7f0000001000)="04000000320000000000000038010000") ioctl(r8, 0xc138fd01, &(0x7f0000002000)="0400000032000000000000006c01") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.916353822s ago: executing program 2 (id=1666): mount$nfs4(&(0x7f0000000180)='sysfs\x00', &(0x7f00000001c0)='./mysys/file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="292d26282d212b2df42d5d5d5e2c5e407b252c242c5d5b2d2c2f6465762f6275732f7573622f3030232f30", @ANYRESDEC, @ANYBLOB='R']) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048010) getdents64(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40040, 0x6ab858183a7ef63b) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r7, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) 2.786620259s ago: executing program 2 (id=1667): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0xffffffda, 0x3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r1, 0x2000000, 0x300}, 0x38) syz_emit_vhci(0x0, 0x14) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xf) socket$kcm(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x81101000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x79}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x2000c050}, 0x4000010) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0xffffffff, 0x5, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x6, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x70bd25, 0x4000000, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 2.387161663s ago: executing program 4 (id=1668): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043c07aa"], 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x7e}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) 2.316878792s ago: executing program 0 (id=1669): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x0, 0xae87}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) 2.292010292s ago: executing program 3 (id=1670): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80800, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000280)) (fail_nth: 2) 2.272386078s ago: executing program 0 (id=1671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x400, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x358d1744}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000e32b0000"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x8}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 2.210633751s ago: executing program 4 (id=1672): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x28000) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000080)=0xff) 1.98001017s ago: executing program 4 (id=1673): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff000000001897dfcf09f5b43210697265677561721b000300"/40], 0x40}}, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRESHEX=r1, @ANYRESDEC, @ANYRESHEX=r1], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}}, 0x90) io_setup(0x4, &(0x7f00000014c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = gettid() r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r10, &(0x7f0000000500)=[{&(0x7f00000005c0)="d4", 0x1}], 0x1) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r9}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) finit_module(0xffffffffffffffff, 0x0, 0x1) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0110380dc1100800800034000000002"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_usb_ep_write(r2, 0x81, 0x0, 0x0) read$char_usb(r3, &(0x7f0000000140)=""/153, 0xfffffcbd) 1.890561817s ago: executing program 3 (id=1674): setreuid(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r4, &(0x7f0000000340)=ANY=[], 0x40) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x5}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f00000000c0)=[{r5, 0x9f712fd3135d632f}], 0x1, 0x0, 0x0, 0x0) 1.369110829s ago: executing program 0 (id=1675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000080)={r5, 0x8}, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0xff, 0x8, r6}}], 0x20, 0x4c004}], 0x1, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={r5, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000400)=0x84) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 204.893433ms ago: executing program 3 (id=1676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000080)={r5, 0x8}, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0xff, 0x8, r6}}], 0x20, 0x4c004}], 0x1, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={r5, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000400)=0x84) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 0s ago: executing program 0 (id=1677): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, 0x0, &(0x7f0000000040)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x14fbee}, 0x13, 0x1, 0x3, 0x7, 0x12, 0x4, 0x1b, 0x15, 0x5, 0x402, {0x3, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000200)={0x11, 0x86dd, r7, 0x1, 0x3, 0x6, @remote}, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f00000032c0)={0x10, 0x140e, 0x529, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4044801}, 0x20000000) kernel console output (not intermixed with test programs): 8 comm="syz.0.863" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88af9e0d9 code=0x7ffc0000 [ 344.785334][ T9008] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 344.797580][ T9008] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.3.865: No space for directory leaf checksum. Please run e2fsck -D. [ 344.866241][ T9014] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:0 [ 345.030463][ T30] audit: type=1326 audit(1787688462.129:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.0.863" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88af9e0d9 code=0x7ffc0000 [ 345.059946][ T9008] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.3.865: checksumming directory block 0 [ 345.072597][ T9008] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 345.082900][ T30] audit: type=1326 audit(1787688462.129:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.0.863" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb88af9e0d9 code=0x7ffc0000 [ 345.109476][ T9008] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.3.865: No space for directory leaf checksum. Please run e2fsck -D. [ 345.128515][ T9008] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.3.865: checksumming directory block 0 [ 345.163995][ T9008] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 345.164994][ T9016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9016 comm=syz.1.860 [ 345.174812][ T9008] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.3.865: No space for directory leaf checksum. Please run e2fsck -D. [ 345.202490][ T9008] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.3.865: checksumming directory block 0 [ 345.226831][ T9008] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 345.265308][ T9008] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 345.355006][ T9008] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 346.818048][ T9042] comedi comedi3: pcl818: I/O base address not correctly aligned [ 346.856071][ T9042] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 347.190671][ T9046] jffs2: notice: (9046) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 347.461104][ T29] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 347.565138][ T9054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.641084][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 347.801026][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 347.832821][ T9] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 348.397924][ T29] usb 4-1: not running at top speed; connect to a high speed hub [ 348.423657][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.432116][ T9] usb 5-1: Product: syz [ 348.436294][ T9] usb 5-1: Manufacturer: syz [ 348.440876][ T9] usb 5-1: SerialNumber: syz [ 348.693536][ T9] usb 5-1: config 0 descriptor?? [ 348.758989][ T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 348.943098][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 349.044683][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 349.098612][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 349.206202][ T29] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 349.222060][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 349.222075][ T30] audit: type=1400 audit(1787688467.079:1610): avc: denied { connect } for pid=9052 comm="syz.1.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 349.248342][ T9054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.278285][ T30] audit: type=1400 audit(1787688467.119:1611): avc: denied { bind } for pid=9052 comm="syz.1.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 349.286305][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 349.336301][ T29] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 349.344518][ T29] usb 4-1: can't read configurations, error -71 [ 349.389808][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 349.442853][ T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 349.468636][ T9] usb 5-1: media controller created [ 349.636172][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 349.839205][ T9] usb 5-1: selecting invalid altsetting 3 [ 349.865151][ T9] ttusb2: set interface to alts=3 failed [ 350.312586][ T9] DVB: Unable to find symbol tda10086_attach() [ 350.345762][ T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 350.394849][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 350.422343][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 350.487118][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 350.519701][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 350.578635][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 350.760654][ T9] usb 5-1: USB disconnect, device number 13 [ 351.329738][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 351.492207][ T9072] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:0 [ 352.991047][ T9082] comedi comedi3: pcl818: I/O base address not correctly aligned [ 353.005337][ T9082] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 353.338025][ T9071] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 353.504668][ T9089] syzkaller0: entered promiscuous mode [ 353.512126][ T9089] syzkaller0: entered allmulticast mode [ 353.534265][ T9089] TC_ACT_REPEAT abuse ? [ 353.913362][ T9097] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.891'. [ 354.467966][ T9107] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:0 [ 355.348785][ T30] audit: type=1400 audit(1787688472.839:1612): avc: denied { name_bind } for pid=9113 comm="syz.0.897" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 355.476062][ T9120] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2053 sclass=netlink_xfrm_socket pid=9120 comm=syz.2.899 [ 356.502047][ T30] audit: type=1400 audit(1787688474.359:1613): avc: denied { mounton } for pid=9117 comm="syz.4.898" path="/192/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 356.555778][ T30] audit: type=1400 audit(1787688474.359:1614): avc: denied { read write } for pid=9117 comm="syz.4.898" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 356.579777][ T30] audit: type=1400 audit(1787688474.359:1615): avc: denied { open } for pid=9117 comm="syz.4.898" path="/192/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 356.609616][ T30] audit: type=1400 audit(1787688474.359:1616): avc: denied { ioctl } for pid=9117 comm="syz.4.898" path="/192/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 356.670652][ T9131] netlink: 'syz.2.902': attribute type 12 has an invalid length. [ 357.141642][ T9140] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.904'. [ 358.359450][ T9157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.882153][ T9161] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 359.616951][ T9169] loop2: detected capacity change from 0 to 4095 [ 360.069849][ T9170] Buffer I/O error on dev loop2, logical block 511, async page read [ 360.089371][ T9167] ima: policy update failed [ 360.102508][ T30] audit: type=1802 audit(1787688477.959:1617): pid=9167 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.1.912" res=0 errno=0 [ 360.121487][ T5604] Buffer I/O error on dev loop2, logical block 511, async page read [ 360.143810][ T29] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 360.341029][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 360.353169][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 360.374597][ T29] usb 4-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 360.405853][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.421412][ T29] usb 4-1: Product: syz [ 360.433371][ T29] usb 4-1: Manufacturer: syz [ 360.450279][ T29] usb 4-1: SerialNumber: syz [ 361.492607][ T29] usb 4-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 361.673444][ T9199] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.920'. [ 361.829522][ T29] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 361.853927][ T9201] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.921'. [ 361.904024][ T29] usb 4-1: USB disconnect, device number 14 [ 361.995938][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 364.042399][ T9227] netlink: 60 bytes leftover after parsing attributes in process `syz.3.928'. [ 364.977838][ T9241] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.931'. [ 366.061710][ T30] audit: type=1400 audit(1787688483.909:1618): avc: denied { read } for pid=9245 comm="syz.1.927" path="socket:[33422]" dev="sockfs" ino=33422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 366.096290][ T9248] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 366.696535][ T30] audit: type=1400 audit(1787688484.389:1619): avc: denied { append } for pid=9251 comm="syz.4.935" name="uprobe_events" dev="tracefs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 367.432969][ T30] audit: type=1400 audit(1787688485.289:1620): avc: denied { read } for pid=9261 comm="syz.4.936" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 367.511213][ T30] audit: type=1400 audit(1787688485.289:1621): avc: denied { open } for pid=9261 comm="syz.4.936" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 367.653816][ T30] audit: type=1400 audit(1787688485.509:1622): avc: denied { ioctl } for pid=9261 comm="syz.4.936" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 367.787363][ T30] audit: type=1400 audit(1787688485.509:1623): avc: denied { set_context_mgr } for pid=9261 comm="syz.4.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 367.823211][ T30] audit: type=1400 audit(1787688485.669:1624): avc: denied { write } for pid=9261 comm="syz.4.936" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 368.804503][ T9282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9282 comm=syz.4.940 [ 368.833304][ T9282] netlink: 'syz.4.940': attribute type 3 has an invalid length. [ 368.841622][ T9282] netlink: 'syz.4.940': attribute type 3 has an invalid length. [ 368.999297][ T9278] netlink: 'syz.0.933': attribute type 11 has an invalid length. [ 369.007856][ T9278] netlink: 224 bytes leftover after parsing attributes in process `syz.0.933'. [ 369.060782][ T5599] Bluetooth: hci2: connection err: -111 [ 372.816694][ T30] audit: type=1400 audit(1787688490.669:1625): avc: denied { accept } for pid=9306 comm="syz.3.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 373.022690][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.029957][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.238572][ T30] audit: type=1400 audit(1787688490.989:1626): avc: denied { mount } for pid=9301 comm="syz.4.944" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 373.276386][ T9316] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 374.931048][ T5602] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 375.095102][ T5602] usb 4-1: not running at top speed; connect to a high speed hub [ 375.133770][ T5602] usb 4-1: New USB device found, idVendor=0c0b, idProduct=a109, bcdDevice=1b.26 [ 375.153291][ T5602] usb 4-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 375.174788][ T5602] usb 4-1: config 128 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 375.203438][ T5602] usb 4-1: config 128 interface 0 has no altsetting 0 [ 375.232881][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.255118][ T5602] usb 4-1: Product: І [ 375.266937][ T5602] usb 4-1: Manufacturer: И [ 375.280768][ T5602] usb 4-1: SerialNumber: 쫵卄줶䯇뢔몺̇ጄ蕌ڼ鄨츈 [ 375.746615][ T5602] ums-datafab 4-1:128.0: USB Mass Storage device detected [ 375.789525][ T5602] ums-datafab 4-1:128.0: Quirks match for vid 0c0b pid a109: 1 [ 375.860934][ T5602] ums-sddr55 4-1:128.0: USB Mass Storage device detected [ 376.514778][ T5602] usb 4-1: USB disconnect, device number 15 [ 378.476823][ T30] audit: type=1400 audit(1787688496.329:1627): avc: denied { ioctl } for pid=9378 comm="syz.2.962" path="socket:[34127]" dev="sockfs" ino=34127 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 380.151115][ T5602] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 380.401463][ T5599] Bluetooth: hci4: connection err: -111 [ 380.406927][ T5602] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 380.477289][ T5602] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 380.566250][ T5602] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.646048][ T5602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 380.709278][ T5602] usb 2-1: SerialNumber: syz [ 380.769028][ T9398] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.969'. [ 381.752301][ T9403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.825947][ T9391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.942671][ T9391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.049059][ T9411] netlink: 'syz.2.974': attribute type 39 has an invalid length. [ 382.239722][ T5602] usb 2-1: 0:2 : does not exist [ 382.333191][ T9416] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:0 [ 383.056509][ T5602] usb 2-1: USB disconnect, device number 11 [ 383.183443][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 383.394015][ T9429] macsec1: entered promiscuous mode [ 383.399324][ T9429] macsec1: entered allmulticast mode [ 384.780516][ T9435] lo speed is unknown, defaulting to 1000 [ 384.786556][ T9435] lo speed is unknown, defaulting to 1000 [ 384.792788][ T9435] lo speed is unknown, defaulting to 1000 [ 384.798887][ T9435] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 384.813123][ T9435] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 384.829975][ T9435] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 384.844943][ T9435] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 384.860566][ T9435] lo speed is unknown, defaulting to 1000 [ 384.867370][ T9435] lo speed is unknown, defaulting to 1000 [ 384.873849][ T9435] lo speed is unknown, defaulting to 1000 [ 384.881771][ T9435] lo speed is unknown, defaulting to 1000 [ 384.888227][ T9435] lo speed is unknown, defaulting to 1000 [ 384.973653][ T9440] netlink: 52 bytes leftover after parsing attributes in process `syz.0.981'. [ 385.231278][ T5728] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 385.411637][ T5728] usb 2-1: device descriptor read/64, error -71 [ 385.681270][ T5728] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 385.877202][ T5728] usb 2-1: device descriptor read/64, error -71 [ 385.989413][ T30] audit: type=1400 audit(1787688503.839:1628): avc: denied { bind } for pid=9447 comm="syz.0.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 386.036111][ T30] audit: type=1400 audit(1787688503.869:1629): avc: denied { listen } for pid=9447 comm="syz.0.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 386.066165][ T5728] usb usb2-port1: attempt power cycle [ 386.080146][ T5599] Bluetooth: hci3: connection err: -111 [ 386.218745][ T30] audit: type=1400 audit(1787688504.069:1630): avc: denied { getattr } for pid=9462 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1811 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 386.318763][ T30] audit: type=1400 audit(1787688504.169:1631): avc: denied { read } for pid=9465 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1811 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 386.942349][ T30] audit: type=1400 audit(1787688504.169:1632): avc: denied { open } for pid=9465 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1811 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 386.977522][ T9460] netlink: 60 bytes leftover after parsing attributes in process `syz.3.985'. [ 386.994718][ T5728] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 387.013932][ T30] audit: type=1400 audit(1787688504.859:1633): avc: denied { accept } for pid=9447 comm="syz.0.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 387.061465][ T5728] usb 2-1: device descriptor read/8, error -71 [ 387.102690][ T9472] lo speed is unknown, defaulting to 1000 [ 387.260555][ T30] audit: type=1400 audit(1787688505.109:1634): avc: denied { write } for pid=9459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.321052][ T5728] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 387.334622][ T30] audit: type=1400 audit(1787688505.149:1635): avc: denied { create } for pid=9459 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 387.382818][ T5728] usb 2-1: device descriptor read/8, error -71 [ 387.405262][ T30] audit: type=1400 audit(1787688505.149:1636): avc: denied { write } for pid=9459 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.syzkaller0.link" dev="tmpfs" ino=5627 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 387.504203][ T5728] usb usb2-port1: unable to enumerate USB device [ 387.524353][ T30] audit: type=1400 audit(1787688505.149:1637): avc: denied { append } for pid=9459 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller0.link" dev="tmpfs" ino=5627 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 388.795132][ T9498] netlink: 60 bytes leftover after parsing attributes in process `syz.1.990'. [ 388.826063][ T9502] 9pnet_fd: Insufficient options for proto=fd [ 388.837529][ T9508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.865556][ T9508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.903297][ T9514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.992'. [ 389.250548][ T9508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.580206][ T9508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.615585][ T9523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.989'. [ 389.638101][ T9512] lo speed is unknown, defaulting to 1000 [ 391.040018][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 391.040037][ T30] audit: type=1400 audit(1787688508.889:1696): avc: denied { name_connect } for pid=9538 comm="syz.4.998" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 391.084779][ T30] audit: type=1400 audit(1787688508.939:1697): avc: denied { listen } for pid=9538 comm="syz.4.998" lport=36118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 391.145042][ T30] audit: type=1400 audit(1787688508.969:1698): avc: denied { accept } for pid=9538 comm="syz.4.998" lport=36118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 391.265469][ T9548] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1001'. [ 391.277666][ T9548] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1001'. [ 391.290156][ T9542] binder: 9539:9542 ioctl c0306201 2000000001c0 returned -22 [ 391.401152][ T2163] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 391.440367][ T30] audit: type=1400 audit(1787688509.289:1699): avc: denied { write } for pid=9554 comm="syz.0.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 392.394290][ T29] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 392.435255][ T2163] usb 5-1: unable to get BOS descriptor or descriptor too short [ 392.455062][ T2163] usb 5-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=72.1e [ 392.477028][ T2163] usb 5-1: config 16 has an invalid interface number: 3 but max is 2 [ 392.485181][ T2163] usb 5-1: config 16 has an invalid interface number: 107 but max is 2 [ 392.493541][ T2163] usb 5-1: config 16 has 2 interfaces, different from the descriptor's value: 3 [ 392.503221][ T2163] usb 5-1: config 16 has no interface number 0 [ 392.509373][ T2163] usb 5-1: config 16 has no interface number 1 [ 392.517359][ T2163] usb 5-1: config 16 interface 3 has no altsetting 0 [ 392.524326][ T2163] usb 5-1: config 16 interface 107 has no altsetting 0 [ 392.533791][ T30] audit: type=1326 audit(1787688510.389:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9561 comm="syz.1.1006" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 392.614626][ T30] audit: type=1326 audit(1787688510.389:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9561 comm="syz.1.1006" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 392.614734][ T2163] usb 5-1: string descriptor 0 read error: -22 [ 392.650677][ T30] audit: type=1326 audit(1787688510.389:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9561 comm="syz.1.1006" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 392.678348][ T2163] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.687327][ T30] audit: type=1326 audit(1787688510.389:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9561 comm="syz.1.1006" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 392.719447][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 392.728315][ T29] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 392.743926][ T2163] usb 5-1: unknown number of interfaces: 2 [ 392.763065][ T29] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.780139][ T29] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 392.793593][ T30] audit: type=1326 audit(1787688510.389:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9561 comm="syz.1.1006" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 392.821110][ T29] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 392.833615][ T30] audit: type=1326 audit(1787688510.389:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9561 comm="syz.1.1006" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 392.863708][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.872056][ T29] usb 4-1: Product: syz [ 392.876235][ T29] usb 4-1: Manufacturer: syz [ 392.880817][ T29] usb 4-1: SerialNumber: syz [ 393.187480][ T2163] usb 5-1: USB disconnect, device number 14 [ 393.918540][ T29] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 393.943575][ T29] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 393.968928][ T29] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 394.377699][ T29] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 394.412316][ T29] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 394.440923][ T29] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 394.515084][ T9587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=9587 comm=syz.0.1013 [ 394.558752][ T29] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 394.660380][ T29] usb 4-1: USB disconnect, device number 16 [ 394.762798][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 394.905082][ T9596] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1014'. [ 394.993600][ T9599] lo speed is unknown, defaulting to 1000 [ 395.825068][ T9611] netlink: 'syz.2.1011': attribute type 12 has an invalid length. [ 395.915106][ T9615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9615 comm=syz.4.1019 [ 395.937301][ T9615] netlink: 'syz.4.1019': attribute type 3 has an invalid length. [ 395.946255][ T9615] netlink: 'syz.4.1019': attribute type 3 has an invalid length. [ 396.559526][ T5599] Bluetooth: hci3: connection err: -111 [ 397.795978][ T9625] team0: Device wg0 is of different type [ 397.853605][ T9625] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 398.330762][ T9645] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1031'. [ 398.420634][ T9648] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1029'. [ 398.441527][ T9643] netlink: 'syz.3.1030': attribute type 12 has an invalid length. [ 399.121801][ T9649] lo speed is unknown, defaulting to 1000 [ 400.905599][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 400.905616][ T30] audit: type=1400 audit(1787688518.759:1752): avc: denied { execute } for pid=9674 comm="syz.3.1041" name="file1" dev="ramfs" ino=34683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 400.937668][ T30] audit: type=1400 audit(1787688518.789:1753): avc: denied { execute_no_trans } for pid=9674 comm="syz.3.1041" path="/file1" dev="ramfs" ino=34683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 401.008605][ T9681] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1042'. [ 401.126094][ T9683] netlink: 'syz.2.1043': attribute type 12 has an invalid length. [ 402.215229][ T30] audit: type=1800 audit(1787688520.019:1754): pid=9676 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1041" name="file1" dev="ramfs" ino=34683 res=0 errno=0 [ 403.461530][ T5728] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 403.621630][ T5728] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 403.654989][ T5728] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.681256][ T5728] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 403.700344][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.559607][ T5728] usb 2-1: config 0 descriptor?? [ 404.636012][ T5728] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 404.643432][ T5728] dvb-usb: bulk message failed: -22 (3/0) [ 404.653902][ T5728] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 404.665037][ T5728] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 404.672580][ T5728] usb 2-1: media controller created [ 404.679736][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 404.709548][ T5728] dvb-usb: bulk message failed: -22 (6/0) [ 404.758886][ T5728] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 404.793426][ T5728] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 404.826987][ T9698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.842247][ T5728] dvb-usb: schedule remote query interval to 150 msecs. [ 404.861476][ T5728] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 404.886179][ T9698] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 404.894092][ T9698] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 404.902471][ T9698] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 404.910188][ T9698] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 405.022624][ T5728] dvb-usb: bulk message failed: -22 (1/0) [ 405.031495][ T5728] dvb-usb: error while querying for an remote control event. [ 405.106581][ T29] usb 2-1: USB disconnect, device number 16 [ 405.200048][ T29] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 405.332705][ T9720] netlink: 'syz.0.1055': attribute type 12 has an invalid length. [ 405.721674][ T9732] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1053'. [ 405.851386][ T29] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 406.051712][ T29] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 406.072857][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.104087][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.127515][ T29] usb 4-1: config 0 descriptor?? [ 407.270132][ T30] audit: type=1400 audit(1787688525.119:1755): avc: denied { bind } for pid=9728 comm="syz.3.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 407.309608][ T29] usbhid 4-1:0.0: can't add hid device: -71 [ 407.320081][ T29] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 407.346180][ T29] usb 4-1: USB disconnect, device number 17 [ 408.222421][ T29] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 408.379307][ T29] usb 4-1: device descriptor read/64, error -71 [ 409.110676][ T9758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.221045][ T29] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 409.673826][ T9766] netlink: 'syz.1.1067': attribute type 12 has an invalid length. [ 410.065336][ T9773] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.120344][ T30] audit: type=1400 audit(1787688527.969:1756): avc: denied { write } for pid=9772 comm="syz.4.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 410.256386][ T30] audit: type=1400 audit(1787688528.019:1757): avc: denied { read } for pid=9772 comm="syz.4.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 411.086309][ T30] audit: type=1400 audit(1787688528.229:1758): avc: denied { ioctl } for pid=9771 comm="syz.1.1069" path="socket:[36959]" dev="sockfs" ino=36959 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 411.175936][ T9782] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1071'. [ 411.387196][ T30] audit: type=1400 audit(1787688528.229:1759): avc: denied { write } for pid=9771 comm="syz.1.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 413.259323][ T9799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.801644][ T9802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.814725][ T9802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.890782][ T9802] Scaler: ================= START STATUS ================= [ 413.923073][ T9802] Scaler: ================== END STATUS ================== [ 414.228301][ T9810] netlink: 'syz.3.1079': attribute type 12 has an invalid length. [ 415.467340][ T5599] Bluetooth: hci3: connection err: -111 [ 416.533158][ T9836] ip6erspan0: entered allmulticast mode [ 416.915311][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'. [ 416.936556][ T9849] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1089'. [ 416.963964][ T9849] netlink: 'syz.2.1089': attribute type 11 has an invalid length. [ 417.028199][ T30] audit: type=1400 audit(1787688534.879:1760): avc: denied { write } for pid=9852 comm="syz.0.1090" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 417.443404][ T9860] netlink: 'syz.2.1092': attribute type 12 has an invalid length. [ 417.478377][ T9862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.516259][ T9862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.588736][ T9862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.643405][ T9862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.218390][ T9864] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 418.335392][ T9873] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1086'. [ 418.609796][ T9872] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 419.120371][ T29] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 419.589574][ T29] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 419.614547][ T29] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 419.643767][ T5728] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 419.668778][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 419.697684][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 210, changing to 11 [ 419.716899][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 57472, setting to 1024 [ 419.732369][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.742711][ T29] usb 2-1: Product: syz [ 419.746962][ T29] usb 2-1: Manufacturer: syz [ 419.752243][ T29] usb 2-1: SerialNumber: syz [ 419.757250][ T30] audit: type=1400 audit(1787688537.609:1761): avc: denied { create } for pid=9887 comm="syz.0.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 419.780544][ T29] usb 2-1: config 0 descriptor?? [ 419.789031][ T29] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 419.821972][ T5728] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 419.845218][ T5728] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.861894][ T5728] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 419.879779][ T5728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 419.890432][ T5728] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 419.920808][ T9891] syz_tun: entered allmulticast mode [ 419.933783][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.945504][ T5728] usb 4-1: Product: syz [ 420.048220][ T9898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1100'. [ 420.323756][ T9872] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1095'. [ 420.387095][ T29] usb 2-1: USB disconnect, device number 17 [ 420.783723][ T9909] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:0 [ 420.906538][ T5728] usb 4-1: Manufacturer: syz [ 420.911250][ T5728] usb 4-1: SerialNumber: syz [ 420.980691][ T5728] usb 4-1: config 0 descriptor?? [ 421.566238][ T9911] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1101'. [ 422.148886][ T9907] lo speed is unknown, defaulting to 1000 [ 422.204091][ T5728] usb 4-1: USB disconnect, device number 20 [ 422.261410][ T29] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 423.312591][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 423.327741][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.345555][ T9932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1111'. [ 423.380450][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.447438][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 423.478641][ T29] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 423.515828][ T29] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 423.544217][ T29] usb 5-1: can't read configurations, error -71 [ 423.552214][ T30] audit: type=1400 audit(1787688541.399:1762): avc: denied { ioctl } for pid=9933 comm="syz.3.1113" path="/dev/sg0" dev="devtmpfs" ino=769 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 424.044865][ T9943] netlink: 'syz.1.1108': attribute type 3 has an invalid length. [ 424.053446][ T9943] netlink: 'syz.1.1108': attribute type 3 has an invalid length. [ 424.804137][ T9936] can: request_module (can-proto-5) failed. [ 426.756532][ T9957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.766996][ T9957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.701001][ T30] audit: type=1400 audit(1787688546.539:1763): avc: denied { read } for pid=9956 comm="syz.0.1116" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 428.875704][ T30] audit: type=1400 audit(1787688546.549:1764): avc: denied { open } for pid=9956 comm="syz.0.1116" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 429.914752][ T9980] syz_tun: Device is already in use. [ 431.686112][ T9996] comedi comedi3: pcl818: I/O base address not correctly aligned [ 433.699074][T10028] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 433.710324][T10027] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 433.795184][T10030] overlayfs: overlapping lowerdir path [ 434.533146][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.540013][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 436.166207][ T5599] Bluetooth: hci1: connection err: -111 [ 438.950147][T10065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10065 comm=syz.0.1138 [ 438.970541][T10065] netlink: 'syz.0.1138': attribute type 3 has an invalid length. [ 438.978755][T10065] netlink: 'syz.0.1138': attribute type 3 has an invalid length. [ 439.133581][ T30] audit: type=1400 audit(1787688556.989:1765): avc: denied { watch watch_reads } for pid=10069 comm="syz.2.1145" path="/" dev="ramfs" ino=37665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 439.304992][T10076] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 439.385315][T10080] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 439.385315][T10080] [ 439.447486][T10080] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 439.481694][T10080] CIFS: Attempting to mount //127.0.0.1/share [ 439.555888][T10081] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1147'. [ 439.640079][T10081] lo speed is unknown, defaulting to 1000 [ 439.651142][ T2163] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 439.782513][ T2163] usb 5-1: device descriptor read/64, error -71 [ 440.031837][ T2163] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 440.071203][T10089] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1148'. [ 440.208515][T10080] CIFS: VFS: Error connecting to socket. Aborting operation. [ 440.221590][T10080] CIFS: VFS: cifs_mount failed w/return code = -4 [ 440.281165][ T2163] usb 5-1: device descriptor read/64, error -71 [ 441.040016][ T2163] usb usb5-port1: attempt power cycle [ 441.401026][ T2163] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 441.441852][ T2163] usb 5-1: device descriptor read/8, error -71 [ 442.461281][ T2163] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 442.482310][ T30] audit: type=1800 audit(1787688560.329:1766): pid=10070 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1145" name="bus" dev="ramfs" ino=37666 res=0 errno=0 [ 443.574703][ T2163] usb 5-1: device not accepting address 20, error -71 [ 443.589915][ T2163] usb usb5-port1: unable to enumerate USB device [ 443.691511][T10115] SELinux: truncated policydb string identifier [ 443.737282][T10115] SELinux: failed to load policy [ 443.978596][T10119] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 444.300641][ T30] audit: type=1400 audit(1787688562.149:1767): avc: denied { create } for pid=10125 comm="syz.2.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 444.332587][ T30] audit: type=1400 audit(1787688562.189:1768): avc: denied { sys_admin } for pid=10125 comm="syz.2.1159" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 444.409280][T10127] PKCS7: Unknown OID: [4] 0.0 [ 444.414215][T10127] PKCS7: Only support pkcs7_signedData type [ 444.839136][T10128] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1152'. [ 444.931589][ T30] audit: type=1400 audit(1787688562.779:1769): avc: denied { create } for pid=10136 comm="syz.0.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 444.970325][T10123] lo speed is unknown, defaulting to 1000 [ 444.988946][ T30] audit: type=1400 audit(1787688562.809:1770): avc: denied { bind } for pid=10136 comm="syz.0.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 445.238307][T10145] ceph: No mds server is up or the cluster is laggy [ 445.969113][ T30] audit: type=1400 audit(1787688563.819:1771): avc: denied { write } for pid=10135 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.375420][T10174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10174 comm=syz.3.1164 [ 447.405631][T10174] netlink: 'syz.3.1164': attribute type 3 has an invalid length. [ 447.416364][T10174] netlink: 'syz.3.1164': attribute type 3 has an invalid length. [ 447.875241][ T30] audit: type=1400 audit(1787688565.729:1772): avc: denied { write } for pid=10166 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.252936][ T30] audit: type=1400 audit(1787688566.099:1773): avc: denied { create } for pid=10185 comm="syz.3.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 448.332903][ T30] audit: type=1400 audit(1787688566.139:1774): avc: denied { create } for pid=10194 comm="syz.1.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 448.365721][T10198] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1170'. [ 448.412603][ T30] audit: type=1400 audit(1787688566.149:1775): avc: denied { write } for pid=10194 comm="syz.1.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 448.486168][ T30] audit: type=1326 audit(1787688566.249:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10194 comm="syz.1.1170" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 448.651466][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 448.843768][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 449.026160][T10212] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.292823][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 449.331058][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 449.382651][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 449.408470][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.426766][ T9] usb 4-1: Product: syz [ 449.446676][ T9] usb 4-1: Manufacturer: syz [ 449.458124][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 449.458138][ T30] audit: type=1400 audit(1787688567.309:1840): avc: denied { write } for pid=10214 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.465810][ T9] usb 4-1: SerialNumber: syz [ 449.574150][T10199] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 450.191854][ T9] port100 4-1:1.0: NFC: Could not get supported command types [ 450.232298][ T30] audit: type=1400 audit(1787688568.089:1841): avc: denied { connect } for pid=10225 comm="syz.1.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 450.479317][ T30] audit: type=1400 audit(1787688568.329:1842): avc: denied { write } for pid=10185 comm="syz.3.1169" name="functions" dev="configfs" ino=10275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 450.507970][ T9] usb 4-1: USB disconnect, device number 21 [ 450.521955][ T30] audit: type=1400 audit(1787688568.359:1843): avc: denied { write } for pid=10185 comm="syz.3.1169" name="uncompressed" dev="configfs" ino=38981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 450.552141][ T30] audit: type=1400 audit(1787688568.359:1844): avc: denied { write } for pid=10185 comm="syz.3.1169" name="header" dev="configfs" ino=38980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 450.575408][ T30] audit: type=1400 audit(1787688568.359:1845): avc: denied { write } for pid=10185 comm="syz.3.1169" name="h" dev="configfs" ino=38991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 450.966445][ T30] audit: type=1400 audit(1787688568.359:1846): avc: denied { write } for pid=10185 comm="syz.3.1169" name="h" dev="configfs" ino=38991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 451.547460][ T30] audit: type=1400 audit(1787688569.399:1847): avc: denied { write } for pid=10242 comm="syz.3.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 451.580760][T10241] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1183'. [ 451.645367][ T30] audit: type=1400 audit(1787688569.399:1848): avc: denied { read } for pid=10242 comm="syz.3.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 452.979398][T10260] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1188'. [ 453.552901][ T30] audit: type=1400 audit(1787688571.409:1849): avc: denied { listen } for pid=10275 comm="syz.3.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 453.665803][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1193'. [ 453.674992][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1193'. [ 454.520806][T10287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.477717][T10308] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1201'. [ 456.437076][T10316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10316 comm=syz.1.1203 [ 456.458596][T10316] netlink: 'syz.1.1203': attribute type 3 has an invalid length. [ 456.469156][T10316] netlink: 'syz.1.1203': attribute type 3 has an invalid length. [ 457.147459][T10322] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1205'. [ 459.900737][T10332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.442126][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 460.442144][ T30] audit: type=1400 audit(1787688578.299:1853): avc: denied { map } for pid=10333 comm="syz.0.1198" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 460.880712][T10342] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1212'. [ 461.006970][T10338] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.082345][T10356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1215'. [ 464.188175][ T30] audit: type=1400 audit(1787688581.779:1854): avc: denied { bind } for pid=10354 comm="syz.4.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 464.538773][T10367] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 464.761401][ T30] audit: type=1400 audit(1787688582.619:1855): avc: denied { validate_trans } for pid=10364 comm="syz.1.1218" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 465.083143][T10378] ip6gretap1: entered allmulticast mode [ 465.124301][T10378] batman_adv: batadv0: Adding interface: ip6gretap1 [ 465.211705][T10378] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.333338][T10378] batman_adv: batadv0: Interface activated: ip6gretap1 [ 465.405903][T10381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1222'. [ 465.699665][T10384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10384 comm=syz.2.1223 [ 465.726953][T10384] netlink: 'syz.2.1223': attribute type 3 has an invalid length. [ 465.734873][T10384] netlink: 'syz.2.1223': attribute type 3 has an invalid length. [ 465.794365][T10387] capability: warning: `syz.0.1216' uses 32-bit capabilities (legacy support in use) [ 465.909271][T10390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1224'. [ 467.297995][ T30] audit: type=1400 audit(1787688585.149:1856): avc: denied { cmd } for pid=10392 comm="iou-wrk-10393" path="socket:[39482]" dev="sockfs" ino=39482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 467.715286][T10416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.920525][T10418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1228'. [ 468.239801][T10416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.016817][T10429] 9p: Bad value for 'rfdno' [ 469.398835][T10430] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1232'. [ 469.414076][ T2163] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 469.528743][T10439] lo speed is unknown, defaulting to 1000 [ 469.610986][ T2163] usb 5-1: Using ep0 maxpacket: 32 [ 469.638153][T10434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.680214][T10434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.747725][T10434] binder: 10433:10434 ioctl c0306201 200000000040 returned -14 [ 470.755976][T10451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10451 comm=syz.0.1237 [ 470.998648][T10452] key id 00000004 not found [ 472.533490][T10451] netlink: 'syz.0.1237': attribute type 3 has an invalid length. [ 472.572302][ T2163] usb 5-1: unable to get BOS descriptor or descriptor too short [ 472.599895][T10451] netlink: 'syz.0.1237': attribute type 3 has an invalid length. [ 472.719919][ T2163] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 472.747561][ T2163] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 472.768160][ T2163] usb 5-1: can't read configurations, error -71 [ 472.849973][T10463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1242'. [ 473.311434][ T30] audit: type=1400 audit(1787688591.159:1857): avc: denied { connect } for pid=10462 comm="syz.3.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 473.656610][T10471] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 473.689392][ T30] audit: type=1400 audit(1787688591.539:1858): avc: denied { bind } for pid=10472 comm="syz.4.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 473.770309][ T30] audit: type=1400 audit(1787688591.619:1859): avc: denied { bind } for pid=10472 comm="syz.4.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 474.050063][T10485] comedi comedi3: pcl818: I/O base address not correctly aligned [ 475.010405][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'. [ 477.316040][T10517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1255'. [ 477.994291][T10524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.026137][T10524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.991258][T10530] fuse: fd is not a fuse device [ 479.885686][ T30] audit: type=1400 audit(1787688597.739:1860): avc: denied { write } for pid=10537 comm="syz.1.1265" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 480.001042][ T30] audit: type=1400 audit(1787688597.739:1861): avc: denied { ioctl } for pid=10537 comm="syz.1.1265" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 480.994227][ T30] audit: type=1400 audit(1787688598.849:1862): avc: denied { write } for pid=10546 comm="syz.3.1256" name="instances" dev="tracefs" ino=3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 481.032073][ T30] audit: type=1400 audit(1787688598.849:1863): avc: denied { add_name } for pid=10546 comm="syz.3.1256" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 481.053443][ T30] audit: type=1400 audit(1787688598.849:1864): avc: denied { create } for pid=10546 comm="syz.3.1256" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 481.105844][T10550] kAFS: Can only specify source 'none' with -o dyn [ 481.289671][ T30] audit: type=1400 audit(1787688599.139:1865): avc: denied { read } for pid=10555 comm="syz.4.1270" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 481.492282][T10568] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1271'. [ 481.768116][ T30] audit: type=1400 audit(1787688599.139:1866): avc: denied { open } for pid=10555 comm="syz.4.1270" path="net:[4026532807]" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 481.870463][T10560] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 481.964402][T10569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10569 comm=syz.0.1269 [ 482.117383][T10558] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 482.154043][T10558] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 484.108138][ T5599] Bluetooth: hci1: command 0x0406 tx timeout [ 484.165726][T10558] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 484.194456][T10558] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 484.254772][T10558] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 484.260760][T10558] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 484.274175][T10558] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 484.280252][T10558] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 486.147359][ T5599] Bluetooth: hci1: command 0x0406 tx timeout [ 486.221565][ T5599] Bluetooth: hci2: command 0x0c1a tx timeout [ 486.302434][ T5610] Bluetooth: hci4: command 0x0406 tx timeout [ 486.302433][ T5599] Bluetooth: hci3: command 0x0406 tx timeout [ 486.935995][T10624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1282'. [ 488.137817][ T5599] Bluetooth: hci1: connection err: -111 [ 488.723519][ T5599] Bluetooth: hci2: command 0x0c1a tx timeout [ 488.723559][ T5596] Bluetooth: hci3: command 0x0406 tx timeout [ 488.731640][ T5599] Bluetooth: hci4: command 0x0406 tx timeout [ 488.750073][ T30] audit: type=1400 audit(1787688606.149:1867): avc: denied { getopt } for pid=10628 comm="syz.3.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 488.810623][ T30] audit: type=1400 audit(1787688606.149:1868): avc: denied { write } for pid=10628 comm="syz.3.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 488.831045][ T9] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 488.856934][T10637] netlink: 'syz.2.1287': attribute type 2 has an invalid length. [ 488.866356][ T30] audit: type=1400 audit(1787688606.719:1869): avc: denied { bind } for pid=10636 comm="syz.2.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 488.887159][ T30] audit: type=1400 audit(1787688606.739:1870): avc: denied { listen } for pid=10636 comm="syz.2.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 488.910334][ T30] audit: type=1326 audit(1787688606.759:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.1.1286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 488.937522][ T30] audit: type=1326 audit(1787688606.759:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.1.1286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 488.967856][ T30] audit: type=1326 audit(1787688606.759:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.1.1286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 488.997512][ T30] audit: type=1326 audit(1787688606.759:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.1.1286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 489.024906][ T30] audit: type=1326 audit(1787688606.759:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.1.1286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 489.072854][ T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 489.101412][ T30] audit: type=1326 audit(1787688606.759:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.1.1286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 489.137261][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.167377][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 489.220110][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.255190][ T9] usb 5-1: config 0 descriptor?? [ 489.265273][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 489.272691][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 489.293122][T10641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.304883][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 489.319780][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 489.327847][ T9] usb 5-1: media controller created [ 489.334221][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 489.336431][T10641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.362372][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 489.369572][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 489.381992][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20 [ 489.394788][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 489.402339][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 489.497753][ T9] usb 5-1: USB disconnect, device number 23 [ 489.522667][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 489.571240][ T5728] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 489.701037][ T5728] usb 4-1: device descriptor read/64, error -71 [ 490.603095][T10641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.627038][T10641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.711089][ T5728] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 490.861056][ T5728] usb 4-1: device descriptor read/64, error -71 [ 491.390615][ T5728] usb usb4-port1: attempt power cycle [ 491.801020][ T5728] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 492.406504][T10666] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1295'. [ 492.639437][ T5728] usb 4-1: device descriptor read/8, error -71 [ 492.818231][T10676] FAULT_INJECTION: forcing a failure. [ 492.818231][T10676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.832101][T10676] CPU: 1 UID: 0 PID: 10676 Comm: syz.3.1298 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.832130][T10676] Tainted: [L]=SOFTLOCKUP [ 492.832136][T10676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 492.832145][T10676] Call Trace: [ 492.832151][T10676] [ 492.832157][T10676] dump_stack_lvl+0x100/0x190 [ 492.832189][T10676] should_fail_ex.cold+0x5/0xa [ 492.832215][T10676] _copy_from_user+0x2e/0xd0 [ 492.832242][T10676] __sys_bpf+0x2f5/0x4a30 [ 492.832275][T10676] ? __pfx___sys_bpf+0x10/0x10 [ 492.832300][T10676] ? find_held_lock+0x2b/0x80 [ 492.832322][T10676] ? get_pid_task+0xfc/0x250 [ 492.832343][T10676] ? get_pid_task+0xfc/0x250 [ 492.832371][T10676] ? find_held_lock+0x2b/0x80 [ 492.832399][T10676] ? rcu_read_lock_any_held+0x6a/0x90 [ 492.832423][T10676] ? find_held_lock+0x2b/0x80 [ 492.832444][T10676] ? ksys_write+0x190/0x250 [ 492.832467][T10676] ? ksys_write+0x190/0x250 [ 492.832510][T10676] ? fput+0x7c/0x100 [ 492.832527][T10676] ? ksys_write+0x1ac/0x250 [ 492.832555][T10676] ? __x64_sys_bpf+0xce/0x140 [ 492.832580][T10676] __x64_sys_bpf+0xce/0x140 [ 492.832605][T10676] ? do_syscall_64+0xae/0x790 [ 492.832628][T10676] do_syscall_64+0x123/0x790 [ 492.832652][T10676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.832671][T10676] RIP: 0033:0x7fd5c339e0d9 [ 492.832687][T10676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.832704][T10676] RSP: 002b:00007fd5c4220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 492.832721][T10676] RAX: ffffffffffffffda RBX: 00007fd5c3625fa0 RCX: 00007fd5c339e0d9 [ 492.832735][T10676] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000012 [ 492.832745][T10676] RBP: 00007fd5c4220090 R08: 0000000000000000 R09: 0000000000000000 [ 492.832756][T10676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.832766][T10676] R13: 00007fd5c3626038 R14: 00007fd5c3625fa0 R15: 00007fff076ed158 [ 492.832791][T10676] [ 493.043967][T10678] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:0 [ 493.802444][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 493.802459][ T30] audit: type=1326 audit(1787688611.659:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.1.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 493.842537][ T30] audit: type=1326 audit(1787688611.659:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.1.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 493.869838][ T30] audit: type=1326 audit(1787688611.689:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.1.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 493.903398][ T30] audit: type=1326 audit(1787688611.689:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.1.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 493.931272][ T30] audit: type=1326 audit(1787688611.689:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.1.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 493.958007][ T2163] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 493.966532][ T30] audit: type=1326 audit(1787688611.689:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.1.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 493.995573][ T30] audit: type=1326 audit(1787688611.689:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.1.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 494.029421][ T30] audit: type=1326 audit(1787688611.689:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.1.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 494.056341][ T30] audit: type=1326 audit(1787688611.699:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.1.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 494.084218][ T30] audit: type=1326 audit(1787688611.699:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.1.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb0d9e0d9 code=0x7ffc0000 [ 494.160994][ T2163] usb 5-1: Using ep0 maxpacket: 8 [ 494.166757][ T2163] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 494.227029][ T2163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 494.238265][ T2163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.250344][ T2163] usb 5-1: config 0 descriptor?? [ 494.476024][ T2163] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 494.610613][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'. [ 494.787512][ T5728] usb 5-1: USB disconnect, device number 24 [ 495.349478][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 496.059126][T10734] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:0 [ 496.093980][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.100406][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 497.692993][T10747] dummy0: entered promiscuous mode [ 497.699223][T10747] dummy0: entered allmulticast mode [ 499.129900][T10762] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1320'. [ 499.279505][T10761] comedi comedi3: pcl818: I/O base address not correctly aligned [ 499.350337][T10761] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 499.601101][T10769] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1322'. [ 500.918859][T10799] xt_policy: output policy not valid in PREROUTING and INPUT [ 500.963550][T10801] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1330'. [ 500.978759][T10793] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1331'. [ 501.092590][T10786] lo speed is unknown, defaulting to 1000 [ 501.573127][ T5728] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 501.751258][ T5728] usb 4-1: Using ep0 maxpacket: 32 [ 501.788899][ T5728] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 501.842979][ T5728] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 501.900730][ T5728] usb 4-1: config 0 has no interface number 0 [ 501.915134][ T5728] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 502.064515][ T5728] usb 4-1: config 0 interface 1 has no altsetting 0 [ 502.227247][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.255260][ T5728] usb 4-1: Product: syz [ 502.272574][ T5728] usb 4-1: Manufacturer: syz [ 502.289076][ T5728] usb 4-1: SerialNumber: syz [ 502.305155][T10812] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1335'. [ 502.334546][ T5728] usb 4-1: config 0 descriptor?? [ 502.534583][T10825] netlink: 'syz.0.1339': attribute type 1 has an invalid length. [ 502.562690][ T5728] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 502.577327][ T5728] cx231xx 4-1:0.1: Failed to read PCB config [ 502.750995][ T2163] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 502.873642][ T5728] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 502.884444][T10825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.895873][ T5728] usb 4-1: USB disconnect, device number 26 [ 503.127197][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 503.127225][ T30] audit: type=1400 audit(1787688620.979:2035): avc: denied { listen } for pid=10824 comm="syz.0.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 503.158767][T10825] netlink: 'syz.0.1339': attribute type 10 has an invalid length. [ 503.167513][T10828] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 503.196337][ T520] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 503.219239][T10825] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1339'. [ 503.312367][ T2163] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 503.342389][ T2163] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 503.362072][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 503.381819][ T2163] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.425083][ T2163] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 503.461781][ T2163] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 503.478600][ T2163] usb 2-1: Manufacturer: syz [ 503.622293][ T2163] usb 2-1: config 0 descriptor?? [ 504.193014][ T30] audit: type=1326 audit(1787688621.849:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.4.1344" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062839e0d9 code=0x7fc00000 [ 504.543624][ T2163] usbhid 2-1:0.0: can't add hid device: -71 [ 504.549668][ T2163] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 504.565599][ T2163] usb 2-1: USB disconnect, device number 18 [ 504.583691][T10851] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1345'. [ 504.640762][ T30] audit: type=1326 audit(1787688621.859:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.4.1344" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f062839e0d9 code=0x7fc00000 [ 504.745283][T10855] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1348'. [ 504.766765][T10853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.847272][T10853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.908371][T10860] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1349'. [ 506.011006][ T5728] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 506.304400][T10865] lo speed is unknown, defaulting to 1000 [ 506.342545][ T5728] usb 2-1: Using ep0 maxpacket: 32 [ 506.541058][ T5602] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 506.720982][ T5602] usb 5-1: Using ep0 maxpacket: 32 [ 506.764740][ T5728] usb 2-1: unable to get BOS descriptor or descriptor too short [ 506.797426][ T5728] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 506.833910][ T5602] usb 5-1: unable to get BOS descriptor or descriptor too short [ 506.858167][ T5728] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 506.883974][ T5602] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 506.894714][ T5728] usb 2-1: can't read configurations, error -71 [ 506.921495][ T5602] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 506.948257][ T5602] usb 5-1: can't read configurations, error -71 [ 508.630191][T10896] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1358'. [ 508.856926][T10905] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1359'. [ 509.051777][T10903] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 509.480987][ T5728] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 509.595846][T10918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1364'. [ 509.618655][T10922] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1365'. [ 509.671086][ T30] audit: type=1400 audit(1787688627.519:2038): avc: denied { read } for pid=10930 comm="syz.3.1368" name="/" dev="configfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 509.702846][ T5728] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 509.734959][ T5728] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 509.742042][T10919] lo speed is unknown, defaulting to 1000 [ 509.784535][ T30] audit: type=1400 audit(1787688627.519:2039): avc: denied { read open } for pid=10930 comm="syz.3.1368" path="/" dev="configfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 509.795127][T10933] lo speed is unknown, defaulting to 1000 [ 509.825944][ T5728] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 509.898925][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.925381][ T5728] usb 5-1: Product: syz [ 509.940258][ T5728] usb 5-1: Manufacturer: syz [ 509.960989][ T5728] usb 5-1: SerialNumber: syz [ 510.245042][T10917] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 510.316644][ T5728] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 510.370667][ T5728] usb 5-1: USB disconnect, device number 27 [ 510.430142][ T5728] usblp0: removed [ 510.803276][T10946] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 511.758730][T10957] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1374'. [ 511.961045][T10959] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 513.230401][T10975] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 513.237156][T10975] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 513.268880][T10975] vhci_hcd vhci_hcd.0: Device attached [ 513.287254][ C1] Unknown status report in ack skb [ 513.308237][T10977] vhci_hcd: connection closed [ 513.312856][ T49] vhci_hcd vhci_hcd.3: stop threads [ 513.355167][ T49] vhci_hcd vhci_hcd.3: release socket [ 513.376674][ T49] vhci_hcd vhci_hcd.3: disconnect device [ 513.395983][T10982] netlink: 'syz.2.1383': attribute type 12 has an invalid length. [ 513.441919][ T29] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 514.183633][T10992] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1385'. [ 514.411079][ T30] audit: type=1400 audit(1787688632.259:2040): avc: denied { write } for pid=10997 comm="syz.1.1382" name="target" dev="configfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 514.471019][ T30] audit: type=1400 audit(1787688632.299:2041): avc: denied { write } for pid=10997 comm="syz.1.1382" name="target" dev="configfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 514.517803][ T30] audit: type=1400 audit(1787688632.299:2042): avc: denied { rmdir } for pid=10997 comm="syz.1.1382" name="usb_gadget" dev="configfs" ino=42076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 514.781075][ T29] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 514.942174][ T29] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 514.959150][ T29] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 514.967696][ T29] usb 4-1: config 1 has no interface number 0 [ 514.975796][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.987276][ T29] usb 4-1: Product: syz [ 514.991648][ T29] usb 4-1: Manufacturer: syz [ 514.996311][ T29] usb 4-1: SerialNumber: syz [ 515.249502][T11017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.287423][T11017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.500987][ T24] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 515.657280][T11017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.713476][T11017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.725486][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 515.780528][ T24] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 515.843390][ T24] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 515.913371][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 515.955327][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.049171][ T24] usb 5-1: config 0 descriptor?? [ 516.493026][ T5599] Bluetooth: hci2: connection err: -111 [ 517.071919][ T24] wacom 0003:056A:00DE.0005: Unknown device_type for 'HID 056a:00de'. Assuming pen. [ 517.196461][ T24] wacom 0003:056A:00DE.0005: hidraw0: USB HID v80.03 Joystick [HID 056a:00de] on usb-dummy_hcd.4-1/input0 [ 518.242450][T11036] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1399'. [ 518.463646][T11040] udevd[11040]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 518.501655][ T24] input: Wacom Bamboo 16FG 4x5 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00DE.0005/input/input21 [ 518.616111][T11045] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.694284][ T24] usb 5-1: USB disconnect, device number 28 [ 519.392659][ T30] audit: type=1400 audit(1787688637.249:2043): avc: denied { bind } for pid=11049 comm="syz.0.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 519.626069][T11059] ima: policy update failed [ 519.701150][ T30] audit: type=1400 audit(1787688637.479:2044): avc: denied { mount } for pid=11059 comm="syz.3.1407" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 519.746281][ T30] audit: type=1802 audit(1787688637.479:2045): pid=11059 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.1407" res=0 errno=0 [ 519.768704][ T30] audit: type=1400 audit(1787688637.499:2046): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 520.887104][ T29] usb 4-1: 3:1 : does not exist [ 520.898071][ T29] usb 4-1: 3:2 : does not exist [ 520.938060][T11071] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1401'. [ 520.980196][T11072] lo speed is unknown, defaulting to 1000 [ 521.049724][T11075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.067079][T11075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.350265][T11079] loop2: detected capacity change from 0 to 4095 [ 521.473954][T11081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1405'. [ 521.486476][T11079] Buffer I/O error on dev loop2, logical block 511, async page read [ 521.497633][ T5604] Buffer I/O error on dev loop2, logical block 511, async page read [ 522.349617][T11088] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1415'. [ 522.861231][T11095] fuse: Unknown parameter ' qode' [ 522.869719][T11097] syzkaller0: entered promiscuous mode [ 522.875371][T11097] syzkaller0: entered allmulticast mode [ 523.131047][ T24] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 523.396524][T11111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1421'. [ 523.415202][ T24] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 523.427695][ T24] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 524.346696][ T24] usb 2-1: config 0 has no interface number 0 [ 524.366466][ T24] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid maxpacket 6176, setting to 64 [ 524.412371][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.432925][ T24] usb 2-1: Product: syz [ 524.453854][ T24] usb 2-1: Manufacturer: syz [ 524.464164][ T24] usb 2-1: SerialNumber: syz [ 524.485179][ T24] usb 2-1: config 0 descriptor?? [ 524.628317][T11122] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 524.681011][ T29] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 524.753351][ T24] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 524.777093][ T24] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 524.795474][ T24] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 524.811362][ T24] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 524.831717][ T24] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 524.843492][ T29] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 524.868889][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.899442][ T29] usb 5-1: config 0 has no interfaces? [ 524.907174][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.930972][ T29] usb 5-1: config 0 descriptor?? [ 526.782037][ T5602] usb 2-1: USB disconnect, device number 21 [ 526.800283][ T5602] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 526.810727][ T5602] keyspan 2-1:0.133: device disconnected [ 526.842692][ T29] usb 5-1: USB disconnect, device number 29 [ 527.064291][T11146] overlay: filesystem on ./file0 not supported as upperdir [ 528.321640][T11164] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1439'. [ 528.927010][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 529.034444][T11166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 530.147909][ T30] audit: type=1400 audit(1787688647.999:2047): avc: denied { bind } for pid=11173 comm="syz.0.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 530.230067][T11176] x_tables: duplicate underflow at hook 1 [ 530.237059][ T30] audit: type=1400 audit(1787688648.089:2048): avc: denied { read } for pid=11175 comm="syz.3.1429" dev="sockfs" ino=43271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 533.227370][T11193] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1445'. [ 533.367945][T11194] netlink: 91 bytes leftover after parsing attributes in process `syz.3.1445'. [ 533.391092][T11204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.400003][T11202] veth1_to_bond: entered promiscuous mode [ 533.400227][T11194] netlink: 91 bytes leftover after parsing attributes in process `syz.3.1445'. [ 533.407685][T11204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.501989][T11199] dummy_hcd dummy_hcd.0: remove, state 1 [ 533.508841][T11199] usb usb1: USB disconnect, device number 1 [ 533.514880][T11199] usb 1-1: USB disconnect, device number 3 [ 533.568545][T11199] dummy_hcd dummy_hcd.0: stopped [ 533.573601][T11199] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 533.589957][T11202] veth1_to_bond: entered allmulticast mode [ 533.630113][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 533.789300][T11202] veth1_to_bond (unregistering): left promiscuous mode [ 533.798883][T11202] veth1_to_bond (unregistering): left allmulticast mode [ 533.818615][T11202] bond0: (slave bond_slave_1): Releasing backup interface [ 534.721605][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 534.784374][T11222] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1453'. [ 534.897308][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 534.922429][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 534.945812][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 534.971190][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.003739][T11211] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 535.034078][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 535.306459][ T5602] usb 5-1: USB disconnect, device number 30 [ 537.311074][ T30] audit: type=1400 audit(1787688655.139:2049): avc: denied { shutdown } for pid=11237 comm="syz.0.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 538.625743][T11263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.637208][T11263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.890447][T11223] lo speed is unknown, defaulting to 1000 [ 540.377283][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1468'. [ 540.849037][T11290] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 541.006464][T11290] syz_tun: left allmulticast mode [ 541.023553][T11290] syz_tun: left promiscuous mode [ 541.040125][T11290] bridge0: port 3(syz_tun) entered disabled state [ 541.074823][T11298] FAULT_INJECTION: forcing a failure. [ 541.074823][T11298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.081524][T11290] bridge_slave_0: left allmulticast mode [ 541.093612][T11298] CPU: 1 UID: 0 PID: 11298 Comm: syz.4.1478 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.093636][T11298] Tainted: [L]=SOFTLOCKUP [ 541.093642][T11298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 541.093652][T11298] Call Trace: [ 541.093658][T11298] [ 541.093664][T11298] dump_stack_lvl+0x100/0x190 [ 541.093695][T11298] should_fail_ex.cold+0x5/0xa [ 541.093720][T11298] _copy_from_user+0x2e/0xd0 [ 541.093742][T11298] get_timespec64+0x8d/0x240 [ 541.093770][T11298] ? __pfx_get_timespec64+0x10/0x10 [ 541.093799][T11298] ? __mutex_unlock_slowpath+0x35d/0x930 [ 541.093826][T11298] get_itimerspec64+0x41/0x60 [ 541.093854][T11298] __x64_sys_timerfd_settime+0x15f/0x280 [ 541.093887][T11298] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 541.093917][T11298] ? fput+0x7c/0x100 [ 541.093945][T11298] do_syscall_64+0x123/0x790 [ 541.093969][T11298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.093987][T11298] RIP: 0033:0x7f062839e0d9 [ 541.094001][T11298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.094019][T11298] RSP: 002b:00007f062922e028 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 541.094037][T11298] RAX: ffffffffffffffda RBX: 00007f0628625fa0 RCX: 00007f062839e0d9 [ 541.094048][T11298] RDX: 00002000000001c0 RSI: 0000000000000003 RDI: 0000000000000003 [ 541.094059][T11298] RBP: 00007f062922e090 R08: 0000000000000000 R09: 0000000000000000 [ 541.094069][T11298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.094079][T11298] R13: 00007f0628626038 R14: 00007f0628625fa0 R15: 00007ffee4060108 [ 541.094104][T11298] [ 541.114378][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1475'. [ 541.213213][T11290] bridge_slave_0: left promiscuous mode [ 541.415958][T11290] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.776493][T11290] bridge_slave_1: left allmulticast mode [ 541.832770][T11290] bridge_slave_1: left promiscuous mode [ 541.868990][T11290] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.974181][T11290] bond0: (slave bond_slave_0): Releasing backup interface [ 542.014636][T11290] bond0: (slave bond_slave_1): Releasing backup interface [ 542.060704][T11290] team0: Port device team_slave_0 removed [ 542.095812][T11290] team0: Port device team_slave_1 removed [ 542.113469][T11290] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 542.172836][ T29] syz5: Port: 1 Link DOWN [ 542.504378][T11319] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 544.076756][T11335] ubi0: attaching mtd0 [ 544.089301][T11336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.128870][T11336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.173695][T11335] ubi0: scanning is finished [ 544.193017][ T5599] Bluetooth: hci3: connection err: -111 [ 544.260607][T11335] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 544.941167][T11335] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 548.332649][T11359] overlayfs: statfs failed on './file0' [ 548.519610][ T30] audit: type=1400 audit(1787688667.366:2050): avc: denied { kexec_image_load } for pid=11369 comm="syz.1.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 548.684900][T11372] fuse: Bad value for 'fd' [ 553.115275][T11427] comedi comedi3: pcl818: I/O base address not correctly aligned [ 553.760037][ T30] audit: type=1400 audit(1787688672.606:2051): avc: denied { call } for pid=11433 comm="syz.4.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 553.760349][T11436] binder: 11433:11436 unknown command 0 [ 554.222247][ T30] audit: type=1400 audit(1787688672.606:2052): avc: denied { transfer } for pid=11433 comm="syz.4.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 554.271608][T11436] binder: 11433:11436 ioctl c0306201 2000000001c0 returned -22 [ 554.628652][T11429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.212342][T11463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11463 comm=syz.1.1524 [ 556.238547][T11463] netlink: 'syz.1.1524': attribute type 3 has an invalid length. [ 556.248466][T11463] netlink: 'syz.1.1524': attribute type 3 has an invalid length. [ 557.342790][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.352533][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 558.934783][T11492] faux_driver vgem: [drm] Unknown color mode 1024; guessing buffer size. [ 559.321626][T11498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1532'. [ 559.374290][T11492] kAFS: unparsable volume name [ 559.621662][ T29] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 559.713088][ T30] audit: type=1400 audit(1787688678.556:2053): avc: denied { nlmsg_write } for pid=11483 comm="syz.0.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 559.868186][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 559.888744][ T30] audit: type=1400 audit(1787688678.556:2054): avc: denied { audit_write } for pid=11483 comm="syz.0.1530" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 559.940975][ T29] usb 5-1: not running at top speed; connect to a high speed hub [ 559.972082][ T29] usb 5-1: New USB device found, idVendor=0f11, idProduct=10a0, bcdDevice=d2.eb [ 559.997696][ T30] audit: type=1107 audit(1787688678.596:2055): pid=11483 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 560.020064][ T29] usb 5-1: config 6 has an invalid descriptor of length 108, skipping remainder of the config [ 561.078335][ T29] usb 5-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 561.120182][ T29] usb 5-1: string descriptor 0 read error: -22 [ 561.126539][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.491013][ T5602] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 561.641874][ T5602] usb 2-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=8b.8e [ 561.693439][ T5602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.718220][ T5602] usb 2-1: Product: syz [ 561.749528][ T5602] usb 2-1: Manufacturer: syz [ 561.951779][ T5602] usb 2-1: SerialNumber: syz [ 562.713550][ T5728] usb 5-1: USB disconnect, device number 31 [ 563.377197][T11514] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 564.279703][ T5602] gspca_main: touptek-2.14.0 probing 0547:6801 [ 564.367116][ T5602] usb 2-1: USB disconnect, device number 22 [ 564.559939][ T30] audit: type=1400 audit(1787688683.406:2056): avc: denied { map } for pid=11530 comm="syz.1.1540" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 564.641542][T11533] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:0 [ 565.674317][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'. [ 566.377247][T11551] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11551 comm=syz.1.1545 [ 567.231263][T11556] FAULT_INJECTION: forcing a failure. [ 567.231263][T11556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.244477][T11556] CPU: 0 UID: 0 PID: 11556 Comm: syz.4.1547 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.244506][T11556] Tainted: [L]=SOFTLOCKUP [ 567.244512][T11556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 567.244524][T11556] Call Trace: [ 567.244530][T11556] [ 567.244537][T11556] dump_stack_lvl+0x100/0x190 [ 567.244568][T11556] should_fail_ex.cold+0x5/0xa [ 567.244594][T11556] _copy_from_user+0x2e/0xd0 [ 567.244616][T11556] copy_msghdr_from_user+0x9f/0x4c0 [ 567.244648][T11556] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 567.244686][T11556] ___sys_sendmsg+0x106/0x1e0 [ 567.244712][T11556] ? __pfx____sys_sendmsg+0x10/0x10 [ 567.244736][T11556] ? get_pid_task+0x106/0x250 [ 567.244768][T11556] ? find_held_lock+0x2b/0x80 [ 567.244806][T11556] __sys_sendmsg+0x160/0x210 [ 567.244827][T11556] ? __pfx___sys_sendmsg+0x10/0x10 [ 567.244860][T11556] do_syscall_64+0x123/0x790 [ 567.244884][T11556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.244904][T11556] RIP: 0033:0x7f062839e0d9 [ 567.244919][T11556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.244936][T11556] RSP: 002b:00007f062920d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.244955][T11556] RAX: ffffffffffffffda RBX: 00007f0628626090 RCX: 00007f062839e0d9 [ 567.244967][T11556] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 567.244978][T11556] RBP: 00007f062920d090 R08: 0000000000000000 R09: 0000000000000000 [ 567.244988][T11556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.244996][T11556] R13: 00007f0628626128 R14: 00007f0628626090 R15: 00007ffee4060108 [ 567.245020][T11556] [ 567.432849][T11556] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1547'. [ 568.230087][T11568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1543'. [ 569.438572][T11573] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1554'. [ 569.763839][ T30] audit: type=1400 audit(1787688688.616:2057): avc: denied { map } for pid=11580 comm="syz.4.1549" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 570.243572][T11587] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 571.128284][T11581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1549'. [ 572.164422][T11603] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 572.752641][ T30] audit: type=1400 audit(1787688691.016:2058): avc: denied { append } for pid=11592 comm="syz.3.1559" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 572.909931][T11608] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1565'. [ 573.946494][ T30] audit: type=1400 audit(1787688692.746:2059): avc: denied { unlink } for pid=11616 comm="syz.4.1569" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 574.065771][T11625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11625 comm=syz.0.1563 [ 574.689631][T11628] lo speed is unknown, defaulting to 1000 [ 575.813617][ T5599] Bluetooth: hci1: command 0x0406 tx timeout [ 576.019632][T11641] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1576'. [ 576.545194][T11651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1564'. [ 576.605256][T11652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=11652 comm=syz.1.1577 [ 577.192721][T11656] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1579'. [ 577.337957][T11667] comedi comedi3: pcl818: I/O base address not correctly aligned [ 577.705478][T11679] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65313 sclass=netlink_xfrm_socket pid=11679 comm=syz.2.1584 [ 577.825732][T11681] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.1583'. [ 577.827153][ T5599] Bluetooth: hci1: command 0x0406 tx timeout [ 579.161169][T11699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11699 comm=syz.1.1586 [ 579.292831][T11685] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 579.306527][T11685] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 579.313054][T11685] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 579.319302][T11685] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 580.311004][ T5610] Bluetooth: hci1: command 0x0406 tx timeout [ 580.688219][T11723] comedi comedi3: pcl818: I/O base address not correctly aligned [ 580.894236][T11726] overlayfs: failed to resolve './cgroup': -2 [ 580.947745][ T30] audit: type=1326 audit(1787688699.786:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.0.1596" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88af9e0d9 code=0x7ffc0000 [ 580.994405][ T30] audit: type=1326 audit(1787688699.796:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.0.1596" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88af9e0d9 code=0x7ffc0000 [ 581.053972][ T30] audit: type=1326 audit(1787688699.796:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.0.1596" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb88af9e0d9 code=0x7ffc0000 [ 581.112763][ T30] audit: type=1326 audit(1787688699.796:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.0.1596" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88af9e0d9 code=0x7ffc0000 [ 581.169011][ T30] audit: type=1326 audit(1787688699.796:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.0.1596" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88af9e0d9 code=0x7ffc0000 [ 581.222095][ T30] audit: type=1326 audit(1787688699.796:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.0.1596" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb88af9e0d9 code=0x7ffc0000 [ 581.250484][ T30] audit: type=1326 audit(1787688699.796:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.0.1596" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88af9e0d9 code=0x7ffc0000 [ 581.280530][ T30] audit: type=1326 audit(1787688699.796:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.0.1596" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88af9e0d9 code=0x7ffc0000 [ 581.329712][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1590'. [ 581.456517][ T5602] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 581.464459][ T5610] Bluetooth: hci3: command 0x0406 tx timeout [ 581.465956][ T5599] Bluetooth: hci4: command 0x0406 tx timeout [ 581.470495][ T5610] Bluetooth: hci2: command 0x0c1a tx timeout [ 582.149087][ T30] audit: type=1326 audit(1787688699.796:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.0.1596" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb88af9e0d9 code=0x7ffc0000 [ 582.177615][ T30] audit: type=1326 audit(1787688699.796:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.0.1596" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88af9e0d9 code=0x7ffc0000 [ 582.231282][ T5602] usb 5-1: Using ep0 maxpacket: 8 [ 582.238487][ T5602] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 582.268478][ T5602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.344491][ T5602] pvrusb2: Hardware description: Terratec Grabster AV400 [ 582.384274][ T5602] pvrusb2: ********** [ 582.406288][ T5602] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 582.467292][ T5602] pvrusb2: Important functionality might not be entirely working. [ 582.513083][ T5602] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 582.548225][ T5602] pvrusb2: ********** [ 582.581130][ T2355] pvrusb2: Invalid write control endpoint [ 583.140184][T11749] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 583.829638][ T2355] pvrusb2: Invalid write control endpoint [ 583.852695][ T2355] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 583.884120][ T2355] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 583.900781][ T2355] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 583.924283][T11753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11753 comm=syz.3.1604 [ 583.940116][ T2355] pvrusb2: Device being rendered inoperable [ 583.956640][ T2355] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 583.980146][ T2355] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 584.005369][ T2355] pvrusb2: Attached sub-driver cx25840 [ 584.011376][ T2355] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 584.021902][ T2355] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 584.101033][T11750] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 584.116673][T11750] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 584.137133][T11750] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 584.154621][T11750] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 584.265927][T11772] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 584.451479][T11780] lo speed is unknown, defaulting to 1000 [ 584.613263][ T29] usb 5-1: USB disconnect, device number 32 [ 585.182528][ T5610] Bluetooth: hci1: command 0x0406 tx timeout [ 586.142770][ T5610] Bluetooth: hci4: command 0x0406 tx timeout [ 586.142780][ T5599] Bluetooth: hci2: command 0x0c1a tx timeout [ 586.221246][ T5610] Bluetooth: hci3: command 0x0406 tx timeout [ 586.572031][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 586.572048][ T30] audit: type=1400 audit(1787688705.426:2080): avc: denied { write } for pid=11797 comm="syz.3.1615" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 586.863541][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1615'. [ 586.879138][T11801] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.3.1615: No space for directory leaf checksum. Please run e2fsck -D. [ 586.895318][T11801] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.3.1615: checksumming directory block 0 [ 586.909428][T11801] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 586.922504][T11801] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.3.1615: No space for directory leaf checksum. Please run e2fsck -D. [ 586.938127][T11801] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.3.1615: checksumming directory block 0 [ 586.952769][T11801] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 586.968299][T11801] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.3.1615: No space for directory leaf checksum. Please run e2fsck -D. [ 587.031327][T11801] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.3.1615: checksumming directory block 0 [ 587.084410][T11801] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 587.108133][T11801] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.3.1615: No space for directory leaf checksum. Please run e2fsck -D. [ 587.237873][T11801] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.3.1615: checksumming directory block 0 [ 587.252164][T11801] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 587.262001][T11801] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 587.271892][T11801] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 588.377330][T11820] FAULT_INJECTION: forcing a failure. [ 588.377330][T11820] name failslab, interval 1, probability 0, space 0, times 0 [ 588.390107][T11820] CPU: 1 UID: 0 PID: 11820 Comm: syz.4.1617 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.390136][T11820] Tainted: [L]=SOFTLOCKUP [ 588.390142][T11820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 588.390152][T11820] Call Trace: [ 588.390158][T11820] [ 588.390165][T11820] dump_stack_lvl+0x100/0x190 [ 588.390196][T11820] should_fail_ex.cold+0x5/0xa [ 588.390222][T11820] should_failslab+0xc2/0x120 [ 588.390241][T11820] __kmalloc_noprof+0xfc/0x840 [ 588.390265][T11820] ? rcu_is_watching+0x13/0xc0 [ 588.390287][T11820] ? tomoyo_realpath_from_path+0xb6/0x690 [ 588.390316][T11820] tomoyo_realpath_from_path+0xb6/0x690 [ 588.390346][T11820] tomoyo_path_number_perm+0x23c/0x580 [ 588.390363][T11820] ? tomoyo_path_number_perm+0x22e/0x580 [ 588.390385][T11820] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 588.390404][T11820] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 588.390451][T11820] ? find_held_lock+0x2b/0x80 [ 588.390473][T11820] ? hook_file_ioctl_common+0x140/0x440 [ 588.390504][T11820] ? __fget_files+0x21f/0x3d0 [ 588.390526][T11820] security_file_ioctl+0xd3/0x230 [ 588.390549][T11820] __x64_sys_ioctl+0xb7/0x210 [ 588.390576][T11820] do_syscall_64+0x123/0x790 [ 588.390602][T11820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.390620][T11820] RIP: 0033:0x7f062839e0d9 [ 588.390635][T11820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.390651][T11820] RSP: 002b:00007f06291ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 588.390668][T11820] RAX: ffffffffffffffda RBX: 00007f0628626180 RCX: 00007f062839e0d9 [ 588.390680][T11820] RDX: 00002000000001c0 RSI: 00000000c040565f RDI: 0000000000000007 [ 588.390691][T11820] RBP: 00007f06291ec090 R08: 0000000000000000 R09: 0000000000000000 [ 588.390700][T11820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.390710][T11820] R13: 00007f0628626218 R14: 00007f0628626180 R15: 00007ffee4060108 [ 588.390735][T11820] [ 588.390757][T11820] ERROR: Out of memory at tomoyo_realpath_from_path. [ 590.044680][T11838] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 590.462224][T11839] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 591.700473][ T30] audit: type=1400 audit(1787688710.516:2081): avc: denied { write } for pid=11841 comm="syz.4.1626" name="subsystems" dev="configfs" ino=2691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 591.774629][T11843] nvmet: adding nsid 1 to subsystem testsubsys [ 591.787284][ T30] audit: type=1400 audit(1787688710.626:2082): avc: denied { write } for pid=11841 comm="syz.4.1626" name="namespaces" dev="configfs" ino=45507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 591.864534][T11852] 0x000000000006-0x000000020000 : "" [ 591.888732][T11852] ftl_cs: FTL header corrupt! [ 592.220339][ T30] audit: type=1400 audit(1787688710.636:2083): avc: denied { write } for pid=11841 comm="syz.4.1626" name="ports" dev="configfs" ino=2692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 592.325256][ T30] audit: type=1400 audit(1787688710.966:2084): avc: denied { write } for pid=11841 comm="syz.4.1626" name="subsystems" dev="configfs" ino=44763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 592.359295][ T5793] nvmet: connect request for invalid subsystem testsubsys! [ 592.388555][T11851] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 592.391072][ T30] audit: type=1400 audit(1787688711.036:2085): avc: denied { write } for pid=11841 comm="syz.4.1626" name="subsystems" dev="configfs" ino=44763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 594.224638][T11868] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 594.248613][ T29] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 594.301069][ T5610] Bluetooth: hci2: connection err: -111 [ 594.453073][ T29] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 594.486602][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.508838][ T29] usb 2-1: config 0 descriptor?? [ 594.536295][ T29] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 595.176582][T11864] xt_cgroup: invalid path, errno=-2 [ 595.311123][T11893] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 596.074045][T11896] syzkaller0: entered promiscuous mode [ 596.109474][T11896] syzkaller0: entered allmulticast mode [ 596.146010][T11898] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 596.685162][ T29] gp8psk: usb out operation failed. [ 596.694105][ T29] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 596.710142][ T29] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 596.800622][ T29] usb 2-1: USB disconnect, device number 23 [ 596.841472][T11904] comedi comedi3: pcl818: I/O base address not correctly aligned [ 596.962955][T11904] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 597.198766][T11907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11907 comm=syz.1.1641 [ 597.219352][T11907] netlink: 'syz.1.1641': attribute type 3 has an invalid length. [ 597.228931][T11907] netlink: 'syz.1.1641': attribute type 3 has an invalid length. [ 598.190710][ T30] audit: type=1400 audit(1787688717.036:2086): avc: denied { create } for pid=11915 comm="syz.1.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 598.217023][ T30] audit: type=1400 audit(1787688717.066:2087): avc: denied { bind } for pid=11915 comm="syz.1.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 598.242060][ T30] audit: type=1400 audit(1787688717.066:2088): avc: denied { read } for pid=11915 comm="syz.1.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 598.263969][T11919] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 598.915044][T11926] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 598.938084][T11924] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1646'. [ 599.149287][ T5610] Bluetooth: hci2: connection err: -111 [ 601.239919][ T29] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 601.397211][T11952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11952 comm=syz.4.1653 [ 601.411621][ T29] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 601.423923][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.433530][ T29] usb 2-1: Product: syz [ 601.437721][ T29] usb 2-1: Manufacturer: syz [ 601.444780][ T29] usb 2-1: SerialNumber: syz [ 601.561026][T11948] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 601.570727][T11948] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 601.578377][T11948] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 601.585364][T11948] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 602.704518][ T5610] Bluetooth: hci1: command 0x0406 tx timeout [ 602.767930][ T29] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 602.801020][ T29] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 602.824225][ T29] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 602.851031][ T29] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 602.853002][T11969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1658'. [ 602.872046][ T29] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 602.902955][ T29] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 603.014393][ T29] usb 2-1: USB disconnect, device number 24 [ 603.031277][T11977] fuse: fd is not a fuse device [ 603.775602][T11981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1659'. [ 603.809053][ T5599] Bluetooth: hci4: command 0x0406 tx timeout [ 603.809488][ T5596] Bluetooth: hci2: command 0x0c1a tx timeout [ 603.816686][ T5599] Bluetooth: hci3: command 0x0406 tx timeout [ 603.841872][T11969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11969 comm=syz.4.1658 [ 604.922839][T12002] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1661'. [ 605.910944][T11983] Bluetooth: hci3: command 0x0406 tx timeout [ 606.130610][T11983] Bluetooth: hci2: connection err: -111 [ 607.841865][T12024] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 607.850232][T12026] FAULT_INJECTION: forcing a failure. [ 607.850232][T12026] name failslab, interval 1, probability 0, space 0, times 0 [ 607.867149][T12026] CPU: 0 UID: 0 PID: 12026 Comm: syz.3.1670 Tainted: G L syzkaller #0 PREEMPT(full) [ 607.867180][T12026] Tainted: [L]=SOFTLOCKUP [ 607.867187][T12026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 607.867203][T12026] Call Trace: [ 607.867210][T12026] [ 607.867217][T12026] dump_stack_lvl+0x100/0x190 [ 607.867250][T12026] should_fail_ex.cold+0x5/0xa [ 607.867276][T12026] should_failslab+0xc2/0x120 [ 607.867297][T12026] __kmalloc_noprof+0xfc/0x840 [ 607.867325][T12026] ? tomoyo_encode2+0xfb/0x3c0 [ 607.867353][T12026] tomoyo_encode2+0xfb/0x3c0 [ 607.867380][T12026] tomoyo_encode+0x29/0x50 [ 607.867401][T12026] tomoyo_realpath_from_path+0x18c/0x690 [ 607.867431][T12026] tomoyo_path_number_perm+0x23c/0x580 [ 607.867450][T12026] ? tomoyo_path_number_perm+0x22e/0x580 [ 607.867471][T12026] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 607.867519][T12026] ? find_held_lock+0x2b/0x80 [ 607.867541][T12026] ? hook_file_ioctl_common+0x140/0x440 [ 607.867573][T12026] ? __fget_files+0x21f/0x3d0 [ 607.867594][T12026] security_file_ioctl+0xd3/0x230 [ 607.867618][T12026] __x64_sys_ioctl+0xb7/0x210 [ 607.867645][T12026] do_syscall_64+0x123/0x790 [ 607.867670][T12026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.867689][T12026] RIP: 0033:0x7fd5c339e0d9 [ 607.867705][T12026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.867722][T12026] RSP: 002b:00007fd5c4220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.867739][T12026] RAX: ffffffffffffffda RBX: 00007fd5c3625fa0 RCX: 00007fd5c339e0d9 [ 607.867751][T12026] RDX: 0000200000000280 RSI: 00000000c004ae0a RDI: 0000000000000003 [ 607.867761][T12026] RBP: 00007fd5c4220090 R08: 0000000000000000 R09: 0000000000000000 [ 607.867771][T12026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.867780][T12026] R13: 00007fd5c3626038 R14: 00007fd5c3625fa0 R15: 00007fff076ed158 [ 607.867806][T12026] [ 607.867823][T12026] ERROR: Out of memory at tomoyo_realpath_from_path. [ 608.109488][T12031] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1673'. [ 608.199706][T12033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1671'. [ 608.582698][ T29] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 608.800254][ T5728] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 608.898356][T12041] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 609.661862][ T5728] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 609.746692][ T5728] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 609.771688][ T5728] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 609.791166][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.806493][T12030] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 609.824315][ T29] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 609.835369][ T5728] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 609.852751][ T29] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 609.951429][ T29] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 609.961901][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 609.970959][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26232, setting to 64 [ 610.043352][ T29] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 610.062961][ T29] usb 5-1: Product: syz [ 610.071267][ T29] usb 5-1: Manufacturer: syz [ 610.521362][ T25] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 610.533460][ T25] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 610.541880][ T25] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0H Tainted: G L syzkaller #0 PREEMPT(full) [ 610.552746][ T25] Tainted: [L]=SOFTLOCKUP [ 610.557067][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 610.567155][ T25] Workqueue: events_highpri f_midi_in_work [ 610.572981][ T25] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 610.578201][ T25] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 2b 12 2f fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 610.597817][ T25] RSP: 0018:ffffc900001f7a08 EFLAGS: 00010006 [ 610.603893][ T25] RAX: dffffc0000000000 RBX: ffff88805683e510 RCX: 0000000000000001 [ 610.611867][ T25] RDX: 000000000000000c RSI: ffffffff87dc1205 RDI: 0000000000000060 [ 610.619842][ T25] RBP: ffff8880275600e0 R08: 0000000000000005 R09: 0000000000000005 [ 610.627900][ T25] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888027560c00 [ 610.635869][ T25] R13: ffff88805683e500 R14: ffff8880275600d8 R15: 0000000000000000 [ 610.643856][ T25] FS: 0000000000000000(0000) GS:ffff888123c79000(0000) knlGS:0000000000000000 [ 610.652789][ T25] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 610.659356][ T25] CR2: 0000557099f248b8 CR3: 000000002cf1d000 CR4: 00000000003526f0 [ 610.667310][ T25] Call Trace: [ 610.670570][ T25] [ 610.673488][ T25] usb_ep_queue+0xfa/0x3c0 [ 610.677905][ T25] f_midi_in_work+0x9b0/0x1580 [ 610.682678][ T25] ? __pfx_f_midi_in_work+0x10/0x10 [ 610.687876][ T25] ? process_one_work+0x906/0x1b10 [ 610.692980][ T25] ? process_one_work+0x906/0x1b10 [ 610.698085][ T25] process_one_work+0xac7/0x1b10 [ 610.703025][ T25] ? irqentry_exit+0x24d/0xa10 [ 610.707778][ T25] ? __pfx_process_one_work+0x10/0x10 [ 610.713179][ T25] ? __pfx_f_midi_in_work+0x10/0x10 [ 610.718392][ T25] worker_thread+0x5ef/0xe50 [ 610.722997][ T25] ? kthread+0x13a/0x450 [ 610.727271][ T25] ? __pfx_worker_thread+0x10/0x10 [ 610.732411][ T25] kthread+0x373/0x450 [ 610.736487][ T25] ? __pfx_kthread+0x10/0x10 [ 610.741071][ T25] ret_from_fork+0x730/0xd60 [ 610.745648][ T25] ? __pfx_ret_from_fork+0x10/0x10 [ 610.750743][ T25] ? __switch_to+0x800/0x10f0 [ 610.755406][ T25] ? __pfx_kthread+0x10/0x10 [ 610.759998][ T25] ret_from_fork_asm+0x1a/0x30 [ 610.764760][ T25] [ 610.767766][ T25] Modules linked in: [ 610.771647][ T25] ---[ end trace 0000000000000000 ]--- [ 610.777082][ T25] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 610.782270][ T25] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 2b 12 2f fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 610.801877][ T25] RSP: 0018:ffffc900001f7a08 EFLAGS: 00010006 [ 610.807943][ T25] RAX: dffffc0000000000 RBX: ffff88805683e510 RCX: 0000000000000001 [ 610.815895][ T25] RDX: 000000000000000c RSI: ffffffff87dc1205 RDI: 0000000000000060 [ 610.823844][ T25] RBP: ffff8880275600e0 R08: 0000000000000005 R09: 0000000000000005 [ 610.831794][ T25] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888027560c00 [ 610.839745][ T25] R13: ffff88805683e500 R14: ffff8880275600d8 R15: 0000000000000000 [ 610.847702][ T25] FS: 0000000000000000(0000) GS:ffff888123c79000(0000) knlGS:0000000000000000 [ 610.856612][ T25] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 610.863183][ T25] CR2: 0000557099f248b8 CR3: 000000002cf1d000 CR4: 00000000003526f0 [ 610.871140][ T25] Kernel panic - not syncing: Fatal exception [ 610.877386][ T25] Kernel Offset: disabled [ 610.881696][ T25] Rebooting in 86400 seconds..