last executing test programs: 4m30.033330696s ago: executing program 4 (id=10): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040d80402c000000000872ef539388f1cea00803209040000010300000009210001223500070581035b5b17fa6fd76071e9861192550df3635dd73d198ffeb29917a265c602423a83385db3849b4f4dd4a3d63f3632a2c09b015847858fcc840ab3e40d7bc59a762154f879013e7e4a6304e7a72908873e775c45390fc3c6037f3d"], 0x0) syz_usb_connect$uac2(0x3, 0xf0, &(0x7f0000001400)=ANY=[@ANYBLOB="12010003000000201e0400304000010203010902de0003010b4004080b0201010c20080904000000010120000924010300083b000109240702030005010008240a81000040020b240901ffff01d78a075b0b240d06000005000002000b24070502000400000300090401000001022000090401010101022000f3df7f0b080004000710102401037f03020000000166de0000090d240201080165012c769a10650a240201200209ff724f09050109200000040108250140308102000904020000010220000904020101010220000924020103040602cf09240201092281ed0609058209400001400608250102006aff03"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x0, 0xf0, 0x401, 0x3, 0x2d8ff63f, 0x4, 0xb, 0x7, 0x4, 0x3, 0xff, 0x6, 0x5, 0x7, 0x7, 0xd], 0x0, 0x2a80}) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000040)=0x8, 0x4) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) close(0x3) ioctl$KVM_RUN(r4, 0xae80, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r6, 0x0, &(0x7f0000000040)={{}, {r7, r8+10000000}}, &(0x7f0000000180)) r9 = syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0) syz_usb_ep_write(r9, 0x81, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0022350000000600ff0901a10085110902150026ff0075089502810285210903150026ff0075089501810285910904150026ff0075089501e000c0"], 0x0}, 0x0) 4m27.042951706s ago: executing program 4 (id=23): sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) syz_usb_connect(0x3, 0x3b9, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902a70301ab00000209046d000c27dae20009050402ff"], 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0x560c89bb) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x4}]) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x20) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2a}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r5, @ANYBLOB="290e29bd7000fbdbdf252700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e31000000240032"], 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001080)={0x1, 0x7, 0x0, 0x0, 0x10000}) bpf$BPF_LINK_CREATE_XDP(0x9, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x37}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r7) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES16=r8], 0x2c}}, 0x18) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb12bb20f462bb28}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r8, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004058}, 0x4) 4m22.675376496s ago: executing program 4 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='TH', 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000180009002bbd7000000000001c140000fe00000100000000050b00000b000000"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, r3, 0x6}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000180)={0x80000, 0x0, {[0x7, 0x3, 0x100000000, 0x7fff, 0xd61, 0x5, 0x8, 0x6]}}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040814) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x9, 0x1, 0x77f, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r8, r9, r10, 0x0, &(0x7f00000000c0)) 4m21.474672476s ago: executing program 4 (id=32): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES32=r2], 0x50) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a02) poll(&(0x7f0000000140)=[{r3, 0x4010}], 0x1, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x658080, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r4 = timerfd_create(0x5, 0x800) timerfd_gettime(r4, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/export_features\x00', 0x0, 0x0) socket(0x200000000000011, 0x80000, 0x101) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r6, &(0x7f0000000140), 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008004) dup2(0xffffffffffffffff, r0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) 4m20.954804282s ago: executing program 4 (id=37): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000100008b}, 0x0) fcntl$dupfd(r0, 0x0, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x842, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000080), 0x0) r3 = getpgid(r2) sched_rr_get_interval(r3, &(0x7f0000000000)) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x44d14000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) openat$kvm(0xffffffffffffff9c, 0x0, 0x101201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, 0x0, 0x22000054) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) 4m20.31237498s ago: executing program 4 (id=38): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x4007, @fd_index=0x1, 0x2, 0xfffffffffffffffd, 0x10000, 0x8, 0x1, {0x1}}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)=""/152, 0x98}], 0x2) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) (async) syz_usb_connect(0x2, 0x62, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601e20302000100060006092403050503060581092403060103040505072404", @ANYRESDEC], 0x0) 4m20.129735265s ago: executing program 32 (id=38): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x4007, @fd_index=0x1, 0x2, 0xfffffffffffffffd, 0x10000, 0x8, 0x1, {0x1}}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)=""/152, 0x98}], 0x2) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) (async) syz_usb_connect(0x2, 0x62, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601e20302000100060006092403050503060581092403060103040505072404", @ANYRESDEC], 0x0) 4m3.571476559s ago: executing program 2 (id=104): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0xd, 0xee, {0xee, 0xb, "c6e8144884175aeb1759333397404dcc272a135061cb323d2a8966be5d0d71a9cc29f3eb7f39eb4b8fe1edae2b6fa59647ee792a5a1fdf566689d90a562269656f70e21d02a975d5a55453c9b0f4825bed84d334c920b1633d53b8daa5458ef4d914e4ff4a197fc738b39098e81fe16a838ea36737fd48e1346532c20d53fe61a7e0c14aca5d18f5bea9ebdcc37b25cca29f693e31e201d7e0262a9d64b5af70cc814104a5a44f846cb294c7b6e8148ffbe57bb436237286552f1a887cdd607dc502e094eda22d6c04e4c19f373577d3b22d13f6b29fc56cb20f9355aacb47e73d22242828b3ffdba72fb80e"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000fa2000000978390353f3b1aa73d6fcf6561c176aae34fca559e8555ccc1401d344ab4e66eb992fe9bee542ef93aba47f1d08ab9600e8021994ca570134e88fa7bb7f3ba8d04803dd162998343db4b95e05637caf01833d359bce5a020b4a76e5ed5dcff701f89d0ba816f1e6cd71e1996adbafd4f09d2f2dcef9a7d89737bcb0d9062a3bc4f6a38286c17ead3d46a33aa6b8993ba8065e67cc426fc7fa300165ed10b"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000002c0)={0x20, 0x81, 0x3, 'fq3'}, &(0x7f0000000300)={0x20, 0x82, 0x1, 'K'}, &(0x7f0000000340)={0x20, 0x83, 0x2, "b5c1"}, &(0x7f0000000380)={0x20, 0x84, 0x4, "e17eeb40"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "943fad"}}) 3m58.433375017s ago: executing program 2 (id=116): socket$kcm(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ff) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) mount(0x0, &(0x7f00000001c0)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/vs/svc_lfactor\x00', 0x2, 0x0) write$tcp_congestion(r1, 0x0, 0x0) 3m57.559221816s ago: executing program 2 (id=119): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r1, &(0x7f0000000000)=""/121, 0x79) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000200)={0x1, 0x1, @raw_data=[0x5, 0x8, 0x9, 0x8, 0x8, 0x80f3349, 0x0, 0x8, 0x1, 0xffffffff, 0x200004, 0x47ff, 0x1c, 0x400, 0x7628, 0x9]}) 3m56.489059701s ago: executing program 2 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, 0x0, 0x0, 0x2, 0xc4, &(0x7f0000000140)=""/196, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f0000000840), &(0x7f0000000280)=@udp=r2}, 0x20) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12102) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004700080008000000010000802f0600000000000027821bc89bed86df0b0f686fb09c00081d1856da810298140b9d212c50a979ce4d763118097d918372814ea9933e964e1969da8981539e8c5f9f0d263ac8b946205c991e319d48e1285d071293c2c11226673b3277b8"], 0x15f) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f00000000c0)="01", 0x1, 0x0, 0x0, 0x2}]) r7 = syz_clone(0xa00000, &(0x7f0000000040)="cfb3b7f4b5fdd14fc8ef1865460ef12f4b4d404862ec64352c59f75830d4d38f25575254b299b0239eee8266948865ad4e115bf505011264b921742c08e5ef60e0e36415ad148a501baf317bbf725e192014f2f69c72274fb85b6edd6e75dc4d99460f2d766f465b631859c1b0490084d44ccee7b59711a24fc757b9691fa075", 0x80, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="3e56210221dcd8d8052b40b1a49e4bcaaa74e1693fe374ca3acd4004d0ad282a957e57688f962357c1fa35086e72b97603d7bad943ef8fd608d5c582aea1a1702f3761b98875e17e8d4cc01848fbaf91164cf31849639d65487583e9aff834571854927a8a7caf1a44d798a84df100ab274f1527c6b3c3f4acef06ecb86454a3cdb6dc4e0aa310d5dd7ff413a0e366c9860eb35402d65a43426ccd25a8e65da80b1437b2ae77b9ba3a8f10e31e9c029592359cfe18b1e308980b101c97cfcae061ccf34851feade1d5cc24fff5") rt_tgsigqueueinfo(r4, r7, 0x3, &(0x7f0000000240)={0x38, 0x5, 0xcab}) 3m55.381107011s ago: executing program 2 (id=126): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0xd, 0xee, {0xee, 0xb, "c6e8144884175aeb1759333397404dcc272a135061cb323d2a8966be5d0d71a9cc29f3eb7f39eb4b8fe1edae2b6fa59647ee792a5a1fdf566689d90a562269656f70e21d02a975d5a55453c9b0f4825bed84d334c920b1633d53b8daa5458ef4d914e4ff4a197fc738b39098e81fe16a838ea36737fd48e1346532c20d53fe61a7e0c14aca5d18f5bea9ebdcc37b25cca29f693e31e201d7e0262a9d64b5af70cc814104a5a44f846cb294c7b6e8148ffbe57bb436237286552f1a887cdd607dc502e094eda22d6c04e4c19f373577d3b22d13f6b29fc56cb20f9355aacb47e73d22242828b3ffdba72fb80e"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000fa2000000978390353f3b1aa73d6fcf6561c176aae34fca559e8555ccc1401d344ab4e66eb992fe9bee542ef93aba47f1d08ab9600e8021994ca570134e88fa7bb7f3ba8d04803dd162998343db4b95e05637caf01833d359bce5a020b4a76e5ed5dcff701f89d0ba816f1e6cd71e1996adbafd4f09d2f2dcef9a7d89737bcb0d9062a3bc4f6a38286c17ead3d46a33aa6b8993ba8065e67cc426fc7fa300165ed10b"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000002c0)={0x20, 0x81, 0x3, 'fq3'}, &(0x7f0000000300)={0x20, 0x82, 0x1, 'K'}, &(0x7f0000000340)={0x20, 0x83, 0x2, "b5c1"}, &(0x7f0000000380)={0x20, 0x84, 0x4, "e17eeb40"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "943fad"}}) 3m54.172750209s ago: executing program 2 (id=132): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x1, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x54, 0x56, 0x10006}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000140)=""/241) mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r5 = openat$cgroup_pressure(r3, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a0000001801000020756c2500000000002020207b1af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) recvmsg$unix(r2, &(0x7f0000002d00)={0x0, 0x0, 0x0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@printk={@ld, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r7}, 0xc) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f0000000080)='FREEZING\x00', 0x9) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x94489e87720a44e, [{0xa00, 0xff03000000000000}, {0x0, 0x100000000000000}]}, 0xa50) mq_timedreceive(r0, &(0x7f0000000500)=""/202, 0xca, 0x200000000000, 0x0) 3m53.37304444s ago: executing program 33 (id=132): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x1, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x54, 0x56, 0x10006}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000140)=""/241) mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r5 = openat$cgroup_pressure(r3, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a0000001801000020756c2500000000002020207b1af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) recvmsg$unix(r2, &(0x7f0000002d00)={0x0, 0x0, 0x0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@printk={@ld, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r7}, 0xc) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f0000000080)='FREEZING\x00', 0x9) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x94489e87720a44e, [{0xa00, 0xff03000000000000}, {0x0, 0x100000000000000}]}, 0xa50) mq_timedreceive(r0, &(0x7f0000000500)=""/202, 0xca, 0x200000000000, 0x0) 3m40.8806824s ago: executing program 1 (id=180): sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) syz_usb_connect(0x3, 0x3b9, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902a70301ab00000209046d000c27dae20009050402ff"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0x560c89bb) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x4}]) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x20) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2a}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r5, @ANYBLOB="290e29bd7000fbdbdf252700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e31000000240032"], 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001080)={0x1, 0x7, 0x0, 0x0, 0x10000}) bpf$BPF_LINK_CREATE_XDP(0x9, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x37}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r7) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES16=r8], 0x2c}}, 0x18) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb12bb20f462bb28}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r8, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004058}, 0x4) 3m37.518161787s ago: executing program 1 (id=192): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f00000000c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0x1103, r7}, 0x38) setpgid(0x0, r3) fchdir(r2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r3}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xd5d7a000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 3m35.93192403s ago: executing program 1 (id=194): ioctl$MEMREAD(0xffffffffffffffff, 0xc0404d1a, &(0x7f00000002c0)={0x401, 0xd6, 0xca, &(0x7f0000000040)=""/214, &(0x7f0000000140)=""/202, 0x0, '\x00', {0xd, 0x10, 0xffff}}) faccessat2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000380)={0x1, 0xffff, 0x10000, 0x4, 0x15, "1bd60000000000000000f800000000001600"}) write$UHID_INPUT(r0, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006) unshare(0x6020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xd0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x20040800) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) umount2(&(0x7f0000000280)='./file0\x00', 0x1) 3m35.024703199s ago: executing program 1 (id=197): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001080), &(0x7f0000001180)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r3, 0x0, 0x0}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f00000000c0)={0x4, 0x8, [0xffffffff, 0x0, 0x76e, 0x1d85e000000000], &(0x7f0000000080)=[0x0]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r4) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r7, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040001}, 0x20000810) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000002000000000000090000003c000380140002006c6f0000000000000000000000000000080003000100ed000800010001000000140006000b030000040000000000000000001001"], 0x50}}, 0x0) setns(0xc9, 0x0) r8 = socket(0x8, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0xc) setsockopt(r8, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100"/79, 0x4f) bind(r8, &(0x7f0000000100)=@generic={0x8, "0000ffff01002000"}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000826bd8900fedbdf25080000000500370001000000080034000500000005002e0001000000060028000300000008fbee45a4b5e5798e0c95f8", @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000004) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r10, 0x400, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24000004) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="718e0180", @ANYRES16=r5, @ANYBLOB="010300000000000000000b000000"], 0x14}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x7, &(0x7f0000000000)=0x100000001, 0x4) 3m34.700770661s ago: executing program 1 (id=200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='TH', 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000180009002bbd7000000000001c140000fe00000100000000050b00000b000000"], 0x24}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000380)="68eeba", 0x3}], 0x2}}, {{&(0x7f0000000280)={0x2, 0x4e26, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000540)="17349d03781faa032c8e742110fdadf10996fbc9115102495f1af15f54debe265b2c6a62d7a93a9bf3a4db35c49b936e8616cbede0c1d36bb58d731d08cc3b1fb1bbe71e8422148b8f12403b13f417966c2e6d23f0078467a8b446437747efbd6d5e66b47e3108b53711907eb9022f40bcdb30955e5e745015254b5d64b0e309bf2311663bac832d50e9897b1f8ad40ae67bcf7b7c0f8dd02d8104db14e4ce2ce0f57d84eab3259501c84a3deee444920d839757829a7ecd33e74681664e191611aaacf21a0f5d0554934a720556fec17a8c863b0f34f0933525f75676025eb9f38dbd2479bb7b", 0xe7}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000340)="7317", 0x2}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f00000003c0)}, {&(0x7f0000000500)="9b4d3f3d0652e554f02e0f8a02337a2cfa4b9ee54c068ba0bd56436c576a430642f90d32f1172e115ab30a8306393b73aa072b02b9d0472bcb", 0x39}, {&(0x7f0000000640)="bca878acf98619d04fe3c674e2e01907297c7459288d27a2b2458d32d314fe395226731148aba56953c1e5ba4342f83ea8c187a60fddbfb63b007ef6f3c178a6299b093e952b93234fbf5b3b98cd0a86a92c6be33fe190f6f238b025b6f2962a6a666ac0f20eb8f7609ec261b0d5382774546bbee6e5e20eb6493c78fc6d458fd0d744675ed61c676ce72d8eb32e351b47488a6c025cec1d64fab4effd36b4a710787c03ab2e718d755be274a8fc7e", 0xaf}, {&(0x7f0000000700)="1b6abb9ed07bb63f8f953a1cca50d51bcc68fe39186938f4529875470d7a4a48ea4fa89fa9b7143020461c40436fd222566c6457ff30ad6935b91b9525df66a81f9f4f5015c2a53336622e4e4ee2", 0x4e}, {&(0x7f00000007c0)="d7e483ffb54b1892da86b947492c3c685a745fa2dc346929fa120f3c", 0x1c}, {&(0x7f0000000880)="e70f86185d5b04a1bbfb087989e8bdb6067d9c5bc93b85fb181042355a422bf898f3ff2ec7eb257be1cbf7c60cb946b41e9ee43ac318938d282b5293fe5b72beeea987d6ca78d0d0688c6de179b00cdf1e534f9b7a9520d1c41f99f261607d46c1acf0bff8ca2df0167f5ebf63c19e01f4531614b9d6f6103676074565356e914d93", 0x82}], 0x6, &(0x7f0000000b00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xb9, [@broadcast]}, @timestamp_prespec={0x44, 0x54, 0x77, 0x3, 0x7, [{@multicast1, 0x2}, {@private=0xa010102, 0x6}, {@loopback, 0xfffffff7}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x997a}, {@local, 0xfffffff8}, {@private=0xa010100, 0xad}, {@remote, 0x4}, {@local, 0x40}, {@local, 0xbc4}]}, @timestamp={0x44, 0x14, 0x82, 0x0, 0x1, [0x7, 0xc, 0x0, 0x1000]}, @lsrr={0x83, 0xb, 0xb4, [@loopback, @loopback]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}], 0xf0}}], 0x4, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, r3, 0x6}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000180)={0x80000, 0x0, {[0x7, 0x3, 0x100000000, 0x7fff, 0xd61, 0x5, 0x8, 0x6]}}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040814) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x9, 0x1, 0x77f, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r8, r9, r10, 0x0, &(0x7f00000000c0)) 3m34.360561414s ago: executing program 1 (id=203): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) fchdir(r1) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000002c0)="02044a00ea0e6000000000001e09000000e105", 0x13}], 0x1}, 0x40040) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x9, 0x9, 0x7, 0x9, 0x21aa800}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002780)={0x80, 0xffef, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xa5, 0x8000000000000001}) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r8, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r8, &(0x7f0000000240)={0x78, 0x0, r9, {0x2000000007, 0x0, 0x0, {0x3, 0xffffffffffffffff, 0x58, 0x51d7, 0x0, 0x3, 0x2, 0x42, 0x8, 0x1000, 0xa0000000, r10, r11, 0x483, 0x0, 0x1000000}}}, 0x78) write$FUSE_ATTR(r5, &(0x7f00000027c0)={0x78, 0x0, r6, {0x1, 0x9, 0x0, {0x4, 0x9, 0x8, 0x2, 0x81, 0xffffffffffffffff, 0xe, 0x8, 0x100, 0x4000, 0x7, r7, r11, 0xa6, 0x5}}}, 0x78) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) close_range(r12, 0xffffffffffffffff, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) 3m34.203643953s ago: executing program 34 (id=203): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) fchdir(r1) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000002c0)="02044a00ea0e6000000000001e09000000e105", 0x13}], 0x1}, 0x40040) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x9, 0x9, 0x7, 0x9, 0x21aa800}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002780)={0x80, 0xffef, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xa5, 0x8000000000000001}) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r8, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r8, &(0x7f0000000240)={0x78, 0x0, r9, {0x2000000007, 0x0, 0x0, {0x3, 0xffffffffffffffff, 0x58, 0x51d7, 0x0, 0x3, 0x2, 0x42, 0x8, 0x1000, 0xa0000000, r10, r11, 0x483, 0x0, 0x1000000}}}, 0x78) write$FUSE_ATTR(r5, &(0x7f00000027c0)={0x78, 0x0, r6, {0x1, 0x9, 0x0, {0x4, 0x9, 0x8, 0x2, 0x81, 0xffffffffffffffff, 0xe, 0x8, 0x100, 0x4000, 0x7, r7, r11, 0xa6, 0x5}}}, 0x78) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) close_range(r12, 0xffffffffffffffff, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) 2m25.431480309s ago: executing program 7 (id=471): r0 = io_uring_setup(0x4b3e, &(0x7f0000000300)={0x0, 0xf12b, 0x10000, 0x40000, 0x800003d7}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x8) accept$inet(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000090601020000000000000000000000000900020073797a51eb000000050001000700000004000780"], 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 2m24.011394282s ago: executing program 7 (id=476): syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xe9d6, 0x80, 0x2, 0x1ba}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x48, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4d2c11947fe9151f}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 2m23.736149179s ago: executing program 7 (id=479): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0x614b4ad8b28daf59, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x1}}, 0x59) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x130, 0x0, 0xfffffffffffffff9, [{{0x6, 0x1, 0x0, 0x8, 0x8, 0xa1, {0x0, 0x9, 0x2, 0x2, 0x2, 0x3, 0x2000093, 0x6, 0x80d7, 0x6000, 0x7, r2, 0x0, 0xe7b1, 0x4}}, {0x2, 0x3, 0x85, 0x5, '\x02\xa3HK\x19yd\x1d\xe0\xe3\xf8\xed\xe6\xa9\x01\x127\xf1\x812\x116nK|\xa7\xcc$\xab\xb2\xf3 \x01\n<4K\xdb1\xad\xae\xdbm\xf2\xb8)\x89\x80\xa9\xdb\xbfhN]\xc1:1\xdc=n^2\xcf\x8a\xa8\xcfgt\xf7\vv4\x18\xcd69\xb2\xd2\xceYE\xde\xfe\x85\xd9R$\x18\xc7^$\x14\xe6\xec\xa1\x98G\xec\a\x10s\xf5z\xbdl\xfftY\xd9\xa6\xc1\xa6\x1c\x93\x06zS\x98\xff\xa7\xa5U\xd5\x0fM\x95\xd53=\x81\fhJ'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) r4 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f0000000e00)) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="0398ba0d7dfed0c0db15e13ef84aeeace3d2a98e284b6f3fa4a5e237dcba9057fcc87cd956d5be41a7c67ab6e4881c9b2775e6abffd068477c2caadce21c0d5a123ba5fd29ea3e20f8e44dd042aac5bf5b6f6eb6c39a3ca0499c28f5271c3e4f095f6527d49720b631fde2c9941d9f6eb467d7202d1825aabaccef6c6683ffd13d9d0f34f5b703a09a123551fa341723452f9703fdebc890f798dabf574aa4c9"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="1ce04b6f3ef4e3e17ad5c454f9fc758f2058e4dbd856f49083285aee6c8248095020d7e254d47bd5dcf3aa306a91a491aafb16ed8a9f202ef8021a483b67c9075c7c0395668d22b4be2f202c94f1cf07ddf54c799ab6faedabecbe1efb2bd8e9edddb386f3088ac762e6b3eecdce3ed1c3c9af60e2f6379d704a010de76b0ba57ac1fb97e5a540ad0aa3", @ANYRES32=r4, @ANYBLOB="fe62f793e24d57d9d7cc0d4eaaa7918e69e5bb4c1c2ee151ede2b7c21a91632e40fbf16e44b8851c26e74f0de29951b7a41adb0f8fac2be021a29e594554b222183ada3c0c1404ecdc999e1414b44aeb678e1f7465e8ab21768c682f9207b7fa5c5a77735bbdf76c59c4caf26d8a2a66b65a9e8756acef9bfd251927288ab13a6792c9e6eb48d734502b07e75d5d4f316b9a169aab4a0b00148e5ac2f459d36b7a7212ebf165b1f0", @ANYBLOB="7a240f64b59906b55b5a82545d41048874e7b517d18589025183f5cf09004d7a1ca181713c5d5cfaab666d2822e14624e86b73211a0d6df13f54b5c9d0916e2046461eec7683e00f4bd19962db98a5a6a01ca31662747bc24243005b2de36002c29e56920074867c1fb46eabfe8d6a47b5ada3b7665e1f8b44c8ec5e9009c7ff0ddba1f401c524ce4ab522feec53903ccaf9213f0caed823703b66acd1d17f5d033c4aec5de8ff3f41"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000040)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 2m20.024779799s ago: executing program 7 (id=495): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$khugepaged_scan(r5, &(0x7f0000000040), 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x20, r7, 0x48b63c50f9266945, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000944) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) r9 = syz_open_dev$hidraw(&(0x7f0000000240), 0x9, 0x101000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r9, 0xc0096616, &(0x7f0000000280)={0x2, [0x0, 0x0]}) r10 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe}]}}, 0x0, 0x26, 0x0, 0x2}, 0x28) sched_setaffinity(r10, 0x8, &(0x7f0000000200)=0xa9e3) timer_create(0x2, &(0x7f0000000180)={0x0, 0xc, 0x1, @tid=r10}, &(0x7f00000001c0)) write(r0, &(0x7f00000002c0)="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", 0x11d) 2m19.056684738s ago: executing program 7 (id=499): syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x3, 0x100, @val=0x80}}}}}}}, 0x0) setresuid(0x0, 0xee01, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xb8, 0x14, 0x800, 0x70bd25, 0x25dfdbfe, {0x1f, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x9, 0x1, "45e7645df2"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "2936472e6e0862b2338f9e0cdfcbdb0270e7e2d114c80b80118469f5f4bede89ac74a5dbf8eb4b6b838c9dfbc028fb7357646153aa57572b4b28e1cc58fcce76179476953b06d34df6c20d7cc615a753e37fc8430c2b10ec8c383046d7522b353e055a14af48a7593d1c20736fd245d44cfb135bfdeb7930f3e787d2df0bc26d6ec67813a245f2c944f507595e3cc8f74189b2"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67fffff6b26462f25a4d1c2e446b72af3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9a", 0xc3}], 0x1}, 0x94) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) write$nci(r2, &(0x7f0000000640)=ANY=[], 0xbb) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x1}, 0x8) r6 = syz_io_uring_setup(0x6fa6, &(0x7f0000000340)={0x0, 0xf8b0, 0x1, 0x0, 0x287}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f00000004c0)) io_uring_setup(0x67ea, &(0x7f0000000500)={0x0, 0x980a, 0x200, 0x0, 0x2e9, 0x0, r6}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x7dd9ca852ab7a90f, 0x0, 0x4e20}, 0x6e) 2m15.052661309s ago: executing program 7 (id=510): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='TH', 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000180009002bbd7000000000001c140000fe00000100000000050b00000b000000"], 0x24}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000380)="68eeba", 0x3}], 0x2}}, {{&(0x7f0000000280)={0x2, 0x4e26, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000540)="17349d03781faa032c8e742110fdadf10996fbc9115102495f1af15f54debe265b2c6a62d7a93a9bf3a4db35c49b936e8616cbede0c1d36bb58d731d08cc3b1fb1bbe71e8422148b8f12403b13f417966c2e6d23f0078467a8b446437747efbd6d5e66b47e3108b53711907eb9022f40bcdb30955e5e745015254b5d64b0e309bf2311663bac832d50e9897b1f8ad40ae67bcf7b7c0f8dd02d8104db14e4ce2ce0f57d84eab3259501c84a3deee444920d839757829a7ecd33e74681664e191611aaacf21a0f5d0554934a720556fec17a8c863b0f34f0933525f75676025eb9f38dbd2479bb7b", 0xe7}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000340)="7317", 0x2}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f00000003c0)}, {&(0x7f0000000500)="9b4d3f3d0652e554f02e0f8a02337a2cfa4b9ee54c068ba0bd56436c576a430642f90d32f1172e115ab30a8306393b73aa072b02b9d0472bcb", 0x39}, {&(0x7f0000000640)="bca878acf98619d04fe3c674e2e01907297c7459288d27a2b2458d32d314fe395226731148aba56953c1e5ba4342f83ea8c187a60fddbfb63b007ef6f3c178a6299b093e952b93234fbf5b3b98cd0a86a92c6be33fe190f6f238b025b6f2962a6a666ac0f20eb8f7609ec261b0d5382774546bbee6e5e20eb6493c78fc6d458fd0d744675ed61c676ce72d8eb32e351b47488a6c025cec1d64fab4effd36b4a710787c03ab2e718d755be274a8fc7e", 0xaf}, {&(0x7f0000000700)="1b6abb9ed07bb63f8f953a1cca50d51bcc68fe39186938f4529875470d7a4a48ea4fa89fa9b7143020461c40436fd222566c6457ff30ad6935b91b9525df66a81f9f4f5015c2a53336622e4e4ee2", 0x4e}, {&(0x7f00000007c0)="d7e483ffb54b1892da86b947492c3c685a745fa2dc346929fa120f3c", 0x1c}, {&(0x7f0000000880)="e70f86185d5b04a1bbfb087989e8bdb6067d9c5bc93b85fb181042355a422bf898f3ff2ec7eb257be1cbf7c60cb946b41e9ee43ac318938d282b5293fe5b72beeea987d6ca78d0d0688c6de179b00cdf1e534f9b7a9520d1c41f99f261607d46c1acf0bff8ca2df0167f5ebf63c19e01f4531614b9d6f6103676074565356e914d93", 0x82}], 0x6, &(0x7f0000000b00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xb9, [@broadcast]}, @timestamp_prespec={0x44, 0x54, 0x77, 0x3, 0x7, [{@multicast1, 0x2}, {@private=0xa010102, 0x6}, {@loopback, 0xfffffff7}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x997a}, {@local, 0xfffffff8}, {@private=0xa010100, 0xad}, {@remote, 0x4}, {@local, 0x40}, {@local, 0xbc4}]}, @timestamp={0x44, 0x14, 0x82, 0x0, 0x1, [0x7, 0xc, 0x0, 0x1000]}, @lsrr={0x83, 0xb, 0xb4, [@loopback, @loopback]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}], 0xf0}}], 0x4, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, r4, 0x6}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000180)={0x80000, 0x0, {[0x7, 0x3, 0x100000000, 0x7fff, 0xd61, 0x5, 0x8, 0x6]}}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040814) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x9, 0x1, 0x77f, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r9, r10, r11, 0x0, &(0x7f00000000c0)) 2m14.177439018s ago: executing program 35 (id=510): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='TH', 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000180009002bbd7000000000001c140000fe00000100000000050b00000b000000"], 0x24}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000380)="68eeba", 0x3}], 0x2}}, {{&(0x7f0000000280)={0x2, 0x4e26, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000540)="17349d03781faa032c8e742110fdadf10996fbc9115102495f1af15f54debe265b2c6a62d7a93a9bf3a4db35c49b936e8616cbede0c1d36bb58d731d08cc3b1fb1bbe71e8422148b8f12403b13f417966c2e6d23f0078467a8b446437747efbd6d5e66b47e3108b53711907eb9022f40bcdb30955e5e745015254b5d64b0e309bf2311663bac832d50e9897b1f8ad40ae67bcf7b7c0f8dd02d8104db14e4ce2ce0f57d84eab3259501c84a3deee444920d839757829a7ecd33e74681664e191611aaacf21a0f5d0554934a720556fec17a8c863b0f34f0933525f75676025eb9f38dbd2479bb7b", 0xe7}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000340)="7317", 0x2}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f00000003c0)}, {&(0x7f0000000500)="9b4d3f3d0652e554f02e0f8a02337a2cfa4b9ee54c068ba0bd56436c576a430642f90d32f1172e115ab30a8306393b73aa072b02b9d0472bcb", 0x39}, {&(0x7f0000000640)="bca878acf98619d04fe3c674e2e01907297c7459288d27a2b2458d32d314fe395226731148aba56953c1e5ba4342f83ea8c187a60fddbfb63b007ef6f3c178a6299b093e952b93234fbf5b3b98cd0a86a92c6be33fe190f6f238b025b6f2962a6a666ac0f20eb8f7609ec261b0d5382774546bbee6e5e20eb6493c78fc6d458fd0d744675ed61c676ce72d8eb32e351b47488a6c025cec1d64fab4effd36b4a710787c03ab2e718d755be274a8fc7e", 0xaf}, {&(0x7f0000000700)="1b6abb9ed07bb63f8f953a1cca50d51bcc68fe39186938f4529875470d7a4a48ea4fa89fa9b7143020461c40436fd222566c6457ff30ad6935b91b9525df66a81f9f4f5015c2a53336622e4e4ee2", 0x4e}, {&(0x7f00000007c0)="d7e483ffb54b1892da86b947492c3c685a745fa2dc346929fa120f3c", 0x1c}, {&(0x7f0000000880)="e70f86185d5b04a1bbfb087989e8bdb6067d9c5bc93b85fb181042355a422bf898f3ff2ec7eb257be1cbf7c60cb946b41e9ee43ac318938d282b5293fe5b72beeea987d6ca78d0d0688c6de179b00cdf1e534f9b7a9520d1c41f99f261607d46c1acf0bff8ca2df0167f5ebf63c19e01f4531614b9d6f6103676074565356e914d93", 0x82}], 0x6, &(0x7f0000000b00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xb9, [@broadcast]}, @timestamp_prespec={0x44, 0x54, 0x77, 0x3, 0x7, [{@multicast1, 0x2}, {@private=0xa010102, 0x6}, {@loopback, 0xfffffff7}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x997a}, {@local, 0xfffffff8}, {@private=0xa010100, 0xad}, {@remote, 0x4}, {@local, 0x40}, {@local, 0xbc4}]}, @timestamp={0x44, 0x14, 0x82, 0x0, 0x1, [0x7, 0xc, 0x0, 0x1000]}, @lsrr={0x83, 0xb, 0xb4, [@loopback, @loopback]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}], 0xf0}}], 0x4, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, r4, 0x6}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000180)={0x80000, 0x0, {[0x7, 0x3, 0x100000000, 0x7fff, 0xd61, 0x5, 0x8, 0x6]}}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040814) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x9, 0x1, 0x77f, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r9, r10, r11, 0x0, &(0x7f00000000c0)) 2.442541084s ago: executing program 5 (id=1476): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x20) r2 = openat(r1, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0) writev(r2, &(0x7f0000003680)=[{&(0x7f00000002c0)="9e6c", 0x2}], 0x1) 2.377286738s ago: executing program 5 (id=1478): r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/56, 0x328000, 0x800, 0x9, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 2.205157564s ago: executing program 3 (id=1481): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) r1 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80, 0x0) fadvise64(r3, 0x4, 0x3, 0x5) preadv(r3, 0x0, 0x0, 0x0, 0x1) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xa13e) syz_usb_connect$midi(0x3, 0xbb, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x1, 0x1, 0x3, 0x0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x4, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x1, 0x4e}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x10, 0x5}, @midi_out_jack={0xb, 0x24, 0x3, 0x1, 0x6, 0x2, [{0xa, 0x6}, {0x7, 0xb}], 0x1}, @midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x7, 0x1, [{0x8}], 0x3}, @midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x3, 0x1, [{0xbb, 0xf7}], 0x1}, @midi_out_jack={0x9, 0x24, 0x3, 0x0, 0x3, 0x1, [{0x4, 0x1}], 0xd}, @midi_out_jack={0x7, 0x24, 0x3, 0x3, 0x0, 0x0, [], 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x9, 0x5}], [{{0x9, 0x5, 0x5, 0x8, 0x10, 0x0, 0x0, 0x66, {0x4}}}, {{0x9, 0x5, 0xc, 0x10, 0x4b8e5216c5fbd24a, 0x89, 0xc7, 0x1, {0xb, 0x25, 0x1, 0x7, "455e80b7ee7869"}}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x2, 0x1, {0x5, 0x25, 0x1, 0x1, "e9"}}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x9, 0x7, 0x80, {0x7, 0x25, 0x1, 0x3, "e18cfe"}}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0x81, 0x3, {0x10, 0x25, 0x1, 0xc, "66bfc32179a03407c351f470"}}}]}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x9, 0x3, 0x4, 0x8, 0xe}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x809}}, {0xb8, &(0x7f0000000440)=ANY=[@ANYBLOB="b80363cb6ab5744b9a9b1ebb9880b0b7d65ba1cf1caf0ee9df98e0ad00a54155d5d2e247c1102918c324e25546be52a6af4756df05b6dea651594f10fc0d66eddd1e2dc694d66905305753a37705d3cc19f7b602f76f6cb0a721ad2cc02c7dc6bc816ffce14c360ec604be60d58fd94a3d2eee8b0821e91eb064ce05f87a9a6b94f8d951ecd0cd803a8778feb10bc81a27dbbad2aa9e2800000000000000000000000000000000ba5cf8e5101e3cb173ec75f3ca7682fdb9e892ab2b2115dbbe4643831fd12e9c826a92caa615413f17b293c151002c92ed71e8000000000000"]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2b1927e20537b650}}, {0x7c, &(0x7f0000000580)=@string={0x7c, 0x3, "3083b1ddb9fc847a801a8bccfaa42223d1fb9167a63b099c7da26b81537add2b3392506ec410fdabbf3c7dded5fac97887a3d0bd709ab6e79353ba4a225aa0cb70ed383b28d18acf33eead125a43f3e9efb6b6470e2aa5f76e9ae304a0f0d7e170b0191f8f690a1dc46f988738e6cb28e1db8f9fad0b9944800c"}}, {0x2, &(0x7f00000006c0)=@string={0x2}}]}) 1.774337853s ago: executing program 5 (id=1485): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x14, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x200040a0) 1.701808836s ago: executing program 5 (id=1487): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0d, 0x0) 1.559504578s ago: executing program 8 (id=1489): socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) open(&(0x7f0000000100)='./sys/class/net/dummy0/carrier\x00', 0x4000, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.537935641s ago: executing program 5 (id=1490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x8, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 1.403286663s ago: executing program 0 (id=1493): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x21980, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="707c487d755890babd1e16e0920f", 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.249056398s ago: executing program 0 (id=1494): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback={0xa4ff}, 0x800, 0x1}, 0x20) 1.248875492s ago: executing program 0 (id=1495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.230833668s ago: executing program 6 (id=1496): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_icmp(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008002000800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40090) 1.158323829s ago: executing program 0 (id=1497): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = dup(r0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x812}, 0x40010) 1.076601457s ago: executing program 0 (id=1498): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x32, 0x18, 0xb05, 0x101, 0x0, 0x0, "05010902a1010901a100050919012903150025019503750181029501750581030501093009311581257f750895028106c0c0"}}, 0x14a) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000500)={0xe, {0x1}}, 0xc) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x6, "5dff00000000"}}, 0xc) 1.025418592s ago: executing program 5 (id=1499): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 999.102155ms ago: executing program 0 (id=1500): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 921.1433ms ago: executing program 6 (id=1501): syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaa88aaaaaaaaaaaaaaaabb08004500106800000000000690"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) 889.933084ms ago: executing program 8 (id=1502): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) close(0x3) 751.477636ms ago: executing program 8 (id=1503): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4008800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) read(r1, &(0x7f0000000240)=""/254, 0xfe) 701.385423ms ago: executing program 3 (id=1504): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='1:0\n', 0x4) 700.273682ms ago: executing program 6 (id=1505): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) flistxattr(r0, &(0x7f0000000040)=""/40, 0x28) 589.152165ms ago: executing program 8 (id=1506): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 580.820587ms ago: executing program 6 (id=1507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 427.152697ms ago: executing program 6 (id=1508): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) 369.441161ms ago: executing program 3 (id=1509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x2, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 369.211223ms ago: executing program 8 (id=1510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20040) 303.131915ms ago: executing program 6 (id=1511): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x12, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r2, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffef}, 0x0) 292.217566ms ago: executing program 3 (id=1512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)={0x18, 0x3, 0x1, 0x5, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) 229.416658ms ago: executing program 8 (id=1513): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="500100001000010000000000000000007f0000010000edffffff0000000000007f00000100000000000000000000000000000000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000be3412320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002"], 0x94}}, 0x0) 212.30185ms ago: executing program 3 (id=1514): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0d, 0x0) 0s ago: executing program 3 (id=1515): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000840)={&(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x45}, 0x0) kernel console output (not intermixed with test programs): 1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.801443][ T5699] usb 9-1: Product: syz [ 237.801472][ T5699] usb 9-1: Manufacturer: syz [ 237.801485][ T5699] usb 9-1: SerialNumber: syz [ 237.828155][ T5699] usb 9-1: 3:1 : does not exist [ 237.828176][ T5699] usb 9-1: 3:2 : does not exist [ 237.948910][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 238.240176][ T10] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 238.260747][ T8949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.261094][ T8949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.487366][ T30] audit: type=1400 audit(1788465816.696:1196): avc: denied { append } for pid=8973 comm="syz.3.649" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 238.487594][ T30] audit: type=1400 audit(1788465816.696:1197): avc: denied { open } for pid=8973 comm="syz.3.649" path="/136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 238.707340][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 238.713180][ T10] usb 7-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 238.726841][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.737413][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 238.747548][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 238.747620][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.782983][ T8967] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 238.795100][ T10] mdc800 7-1:1.0: probe fails -> wrong Interface [ 239.885375][ T5800] usb 9-1: USB disconnect, device number 11 [ 239.957387][ T8967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.100636][ T30] audit: type=1400 audit(1788465818.416:1198): avc: denied { mount } for pid=8986 comm="syz.3.651" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 240.181522][ T30] audit: type=1400 audit(1788465818.486:1199): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 240.563364][ T9001] netlink: 48 bytes leftover after parsing attributes in process `syz.5.654'. [ 241.467842][ T5800] usb 7-1: USB disconnect, device number 31 [ 241.538482][ T9010] netlink: 'syz.8.656': attribute type 1 has an invalid length. [ 241.540283][ T9010] netlink: 'syz.8.656': attribute type 4 has an invalid length. [ 241.540297][ T9010] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.656'. [ 241.546470][ T9010] netlink: 'syz.8.656': attribute type 1 has an invalid length. [ 241.546485][ T9010] netlink: 'syz.8.656': attribute type 4 has an invalid length. [ 241.546494][ T9010] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.656'. [ 241.569340][ T30] audit: type=1400 audit(1788465819.866:1200): avc: denied { ioctl } for pid=9009 comm="syz.8.656" path="socket:[26740]" dev="sockfs" ino=26740 ioctlcmd=0x8913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 241.700778][ T30] audit: type=1400 audit(1788465820.016:1201): avc: denied { write } for pid=8995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.735298][ T9016] netlink: 'syz.6.657': attribute type 1 has an invalid length. [ 241.735341][ T9016] netlink: 'syz.6.657': attribute type 4 has an invalid length. [ 241.735365][ T9016] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.657'. [ 241.848767][ T30] audit: type=1400 audit(1788465820.166:1202): avc: denied { write } for pid=9022 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.254109][ T9036] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 242.355990][ T30] audit: type=1400 audit(1788465820.636:1203): avc: denied { connect } for pid=9034 comm="syz.8.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 242.909819][ T9001] xt_LOG: prefix is not null-terminated [ 243.079773][ T9028] netlink: 32 bytes leftover after parsing attributes in process `syz.6.659'. [ 243.267861][ T5800] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 243.303115][ T30] audit: type=1400 audit(1788465821.616:1204): avc: denied { write } for pid=9027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.349797][ T30] audit: type=1400 audit(1788465821.666:1205): avc: denied { write } for pid=9040 comm="syz.0.661" name="usb_gadget" dev="configfs" ino=3688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 243.379708][ T30] audit: type=1400 audit(1788465821.686:1206): avc: denied { write } for pid=9040 comm="syz.0.661" name="functions" dev="configfs" ino=26784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 243.437872][ T5800] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 243.442856][ T5800] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 243.442880][ T5800] usb 6-1: config 0 has no interface number 0 [ 243.442907][ T5800] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 243.442928][ T5800] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 243.442949][ T5800] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 243.450425][ T5800] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 243.450447][ T5800] usb 6-1: Product: syz [ 243.450460][ T5800] usb 6-1: SerialNumber: syz [ 243.454292][ T5800] usb 6-1: config 0 descriptor?? [ 243.472178][ T5800] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 243.491348][ T5800] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input33 [ 243.505059][ T30] audit: type=1400 audit(1788465821.816:1207): avc: denied { write } for pid=9054 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.589568][ T9058] affs: No valid root block on device nullb0 [ 243.677972][ C1] cm109_urb_ctl_callback: 27 callbacks suppressed [ 243.677999][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 243.678196][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 243.678380][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 243.678562][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 243.678744][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 243.678922][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 243.679108][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 243.679283][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 243.679503][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 243.679682][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 243.679755][ T5800] usb 6-1: USB disconnect, device number 25 [ 243.679859][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 243.746309][ T5800] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 244.115074][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.665'. [ 244.297627][ T1214] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 244.479342][ T1214] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 244.504048][ T1214] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.504084][ T1214] usb 7-1: Product: syz [ 244.504108][ T1214] usb 7-1: Manufacturer: syz [ 244.504123][ T1214] usb 7-1: SerialNumber: syz [ 244.539777][ T1214] usb 7-1: config 0 descriptor?? [ 244.739529][ T30] audit: type=1400 audit(1788465823.036:1208): avc: denied { read } for pid=9077 comm="syz.5.669" lport=44542 faddr=2001::2 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 244.813273][ T1214] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 245.313282][ T9084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.670'. [ 246.203534][ T9088] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 246.263356][ T9091] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 246.710783][ T1214] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 246.739127][ T9091] 9p: Bad value for 'rfdno' [ 246.739197][ T30] audit: type=1400 audit(1788465825.056:1209): avc: denied { mounton } for pid=9082 comm="syz.8.671" path="/32/debug/tracing/trace_pipe" dev="tracefs" ino=3905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 246.860131][ T9071] unsupported nlmsg_type 40 [ 246.921586][ T9071] netlink: 312 bytes leftover after parsing attributes in process `syz.6.666'. [ 246.957154][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.677'. [ 246.957209][ T9102] netlink: 'syz.5.677': attribute type 5 has an invalid length. [ 246.957221][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.677'. [ 246.965200][ T9101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.008936][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.8.676'. [ 247.022884][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.677'. [ 247.022947][ T9103] netlink: 'syz.5.677': attribute type 5 has an invalid length. [ 247.022961][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.5.677'. [ 247.097499][ T8024] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.097620][ T8024] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.097702][ T8024] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.097780][ T8024] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.207752][ T10] input: syz0 as /devices/virtual/misc/uhid/0005:057C:0306.0015/input/input34 [ 247.272281][ T10] hid-generic 0005:057C:0306.0015: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 247.355626][ T9113] fido_id[9113]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 247.399333][ T1214] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 247.571874][ T1214] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 247.572793][ T1214] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 247.572828][ T1214] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.572848][ T1214] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 247.572871][ T1214] usb 9-1: config 1 has no interface number 1 [ 247.572904][ T1214] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 247.572940][ T1214] usb 9-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.574843][ T1214] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.574862][ T1214] usb 9-1: Product: syz [ 247.574875][ T1214] usb 9-1: Manufacturer: syz [ 247.574887][ T1214] usb 9-1: SerialNumber: syz [ 247.866190][ T30] audit: type=1326 audit(1788465826.176:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.0.681" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f1054f9e159 code=0x0 [ 247.900143][ T30] audit: type=1400 audit(1788465826.216:1211): avc: denied { ioctl } for pid=9114 comm="syz.5.680" path="/dev/ptyqe" dev="devtmpfs" ino=133 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 248.156136][ T10] usb 7-1: USB disconnect, device number 32 [ 248.324460][ T30] audit: type=1326 audit(1788465826.636:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.8.676" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13679e159 code=0x7fc00000 [ 248.385912][ T30] audit: type=1400 audit(1788465826.686:1213): avc: denied { mount } for pid=9138 comm="syz.6.682" name="/" dev="ramfs" ino=26953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 248.827346][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 249.457324][ T5699] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 249.588986][ T5699] usb 7-1: device descriptor read/64, error -71 [ 249.941096][ T30] audit: type=1326 audit(1788465828.246:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.8.676" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff13679e159 code=0x7fc00000 [ 250.196078][ T5699] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 250.230049][ T1214] usb 9-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 250.244757][ T1214] usb 9-1: MIDIStreaming interface descriptor not found [ 250.318061][ T5699] usb 7-1: device descriptor read/64, error -71 [ 250.378762][ T1214] usb 9-1: USB disconnect, device number 12 [ 250.427673][ T5699] usb usb7-port1: attempt power cycle [ 250.442448][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.657335][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.051928][ T5699] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 251.128403][ T5699] usb 7-1: device descriptor read/8, error -71 [ 251.408651][ T5699] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 251.429819][ T5699] usb 7-1: device descriptor read/8, error -71 [ 251.540098][ T5699] usb usb7-port1: unable to enumerate USB device [ 251.630818][ T9188] loop8: detected capacity change from 0 to 7 [ 251.655304][ T9188] Dev loop8: unable to read RDB block 7 [ 251.655354][ T9188] loop8: unable to read partition table [ 251.655526][ T9188] loop8: partition table beyond EOD, truncated [ 251.655558][ T9188] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 251.695733][ T30] audit: type=1400 audit(1788465830.006:1215): avc: denied { relabelfrom } for pid=9180 comm="syz.0.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 251.704126][ T30] audit: type=1400 audit(1788465830.006:1216): avc: denied { relabelto } for pid=9180 comm="syz.0.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 252.283872][ T9195] netlink: 64 bytes leftover after parsing attributes in process `syz.8.691'. [ 252.324902][ T9195] syzkaller1: entered promiscuous mode [ 252.330750][ T9195] syzkaller1: entered allmulticast mode [ 252.335520][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 252.352906][ T5604] Bluetooth: hci2: unknown advertising packet type: 0xf3 [ 252.489883][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 252.502660][ T10] usb 6-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 252.502697][ T10] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 252.502717][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 252.502742][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.529563][ T10] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 252.860657][ T10] usb 6-1: string descriptor 0 read error: -71 [ 253.384233][ T10] usb 6-1: USB disconnect, device number 26 [ 254.837572][ T5800] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 255.012470][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.8.701'. [ 255.168217][ T2262] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 255.287349][ T5800] usb 7-1: Using ep0 maxpacket: 32 [ 255.288263][ T5800] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 255.289736][ T5800] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34692, setting to 1024 [ 255.289772][ T5800] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.292263][ T5800] usb 7-1: config 0 descriptor?? [ 255.293339][ T9211] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 255.337811][ T2262] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 255.338680][ T2262] usb 6-1: config 171 has an invalid interface number: 109 but max is 0 [ 255.338700][ T2262] usb 6-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 255.338716][ T2262] usb 6-1: config 171 has no interface number 0 [ 255.338746][ T2262] usb 6-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 255 [ 255.338766][ T2262] usb 6-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 255.340362][ T2262] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.340380][ T2262] usb 6-1: Product: syz [ 255.340391][ T2262] usb 6-1: Manufacturer: syz [ 255.340404][ T2262] usb 6-1: SerialNumber: syz [ 255.351240][ T9220] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 255.609787][ T9223] netlink: 116 bytes leftover after parsing attributes in process `syz.5.702'. [ 255.708966][ T5800] hid_parser_main: 25 callbacks suppressed [ 255.715917][ T5800] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 255.715970][ T5800] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 255.830868][ T30] audit: type=1400 audit(1788465834.146:1217): avc: denied { mount } for pid=9226 comm="syz.8.704" name="/" dev="rpc_pipefs" ino=26501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 255.904069][ T5800] ft260 0003:0403:6030.0016: chip code: 0000 0000 [ 256.106319][ T5800] ft260 0003:0403:6030.0016: failed to retrieve system status [ 256.115886][ T5800] ft260 0003:0403:6030.0016: probe with driver ft260 failed with error -71 [ 256.121302][ T5800] usb 7-1: USB disconnect, device number 37 [ 256.357754][ T2262] ath6kl: Failed to submit usb control message: -110 [ 256.357799][ T2262] ath6kl: unable to send the bmi data to the device: -110 [ 256.357814][ T2262] ath6kl: Unable to send get target info: -110 [ 256.371996][ T2262] ath6kl: Failed to init ath6kl core: -110 [ 256.372912][ T2262] ath6kl_usb 6-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 256.616100][ T30] audit: type=1400 audit(1788465834.926:1218): avc: denied { unmount } for pid=8338 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 256.691728][ T9232] netlink: 12 bytes leftover after parsing attributes in process `syz.8.705'. [ 256.975337][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.706'. [ 258.573869][ T2262] usb 6-1: USB disconnect, device number 27 [ 259.373344][ T9256] Bluetooth: MGMT ver 1.23 [ 259.386366][ T9256] usbip-vudc usbip-vudc.0: gadget not bound [ 259.412942][ T9256] 9p: Bad value for 'rfdno' [ 259.419584][ T9263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.715'. [ 259.496520][ T9263] bond1: entered promiscuous mode [ 259.502719][ T9263] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.581394][ T9268] 9pnet_fd: Insufficient options for proto=fd [ 259.593406][ T9271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 259.675153][ T5604] Bluetooth: hci4: unknown advertising packet type: 0xf3 [ 259.857386][ T2262] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 259.927392][ T5785] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 260.007334][ T2262] usb 7-1: Using ep0 maxpacket: 32 [ 260.007842][ T2262] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 260.008668][ T2262] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34692, setting to 1024 [ 260.008700][ T2262] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.012932][ T2262] usb 7-1: config 0 descriptor?? [ 260.013471][ T9267] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 260.082568][ T5785] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 260.094817][ T5785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.094855][ T5785] usb 6-1: Product: syz [ 260.094880][ T5785] usb 6-1: Manufacturer: syz [ 260.094899][ T5785] usb 6-1: SerialNumber: syz [ 260.098448][ T5785] usb 6-1: config 0 descriptor?? [ 260.234584][ T30] audit: type=1400 audit(1788465838.546:1219): avc: denied { ioctl } for pid=9277 comm="syz.0.721" path="socket:[27207]" dev="sockfs" ino=27207 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 260.336937][ T5785] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 260.422853][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 260.431177][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 260.441798][ T2262] usbhid 7-1:0.0: can't add hid device: -32 [ 260.441885][ T2262] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 260.458204][ T2262] usb 7-1: USB disconnect, device number 38 [ 260.647363][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 260.808363][ T10] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 260.811892][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.811914][ T10] usb 9-1: Product: syz [ 260.811926][ T10] usb 9-1: Manufacturer: syz [ 260.811937][ T10] usb 9-1: SerialNumber: syz [ 261.023485][ T9284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.023914][ T9284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.234088][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 261.241693][ T9291] netlink: 48 bytes leftover after parsing attributes in process `syz.6.727'. [ 261.257882][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 261.384995][ T9291] xt_LOG: prefix is not null-terminated [ 261.617316][ T5714] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 261.751336][ T9276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.751760][ T9276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.768325][ T5714] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 261.769339][ T5714] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 261.769358][ T5714] usb 7-1: config 0 has no interface number 0 [ 261.769410][ T5714] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.769431][ T5714] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 261.769451][ T5714] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 261.771052][ T5714] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 261.771127][ T5714] usb 7-1: Product: syz [ 261.771140][ T5714] usb 7-1: SerialNumber: syz [ 261.779461][ T5714] usb 7-1: config 0 descriptor?? [ 261.782374][ T5714] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 261.783986][ T5714] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input35 [ 261.862734][ T9284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.863145][ T9284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.983387][ C0] cm109_urb_ctl_callback: 1 callbacks suppressed [ 261.983414][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 261.983605][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 261.983781][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 261.983958][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 261.984139][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 261.984315][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 261.984493][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 261.984667][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 261.984852][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 261.985054][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 261.986513][ T5800] usb 7-1: USB disconnect, device number 39 [ 261.991645][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 262.000202][ T5800] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 262.168645][ T5785] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 262.173078][ T5785] usb 6-1: USB disconnect, device number 28 [ 262.278937][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 262.278987][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 262.279449][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 262.292071][ T10] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 262.556994][ T9294] netlink: 'syz.6.728': attribute type 1 has an invalid length. [ 262.557020][ T9294] netlink: 'syz.6.728': attribute type 4 has an invalid length. [ 262.557049][ T9294] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.728'. [ 262.565269][ T9294] netlink: 'syz.6.728': attribute type 1 has an invalid length. [ 262.565284][ T9294] netlink: 'syz.6.728': attribute type 4 has an invalid length. [ 262.565295][ T9294] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.728'. [ 262.659899][ T8037] IPVS: starting estimator thread 0... [ 262.685104][ T9300] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 262.710565][ T5604] Bluetooth: hci2: unknown advertising packet type: 0xf3 [ 262.767727][ T9299] IPVS: using max 41 ests per chain, 98400 per kthread [ 262.918054][ T8031] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.096337][ T9311] 9pnet_fd: Insufficient options for proto=fd [ 263.275083][ T30] audit: type=1400 audit(1788465841.586:1220): avc: denied { checkpoint_restore } for pid=9315 comm="syz.6.736" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 263.315748][ T9316] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.317801][ T9316] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.327900][ T9316] bridge0: entered allmulticast mode [ 263.412120][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.737'. [ 263.427344][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 263.474470][ T2262] usb 9-1: USB disconnect, device number 13 [ 263.579183][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 263.584972][ T10] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 263.598067][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34692, setting to 1024 [ 263.598119][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.621252][ T10] usb 6-1: config 0 descriptor?? [ 263.633674][ T9314] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 263.867365][ T2262] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 264.020943][ T2262] usb 9-1: unable to get BOS descriptor or descriptor too short [ 264.029681][ T2262] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 264.035121][ T2262] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.035162][ T2262] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 264.035201][ T2262] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 39, changing to 7 [ 264.038772][ T2262] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.038798][ T2262] usb 9-1: Product: syz [ 264.038811][ T2262] usb 9-1: Manufacturer: syz [ 264.038825][ T2262] usb 9-1: SerialNumber: syz [ 264.056347][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 264.056649][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 264.056763][ T10] usbhid 6-1:0.0: can't add hid device: -32 [ 264.056857][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 264.300699][ T30] audit: type=1400 audit(1788465842.616:1221): avc: denied { append } for pid=9325 comm="syz.8.740" name="event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 264.938967][ T2262] usb 9-1: 1:1 : no or invalid class specific endpoint descriptor [ 264.939023][ T2262] usb 9-1: 1:1 : sample bitwidth 62 in over sample bytes 1 [ 264.939045][ T2262] usb 9-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 264.940210][ T10] usb 6-1: USB disconnect, device number 29 [ 264.942757][ T2262] usb 9-1: unit 2 not found! [ 264.942774][ T2262] usb 9-1: unit 0 not found! [ 265.020677][ T2262] usb 9-1: USB disconnect, device number 14 [ 265.037109][ T9340] raw_sendmsg: syz.3.745 forgot to set AF_INET. Fix it! [ 265.066214][ T30] audit: type=1400 audit(1788465843.376:1222): avc: denied { name_bind } for pid=9338 comm="syz.5.744" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 265.158213][ T5604] Bluetooth: hci2: unknown advertising packet type: 0xf3 [ 265.177550][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.212604][ T30] audit: type=1400 audit(1788465843.526:1223): avc: denied { accept } for pid=9339 comm="syz.3.745" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 265.302130][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.748'. [ 265.322679][ T9348] team0: Port device team_slave_0 removed [ 265.456640][ T9354] 9pnet_fd: Insufficient options for proto=fd [ 265.645200][ T9361] netlink: 16 bytes leftover after parsing attributes in process `syz.8.753'. [ 265.657021][ T9361] netlink: 16 bytes leftover after parsing attributes in process `syz.8.753'. [ 265.967527][ T10] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 266.137388][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 266.143086][ T10] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 266.144128][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34692, setting to 1024 [ 266.144161][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.146190][ T10] usb 7-1: config 0 descriptor?? [ 266.146706][ T9366] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 266.217359][ T5785] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 266.368023][ T5785] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 266.378451][ T5785] usb 6-1: config 171 has an invalid interface number: 109 but max is 0 [ 266.378494][ T5785] usb 6-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 266.378513][ T5785] usb 6-1: config 171 has no interface number 0 [ 266.378540][ T5785] usb 6-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 255 [ 266.378558][ T5785] usb 6-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 266.380584][ T5785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.380603][ T5785] usb 6-1: Product: syz [ 266.380615][ T5785] usb 6-1: Manufacturer: syz [ 266.380627][ T5785] usb 6-1: SerialNumber: syz [ 266.388747][ T9368] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 266.556593][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 266.566933][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 266.567032][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 266.608430][ T10] usb 7-1: USB disconnect, device number 40 [ 266.661220][ T9377] netlink: 116 bytes leftover after parsing attributes in process `syz.5.755'. [ 266.814709][ T9380] gtp1: entered allmulticast mode [ 267.477492][ T5785] ath6kl: Failed to submit usb control message: -110 [ 267.477553][ T5785] ath6kl: unable to send the bmi data to the device: -110 [ 267.477566][ T5785] ath6kl: Unable to send get target info: -110 [ 267.488503][ T5785] ath6kl: Failed to init ath6kl core: -110 [ 267.489353][ T5785] ath6kl_usb 6-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 267.646371][ T9395] FAULT_INJECTION: forcing a failure. [ 267.646371][ T9395] name failslab, interval 1, probability 0, space 0, times 0 [ 267.646418][ T9395] CPU: 1 UID: 0 PID: 9395 Comm: syz.0.763 Not tainted syzkaller #0 PREEMPT(full) [ 267.646438][ T9395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 267.646447][ T9395] Call Trace: [ 267.646452][ T9395] [ 267.646457][ T9395] dump_stack_lvl+0x100/0x190 [ 267.646483][ T9395] should_fail_ex.cold+0x5/0xa [ 267.646505][ T9395] should_failslab+0xc2/0x120 [ 267.646525][ T9395] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 267.646542][ T9395] ? __alloc_skb+0x5b7/0x710 [ 267.646565][ T9395] ? __alloc_skb+0x140/0x710 [ 267.646591][ T9395] __alloc_skb+0x140/0x710 [ 267.646612][ T9395] ? __alloc_skb+0x5b7/0x710 [ 267.646634][ T9395] ? __pfx___alloc_skb+0x10/0x10 [ 267.646663][ T9395] netlink_alloc_large_skb+0x69/0x150 [ 267.646688][ T9395] netlink_sendmsg+0x680/0xda0 [ 267.646715][ T9395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.646739][ T9395] ? selinux_socket_sendmsg+0x198/0x2f0 [ 267.646766][ T9395] ____sys_sendmsg+0xa4d/0xbe0 [ 267.646783][ T9395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.646807][ T9395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.646830][ T9395] ? lock_acquire+0x1d1/0x380 [ 267.646846][ T9395] ? get_pid_task+0x2a/0x250 [ 267.646869][ T9395] ___sys_sendmsg+0x190/0x1e0 [ 267.646894][ T9395] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.646913][ T9395] ? get_pid_task+0x106/0x250 [ 267.646941][ T9395] ? find_held_lock+0x2b/0x80 [ 267.646975][ T9395] __sys_sendmsg+0x160/0x210 [ 267.646991][ T9395] ? __pfx___sys_sendmsg+0x10/0x10 [ 267.647017][ T9395] do_syscall_64+0x123/0x790 [ 267.647037][ T9395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.647054][ T9395] RIP: 0033:0x7f1054f9e159 [ 267.647067][ T9395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.647081][ T9395] RSP: 002b:00007f1055f31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.647097][ T9395] RAX: ffffffffffffffda RBX: 00007f1055225fa0 RCX: 00007f1054f9e159 [ 267.647108][ T9395] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 267.647117][ T9395] RBP: 00007f1055f31090 R08: 0000000000000000 R09: 0000000000000000 [ 267.647127][ T9395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.647136][ T9395] R13: 00007f1055226038 R14: 00007f1055225fa0 R15: 00007fff1a4623f8 [ 267.647156][ T9395] [ 267.922758][ T9401] 9pnet_fd: Insufficient options for proto=fd [ 268.367886][ T9404] loop2: detected capacity change from 0 to 1 [ 268.371708][ T9404] Dev loop2: unable to read RDB block 1 [ 268.371755][ T9404] loop2: unable to read partition table [ 268.371901][ T9404] loop2: partition table beyond EOD, truncated [ 268.371921][ T9404] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 268.679314][ T30] audit: type=1400 audit(1788465846.996:1224): avc: denied { write } for pid=9414 comm="syz.0.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 268.989342][ T5785] usb 6-1: USB disconnect, device number 30 [ 269.367383][ T5785] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 269.517365][ T5785] usb 6-1: Using ep0 maxpacket: 8 [ 269.518898][ T5785] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 269.519840][ T5785] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.519861][ T5785] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.519880][ T5785] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 269.519897][ T5785] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.519926][ T5785] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.525128][ T5785] usbtmc 6-1:16.0: bulk endpoints not found [ 270.098611][ T5699] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 270.297423][ T5699] usb 7-1: Using ep0 maxpacket: 32 [ 270.303729][ T5699] usb 7-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 270.316393][ T5699] usb 7-1: config 0 has an invalid interface number: 239 but max is 0 [ 270.325128][ T5699] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.325160][ T5699] usb 7-1: config 0 has no interface number 0 [ 270.355569][ T5699] usb 7-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 270.366870][ T5699] usb 7-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 270.367361][ T5699] usb 7-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 270.367391][ T5699] usb 7-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 270.367446][ T5699] usb 7-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 270.367474][ T5699] usb 7-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 270.367501][ T5699] usb 7-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 270.367527][ T5699] usb 7-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 270.367554][ T5699] usb 7-1: config 0 interface 239 has no altsetting 0 [ 270.480410][ T5699] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.489434][ T5699] usb 7-1: Product: syz [ 270.489501][ T5699] usb 7-1: Manufacturer: syz [ 270.490786][ T5699] usb 7-1: SerialNumber: syz [ 270.561750][ T9432] 9pnet_fd: Insufficient options for proto=fd [ 270.590297][ T5699] usb 7-1: config 0 descriptor?? [ 270.602503][ T9429] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 270.602649][ T9429] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 270.860329][ T30] audit: type=1400 audit(1788465849.166:1225): avc: denied { bind } for pid=9427 comm="syz.6.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 271.267659][ T5604] Bluetooth: hci5: urb ffff88805bccde00 submission failed (90) [ 271.786808][ T5699] usb 7-1: USB disconnect, device number 41 [ 272.208240][ T5785] usb 6-1: USB disconnect, device number 31 [ 272.970685][ T9440] netlink: 'syz.3.779': attribute type 23 has an invalid length. [ 273.011686][ T30] audit: type=1400 audit(1788465851.326:1226): avc: denied { create } for pid=9450 comm="syz.5.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 273.014039][ T30] audit: type=1400 audit(1788465851.326:1227): avc: denied { write } for pid=9450 comm="syz.5.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 273.051738][ T9451] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1828 sclass=netlink_xfrm_socket pid=9451 comm=syz.5.782 [ 273.052574][ T9451] netlink: 168 bytes leftover after parsing attributes in process `syz.5.782'. [ 273.299975][ T9461] netlink: 260 bytes leftover after parsing attributes in process `syz.8.783'. [ 273.567625][ T9471] dlm: non-version read from control device 0 [ 273.887368][ T5699] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 273.907486][ T2262] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 274.174196][ T5699] usb 6-1: Using ep0 maxpacket: 16 [ 274.176709][ T5699] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 274.178565][ T5699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.178591][ T5699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.178616][ T5699] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 274.178647][ T5699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.180670][ T5699] usb 6-1: config 0 descriptor?? [ 274.188162][ T2262] usb 9-1: Using ep0 maxpacket: 32 [ 274.188844][ T2262] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 274.190499][ T2262] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34692, setting to 1024 [ 274.190541][ T2262] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.192956][ T2262] usb 9-1: config 0 descriptor?? [ 274.193636][ T9474] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 274.330799][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.792'. [ 274.814990][ T30] audit: type=1400 audit(1788465853.126:1228): avc: denied { bind } for pid=9484 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 274.853617][ T2262] ft260 0003:0403:6030.0017: unknown main item tag 0x0 [ 274.853671][ T2262] ft260 0003:0403:6030.0017: unknown main item tag 0x0 [ 274.873949][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.790'. [ 274.885582][ T5699] usbhid 6-1:0.0: can't add hid device: -71 [ 274.885671][ T5699] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 274.892121][ T5699] usb 6-1: USB disconnect, device number 32 [ 275.211946][ T2262] ft260 0003:0403:6030.0017: chip code: 0000 0000 [ 275.422642][ T2262] ft260 0003:0403:6030.0017: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0 [ 275.606381][ T9491] FAULT_INJECTION: forcing a failure. [ 275.606381][ T9491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.620341][ T9491] CPU: 1 UID: 0 PID: 9491 Comm: syz.3.796 Not tainted syzkaller #0 PREEMPT(full) [ 275.620366][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 275.620377][ T9491] Call Trace: [ 275.620383][ T9491] [ 275.620390][ T9491] dump_stack_lvl+0x100/0x190 [ 275.620420][ T9491] should_fail_ex.cold+0x5/0xa [ 275.620446][ T9491] _copy_from_user+0x2e/0xd0 [ 275.620470][ T9491] __do_sys_copy_file_range+0x134/0x460 [ 275.620492][ T9491] ? fput+0x7c/0x100 [ 275.620512][ T9491] ? __pfx___do_sys_copy_file_range+0x10/0x10 [ 275.620533][ T9491] ? ksys_write+0x1ac/0x250 [ 275.620549][ T9491] ? __pfx_ksys_write+0x10/0x10 [ 275.620580][ T9491] do_syscall_64+0x123/0x790 [ 275.620603][ T9491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.620623][ T9491] RIP: 0033:0x7ff07e79e159 [ 275.620638][ T9491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.620654][ T9491] RSP: 002b:00007ff07f61b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 275.620672][ T9491] RAX: ffffffffffffffda RBX: 00007ff07ea25fa0 RCX: 00007ff07e79e159 [ 275.620684][ T9491] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000005 [ 275.620694][ T9491] RBP: 00007ff07f61b090 R08: 0000000000000009 R09: 0000000000000000 [ 275.620705][ T9491] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 275.620715][ T9491] R13: 00007ff07ea26038 R14: 00007ff07ea25fa0 R15: 00007ffde3190038 [ 275.620737][ T9491] [ 275.622443][ T2262] ft260 0003:0403:6030.0017: failed to retrieve status: -71, no wakeup [ 275.624096][ T2262] ft260 0003:0403:6030.0017: failed to retrieve status: -71 [ 275.625369][ T2262] ft260 0003:0403:6030.0017: failed to reset I2C controller: -71 [ 275.664097][ T2262] usb 9-1: USB disconnect, device number 15 [ 275.849551][ T9505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.857115][ T30] audit: type=1400 audit(1788465854.166:1229): avc: denied { bind } for pid=9504 comm="syz.3.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 275.857691][ T30] audit: type=1400 audit(1788465854.166:1230): avc: denied { write } for pid=9504 comm="syz.3.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 276.087351][ T5714] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 276.184889][ T30] audit: type=1400 audit(1788465854.496:1231): avc: denied { ioctl } for pid=9506 comm="syz.8.801" path="socket:[28164]" dev="sockfs" ino=28164 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 276.233938][ T9509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.234205][ T9509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.234439][ T9509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.251548][ T5714] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 276.252573][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.270983][ T5714] usb 6-1: config 0 descriptor?? [ 276.777855][ T5714] ath6kl: Unsupported hardware version: 0x1cb1aa9e [ 276.788439][ T5714] ath6kl: Failed to init ath6kl core: -22 [ 276.789321][ T5714] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 277.063399][ T9527] netlink: 'syz.8.807': attribute type 21 has an invalid length. [ 277.063539][ T9527] netlink: 156 bytes leftover after parsing attributes in process `syz.8.807'. [ 277.098751][ T9527] selinuxfs: Unknown parameter 'cache' [ 277.187454][ T5714] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 277.395919][ T9530] FAULT_INJECTION: forcing a failure. [ 277.395919][ T9530] name failslab, interval 1, probability 0, space 0, times 0 [ 277.395955][ T9530] CPU: 1 UID: 0 PID: 9530 Comm: syz.8.807 Not tainted syzkaller #0 PREEMPT(full) [ 277.395976][ T9530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 277.395986][ T9530] Call Trace: [ 277.395992][ T9530] [ 277.395998][ T9530] dump_stack_lvl+0x100/0x190 [ 277.396027][ T9530] should_fail_ex.cold+0x5/0xa [ 277.396050][ T9530] should_failslab+0xc2/0x120 [ 277.396070][ T9530] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 277.396088][ T9530] ? __d_alloc+0x35/0xa50 [ 277.396113][ T9530] __d_alloc+0x35/0xa50 [ 277.396136][ T9530] d_alloc_pseudo+0x1c/0xc0 [ 277.396151][ T9530] alloc_file_pseudo+0x118/0x290 [ 277.396174][ T9530] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 277.396194][ T9530] ? alloc_fd+0x471/0x7a0 [ 277.396217][ T9530] sock_alloc_file+0x50/0x210 [ 277.396235][ T9530] __sys_socket+0x1c0/0x260 [ 277.396255][ T9530] ? fput+0x7c/0x100 [ 277.396272][ T9530] ? __pfx___sys_socket+0x10/0x10 [ 277.396291][ T9530] ? ksys_write+0x1ac/0x250 [ 277.396305][ T9530] ? __pfx_ksys_write+0x10/0x10 [ 277.396324][ T9530] __x64_sys_socket+0x72/0xb0 [ 277.396343][ T9530] ? lockdep_hardirqs_on+0x7d/0x110 [ 277.396362][ T9530] do_syscall_64+0x123/0x790 [ 277.396382][ T9530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.396399][ T9530] RIP: 0033:0x7ff13679e159 [ 277.396412][ T9530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.396427][ T9530] RSP: 002b:00007ff13763e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 277.396443][ T9530] RAX: ffffffffffffffda RBX: 00007ff136a26090 RCX: 00007ff13679e159 [ 277.396454][ T9530] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 277.396464][ T9530] RBP: 00007ff136835024 R08: 0000000000000000 R09: 0000000000000000 [ 277.396473][ T9530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.396483][ T9530] R13: 00007ff136a26128 R14: 00007ff136a26090 R15: 00007ffcbb547fa8 [ 277.396504][ T9530] [ 277.408979][ T5714] usb 7-1: device descriptor read/64, error -71 [ 277.797348][ T5714] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 277.927387][ T5714] usb 7-1: device descriptor read/64, error -71 [ 278.113665][ T5714] usb usb7-port1: attempt power cycle [ 278.195679][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.8.809'. [ 278.457340][ T5714] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 278.478207][ T5714] usb 7-1: device descriptor read/8, error -71 [ 278.507426][ T2262] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 278.661150][ T2262] usb 9-1: Using ep0 maxpacket: 32 [ 278.666867][ T2262] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 278.677895][ T2262] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34692, setting to 1024 [ 278.677946][ T2262] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.703221][ T2262] usb 9-1: config 0 descriptor?? [ 278.710353][ T9539] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 278.717812][ T5714] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 278.747988][ T5714] usb 7-1: device descriptor read/8, error -71 [ 278.821549][ T5800] usb 6-1: USB disconnect, device number 33 [ 278.858099][ T5714] usb usb7-port1: unable to enumerate USB device [ 279.712494][ T5800] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 279.857471][ T5800] usb 6-1: Using ep0 maxpacket: 32 [ 279.871915][ T5800] usb 6-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=70.55 [ 279.876556][ T5800] usb 6-1: config 247 has an invalid interface number: 221 but max is 0 [ 279.876583][ T5800] usb 6-1: config 247 has no interface number 0 [ 279.876606][ T5800] usb 6-1: config 247 interface 221 has no altsetting 0 [ 279.902195][ T5800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.902220][ T5800] usb 6-1: Product: syz [ 279.902233][ T5800] usb 6-1: Manufacturer: syz [ 279.902245][ T5800] usb 6-1: SerialNumber: syz [ 280.242433][ T5800] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:247.221/input/input36 [ 280.591945][ T2262] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 280.591990][ T2262] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 280.803058][ T30] audit: type=1400 audit(1788465859.116:1232): avc: denied { create } for pid=9546 comm="syz.5.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 281.842947][ T2262] ft260 0003:0403:6030.0018: failed to retrieve chip version [ 281.843206][ T2262] ft260 0003:0403:6030.0018: probe with driver ft260 failed with error -71 [ 281.848886][ T2262] usb 9-1: USB disconnect, device number 16 [ 282.176161][ T4956] bcm5974 6-1:247.221: could not read from device [ 282.208107][ T4956] bcm5974 6-1:247.221: could not read from device [ 282.498651][ T2262] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 282.665513][ T5800] usb 6-1: USB disconnect, device number 34 [ 282.667701][ T4956] bcm5974 6-1:247.221: could not read from device [ 282.680920][ T2262] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 282.699489][ T2262] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 282.699531][ T2262] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 282.699563][ T2262] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 282.699605][ T2262] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 282.699631][ T2262] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 282.755192][ T2262] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 282.755580][ T2262] usb 9-1: Product: syz [ 282.755611][ T2262] usb 9-1: Manufacturer: syz [ 282.777835][ T2262] cdc_wdm 9-1:1.0: skipping garbage [ 282.784320][ T2262] cdc_wdm 9-1:1.0: skipping garbage [ 282.814031][ T2262] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 282.825290][ T2262] cdc_wdm 9-1:1.0: Unknown control protocol [ 283.004507][ T30] audit: type=1400 audit(1788465861.316:1233): avc: denied { read write } for pid=9567 comm="syz.8.822" name="cdc-wdm0" dev="devtmpfs" ino=3435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 283.032384][ T30] audit: type=1400 audit(1788465861.346:1234): avc: denied { open } for pid=9567 comm="syz.8.822" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 283.221687][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.825'. [ 283.322334][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -EPIPE [ 283.904515][ T5800] usb 9-1: USB disconnect, device number 17 [ 285.957770][ T5785] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 286.109761][ T5785] usb 9-1: Using ep0 maxpacket: 32 [ 286.111700][ T5785] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 286.112536][ T5785] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34692, setting to 1024 [ 286.112569][ T5785] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.120450][ T5785] usb 9-1: config 0 descriptor?? [ 286.121062][ T9602] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 286.600276][ T5785] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 286.600339][ T5785] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 286.694432][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.837'. [ 287.084133][ T30] audit: type=1400 audit(1788465865.396:1235): avc: denied { read } for pid=9617 comm="syz.0.838" dev="nsfs" ino=4026532963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 287.084197][ T30] audit: type=1400 audit(1788465865.396:1236): avc: denied { open } for pid=9617 comm="syz.0.838" path="net:[4026532963]" dev="nsfs" ino=4026532963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 287.112615][ T5785] ft260 0003:0403:6030.0019: chip code: 0000 0000 [ 287.138146][ T5785] ft260 0003:0403:6030.0019: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0 [ 287.215472][ T9623] gadgetfs: bound to dummy_udc driver [ 287.251756][ T9623] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 287.331616][ T30] audit: type=1800 audit(1788465865.646:1237): pid=9623 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.839" name="ep1in-bulk" dev="gadgetfs" ino=28480 res=0 errno=0 [ 287.380461][ T5785] ft260 0003:0403:6030.0019: failed to retrieve status: -71, no wakeup [ 287.380969][ T5785] ft260 0003:0403:6030.0019: failed to retrieve status: -71 [ 287.382326][ T5785] ft260 0003:0403:6030.0019: failed to reset I2C controller: -71 [ 287.526078][ T5785] usb 9-1: USB disconnect, device number 18 [ 287.818041][ T5800] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 288.347574][ T5800] usb 6-1: Using ep0 maxpacket: 32 [ 288.373056][ T30] audit: type=1400 audit(1788465866.686:1238): avc: denied { create } for pid=9646 comm="syz.3.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 288.431412][ T5800] usb 6-1: unable to get BOS descriptor or descriptor too short [ 288.432219][ T5800] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.432257][ T5800] usb 6-1: no configurations [ 288.432269][ T5800] usb 6-1: can't read configurations, error -22 [ 288.710589][ T9654] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 288.714261][ T9654] CPU: 0 UID: 0 PID: 9654 Comm: syz.8.846 Not tainted syzkaller #0 PREEMPT(full) [ 288.714292][ T9654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 288.714305][ T9654] Call Trace: [ 288.714316][ T9654] [ 288.714324][ T9654] dump_stack_lvl+0x100/0x190 [ 288.714357][ T9654] sysfs_warn_dup.cold+0x1c/0x28 [ 288.714388][ T9654] sysfs_create_dir_ns+0x24b/0x2b0 [ 288.714413][ T9654] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 288.714439][ T9654] ? find_held_lock+0x2b/0x80 [ 288.714465][ T9654] ? kobject_add_internal+0x25f/0x930 [ 288.714492][ T9654] ? kobject_add_internal+0x25f/0x930 [ 288.714521][ T9654] ? class_dir_child_ns_type+0xd/0x60 [ 288.714545][ T9654] kobject_add_internal+0x2c8/0x930 [ 288.714577][ T9654] kobject_add+0x16a/0x1e0 [ 288.714603][ T9654] ? __pfx_kobject_add+0x10/0x10 [ 288.714631][ T9654] ? get_device_parent+0x1b3/0x4c0 [ 288.714651][ T9654] ? kobject_put+0xb9/0x640 [ 288.714684][ T9654] device_add+0x294/0x1970 [ 288.714706][ T9654] ? lockdep_init_map_type+0x5c/0x250 [ 288.714727][ T9654] ? __pfx_device_add+0x10/0x10 [ 288.714748][ T9654] ? lockdep_init_map_type+0x5c/0x250 [ 288.714769][ T9654] ? __init_waitqueue_head+0xca/0x150 [ 288.714799][ T9654] tty_register_device_attr+0x388/0x7f0 [ 288.714832][ T9654] ? lockdep_init_map_type+0x5c/0x250 [ 288.714853][ T9654] ? __pfx_tty_register_device_attr+0x10/0x10 [ 288.714899][ T9654] ? tty_port_init+0x156/0x1c0 [ 288.714922][ T9654] gsm_activate_mux+0x155/0x2a0 [ 288.714944][ T9654] gsmld_ioctl+0xbbc/0x15c0 [ 288.714975][ T9654] ? __pfx_gsmld_ioctl+0x10/0x10 [ 288.715020][ T9654] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 288.715045][ T9654] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 288.715076][ T9654] ? __pfx_gsmld_ioctl+0x10/0x10 [ 288.715099][ T9654] tty_ioctl+0x11b4/0x1640 [ 288.715121][ T9654] ? __pfx_tty_ioctl+0x10/0x10 [ 288.715137][ T9654] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 288.715172][ T9654] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 288.715207][ T9654] ? __fget_files+0x34/0x3d0 [ 288.715240][ T9654] ? selinux_file_ioctl+0x13b/0x290 [ 288.715268][ T9654] ? selinux_file_ioctl+0xb6/0x290 [ 288.715300][ T9654] ? __pfx_tty_ioctl+0x10/0x10 [ 288.715320][ T9654] __x64_sys_ioctl+0x18e/0x210 [ 288.715352][ T9654] do_syscall_64+0x123/0x790 [ 288.715377][ T9654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.715395][ T9654] RIP: 0033:0x7ff13679e159 [ 288.715414][ T9654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.715432][ T9654] RSP: 002b:00007ff13761d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.715452][ T9654] RAX: ffffffffffffffda RBX: 00007ff136a26180 RCX: 00007ff13679e159 [ 288.715464][ T9654] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 288.715476][ T9654] RBP: 00007ff136835024 R08: 0000000000000000 R09: 0000000000000000 [ 288.715488][ T9654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.715500][ T9654] R13: 00007ff136a26218 R14: 00007ff136a26180 R15: 00007ffcbb547fa8 [ 288.715525][ T9654] [ 288.715804][ T9654] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 289.834023][ T30] audit: type=1400 audit(1788465868.146:1239): avc: denied { ioctl } for pid=9658 comm="syz.5.848" path="socket:[29551]" dev="sockfs" ino=29551 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 289.987357][ T2262] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 289.992629][ T9662] netlink: 'syz.5.848': attribute type 13 has an invalid length. [ 289.996940][ T9664] netlink: 'syz.0.849': attribute type 106 has an invalid length. [ 290.000934][ T9664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.849'. [ 290.167719][ T2262] usb 7-1: Using ep0 maxpacket: 32 [ 290.173568][ T2262] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 290.195701][ T2262] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.205327][ T2262] usb 7-1: Product: syz [ 290.209644][ T2262] usb 7-1: Manufacturer: syz [ 290.214329][ T2262] usb 7-1: SerialNumber: syz [ 290.246785][ T2262] usb 7-1: config 0 descriptor?? [ 290.267443][ T2262] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 290.480546][ T30] audit: type=1400 audit(1788465868.796:1240): avc: denied { module_load } for pid=9669 comm="syz.5.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 290.480649][ T9670] Invalid ELF header type: 2 != 1 [ 290.508430][ T9670] Invalid ELF header type: 2 != 1 [ 290.728465][ T9674] 9pnet_fd: Insufficient options for proto=fd [ 291.078058][ T5800] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 291.229620][ T5800] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 291.230857][ T5800] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 291.230881][ T5800] usb 9-1: config 1 has no interface number 0 [ 291.233016][ T5800] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.233046][ T5800] usb 9-1: Product: syz [ 291.233059][ T5800] usb 9-1: Manufacturer: syz [ 291.233072][ T5800] usb 9-1: SerialNumber: syz [ 291.255603][ T5800] usb 9-1: 3:1 : does not exist [ 291.255623][ T5800] usb 9-1: 3:2 : does not exist [ 291.480545][ T9678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.481169][ T9678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.499503][ T9680] FAULT_INJECTION: forcing a failure. [ 291.499503][ T9680] name failslab, interval 1, probability 0, space 0, times 0 [ 291.499534][ T9680] CPU: 1 UID: 0 PID: 9680 Comm: syz.3.854 Not tainted syzkaller #0 PREEMPT(full) [ 291.499553][ T9680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 291.499563][ T9680] Call Trace: [ 291.499569][ T9680] [ 291.499575][ T9680] dump_stack_lvl+0x100/0x190 [ 291.499607][ T9680] should_fail_ex.cold+0x5/0xa [ 291.499633][ T9680] should_failslab+0xc2/0x120 [ 291.499656][ T9680] __kmalloc_noprof+0xfc/0x840 [ 291.499673][ T9680] ? __register_sysctl_table+0xbc8/0x1650 [ 291.499697][ T9680] ? __register_sysctl_table+0xbe4/0x1650 [ 291.499724][ T9680] __register_sysctl_table+0xbe4/0x1650 [ 291.499752][ T9680] ? __pfx___register_sysctl_table+0x10/0x10 [ 291.499774][ T9680] ? register_pidns_sysctls+0x48/0x1c0 [ 291.499800][ T9680] ? __asan_memcpy+0x3c/0x60 [ 291.499829][ T9680] register_pidns_sysctls+0x11d/0x1c0 [ 291.499856][ T9680] ? __ns_common_init+0x299/0x4b0 [ 291.499879][ T9680] copy_pid_ns+0x680/0x10a0 [ 291.499901][ T9680] ? __pfx_copy_pid_ns+0x10/0x10 [ 291.499922][ T9680] ? __pfx_copy_mnt_ns+0x10/0x10 [ 291.499949][ T9680] ? create_new_namespaces+0x30/0xac0 [ 291.499973][ T9680] create_new_namespaces+0x2aa/0xac0 [ 291.499999][ T9680] unshare_nsproxy_namespaces+0xf2/0x220 [ 291.500022][ T9680] ksys_unshare+0x4a2/0xa70 [ 291.500042][ T9680] ? __pfx_ksys_unshare+0x10/0x10 [ 291.500069][ T9680] __x64_sys_unshare+0x31/0x40 [ 291.500087][ T9680] do_syscall_64+0x123/0x790 [ 291.500108][ T9680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.500124][ T9680] RIP: 0033:0x7ff07e79e159 [ 291.500139][ T9680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.500154][ T9680] RSP: 002b:00007ff07f61b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 291.500172][ T9680] RAX: ffffffffffffffda RBX: 00007ff07ea25fa0 RCX: 00007ff07e79e159 [ 291.500183][ T9680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 291.500192][ T9680] RBP: 00007ff07e835024 R08: 0000000000000000 R09: 0000000000000000 [ 291.500203][ T9680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.500212][ T9680] R13: 00007ff07ea26038 R14: 00007ff07ea25fa0 R15: 00007ffde3190038 [ 291.500234][ T9680] [ 291.500241][ T9680] sysctl could not get directory: /kernel -12 [ 292.381395][ T9687] openvswitch: netlink: IPv4 tun info is not correct [ 292.940937][ T2262] gspca_ov534_9: reg_r err -71 [ 293.025495][ T5699] usb 9-1: USB disconnect, device number 19 [ 293.073798][ T9694] netlink: 5 bytes leftover after parsing attributes in process `syz.0.859'. [ 293.076226][ T9694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.163525][ T30] audit: type=1326 audit(1788465871.476:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.0.860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1054f9e159 code=0x7ffc0000 [ 293.163719][ T30] audit: type=1326 audit(1788465871.476:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.0.860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1054f9e159 code=0x7ffc0000 [ 293.166112][ T30] audit: type=1326 audit(1788465871.476:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.0.860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1054f9e159 code=0x7ffc0000 [ 293.166151][ T30] audit: type=1326 audit(1788465871.476:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.0.860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1054f9e159 code=0x7ffc0000 [ 293.166183][ T30] audit: type=1326 audit(1788465871.476:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.0.860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1054f9e159 code=0x7ffc0000 [ 293.166214][ T30] audit: type=1326 audit(1788465871.476:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.0.860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1054f9e159 code=0x7ffc0000 [ 293.167124][ T30] audit: type=1326 audit(1788465871.476:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.0.860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1054f9e159 code=0x7ffc0000 [ 293.167160][ T30] audit: type=1326 audit(1788465871.476:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.0.860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1054f9e159 code=0x7ffc0000 [ 293.167204][ T30] audit: type=1326 audit(1788465871.476:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.0.860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1054f5e98e code=0x7ffc0000 [ 293.167545][ T30] audit: type=1326 audit(1788465871.476:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.0.860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1054f9e159 code=0x7ffc0000 [ 293.277522][ T2262] gspca_ov534_9: Unknown sensor 0000 [ 293.277591][ T2262] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 293.300785][ T2262] usb 7-1: USB disconnect, device number 46 [ 293.560461][ T9699] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 293.660099][ T2262] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 293.809034][ T2262] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 293.810189][ T2262] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.810216][ T2262] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.810246][ T2262] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.307788][ T5800] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 294.378089][ T1214] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 294.469285][ T5800] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 294.481922][ T5800] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.481978][ T5800] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 294.481998][ T5800] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 294.482016][ T5800] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.482045][ T5800] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.550270][ T1214] usb 6-1: Using ep0 maxpacket: 16 [ 294.556237][ T1214] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 294.571167][ T1214] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.571217][ T1214] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.571237][ T1214] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 294.571283][ T1214] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.576412][ T1214] usb 6-1: config 0 descriptor?? [ 294.633467][ T2262] usbhid 7-1:1.0: can't add hid device: -71 [ 294.633579][ T2262] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 294.651498][ T2262] usb 7-1: USB disconnect, device number 47 [ 294.669877][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 296.418385][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.866'. [ 296.425270][ T1214] usbhid 6-1:0.0: can't add hid device: -71 [ 296.425361][ T1214] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 296.428650][ T1214] usb 6-1: USB disconnect, device number 37 [ 296.533956][ T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 296.534151][ T9] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 296.564880][ T9] usb 4-1: USB disconnect, device number 36 [ 296.868243][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 297.042068][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 297.043820][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.043843][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.044685][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 297.044702][ T9] usb 4-1: SerialNumber: syz [ 297.269233][ T9] usb 4-1: 0:2 : does not exist [ 297.341147][ T9] usb 4-1: USB disconnect, device number 37 [ 297.475935][ T9657] udevd[9657]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.763090][ T1214] usb 9-1: USB disconnect, device number 20 [ 298.274183][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.8.898'. [ 298.352076][ T9802] netlink: 16 bytes leftover after parsing attributes in process `syz.6.901'. [ 298.867324][ T5604] Bluetooth: hci4: command 0x0c1a tx timeout [ 299.182223][ T30] kauditd_printk_skb: 216 callbacks suppressed [ 299.190367][ T30] audit: type=1400 audit(1788465877.496:1467): avc: denied { mount } for pid=9835 comm="syz.0.915" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 299.218680][ T9807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.927966][ T9861] syzkaller0: entered promiscuous mode [ 301.009363][ T30] audit: type=1400 audit(1788465879.316:1468): avc: denied { read } for pid=9886 comm="syz.5.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 301.217038][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.8.938'. [ 301.236331][ T9900] netlink: 'syz.8.938': attribute type 2 has an invalid length. [ 301.451271][ T9910] program syz.0.941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.003097][ T30] audit: type=1400 audit(1788465880.316:1469): avc: denied { mounton } for pid=9915 comm="syz.0.945" path="/187/tracefs" dev="tmpfs" ino=1033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 302.624738][ T9936] Failed to initialize the IGMP autojoin socket (err -2) [ 302.912872][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.6.957'. [ 303.052041][ T30] audit: type=1400 audit(1788465881.366:1470): avc: denied { map } for pid=9944 comm="syz.0.959" path="/191/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 303.664248][ T9955] netlink: 20 bytes leftover after parsing attributes in process `syz.8.963'. [ 304.271251][ T30] audit: type=1400 audit(1788465882.586:1471): avc: denied { bind } for pid=9976 comm="syz.8.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 304.292529][ T30] audit: type=1400 audit(1788465882.606:1472): avc: denied { listen } for pid=9976 comm="syz.8.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 304.990303][ T9970] tipc: Started in network mode [ 304.990357][ T9970] tipc: Node identity 7f000001, cluster identity 4711 [ 304.990800][ T9970] tipc: Enabling of bearer rejected, failed to enable media [ 305.057619][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.977'. [ 305.114503][ T9989] netlink: 40 bytes leftover after parsing attributes in process `syz.0.978'. [ 305.236173][ T30] audit: type=1326 audit(1788465883.546:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.0.982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1054f9e159 code=0x0 [ 305.408788][T10003] netlink: 36 bytes leftover after parsing attributes in process `syz.5.983'. [ 305.500966][ T30] audit: type=1800 audit(1788465883.816:1474): pid=9992 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.979" name="file2" dev="sda1" ino=2058 res=0 errno=0 [ 305.530856][T10003] bond_slave_0: entered promiscuous mode [ 305.530891][T10003] bond_slave_0: entered allmulticast mode [ 305.875966][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.988'. [ 306.031406][T10016] Failed to initialize the IGMP autojoin socket (err -2) [ 306.820424][ T30] audit: type=1400 audit(1788465885.126:1475): avc: denied { read } for pid=10033 comm="syz.8.995" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 306.820486][ T30] audit: type=1400 audit(1788465885.126:1476): avc: denied { open } for pid=10033 comm="syz.8.995" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 307.566640][T10059] Failed to initialize the IGMP autojoin socket (err -2) [ 308.622494][T10094] trusted_key: encrypted_key: insufficient parameters specified [ 309.080139][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1024'. [ 309.452046][ T30] audit: type=1400 audit(1788465887.766:1477): avc: denied { read } for pid=10113 comm="syz.5.1031" name="max_speed" dev="configfs" ino=30637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 309.455860][ T30] audit: type=1800 audit(1788465887.766:1478): pid=10115 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1031" name="max_speed" dev="configfs" ino=30637 res=0 errno=0 [ 309.489893][T10118] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1032'. [ 309.489914][T10118] tipc: Invalid UDP bearer configuration [ 309.489939][T10118] tipc: Enabling of bearer rejected, failed to enable media [ 309.703747][ T30] audit: type=1326 audit(1788465888.016:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10135 comm="syz.5.1040" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5b19e159 code=0x7ffc0000 [ 309.703813][ T30] audit: type=1326 audit(1788465888.016:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10135 comm="syz.5.1040" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5b19e159 code=0x7ffc0000 [ 309.762982][ T30] audit: type=1326 audit(1788465888.076:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10135 comm="syz.5.1040" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5b19e159 code=0x7ffc0000 [ 309.763071][ T30] audit: type=1326 audit(1788465888.076:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10135 comm="syz.5.1040" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5b19e159 code=0x7ffc0000 [ 309.764518][ T30] audit: type=1326 audit(1788465888.076:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10135 comm="syz.5.1040" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f5b19e159 code=0x7ffc0000 [ 309.764555][ T30] audit: type=1326 audit(1788465888.076:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10135 comm="syz.5.1040" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5b19e159 code=0x7ffc0000 [ 309.764636][ T30] audit: type=1326 audit(1788465888.076:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10135 comm="syz.5.1040" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5b19e159 code=0x7ffc0000 [ 309.764668][ T30] audit: type=1326 audit(1788465888.076:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10135 comm="syz.5.1040" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5b19e159 code=0x7ffc0000 [ 310.105642][T10150] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.285400][T10120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.885134][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.439774][T10235] FAULT_INJECTION: forcing a failure. [ 312.439774][T10235] name failslab, interval 1, probability 0, space 0, times 0 [ 312.439820][T10235] CPU: 0 UID: 0 PID: 10235 Comm: syz.5.1079 Not tainted syzkaller #0 PREEMPT(full) [ 312.439843][T10235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 312.439854][T10235] Call Trace: [ 312.439861][T10235] [ 312.439870][T10235] dump_stack_lvl+0x100/0x190 [ 312.439902][T10235] should_fail_ex.cold+0x5/0xa [ 312.439930][T10235] should_failslab+0xc2/0x120 [ 312.439956][T10235] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 312.439978][T10235] ? proc_alloc_inode+0x25/0x200 [ 312.440005][T10235] ? __pfx_proc_alloc_inode+0x10/0x10 [ 312.440033][T10235] proc_alloc_inode+0x25/0x200 [ 312.440057][T10235] alloc_inode+0x68/0x250 [ 312.440086][T10235] new_inode+0x22/0x1c0 [ 312.440123][T10235] proc_pid_make_inode+0x22/0x160 [ 312.440149][T10235] ? d_lookup+0xe7/0x190 [ 312.440168][T10235] proc_ns_instantiate+0x57/0x100 [ 312.440196][T10235] proc_fill_cache+0x2a3/0x3a0 [ 312.440222][T10235] ? __pfx_proc_ns_instantiate+0x10/0x10 [ 312.440248][T10235] ? __pfx_proc_fill_cache+0x10/0x10 [ 312.440283][T10235] proc_ns_dir_readdir+0x1ba/0x530 [ 312.440312][T10235] iterate_dir+0x296/0xae0 [ 312.440335][T10235] __x64_sys_getdents64+0x13b/0x2c0 [ 312.440353][T10235] ? __x64_sys_futex+0x358/0x4d0 [ 312.440379][T10235] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 312.440400][T10235] ? __pfx_filldir64+0x10/0x10 [ 312.440427][T10235] do_syscall_64+0x123/0x790 [ 312.440453][T10235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.440473][T10235] RIP: 0033:0x7f1f5b19e159 [ 312.440490][T10235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.440509][T10235] RSP: 002b:00007f1f5c0c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 312.440528][T10235] RAX: ffffffffffffffda RBX: 00007f1f5b425fa0 RCX: 00007f1f5b19e159 [ 312.440541][T10235] RDX: 0000000000000077 RSI: 0000200000000200 RDI: 0000000000000004 [ 312.440552][T10235] RBP: 00007f1f5b235024 R08: 0000000000000000 R09: 0000000000000000 [ 312.440563][T10235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.440575][T10235] R13: 00007f1f5b426038 R14: 00007f1f5b425fa0 R15: 00007ffda2f03c28 [ 312.440600][T10235] [ 313.083865][T10225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.423188][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1097'. [ 313.423309][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1097'. [ 313.573507][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1100'. [ 313.575957][T10274] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 313.575976][T10274] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 314.193997][T10302] macsec1: entered promiscuous mode [ 314.194042][T10302] macsec0: entered promiscuous mode [ 314.391270][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 314.734182][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 314.734415][ T30] audit: type=1326 audit(1788465893.046:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10326 comm="syz.3.1120" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07e79e159 code=0x7ffc0000 [ 314.736109][ T30] audit: type=1326 audit(1788465893.046:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10326 comm="syz.3.1120" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07e79e159 code=0x7ffc0000 [ 314.744247][ T30] audit: type=1326 audit(1788465893.056:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10326 comm="syz.3.1120" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07e79e159 code=0x7ffc0000 [ 314.744293][ T30] audit: type=1326 audit(1788465893.056:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10326 comm="syz.3.1120" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07e79e159 code=0x7ffc0000 [ 314.744918][ T30] audit: type=1326 audit(1788465893.056:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10326 comm="syz.3.1120" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff07e79e159 code=0x7ffc0000 [ 314.744954][ T30] audit: type=1326 audit(1788465893.056:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10326 comm="syz.3.1120" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07e79e159 code=0x7ffc0000 [ 314.744986][ T30] audit: type=1326 audit(1788465893.056:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10326 comm="syz.3.1120" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07e79e159 code=0x7ffc0000 [ 314.745334][ T30] audit: type=1326 audit(1788465893.056:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10326 comm="syz.3.1120" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff07e79e159 code=0x7ffc0000 [ 314.745470][ T30] audit: type=1326 audit(1788465893.056:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10326 comm="syz.3.1120" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff07e79e159 code=0x7ffc0000 [ 314.934817][T10332] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1121'. [ 315.004178][ T30] audit: type=1400 audit(1788465893.316:1516): avc: denied { search } for pid=10329 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.091897][T10337] tmpfs: Bad value for 'mpol' syzkaller syzkaller login: [ 315.148276][T10344] ucma_write: process 666 (syz.5.1127) changed security contexts after opening file descriptor, this is not allowed. [ 316.705366][T10389] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1148'. [ 317.024052][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1152'. [ 317.306367][T10409] netlink: 396 bytes leftover after parsing attributes in process `syz.5.1158'. [ 317.390776][T10413] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1161'. [ 317.390819][T10413] ksmbd: Unknown IPC event: 4, ignore. [ 317.843906][T10447] FAULT_INJECTION: forcing a failure. [ 317.843906][T10447] name failslab, interval 1, probability 0, space 0, times 0 [ 317.843955][T10447] CPU: 1 UID: 0 PID: 10447 Comm: syz.0.1177 Not tainted syzkaller #0 PREEMPT(full) [ 317.843977][T10447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 317.843990][T10447] Call Trace: [ 317.843996][T10447] [ 317.844002][T10447] dump_stack_lvl+0x100/0x190 [ 317.844031][T10447] should_fail_ex.cold+0x5/0xa [ 317.844055][T10447] should_failslab+0xc2/0x120 [ 317.844078][T10447] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 317.844098][T10447] ? __kasan_kmalloc+0xaa/0xb0 [ 317.844117][T10447] ? __request_module+0x2d5/0x6a0 [ 317.844141][T10447] kstrdup+0x51/0xe0 [ 317.844165][T10447] __request_module+0x2d5/0x6a0 [ 317.844186][T10447] ? __pfx___request_module+0x10/0x10 [ 317.844224][T10447] bpf_fill_super+0x742/0x960 [ 317.844246][T10447] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 317.844275][T10447] ? __pfx_bpf_fill_super+0x10/0x10 [ 317.844300][T10447] ? rcu_is_watching+0x13/0xc0 [ 317.844321][T10447] ? cap_capable+0x107/0x430 [ 317.844345][T10447] ? __pfx_bpf_fill_super+0x10/0x10 [ 317.844367][T10447] get_tree_nodev+0xdd/0x190 [ 317.844385][T10447] vfs_get_tree+0x92/0x320 [ 317.844408][T10447] path_mount+0x7d0/0x24c0 [ 317.844434][T10447] ? __pfx_path_mount+0x10/0x10 [ 317.844454][T10447] ? lockdep_hardirqs_on+0x7d/0x110 [ 317.844474][T10447] ? putname+0xb1/0x110 [ 317.844491][T10447] ? kmem_cache_free+0x127/0x6c0 [ 317.844522][T10447] ? __x64_sys_mount+0x293/0x310 [ 317.844550][T10447] __x64_sys_mount+0x293/0x310 [ 317.844573][T10447] ? __pfx___x64_sys_mount+0x10/0x10 [ 317.844603][T10447] do_syscall_64+0x123/0x790 [ 317.844625][T10447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.844644][T10447] RIP: 0033:0x7f1054f9e159 [ 317.844661][T10447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.844677][T10447] RSP: 002b:00007f1055f31028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 317.844695][T10447] RAX: ffffffffffffffda RBX: 00007f1055225fa0 RCX: 00007f1054f9e159 [ 317.844706][T10447] RDX: 00002000000006c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 317.844716][T10447] RBP: 00007f1055035024 R08: 00002000000002c0 R09: 0000000000000000 [ 317.844726][T10447] R10: 0000000000400008 R11: 0000000000000246 R12: 0000000000000000 [ 317.844736][T10447] R13: 00007f1055226038 R14: 00007f1055225fa0 R15: 00007fff1a4623f8 [ 317.844758][T10447] [ 318.497440][T10486] FAULT_INJECTION: forcing a failure. [ 318.497440][T10486] name fail_futex, interval 1, probability 0, space 0, times 1 [ 318.497493][T10486] CPU: 1 UID: 0 PID: 10486 Comm: syz.0.1194 Not tainted syzkaller #0 PREEMPT(full) [ 318.497522][T10486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 318.497534][T10486] Call Trace: [ 318.497541][T10486] [ 318.497549][T10486] dump_stack_lvl+0x100/0x190 [ 318.497584][T10486] should_fail_ex.cold+0x5/0xa [ 318.497611][T10486] get_futex_key+0x1d0/0x14f0 [ 318.497639][T10486] ? __pfx_get_futex_key+0x10/0x10 [ 318.497671][T10486] futex_wake+0xf4/0x5e0 [ 318.497703][T10486] ? __pfx_futex_wake+0x10/0x10 [ 318.497729][T10486] ? kasan_quarantine_put+0x104/0x240 [ 318.497753][T10486] ? putname+0xb1/0x110 [ 318.497774][T10486] ? kmem_cache_free+0x127/0x6c0 [ 318.497806][T10486] do_futex+0x2b2/0x440 [ 318.497832][T10486] ? __pfx_do_futex+0x10/0x10 [ 318.497855][T10486] ? __pfx_do_sys_openat2+0x10/0x10 [ 318.497881][T10486] ? find_held_lock+0x2b/0x80 [ 318.497910][T10486] __x64_sys_futex+0x34f/0x4d0 [ 318.497936][T10486] ? __x64_sys_openat+0x12d/0x210 [ 318.497961][T10486] ? __pfx___x64_sys_futex+0x10/0x10 [ 318.497994][T10486] do_syscall_64+0x123/0x790 [ 318.498018][T10486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.498038][T10486] RIP: 0033:0x7f1054f9e159 [ 318.498055][T10486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.498073][T10486] RSP: 002b:00007f1055f310e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 318.498094][T10486] RAX: ffffffffffffffda RBX: 00007f1055225fa8 RCX: 00007f1054f9e159 [ 318.498106][T10486] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1055225fac [ 318.498118][T10486] RBP: 00007f1055225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 318.498129][T10486] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 318.498140][T10486] R13: 00007f1055226038 R14: 00007fff1a462310 R15: 00007fff1a4623f8 [ 318.498164][T10486] [ 319.597548][T10520] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 320.005261][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 320.005298][ T30] audit: type=1400 audit(1788465898.316:1530): avc: denied { bind } for pid=10539 comm="syz.3.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 320.439815][ T5604] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 320.449722][ T4920] Bluetooth: hci5: command 0x1003 tx timeout [ 320.469051][T10554] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1225'. [ 320.598864][T10558] FAULT_INJECTION: forcing a failure. [ 320.598864][T10558] name fail_futex, interval 1, probability 0, space 0, times 0 [ 320.598913][T10558] CPU: 0 UID: 0 PID: 10558 Comm: syz.8.1227 Not tainted syzkaller #0 PREEMPT(full) [ 320.598941][T10558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 320.598955][T10558] Call Trace: [ 320.598962][T10558] [ 320.598970][T10558] dump_stack_lvl+0x100/0x190 [ 320.599015][T10558] should_fail_ex.cold+0x5/0xa [ 320.599044][T10558] get_futex_key+0x1d0/0x14f0 [ 320.599072][T10558] ? __pfx_get_futex_key+0x10/0x10 [ 320.599104][T10558] futex_wake+0xf4/0x5e0 [ 320.599136][T10558] ? __pfx_futex_wake+0x10/0x10 [ 320.599162][T10558] ? kasan_quarantine_put+0x104/0x240 [ 320.599187][T10558] ? putname+0xb1/0x110 [ 320.599211][T10558] ? kmem_cache_free+0x127/0x6c0 [ 320.599245][T10558] do_futex+0x2b2/0x440 [ 320.599271][T10558] ? __pfx_do_futex+0x10/0x10 [ 320.599295][T10558] ? __pfx_do_sys_openat2+0x10/0x10 [ 320.599326][T10558] __x64_sys_futex+0x34f/0x4d0 [ 320.599353][T10558] ? __x64_sys_openat+0x12d/0x210 [ 320.599378][T10558] ? __pfx___x64_sys_futex+0x10/0x10 [ 320.599413][T10558] do_syscall_64+0x123/0x790 [ 320.599439][T10558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.599457][T10558] RIP: 0033:0x7ff13679e159 [ 320.599473][T10558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.599490][T10558] RSP: 002b:00007ff13765f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 320.599508][T10558] RAX: ffffffffffffffda RBX: 00007ff136a25fa8 RCX: 00007ff13679e159 [ 320.599520][T10558] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff136a25fac [ 320.599530][T10558] RBP: 00007ff136a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 320.599540][T10558] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 320.599550][T10558] R13: 00007ff136a26038 R14: 00007ffcbb547ec0 R15: 00007ffcbb547fa8 [ 320.599574][T10558] [ 320.649287][T10558] program syz.8.1227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.033845][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1234'. [ 321.078560][T10577] hsr_slave_1 (unregistering): left promiscuous mode [ 321.138102][T10584] FAULT_INJECTION: forcing a failure. [ 321.138102][T10584] name failslab, interval 1, probability 0, space 0, times 0 [ 321.152652][T10584] CPU: 1 UID: 0 PID: 10584 Comm: syz.8.1239 Not tainted syzkaller #0 PREEMPT(full) [ 321.152684][T10584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 321.152697][T10584] Call Trace: [ 321.152705][T10584] [ 321.152713][T10584] dump_stack_lvl+0x100/0x190 [ 321.152751][T10584] should_fail_ex.cold+0x5/0xa [ 321.152778][T10584] should_failslab+0xc2/0x120 [ 321.152804][T10584] kmem_cache_alloc_noprof+0x92/0x6a0 [ 321.152827][T10584] ? skb_clone+0x190/0x400 [ 321.152851][T10584] skb_clone+0x190/0x400 [ 321.152871][T10584] netlink_deliver_tap+0xaed/0xcc0 [ 321.152903][T10584] netlink_unicast+0x6a5/0x850 [ 321.152936][T10584] ? __pfx_netlink_unicast+0x10/0x10 [ 321.152995][T10584] netlink_ack+0x655/0xb80 [ 321.153023][T10584] ? trace_contention_end+0x126/0x160 [ 321.153055][T10584] netlink_rcv_skb+0x333/0x420 [ 321.153086][T10584] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 321.153109][T10584] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.153157][T10584] xfrm_netlink_rcv+0x71/0x90 [ 321.153189][T10584] netlink_unicast+0x585/0x850 [ 321.153222][T10584] ? __pfx_netlink_unicast+0x10/0x10 [ 321.153262][T10584] netlink_sendmsg+0x8b0/0xda0 [ 321.153295][T10584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.153327][T10584] ? selinux_socket_sendmsg+0x198/0x2f0 [ 321.153361][T10584] ____sys_sendmsg+0xa4d/0xbe0 [ 321.153384][T10584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.153414][T10584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.153452][T10584] ___sys_sendmsg+0x190/0x1e0 [ 321.153479][T10584] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.153504][T10584] ? futex_wait+0x11e/0x370 [ 321.153544][T10584] ? find_held_lock+0x2b/0x80 [ 321.153586][T10584] __sys_sendmsg+0x160/0x210 [ 321.153604][T10584] ? __pfx___sys_sendmsg+0x10/0x10 [ 321.153632][T10584] do_syscall_64+0x123/0x790 [ 321.153655][T10584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.153673][T10584] RIP: 0033:0x7ff13679e159 [ 321.153690][T10584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.153708][T10584] RSP: 002b:00007ff13765f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.153725][T10584] RAX: ffffffffffffffda RBX: 00007ff136a25fa0 RCX: 00007ff13679e159 [ 321.153737][T10584] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 321.153748][T10584] RBP: 00007ff136835024 R08: 0000000000000000 R09: 0000000000000000 [ 321.153758][T10584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.153768][T10584] R13: 00007ff136a26038 R14: 00007ff136a25fa0 R15: 00007ffcbb547fa8 [ 321.153794][T10584] [ 321.258646][T10471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.429592][ T30] audit: type=1400 audit(1788465899.746:1531): avc: denied { write } for pid=10585 comm="syz.8.1240" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 321.453994][T10586] random: crng reseeded on system resumption [ 321.472739][ T30] audit: type=1400 audit(1788465899.786:1532): avc: denied { ioctl } for pid=10585 comm="syz.8.1240" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 321.591830][ T30] audit: type=1400 audit(1788465899.906:1533): avc: denied { validate_trans } for pid=10593 comm="syz.0.1244" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 322.092597][T10624] syzkaller0: entered promiscuous mode [ 322.092637][T10624] syzkaller0: entered allmulticast mode [ 322.206628][ T30] audit: type=1400 audit(1788465900.516:1534): avc: denied { read } for pid=10636 comm="syz.8.1264" name="/" dev="configfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 322.206695][ T30] audit: type=1400 audit(1788465900.516:1535): avc: denied { open } for pid=10636 comm="syz.8.1264" path="/152/config" dev="configfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 322.255908][ T30] audit: type=1400 audit(1788465900.566:1536): avc: denied { read } for pid=10636 comm="syz.8.1264" name="g1" dev="configfs" ino=26783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 322.285296][ T30] audit: type=1800 audit(1788465900.596:1537): pid=10637 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1264" name="use" dev="configfs" ino=33256 res=0 errno=0 [ 323.475487][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1273'. [ 323.590275][ T30] audit: type=1400 audit(1788465901.906:1538): avc: denied { search } for pid=5266 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.612989][ T30] audit: type=1400 audit(1788465901.926:1539): avc: denied { search } for pid=5266 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.900321][T10695] bridge1: entered promiscuous mode [ 323.900366][T10695] bridge1: entered allmulticast mode [ 323.934475][T10695] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 323.948123][T10699] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1284'. [ 324.164464][T10718] Config c/1 of g1 needs at least one function. [ 324.166380][T10718] udc usbip-vudc.0: failed to start g1: -22 [ 324.166412][T10718] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 324.179569][T10719] FAULT_INJECTION: forcing a failure. [ 324.179569][T10719] name failslab, interval 1, probability 0, space 0, times 0 [ 324.179598][T10719] CPU: 0 UID: 0 PID: 10719 Comm: syz.3.1295 Not tainted syzkaller #0 PREEMPT(full) [ 324.179617][T10719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 324.179628][T10719] Call Trace: [ 324.179634][T10719] [ 324.179641][T10719] dump_stack_lvl+0x100/0x190 [ 324.179670][T10719] should_fail_ex.cold+0x5/0xa [ 324.179692][T10719] should_failslab+0xc2/0x120 [ 324.179713][T10719] kmem_cache_alloc_noprof+0x92/0x6a0 [ 324.179730][T10719] ? mas_preallocate+0xc22/0xee0 [ 324.179755][T10719] mas_preallocate+0xc22/0xee0 [ 324.179777][T10719] ? __pfx_mas_preallocate+0x10/0x10 [ 324.179795][T10719] ? mt_find+0x136/0x9b0 [ 324.179819][T10719] ? lock_acquire+0x1d1/0x380 [ 324.179835][T10719] ? avc_has_perm_noaudit+0x56/0x3b0 [ 324.179860][T10719] vma_link+0x14a/0x8c0 [ 324.179886][T10719] ? __pfx_vma_link+0x10/0x10 [ 324.179912][T10719] ? __pfx_selinux_vm_enough_memory+0x10/0x10 [ 324.179931][T10719] ? rcu_is_watching+0x13/0xc0 [ 324.179950][T10719] ? percpu_counter_add_batch+0xb9/0x230 [ 324.179986][T10719] insert_vm_struct+0x1f7/0x890 [ 324.180015][T10719] create_init_stack_vma+0x830/0xcf0 [ 324.180044][T10719] ? __pfx_create_init_stack_vma+0x10/0x10 [ 324.180072][T10719] ? lock_acquire+0x1d1/0x380 [ 324.180089][T10719] ? do_raw_spin_lock+0x128/0x260 [ 324.180109][T10719] ? alloc_bprm+0x54e/0x9e0 [ 324.180125][T10719] ? alloc_bprm+0x54e/0x9e0 [ 324.180144][T10719] alloc_bprm+0x57b/0x9e0 [ 324.180162][T10719] do_execveat_common.isra.0+0x19c/0x580 [ 324.180179][T10719] ? do_getname+0x191/0x390 [ 324.180202][T10719] __x64_sys_execve+0x93/0xd0 [ 324.180220][T10719] do_syscall_64+0x123/0x790 [ 324.180240][T10719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.180256][T10719] RIP: 0033:0x7ff07e79e159 [ 324.180270][T10719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.180286][T10719] RSP: 002b:00007ff07f61b028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 324.180302][T10719] RAX: ffffffffffffffda RBX: 00007ff07ea25fa0 RCX: 00007ff07e79e159 [ 324.180313][T10719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 324.180323][T10719] RBP: 00007ff07e835024 R08: 0000000000000000 R09: 0000000000000000 [ 324.180333][T10719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.180343][T10719] R13: 00007ff07ea26038 R14: 00007ff07ea25fa0 R15: 00007ffde3190038 [ 324.180366][T10719] [ 324.181938][T10718] UDC core: g1: couldn't find an available UDC or it's busy [ 325.014975][ T30] kauditd_printk_skb: 190 callbacks suppressed [ 325.015027][ T30] audit: type=1326 audit(1788465903.326:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10730 comm="syz.8.1301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff13675e98e code=0x7ffc0000 [ 325.015209][ T30] audit: type=1326 audit(1788465903.326:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10730 comm="syz.8.1301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff13675e98e code=0x7ffc0000 [ 325.015307][ T30] audit: type=1326 audit(1788465903.326:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10730 comm="syz.8.1301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff13675e98e code=0x7ffc0000 [ 325.015978][ T30] audit: type=1326 audit(1788465903.326:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10730 comm="syz.8.1301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff13675e98e code=0x7ffc0000 [ 325.016130][ T30] audit: type=1326 audit(1788465903.326:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10730 comm="syz.8.1301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff13675e98e code=0x7ffc0000 [ 325.019683][ T30] audit: type=1326 audit(1788465903.326:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10730 comm="syz.8.1301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff13675e98e code=0x7ffc0000 [ 325.019884][ T30] audit: type=1326 audit(1788465903.336:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10730 comm="syz.8.1301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff13675e98e code=0x7ffc0000 [ 325.025312][ T30] audit: type=1326 audit(1788465903.336:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10730 comm="syz.8.1301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff13675e98e code=0x7ffc0000 [ 325.025502][ T30] audit: type=1326 audit(1788465903.336:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10730 comm="syz.8.1301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff13675e98e code=0x7ffc0000 [ 325.025797][ T30] audit: type=1326 audit(1788465903.336:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10730 comm="syz.8.1301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff13675e98e code=0x7ffc0000 [ 326.088814][T10783] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1321'. [ 326.961755][T10803] lo speed is unknown, defaulting to 1000 [ 326.961858][T10803] lo speed is unknown, defaulting to 1000 [ 326.973482][T10803] lo speed is unknown, defaulting to 1000 [ 327.053049][T10803] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 327.053088][T10803] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 327.053127][T10803] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 327.230798][T10803] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 327.319486][T10803] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -2 [ 327.612276][T10833] syzkaller0: entered promiscuous mode [ 327.674124][T10803] lo speed is unknown, defaulting to 1000 [ 327.702517][T10841] netlink: 'syz.8.1349': attribute type 10 has an invalid length. [ 327.789621][T10841] wireguard: wg2: Could not create IPv4 socket [ 327.814101][T10803] lo speed is unknown, defaulting to 1000 [ 327.815530][T10803] lo speed is unknown, defaulting to 1000 [ 327.832972][T10803] lo speed is unknown, defaulting to 1000 [ 327.834274][T10803] lo speed is unknown, defaulting to 1000 [ 327.845207][T10847] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 328.102684][T10858] Invalid argument reading file caps for ./file0 [ 328.480941][T10870] 9p: Bad value for 'wfdno' [ 328.535036][T10866] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 328.627896][T10877] FAULT_INJECTION: forcing a failure. [ 328.627896][T10877] name failslab, interval 1, probability 0, space 0, times 0 [ 328.641269][T10877] CPU: 1 UID: 0 PID: 10877 Comm: syz.0.1366 Not tainted syzkaller #0 PREEMPT(full) [ 328.641301][T10877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 328.641314][T10877] Call Trace: [ 328.641323][T10877] [ 328.641332][T10877] dump_stack_lvl+0x100/0x190 [ 328.641369][T10877] should_fail_ex.cold+0x5/0xa [ 328.641413][T10877] should_failslab+0xc2/0x120 [ 328.641441][T10877] kmem_cache_alloc_noprof+0x92/0x6a0 [ 328.641463][T10877] ? do_getname+0x35/0x390 [ 328.641495][T10877] do_getname+0x35/0x390 [ 328.641523][T10877] user_path_at+0x26/0x60 [ 328.641545][T10877] __x64_sys_mount+0x1fb/0x310 [ 328.641575][T10877] ? __pfx___x64_sys_mount+0x10/0x10 [ 328.641611][T10877] do_syscall_64+0x123/0x790 [ 328.641636][T10877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.641653][T10877] RIP: 0033:0x7f1054f9e159 [ 328.641670][T10877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.641691][T10877] RSP: 002b:00007f1055f31028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 328.641714][T10877] RAX: ffffffffffffffda RBX: 00007f1055225fa0 RCX: 00007f1054f9e159 [ 328.641730][T10877] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 328.641743][T10877] RBP: 00007f1055035024 R08: 0000000000000000 R09: 0000000000000000 [ 328.641756][T10877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.641767][T10877] R13: 00007f1055226038 R14: 00007f1055225fa0 R15: 00007fff1a4623f8 [ 328.641794][T10877] [ 328.941425][T10873] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 328.941469][T10873] md: pers->run() failed ... [ 330.386804][ T30] kauditd_printk_skb: 247 callbacks suppressed [ 330.386847][ T30] audit: type=1326 audit(1788465908.556:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.6.1380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf939e159 code=0x7ffc0000 [ 330.386894][ T30] audit: type=1326 audit(1788465908.556:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.6.1380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cf939e159 code=0x7ffc0000 [ 330.386940][ T30] audit: type=1326 audit(1788465908.556:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.6.1380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cf935e98e code=0x7ffc0000 [ 330.386982][ T30] audit: type=1326 audit(1788465908.696:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.6.1380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0cf939e159 code=0x7ffc0000 [ 330.387024][ T30] audit: type=1326 audit(1788465908.696:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.6.1380" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0cf939e159 code=0x7ffc0000 [ 330.720931][ T30] audit: type=1400 audit(1788465909.036:1992): avc: denied { ioctl } for pid=10913 comm="syz.8.1382" path="socket:[33737]" dev="sockfs" ino=33737 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 331.052842][T10935] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1391'. [ 331.178247][T10945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1398'. [ 331.188530][T10945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1398'. [ 331.199324][T10945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1398'. [ 331.210088][T10945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1398'. [ 331.217576][T10945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1398'. [ 331.217715][T10945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1398'. [ 331.217843][T10945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1398'. [ 331.217967][T10945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1398'. [ 331.218091][T10945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1398'. [ 331.218218][T10945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1398'. [ 331.529573][T10969] netlink: 'syz.3.1407': attribute type 16 has an invalid length. [ 331.529614][T10969] netlink: 'syz.3.1407': attribute type 17 has an invalid length. [ 331.542016][T10963] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.549034][T10963] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.599696][ T30] audit: type=1400 audit(1788465909.916:1993): avc: denied { execute } for pid=10968 comm="syz.8.1408" dev="hugetlbfs" ino=34240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 331.649422][T10969] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.649527][T10969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.667721][T10981] FAULT_INJECTION: forcing a failure. [ 331.667721][T10981] name fail_futex, interval 1, probability 0, space 0, times 0 [ 331.667770][T10981] CPU: 0 UID: 0 PID: 10981 Comm: syz.8.1413 Not tainted syzkaller #0 PREEMPT(full) [ 331.667791][T10981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 331.667800][T10981] Call Trace: [ 331.667805][T10981] [ 331.667810][T10981] dump_stack_lvl+0x100/0x190 [ 331.667840][T10981] should_fail_ex.cold+0x5/0xa [ 331.667868][T10981] get_futex_key+0x1d0/0x14f0 [ 331.667894][T10981] ? __pfx_get_futex_key+0x10/0x10 [ 331.667916][T10981] ? find_held_lock+0x2b/0x80 [ 331.667937][T10981] ? futex_wake+0x4ea/0x5e0 [ 331.667968][T10981] futex_wake+0xf4/0x5e0 [ 331.667994][T10981] ? __pfx_futex_wake+0x10/0x10 [ 331.668023][T10981] ? lock_acquire+0x1d1/0x380 [ 331.668042][T10981] do_futex+0x2b2/0x440 [ 331.668063][T10981] ? __pfx_do_futex+0x10/0x10 [ 331.668085][T10981] ? rcu_is_watching+0x13/0xc0 [ 331.668108][T10981] __x64_sys_futex+0x34f/0x4d0 [ 331.668130][T10981] ? __pfx___x64_sys_rt_sigprocmask+0x10/0x10 [ 331.668157][T10981] ? __pfx___x64_sys_futex+0x10/0x10 [ 331.668186][T10981] do_syscall_64+0x123/0x790 [ 331.668207][T10981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.668224][T10981] RIP: 0033:0x7ff13679e159 [ 331.668238][T10981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.668253][T10981] RSP: 002b:00007ff13765f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 331.668269][T10981] RAX: ffffffffffffffda RBX: 00007ff136a25fa8 RCX: 00007ff13679e159 [ 331.668280][T10981] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff136a25fac [ 331.668290][T10981] RBP: 00007ff136a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 331.668299][T10981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.668309][T10981] R13: 00007ff136a26038 R14: 00007ffcbb547ec0 R15: 00007ffcbb547fa8 [ 331.668337][T10981] [ 331.878829][T10969] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.878960][T10969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.943127][T10969] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 332.498256][ T30] audit: type=1400 audit(1788465910.816:1994): avc: denied { bind } for pid=11013 comm="syz.5.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 332.502435][ T30] audit: type=1400 audit(1788465910.816:1995): avc: denied { listen } for pid=11013 comm="syz.5.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 332.531278][ T30] audit: type=1400 audit(1788465910.846:1996): avc: denied { read } for pid=11013 comm="syz.5.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 333.352284][ T50] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 333.416793][T11055] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 334.072259][T11093] netlink: 'syz.8.1459': attribute type 4 has an invalid length. [ 336.204949][T11039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.264862][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 336.264907][ T30] audit: type=1400 audit(1788465914.576:2000): avc: denied { read } for pid=11117 comm="syz.8.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 336.573967][ T30] audit: type=1400 audit(1788465914.886:2001): avc: denied { read } for pid=11133 comm="syz.0.1477" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 336.574334][ T30] audit: type=1400 audit(1788465914.886:2002): avc: denied { open } for pid=11133 comm="syz.0.1477" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 336.583048][ T30] audit: type=1400 audit(1788465914.886:2003): avc: denied { ioctl } for pid=11133 comm="syz.0.1477" path="/newroot/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 336.810420][T11143] FAULT_INJECTION: forcing a failure. [ 336.810420][T11143] name failslab, interval 1, probability 0, space 0, times 0 [ 336.810599][ T30] audit: type=1400 audit(1788465915.116:2004): avc: denied { getopt } for pid=11141 comm="syz.3.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 336.874168][T11143] CPU: 1 UID: 0 PID: 11143 Comm: syz.3.1481 Not tainted syzkaller #0 PREEMPT(full) [ 336.874199][T11143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 336.874211][T11143] Call Trace: [ 336.874219][T11143] [ 336.874228][T11143] dump_stack_lvl+0x100/0x190 [ 336.874262][T11143] should_fail_ex.cold+0x5/0xa [ 336.874286][T11143] should_failslab+0xc2/0x120 [ 336.874310][T11143] __kmalloc_noprof+0xfc/0x840 [ 336.874329][T11143] ? tomoyo_encode2+0xfb/0x3c0 [ 336.874351][T11143] tomoyo_encode2+0xfb/0x3c0 [ 336.874372][T11143] tomoyo_encode+0x29/0x50 [ 336.874386][T11143] tomoyo_realpath_from_path+0x18c/0x690 [ 336.874406][T11143] tomoyo_path_number_perm+0x23c/0x580 [ 336.874430][T11143] ? tomoyo_path_number_perm+0x22e/0x580 [ 336.874455][T11143] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 336.874488][T11143] ? __lock_acquire+0x4c5/0x1ec0 [ 336.874514][T11143] ? __fget_files+0x34/0x3d0 [ 336.874531][T11143] ? find_held_lock+0x2b/0x80 [ 336.874551][T11143] ? hook_file_ioctl_common+0x140/0x440 [ 336.874572][T11143] ? __fget_files+0x21f/0x3d0 [ 336.874591][T11143] security_file_ioctl+0xd3/0x230 [ 336.874616][T11143] __x64_sys_ioctl+0xb7/0x210 [ 336.874640][T11143] do_syscall_64+0x123/0x790 [ 336.874660][T11143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.874675][T11143] RIP: 0033:0x7ff07e79ddeb [ 336.874689][T11143] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 336.874703][T11143] RSP: 002b:00007ff07f618f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.874720][T11143] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007ff07e79ddeb [ 336.874730][T11143] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 336.874740][T11143] RBP: 00007ff07f619fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 336.874750][T11143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.874760][T11143] R13: 0000200000000000 R14: 0000000000000003 R15: 0000000000000000 [ 336.874787][T11143] [ 336.933206][T11143] ERROR: Out of memory at tomoyo_realpath_from_path. [ 337.177548][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 337.348963][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 337.349730][ T9] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 337.350872][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 53834, setting to 64 [ 337.350895][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 337.352558][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.352577][ T9] usb 4-1: Product: 《 [ 337.352589][ T9] usb 4-1: Manufacturer: 쭣땪䭴鮚묞肘랰寖쾡꼜食균ꔀ啁틕䟢ჁᠩⓃ嗢빆Ꙓ䞯똅ꛞ契၏෼ờ옭횔թ地ꍓշ쳓ʶ濷끬↧ⲭⳀ왽膼ﱯ䳡ึӆ悾迕䫙⸽诮℈ứ撰׎竸殚凙탬胍蜺ﹸற᫈튺麪( [ 337.352612][ T9] usb 4-1: SerialNumber: І [ 337.356017][T11143] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 337.531918][T11166] syzkaller0: entered promiscuous mode [ 337.538199][T11166] syzkaller0: entered allmulticast mode [ 337.595860][T11166] tipc: Enabled bearer , priority 0 [ 337.596440][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 337.596478][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 337.676088][T11165] tipc: Resetting bearer [ 337.733126][T11165] tipc: Disabling bearer [ 337.822802][ T30] audit: type=1400 audit(1788465916.136:2005): avc: denied { read write } for pid=11179 comm="syz.0.1498" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 337.831518][ T9] usb 4-1: USB disconnect, device number 38 [ 337.854398][ T30] audit: type=1400 audit(1788465916.166:2006): avc: denied { open } for pid=11179 comm="syz.0.1498" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 338.156373][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.292654][T11197] FAULT_INJECTION: forcing a failure. [ 338.292654][T11197] name failslab, interval 1, probability 0, space 0, times 0 [ 338.292705][T11197] CPU: 0 UID: 0 PID: 11197 Comm: syz.6.1505 Not tainted syzkaller #0 PREEMPT(full) [ 338.292741][T11197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 338.292749][T11197] Call Trace: [ 338.292755][T11197] [ 338.292761][T11197] dump_stack_lvl+0x100/0x190 [ 338.292788][T11197] should_fail_ex.cold+0x5/0xa [ 338.292812][T11197] should_failslab+0xc2/0x120 [ 338.292833][T11197] __kvmalloc_node_noprof+0x113/0x9b0 [ 338.292853][T11197] ? listxattr+0x89/0x190 [ 338.292875][T11197] listxattr+0x89/0x190 [ 338.292894][T11197] path_listxattrat+0x2b3/0x370 [ 338.292913][T11197] ? __pfx_path_listxattrat+0x10/0x10 [ 338.292938][T11197] do_syscall_64+0x123/0x790 [ 338.292959][T11197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.292975][T11197] RIP: 0033:0x7f0cf939e159 [ 338.292989][T11197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.293008][T11197] RSP: 002b:00007f0cfa34e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4 [ 338.293025][T11197] RAX: ffffffffffffffda RBX: 00007f0cf9625fa0 RCX: 00007f0cf939e159 [ 338.293035][T11197] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000003 [ 338.293045][T11197] RBP: 00007f0cf9435024 R08: 0000000000000000 R09: 0000000000000000 [ 338.293055][T11197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.293066][T11197] R13: 00007f0cf9626038 R14: 00007f0cf9625fa0 R15: 00007ffda5f48e48 [ 338.293090][T11197] [ 338.476031][T11196] md: invalid raid superblock magic on ram0 [ 338.483270][T11196] md: ram0 does not have a valid v0.90 superblock, not importing! [ 338.757109][ T30] audit: type=1400 audit(1788465917.066:2007): avc: denied { read } for pid=11208 comm="syz.6.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 338.873081][T11218] [ 338.877713][T11218] ============================= [ 338.882710][T11218] WARNING: suspicious RCU usage [ 338.887654][T11218] syzkaller #0 Not tainted [ 338.892091][T11218] ----------------------------- [ 338.896952][T11218] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 338.905290][T11218] [ 338.905290][T11218] other info that might help us debug this: [ 338.905290][T11218] [ 338.915615][T11218] [ 338.915615][T11218] rcu_scheduler_active = 2, debug_locks = 1 [ 338.924303][T11218] locks held by syz.8.1513/11218: 1, last CPU#1: [ 338.930869][T11218] #0: ffff8880349f6b90 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x62/0x90 [ 338.941764][T11218] [ 338.941764][T11218] stack backtrace: [ 338.947738][T11218] CPU: 1 UID: 0 PID: 11218 Comm: syz.8.1513 Not tainted syzkaller #0 PREEMPT(full) [ 338.957131][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 338.967210][T11218] Call Trace: [ 338.970506][T11218] [ 338.973458][T11218] dump_stack_lvl+0x100/0x190 [ 338.978173][T11218] lockdep_rcu_suspicious.cold+0x4f/0xb2 [ 338.983877][T11218] xfrm_do_migrate_state+0x2463/0x2f10 [ 338.989379][T11218] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 338.995214][T11218] ? __asan_memset+0x23/0x50 [ 338.999852][T11218] ? __nla_validate_parse+0x1e7/0x28b0 [ 339.005364][T11218] ? __nla_parse+0x40/0x60 [ 339.009812][T11218] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 339.015655][T11218] ? xfrm_user_rcv_msg+0x483/0xd80 [ 339.020795][T11218] xfrm_user_rcv_msg+0x483/0xd80 [ 339.025754][T11218] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 339.031692][T11218] ? lockdep_hardirqs_on+0x7d/0x110 [ 339.036921][T11218] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 339.042856][T11218] ? __lock_acquire+0x4c5/0x1ec0 [ 339.047873][T11218] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 339.053717][T11218] ? __mutex_lock+0x829/0x1bd0 [ 339.058514][T11218] ? lockdep_hardirqs_on+0x7d/0x110 [ 339.063756][T11218] ? __mutex_lock+0x829/0x1bd0 [ 339.068559][T11218] ? __mutex_lock+0x26c/0x1bd0 [ 339.073351][T11218] netlink_rcv_skb+0x159/0x420 [ 339.078250][T11218] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 339.083730][T11218] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.089076][T11218] xfrm_netlink_rcv+0x71/0x90 [ 339.093794][T11218] netlink_unicast+0x585/0x850 [ 339.098603][T11218] ? __pfx_netlink_unicast+0x10/0x10 [ 339.103918][T11218] ? __pfx_sock_has_perm+0x10/0x10 [ 339.109072][T11218] netlink_sendmsg+0x8b0/0xda0 [ 339.113888][T11218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.119220][T11218] ? selinux_socket_sendmsg+0x198/0x2f0 [ 339.124805][T11218] ____sys_sendmsg+0xa4d/0xbe0 [ 339.129602][T11218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.134925][T11218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.140244][T11218] ? find_held_lock+0x2b/0x80 [ 339.145118][T11218] ___sys_sendmsg+0x190/0x1e0 [ 339.150033][T11218] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.155277][T11218] ? find_held_lock+0x2b/0x80 [ 339.160007][T11218] __sys_sendmsg+0x160/0x210 [ 339.164645][T11218] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.170090][T11218] ? kcov_ioctl+0x17a/0x760 [ 339.174986][T11218] do_syscall_64+0x123/0x790 [ 339.179607][T11218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.185527][T11218] RIP: 0033:0x7ff13679e159 [ 339.189968][T11218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.209791][T11218] RSP: 002b:00007ff13763e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.218230][T11218] RAX: ffffffffffffffda RBX: 00007ff136a26090 RCX: 00007ff13679e159 [ 339.226230][T11218] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 339.234234][T11218] RBP: 00007ff136835024 R08: 0000000000000000 R09: 0000000000000000 [ 339.242427][T11218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.250422][T11218] R13: 00007ff136a26128 R14: 00007ff136a26090 R15: 00007ffcbb547fa8 [ 339.258426][T11218] [ 340.040611][ T4920] Bluetooth: hci5: command 0x1003 tx timeout [ 340.041382][ T5604] Bluetooth: hci5: Opcode 0x1003 failed: -110