last executing test programs: 2m57.619276901s ago: executing program 4 (id=416): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000037000/0x1000)=nil], 0xffffffffffffffff, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x7040, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r2, @ANYRES32, @ANYBLOB="08001100", @ANYRESDEC=r1, @ANYBLOB="090014"], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4090) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000002240)=""/4119, 0xfffffffffffffdea}) 2m57.379522084s ago: executing program 4 (id=418): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1000000, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @string=&(0x7f0000000340)=0x62}}) 2m57.163356974s ago: executing program 4 (id=419): ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0xf0003, 0x0, [0x7, 0xb, 0x4, 0x2, 0x0, 0x6, 0x83000000002, 0x8001]}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x2, 0x0, [0x6, 0x800, 0x9, 0x2, 0x7, 0xfffffffffffffff7, 0x6, 0x8]}) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b78159108a116ae0efbdf02c450cb36272ad0102030109021200010000200009040a0200b38f5b00"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_MCE_KILL(0x29, 0x0, 0x2) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) 2m53.344822248s ago: executing program 4 (id=433): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x5, &(0x7f0000000480)=@framed={{}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xcc23665264e0b0b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x30) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r5, 0x1) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000040)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000000000000000000000000000000000000000000097786ff7f8d9527ad3ed67d6d5b7d31d423c2e8a4c42807f68e8a46a65ce6cf3b7458e52f09e6e7d1de240fcde0992bce51b07967a2737b5c1e713be14791908472876c6ee345c71253f1a39a5a09202d3b80b36e185a589618fc121b29698e10cec27e7239f69814ddd80ef1a2a65645be5168012aa055757a02c9682937872c75a788408620506771d55a01c69f7a28c6a233b01efd549d73f7373338378ad04d710d3969aaa1cea67a4ef45963659aae5b10b62"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) 2m51.378721508s ago: executing program 4 (id=439): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) fcntl$getown(r2, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00ccf921584505b9ddbe0dcb2229b517e5e93c2c55000000001888096f3c000000007f8523", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000003cb5e89fe5b378223a238b5c0000000000181100009ddf5e79584008e11b592f69cabde01ab7d97ca0fabecffabd5f7361e4c8db30cd2d9c015879f6785670111ac857a2e8cef32a8d90897e92cf00211aa697b9b8074d95909a6b828168b5b1a1e0d7886d97f15c18edf0838fadca5531b82cfdc1eaa784bacce1bd60e769e32ccfcc49e10f6ec2093e8e5b8121934a", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f0000000040)={0x8, "9b7590dea634dd1a36e566344fff060a0e039ef09d32fb4b859b0d1fc9be29703ab0c6c8960ef3c7f712ade599035102e0df19d17d68f23cb4476d1ffbe0ecf71e068e5653eb7ac3faf444bfe446d8e62733f32394086e5cdd632b0228b3e23aace5337dc95faa6b81c524a29c17fb0f5dad9ea74cc19643b2f93f1e10b829d9"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x40000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000392000/0x4000)=nil, 0x4000, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m49.975842986s ago: executing program 4 (id=441): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000000020020"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x4}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 2m34.818196636s ago: executing program 32 (id=441): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000000020020"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x4}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 13.164697904s ago: executing program 1 (id=1095): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) fcntl$getown(r2, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00ccf921584505b9ddbe0dcb2229b517e5e93c2c55000000001888096f3c000000007f8523", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000003cb5e89fe5b378223a238b5c0000000000181100009ddf5e79584008e11b592f69cabde01ab7d97ca0fabecffabd5f7361e4c8db30cd2d9c015879f6785670111ac857a2e8cef32a8d90897e92cf00211aa697b9b8074d95909a6b828168b5b1a1e0d7886d97f15c18edf0838fadca5531b82cfdc1eaa784bacce1bd60e769e32ccfcc49e10f6ec2093e8e5b8121934a", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, &(0x7f0000000040)={0x8, "9b7590dea634dd1a36e566344fff060a0e039ef09d32fb4b859b0d1fc9be29703ab0c6c8960ef3c7f712ade599035102e0df19d17d68f23cb4476d1ffbe0ecf71e068e5653eb7ac3faf444bfe446d8e62733f32394086e5cdd632b0228b3e23aace5337dc95faa6b81c524a29c17fb0f5dad9ea74cc19643b2f93f1e10b829d9"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x40000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000392000/0x4000)=nil, 0x4000, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.964528069s ago: executing program 0 (id=1097): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local}, {@in=@empty, 0x80, 0x3c}, @in=@loopback, {0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x1ec}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) 12.804591138s ago: executing program 0 (id=1098): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f00000002c0)=""/124, 0x7c, 0x7) io_uring_enter(r0, 0x1a4e, 0x79e0, 0x35, &(0x7f0000000000)={[0x10]}, 0x8) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000014) epoll_create1(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000001000)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.759046797s ago: executing program 0 (id=1105): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_clone(0x104400, &(0x7f00000001c0)="5a7e9949bf28e3cea966c9565ae1b3b4d16ad749af9c0a0e5100ef391665314ffb7d0f9a7af8ac00893facba50149940f3f47d91e1ecbcda96eaea2cecd2e038da5655cc102077757c85e2dd2f6139d4660c2c2a7a8d1b62b3185acdae5ac716640dcc7ce36c93e1168b1a50cbeec27f33b466d43c64b9829751352d34cc2ac125839052584e3c7b69e231251992ff38628957a2e59857cb57c2f27d39d1bd32532face668ca95b2fe49c103693c8a45991be2", 0xb3, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000440)="43b5db355c48ed3b70784e357c6557e8ee0728fdd18806847c6817706d7ac6c7ef91b15fbf2c83f2ddf02c5ee31f3f3a7db132e2a47796b300a54b31b4fb1930bf79f7e8ec0ff24b9111f0e4154f359656aa95c9ce801acdf9d78136969d8ff7c49ed2d6741d2780b703b13daedb8932245e1ddcc7518bffa80a14271df464df9f99c4fc763b1d9863e40d2c49ef18970edf809bc47ecceacf0016fc3083b44af19bb380ba8ba6fc7cc2c34e58f3b20bbdb2d0c25b9e149b050129783206cced79cc571d8f0b2341b719430274") r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) kcmp(r0, r1, 0x6, r2, r3) mkdir(&(0x7f0000000180)='./file1\x00', 0x104) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e23, 0x4e1e, @empty, 0x401}}, 0x0, 0x0, 0x0, 0x81, 0x2a, 0x0, 0xe}, 0x9c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000400)='.\x00', 0xa4000021) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 10.641768024s ago: executing program 3 (id=1106): io_submit(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) 9.83809556s ago: executing program 1 (id=1107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7868b77f, 0x3a, '[\x1e', 0x3a, 'z[&\x11k\xfc\xb24\\\xda\x16M\xb7\xf2\xc0\x8e\x1b\xcf\x9b\f\x88\b(\xfc\xee\nb\x958\x1b\xcfuT\x8d`\xbb\xbcJ\xe4\x8a\xc4\x13v\xa90P\x8a\xf2h\x8dI\x93\xcbu8^\x9e\xe7OT\xb6\xcc\xc7\x13\x7f\xe3\xa4\x062\'w\a\xf0\x8d\xe5Z\xfdl\xe7x\xf0\xe9\xbe', 0x3a, './file0', 0x3a, [0x5c]}, 0x7d) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0xa00, 0x0) r2 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r2, 0x46f3, 0x4999, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000200)='~', 0x1) socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000ac1e001901000000030000000a01017b7e00"], 0x1c) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 9.825340605s ago: executing program 0 (id=1108): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x200) ioctl$BLKRASET(r2, 0x1262, &(0x7f0000000240)=0x7fffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan4\x00'}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x186) r5 = syz_io_uring_setup(0xc, &(0x7f00000002c0)={0x0, 0x2000029, 0x1, 0x0, 0x20b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00009f2000/0x1000)=nil, 0x1000}, 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 8.217433842s ago: executing program 1 (id=1112): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0, 0xbcf6a286718fe253}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f00000001c0)={0xfffffffffffffffa, 0x400, 0x80000001, 0xcb4}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f00000001c0)=0x9, 0x4) sendto$inet6(r2, 0x0, 0x0, 0xc0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfff}, 0x1c) syz_usb_control_io(r0, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000001c0)={0x8, 0xa, 0x0, "3258ae1e008faa0000f6ffffff0400ff1d0000000000000000004000", 0x35315258}) process_madvise(0xffffffffffffffff, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x1, @vbi={0x24e3c000, 0x4, 0x0, 0x584e4f53, [0xe568, 0x6], [0xb, 0x4], 0x108}}) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)={0x40, 0x24, 0xd4, {0xd4, 0x24, "e1642ffb8fd27788ca30e2f8dc5776afdca23891c1bf0571eb61d393843bb603ca45fc97b3ad78e66327d25a55956dacef21d1c1f3af747e7db0c45f338d93d8edc2bc1b920c452fea4ca69e2bbb84ebfda2fd42804ec134763e91f8ff1be3a6b9c78d4a5951031a9bf62be6efbdd8ceffb38127cdf9dbd4f59f3ce995c6698b284346251ae4cd24ca12c215967f7b80b473ad17b7107d71fe9a4e35901203f2b43801b0cc2703b96ce730196d4237186667fed2f5da3eead2b6b77d515d4deb72ebaafbc07fb54cd0a2ed4f73099ba53711"}}, &(0x7f0000000240)={0x0, 0x3, 0x90, @string={0x90, 0x3, "f9b44135e0737f7f5a35ba175d1bfab73c0bacb46c32594dd1990fe8d1ef3428f1c8f9a052d3fade796409134bcdcf626b614de3ac2abd74f3fe3da0b88ffdc39b10bc4edd2d3c72307e99ee9f9cb5830846481351f592002c8685c3ec10dbbeb5623f5b755429452f9d1a1174eef33f1f6e31d5f34bedbb036a81e7c47b2b1b18150bb8300c43a887325194eb09"}}}, &(0x7f0000000500)={0x34, &(0x7f0000000540)={0x0, 0x16, 0x6e, "164f4a2dad3fada7b23e73af228f7ab2233f2cc14cbbe7c15245d56a435e0d2388bcdbd3bbe9488dd1466f598d5b042a9f83a8f61cf402f600c370276d14b45f11d22da229c5443b0c8bdfe75ff5672cb4992a5bf7894e305460e7943472f2deb3c730d5f211d4a8e353bcdd8136"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000400)={0x20, 0x0, 0x5d, {0x5b, "daa0fefb992840fb27518d1d54e954d3ba3d090818e99c9e616ac3ee97412b5788315ad4ce4a569315f33cc2d97bf3ccabd506fa58e3f5226c90ab6089016969e1376778ee5cb98a0a043d38e03d3ffdc9b8f55d8801458367ce19"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0xf2}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x7d}}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f00000003c0)={0x1, "16809f2e04865e4f0eb0f0a01415a98efac4e085ab9eeec24bf1362d808125d2", 0x2, 0x1000, 0xfffffffe, 0x140000, 0x4, 0x3, 0x7ffb, 0x5}) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x1000}}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) 8.206681405s ago: executing program 0 (id=1113): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) io_uring_setup(0x33c3, &(0x7f00000002c0)={0x0, 0x32b6, 0x4, 0xfffffffc, 0x35d}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/242, 0xf2}], 0x1}, 0x18}], 0x1, 0x101, 0x0) 7.49990719s ago: executing program 3 (id=1114): timer_create(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0xf6f, &(0x7f0000000200)={0x0, 0x4b46, 0x2, 0x3, 0x1db}, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) inotify_init() r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x2000) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3, 0xffffffff, 0x80000, 0xc05}, 0x7}, 0x20, 0x12, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f00000000c0)={0x2000001c}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000000)={0xa0000001}) 4.743899806s ago: executing program 0 (id=1118): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) fcntl$getown(r1, 0x9) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00ccf921584505b9ddbe0dcb2229b517e5e93c2c55000000001888096f3c000000007f8523", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000003cb5e89fe5b378223a238b5c0000000000181100009ddf5e79584008e11b592f69cabde01ab7d97ca0fabecffabd5f7361e4c8db30cd2d9c015879f6785670111ac857a2e8cef32a8d90897e92cf00211aa697b9b8074d95909a6b828168b5b1a1e0d7886d97f15c18edf0838fadca5531b82cfdc1eaa784bacce1bd60e769e32ccfcc49e10f6ec2093e8e5b8121934a", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f0000000040)={0x8, "9b7590dea634dd1a36e566344fff060a0e039ef09d32fb4b859b0d1fc9be29703ab0c6c8960ef3c7f712ade599035102e0df19d17d68f23cb4476d1ffbe0ecf71e068e5653eb7ac3faf444bfe446d8e62733f32394086e5cdd632b0228b3e23aace5337dc95faa6b81c524a29c17fb0f5dad9ea74cc19643b2f93f1e10b829d9"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x40000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRESOCT, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000392000/0x4000)=nil, 0x4000, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.656172953s ago: executing program 3 (id=1120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r1, 0x1, 0xffffffff}, 0x14}, 0x1, 0x620b}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe2(&(0x7f0000000040), 0x82080) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="35000000000000004e0043c1b6e825535ce864f47a11ac8612c0cbd0bed336b2d6bd5f1633a73c936a4d6a1c87060e8e6e035dc3f3f90c64e5c58da4c9b988ae1eed12ad65d62f1635beed8db0d677e18c0ec7181cb949bd551712501316670a4b649275db01e2347ad22c8650703dee819b41503f44dc4d14789f9e49368dc7b319eed6c5ebd9bdd15b2b7e4aa5b3e13ae5f579a22081c93559ef960ff75981d7cd484bfef065200112e4ca696bfe9040"], 0x8) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000100)='\x00@i\x8e\f\xea \x06\xb8', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) 4.531387467s ago: executing program 5 (id=1121): ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000000)={0x83, 0x20, &(0x7f0000000080)="7fce7aef0e9b8bef6986a532356310f25aadcf1c962c1bbf021ff043a4ee1e74e0d0a6965207671a5d7697f52dd7dd078157e701d307b1a41adbb1fe81c74ef37dcc57452905f171460017f61e2c93b91a6f24d73d43af182936f772566596a28806a8e35ddc9a7a88c83bf6fa932f6e6441106797bbeee3b62432f271d93bca8929760700b143b705c2dd4d0032fb8b71479dc5ca1247af3b75fff52b4b25dae9b496bd00ed1dde65ca4c2b08a603269c60b47624a928fc610c97d5c4e60c25c9b6b02f2eaf71e8dc1de2afbe308645bb1cbc723883540075641fd364a1215fbe6722dfbd2538e5683096a6", {0xffffffff, 0x4fb, 0x16146e2b, 0x9, 0x9, 0x7, 0x0, 0x78}}) 4.50349041s ago: executing program 5 (id=1122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x10, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x68}, 0x1, 0x2000000, 0x0, 0x24008004}, 0x0) 4.015139373s ago: executing program 3 (id=1124): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000c00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000100), 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, 0x0, 0x25, 0x0, @void}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x20000000005, 0x21}, 0xd8) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x2400c729, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x800000) 3.954992334s ago: executing program 2 (id=1125): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x5, &(0x7f0000000480)=@framed={{}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xcc23665264e0b0b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x30) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r4, 0x1) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) 3.033701798s ago: executing program 1 (id=1126): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={0xffffffffffffffff, 0x58, &(0x7f0000000700)}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000021007f3d00f47f39e3940600000091bc1500000000000000"], 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000003c0)={0x2e, @local, 0x4e24, 0x2, 'lblcr\x00', 0x1d, 0x4, 0x65}, 0x2c) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r0, 0x0, 0x0, 0xce49}]) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.982709839s ago: executing program 3 (id=1127): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902"], 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x591) r1 = syz_io_uring_setup(0xbdc, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000025c0)={&(0x7f0000002640)=ANY=[@ANYBLOB="18060000", @ANYRES16=0x0, @ANYBLOB="280029bd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="7c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004c000400020001100300000005000e06020000002f7a08bb030000006007000206000000ec000f1f0100000008005694070000000900fe09ff0100000300a30708000000080007400104000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000400000008000100", @ANYRES32=0x0, @ANYBLOB="780002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000008000100", @ANYRES32=0x0, @ANYBLOB="1401028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000500ff40faffffffff0302ff000000000001cf0cfb0000003b0c2c030200000008000100", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400f58fa82008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="dc01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000001000008000600", @ANYRESDEC=r1, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004008c6e00003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000100000034000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000004000400"], 0x618}, 0x1, 0x0, 0x0, 0x1}, 0x8050) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x401) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f00000003c0)="737872854836589ed7d390c2c996015945ea6a1af696312fc232fdd83bfa7c1bd80efd529a8663cd2f6e118d06b1b3fcd40ce2fc6a7a7f586d0687f9404c745f00f1881ef488dbc95c141140e813513662bcc358efef00be624eb49cbc134f0f", 0x60) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001c40)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0x17, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000910b000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000084e9ffffb6000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f00000007c0)=""/4096, 0x41000, 0x3d, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000500)=[0xffffffffffffffff], &(0x7f0000000540)=[{0x4, 0x5, 0xc, 0x8}, {0x2, 0x5, 0x100009, 0xb}, {0x4, 0x5, 0x0, 0x3}], 0x10, 0x100}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000017c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%-010d \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4, r5}, 0xc) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setreuid(0xffffffffffffffff, 0xee00) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCINQ(r7, 0x541b, 0xfffffffffffffffe) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@dev}, 0x0) sendmsg$nl_route(r8, 0x0, 0x8000) 2.872777913s ago: executing program 5 (id=1128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x200, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010004000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x9, 0x9, 0x40}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r9, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r8, 0x407, 0x3000000) write$eventfd(r8, &(0x7f0000000240)=0x10000000000, 0x8) 2.607499965s ago: executing program 2 (id=1129): setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010003bffff00000000000023d1764e00f8ff659600", @ANYRES32=0x0, @ANYBLOB="0431000000b401001c0012800b00010067726574617000000c0002800800", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) (async, rerun: 32) r1 = fcntl$dupfd(r0, 0x0, r0) (async, rerun: 32) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f00000006c0)='.\x00', 0xaa) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (rerun: 32) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000380)=""/103, 0x67}], 0x1) r3 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async, rerun: 64) io_uring_enter(r3, 0x133d, 0x0, 0x8, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) (async) io_uring_setup(0x2f54, &(0x7f0000000080)={0x0, 0xfffffff9, 0x100, 0x1, 0x808001b2}) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="80ac000000000000000000000000000095003df1a1d710ebbde166d9fb0b00000000000000000000001d000000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 2.339253627s ago: executing program 2 (id=1130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa0042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0xfd8}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x3, 0x4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140)={r3}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000280)="65260f01f6b805000000b9000000220f01c10f1ab900000000c4e15d67080f105392df92df38812b0f0143c744240002000000c744240276000000c7442406000000000f0114240fc79833000000f0870f", 0x51}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffae1, 0x3a080) read$FUSE(0xffffffffffffffff, &(0x7f0000003680)={0x2020}, 0x2020) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f00000000c0)) 1.697869899s ago: executing program 2 (id=1131): r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r0, &(0x7f0000000240)=""/209, 0xd1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r1}, 0x10) set_mempolicy_home_node(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0) 1.296571552s ago: executing program 5 (id=1132): r0 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000000)={0x83, 0x20, &(0x7f0000000080)="7fce7aef0e9b8bef6986a532356310f25aadcf1c962c1bbf021ff043a4ee1e74e0d0a6965207671a5d7697f52dd7dd078157e701d307b1a41adbb1fe81c74ef37dcc57452905f171460017f61e2c93b91a6f24d73d43af182936f772566596a28806a8e35ddc9a7a88c83bf6fa932f6e6441106797bbeee3b62432f271d93bca8929760700b143b705c2dd4d0032fb8b71479dc5ca1247af3b75fff52b4b25dae9b496bd00ed1dde65ca4c2b08a603269c60b47624a928fc610c97d5c4e60c25c9b6b02f2eaf71e8dc1de2afbe308645bb1cbc723883540075641fd364a1215fbe6722dfbd2538e5683096a6", {0xffffffff, 0x4fb, 0x16146e2b, 0x9, 0x9, 0x7, 0x0, 0x78}}) 1.131371506s ago: executing program 1 (id=1133): sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioprio_get$pid(0x3, 0xffffffffffffffff) 1.131079743s ago: executing program 2 (id=1134): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) timer_create(0x2, &(0x7f0000000000)={0x0, 0xb, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{r2, r3+60000000}, {0x77359400}}, &(0x7f0000000200)) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r5 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x707b, 0x0, 0x4, 0x28b}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_RENAMEAT={0x23, 0x14, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) close(r4) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r11, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r8, 0x1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r11}, &(0x7f0000000100), &(0x7f00000001c0)=r4}, 0x20) (async) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df", 0x69}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c3322630ae8e710fb68299cbb5accee8813185c77248ddec7b5688599f1bfccbec448bc6ce5c139c2095da22c9d7edf7bfa1392c76ab0dddf4db130420df295ea16aa3e841d50dc813025315eea3990c2de68e835c4fec57e2dd70f47b58472c2f915de1a58a32d02", 0xd2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)="33ca667d02", 0x5}, {&(0x7f0000000b40)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde128419bfe468e7760112d01b2746540dc8a0e9087bde26b530a321fd36ffcbeddbc482d96b9f47e195afe70b764b941e95", 0x66}, {&(0x7f0000001a80)="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", 0x279}], 0x3}}], 0x2, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.110759422s ago: executing program 5 (id=1135): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x18, &(0x7f0000000100)=0x807d3, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000dc0)="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", 0x57d}], 0x1}}], 0x1, 0x4001c00) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0xb, 0x0, &(0x7f0000000140)="ac0000000000ec67838717", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x19980330, r0}, &(0x7f00000001c0)={0x6, 0x97a, 0x9, 0x7, 0x3, 0x10}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 506.224149ms ago: executing program 1 (id=1136): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x400, 0x1, 0xbfdffffc}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000080), 0x0}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={@ifindex, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffff9c, 0x0, 0x14000, 0x0) unshare(0x6e060000) 350.981968ms ago: executing program 2 (id=1137): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0, 0xbcf6a286718fe253}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f00000001c0)={0xfffffffffffffffa, 0x400, 0x80000001, 0xcb4}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f00000001c0)=0x9, 0x4) sendto$inet6(r2, 0x0, 0x0, 0xc0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfff}, 0x1c) syz_usb_control_io(r0, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000001c0)={0x8, 0xa, 0x0, "3258ae1e008faa0000f6ffffff0400ff1d0000000000000000004000", 0x35315258}) process_madvise(0xffffffffffffffff, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x1, @vbi={0x24e3c000, 0x4, 0x0, 0x584e4f53, [0xe568, 0x6], [0xb, 0x4], 0x108}}) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)={0x40, 0x24, 0xd4, {0xd4, 0x24, "e1642ffb8fd27788ca30e2f8dc5776afdca23891c1bf0571eb61d393843bb603ca45fc97b3ad78e66327d25a55956dacef21d1c1f3af747e7db0c45f338d93d8edc2bc1b920c452fea4ca69e2bbb84ebfda2fd42804ec134763e91f8ff1be3a6b9c78d4a5951031a9bf62be6efbdd8ceffb38127cdf9dbd4f59f3ce995c6698b284346251ae4cd24ca12c215967f7b80b473ad17b7107d71fe9a4e35901203f2b43801b0cc2703b96ce730196d4237186667fed2f5da3eead2b6b77d515d4deb72ebaafbc07fb54cd0a2ed4f73099ba53711"}}, &(0x7f0000000240)={0x0, 0x3, 0x90, @string={0x90, 0x3, "f9b44135e0737f7f5a35ba175d1bfab73c0bacb46c32594dd1990fe8d1ef3428f1c8f9a052d3fade796409134bcdcf626b614de3ac2abd74f3fe3da0b88ffdc39b10bc4edd2d3c72307e99ee9f9cb5830846481351f592002c8685c3ec10dbbeb5623f5b755429452f9d1a1174eef33f1f6e31d5f34bedbb036a81e7c47b2b1b18150bb8300c43a887325194eb09"}}}, &(0x7f0000000500)={0x34, &(0x7f0000000540)={0x0, 0x16, 0x6e, "164f4a2dad3fada7b23e73af228f7ab2233f2cc14cbbe7c15245d56a435e0d2388bcdbd3bbe9488dd1466f598d5b042a9f83a8f61cf402f600c370276d14b45f11d22da229c5443b0c8bdfe75ff5672cb4992a5bf7894e305460e7943472f2deb3c730d5f211d4a8e353bcdd8136"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000400)={0x20, 0x0, 0x5d, {0x5b, "daa0fefb992840fb27518d1d54e954d3ba3d090818e99c9e616ac3ee97412b5788315ad4ce4a569315f33cc2d97bf3ccabd506fa58e3f5226c90ab6089016969e1376778ee5cb98a0a043d38e03d3ffdc9b8f55d8801458367ce19"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0xf2}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x7d}}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f00000003c0)={0x1, "16809f2e04865e4f0eb0f0a01415a98efac4e085ab9eeec24bf1362d808125d2", 0x2, 0x1000, 0xfffffffe, 0x140000, 0x4, 0x3, 0x7ffb, 0x5}) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 165.256427ms ago: executing program 3 (id=1138): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x0, 0x5, 0x9, 0x9dec88f4c7570b47, 0x1, 0x2, '\x00', 0x0, r2, 0x2, 0x1, 0x3, 0x0, @void, @value, @value=r3}, 0x50) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x48) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) 0s ago: executing program 5 (id=1139): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x8}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000380)='E', 0x1, 0x20008800, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback={0xa000000}, 0xfffffffe}, 0x1c) kernel console output (not intermixed with test programs): 0x4f/0x70 [ 236.773326][ T8178] ____sys_sendmsg+0xa98/0xc70 [ 236.773349][ T8178] ? copy_msghdr_from_user+0x10a/0x160 [ 236.773365][ T8178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.773389][ T8178] ? __pfx__kstrtoull+0x10/0x10 [ 236.773417][ T8178] ___sys_sendmsg+0x134/0x1d0 [ 236.773435][ T8178] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.773464][ T8178] ? find_held_lock+0x2b/0x80 [ 236.773501][ T8178] __sys_sendmmsg+0x200/0x420 [ 236.773521][ T8178] ? __pfx___sys_sendmmsg+0x10/0x10 [ 236.773545][ T8178] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 236.773576][ T8178] ? fput+0x70/0xf0 [ 236.773599][ T8178] ? ksys_write+0x1ac/0x250 [ 236.773623][ T8178] ? __pfx_ksys_write+0x10/0x10 [ 236.773652][ T8178] __x64_sys_sendmmsg+0x9c/0x100 [ 236.773668][ T8178] ? lockdep_hardirqs_on+0x7c/0x110 [ 236.773694][ T8178] do_syscall_64+0xcd/0x4c0 [ 236.773713][ T8178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.773730][ T8178] RIP: 0033:0x7f5958b8e9a9 [ 236.773743][ T8178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.773759][ T8178] RSP: 002b:00007f5959965038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 236.773775][ T8178] RAX: ffffffffffffffda RBX: 00007f5958db5fa0 RCX: 00007f5958b8e9a9 [ 236.773786][ T8178] RDX: 0000000000000300 RSI: 0000200000002f40 RDI: 0000000000000004 [ 236.773796][ T8178] RBP: 00007f5959965090 R08: 0000000000000000 R09: 0000000000000000 [ 236.773806][ T8178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.773815][ T8178] R13: 0000000000000000 R14: 00007f5958db5fa0 R15: 00007ffed1630df8 [ 236.773839][ T8178] [ 237.480156][ T8190] vlan2: entered promiscuous mode [ 237.502971][ T8190] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 237.514281][ T8190] vlan2: entered allmulticast mode [ 237.519674][ T8190] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 237.586922][ T30] audit: type=1400 audit(1753997179.593:603): avc: denied { listen } for pid=8182 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.823826][ T8201] loop7: detected capacity change from 0 to 7 [ 237.891807][ T8202] overlayfs: missing 'lowerdir' [ 238.208462][ T5963] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 238.281279][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.290668][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 238.299167][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.308346][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 238.316365][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.325577][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 238.333650][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.342824][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 238.351290][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.360459][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 238.369878][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.379089][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 238.392410][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.401622][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 238.409548][ T8201] ldm_validate_partition_table(): Disk read failed. [ 238.421299][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.424918][ T5963] usb 2-1: unable to get BOS descriptor or descriptor too short [ 238.430510][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 238.438732][ T5963] usb 2-1: not running at top speed; connect to a high speed hub [ 238.449165][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.462838][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 238.465953][ T5963] usb 2-1: config 129 has an invalid interface number: 3 but max is 0 [ 238.479645][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.488809][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 238.497080][ T8201] Dev loop7: unable to read RDB block 0 [ 238.505727][ T8201] loop7: unable to read partition table [ 238.514548][ T5963] usb 2-1: config 129 has no interface number 0 [ 238.531646][ T5963] usb 2-1: config 129 interface 3 has no altsetting 0 [ 238.551958][ T5963] usb 2-1: language id specifier not provided by device, defaulting to English [ 238.575547][ T5963] usb 2-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice=c4.bc [ 238.584955][ T8201] loop7: partition table beyond EOD, truncated [ 238.613383][ T8201] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 238.640675][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.649161][ T30] audit: type=1400 audit(1753997180.663:604): avc: denied { ioctl } for pid=8209 comm="syz.3.627" path="socket:[17657]" dev="sockfs" ino=17657 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 238.673934][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.682671][ T5963] usb 2-1: Product: á Š [ 238.688701][ T5963] usb 2-1: Manufacturer: Ñ [ 238.693253][ T5963] usb 2-1: SerialNumber: а [ 238.836388][ T10] libceph: connect (1)[c::]:6789 error -101 [ 238.842696][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 238.884321][ T10] libceph: connect (1)[c::]:6789 error -101 [ 238.892799][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 238.907025][ T5963] hub 2-1:129.3: bad descriptor, ignoring hub [ 238.943700][ T5963] hub 2-1:129.3: probe with driver hub failed with error -5 [ 238.981270][ T8224] vxcan1: entered allmulticast mode [ 239.353491][ T10] libceph: connect (1)[c::]:6789 error -101 [ 239.359769][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 239.366019][ T10] libceph: connect (1)[c::]:6789 error -101 [ 239.376102][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 239.390283][ T5963] usb 2-1: USB disconnect, device number 12 [ 239.463676][ T8174] delete_channel: no stack [ 239.476855][ T30] audit: type=1400 audit(1753997181.483:605): avc: denied { getopt } for pid=8226 comm="syz.2.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 239.674507][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.5.631'. [ 239.701926][ T8216] ceph: No mds server is up or the cluster is laggy [ 239.709147][ T8220] ceph: No mds server is up or the cluster is laggy [ 239.783113][ T30] audit: type=1400 audit(1753997181.773:606): avc: denied { bind } for pid=8226 comm="syz.2.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 239.975670][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 239.984761][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 240.000441][ T8239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.345568][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'. [ 241.870680][ T2897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 241.882722][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 241.974250][ T8247] netlink: 68 bytes leftover after parsing attributes in process `syz.3.634'. [ 242.066893][ T8247] netlink: 68 bytes leftover after parsing attributes in process `syz.3.634'. [ 242.631634][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 243.360388][ T8261] lo speed is unknown, defaulting to 1000 [ 243.436196][ T8258] syz.3.638 (8258) used greatest stack depth: 16704 bytes left [ 243.963647][ T8275] netlink: 10 bytes leftover after parsing attributes in process `syz.1.643'. [ 244.304177][ T8287] : entered promiscuous mode [ 244.370242][ T8283] fuse: Bad value for 'fd' [ 245.420670][ T8266] ALSA: mixer_oss: invalid OSS volume '' [ 245.831912][ T8310] openvswitch: netlink: Flow actions attr not present in new flow. [ 246.290857][ T8322] netlink: 'syz.2.657': attribute type 25 has an invalid length. [ 246.349406][ T8322] netlink: 184 bytes leftover after parsing attributes in process `syz.2.657'. [ 246.389381][ T5883] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 246.431956][ T8326] 8021q: VLANs not supported on ipvlan1 [ 246.675410][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 246.681975][ T5883] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 246.719599][ T5883] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 246.765845][ T8327] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 246.782757][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.840902][ T5883] usb 4-1: config 0 descriptor?? [ 246.903864][ T8334] overlayfs: failed to clone upperpath [ 246.959936][ T2897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.163432][ T30] audit: type=1400 audit(1753997189.182:607): avc: denied { bind } for pid=8314 comm="syz.3.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 247.529802][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.559572][ T1218] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 247.709565][ T1218] usb 1-1: Using ep0 maxpacket: 16 [ 247.716822][ T1218] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 247.727549][ T1218] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.734636][ T8344] bridge1: entered promiscuous mode [ 247.743558][ T1218] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 247.752759][ T1218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.769634][ T1218] usb 1-1: Product: syz [ 247.784232][ T1218] usb 1-1: Manufacturer: syz [ 247.795266][ T1218] usb 1-1: SerialNumber: syz [ 248.013001][ T30] audit: type=1400 audit(1753997190.032:608): avc: denied { ioctl } for pid=8346 comm="syz.0.665" path="socket:[18114]" dev="sockfs" ino=18114 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 248.636126][ T5839] Bluetooth: hci5: unexpected event 0x09 length: 6 > 3 [ 249.148548][ T9] usb 4-1: USB disconnect, device number 14 [ 249.237129][ T8359] Cannot find add_set index 0 as target [ 250.368017][ T1218] usb 1-1: 0:2 : does not exist [ 250.739700][ T1218] usb 1-1: USB disconnect, device number 18 [ 250.791863][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.109994][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 251.590100][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 251.625755][ T9] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1024 [ 251.707466][ T9] usb 4-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.873780][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 251.965938][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 251.984433][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.993700][ T9] usb 4-1: Product: syz [ 251.997923][ T9] usb 4-1: Manufacturer: Ъ [ 252.007206][ T9] usb 4-1: SerialNumber: syz [ 252.068946][ T8375] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 252.096707][ T8375] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 252.479428][ T9] usb 4-1: USB disconnect, device number 15 [ 252.511957][ T8423] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 252.521067][ T8423] overlayfs: missing 'lowerdir' [ 252.554435][ T30] audit: type=1400 audit(1753997194.571:609): avc: denied { read } for pid=8420 comm="syz.2.683" path="socket:[18608]" dev="sockfs" ino=18608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 252.711843][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.238008][ T9] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 253.281300][ T6008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.402155][ T9] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 253.505278][ T9] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 35300, setting to 8 [ 253.516632][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 253.528059][ T9] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 253.562895][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.703294][ T9] usb 2-1: config 0 descriptor?? [ 253.713699][ T8433] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 254.124046][ T8433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.132756][ T8433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.912591][ T30] audit: type=1400 audit(1753997196.931:610): avc: denied { ioctl } for pid=8468 comm="syz.3.698" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 255.212357][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.293819][ T30] audit: type=1400 audit(1753997198.171:611): avc: denied { write } for pid=8473 comm="syz.5.699" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 257.096307][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 257.712442][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 257.788518][ T9] usb 2-1: USB disconnect, device number 13 [ 257.916612][ T8495] comedi: valid board names for 8255 driver are: [ 257.923616][ T8495] 8255 [ 257.926390][ T8495] comedi: valid board names for vmk80xx driver are: [ 257.935163][ T8495] vmk80xx [ 257.938213][ T8495] comedi: valid board names for usbduxsigma driver are: [ 257.948029][ T8495] usbduxsigma [ 257.953265][ T8495] comedi: valid board names for usbduxfast driver are: [ 257.960141][ T8495] usbduxfast [ 257.963580][ T8495] comedi: valid board names for usbdux driver are: [ 257.970065][ T8495] usbdux [ 257.981067][ T8495] comedi: valid board names for ni6501 driver are: [ 257.988792][ T8495] ni6501 [ 258.001001][ T8495] comedi: valid board names for dt9812 driver are: [ 258.015749][ T8495] dt9812 [ 258.018737][ T8495] comedi: valid board names for ni_labpc_cs driver are: [ 258.033629][ T8495] ni_labpc_cs [ 258.047190][ T8495] comedi: valid board names for ni_daq_700 driver are: [ 258.057306][ T8495] ni_daq_700 [ 258.060627][ T8495] comedi: valid board names for labpc_pci driver are: [ 258.078084][ T8495] labpc_pci [ 258.088185][ T8495] comedi: valid board names for adl_pci9118 driver are: [ 258.098288][ T8495] pci9118dg [ 258.108865][ T8495] pci9118hg [ 258.145426][ T8495] pci9118hr [ 258.148684][ T8495] comedi: valid board names for 8255_pci driver are: [ 258.158411][ T8495] 8255_pci [ 258.166383][ T8495] comedi: valid board names for s526 driver are: [ 258.173078][ T8495] s526 [ 258.175879][ T8495] comedi: valid board names for multiq3 driver are: [ 258.182806][ T8495] multiq3 [ 258.185923][ T8495] comedi: valid board names for pcmuio driver are: [ 258.201124][ T8495] pcmuio48 [ 258.206092][ T8495] pcmuio96 [ 258.209252][ T8495] comedi: valid board names for pcmmio driver are: [ 258.221235][ T8495] pcmmio [ 258.228966][ T8495] comedi: valid board names for pcmda12 driver are: [ 258.236833][ T8495] pcmda12 [ 258.245759][ T8495] comedi: valid board names for pcmad driver are: [ 258.252694][ T8495] pcmad12 [ 258.255789][ T8495] pcmad16 [ 258.259651][ T8495] comedi: valid board names for ni_labpc driver are: [ 258.269398][ T8495] lab-pc-1200 [ 258.273988][ T8495] lab-pc-1200ai [ 258.277635][ T8495] lab-pc+ [ 258.280693][ T8495] comedi: valid board names for atmio16 driver are: [ 258.287763][ T8495] atmio16 [ 258.290834][ T8495] atmio16d [ 258.294249][ T8495] comedi: valid board names for ni_at_ao driver are: [ 258.301160][ T8495] at-ao-6 [ 258.304219][ T8495] at-ao-10 [ 258.307360][ T8495] comedi: valid board names for ni_at_a2150 driver are: [ 258.314836][ T8495] ni_at_a2150 [ 258.337186][ T8495] comedi: valid board names for adq12b driver are: [ 258.356964][ T8495] adq12b [ 258.379039][ T8495] comedi: valid board names for mpc624 driver are: [ 258.395838][ T8495] mpc624 [ 258.408020][ T6008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.412045][ T798] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.420937][ T8495] comedi: valid board names for c6xdigio driver are: [ 258.660830][ T8495] c6xdigio [ 258.684240][ T8495] comedi: valid board names for aio_iiro_16 driver are: [ 258.703337][ T8495] aio_iiro_16 [ 258.803534][ T8495] comedi: valid board names for aio_aio12_8 driver are: [ 258.810573][ T8495] aio_aio12_8 [ 258.813999][ T8495] aio_ai12_8 [ 258.817276][ T8495] aio_ao12_4 [ 258.820553][ T8495] comedi: valid board names for fl512 driver are: [ 258.830916][ T8495] fl512 [ 258.833843][ T8495] comedi: valid board names for dmm32at driver are: [ 258.840423][ T8495] dmm32at [ 258.847283][ T8509] tipc: MTU too low for tipc bearer [ 258.854720][ T8495] comedi: valid board names for dt282x driver are: [ 258.862811][ T8495] dt2821 [ 258.865783][ T8495] dt2821-f [ 258.868892][ T8495] dt2821-g [ 258.873251][ T8495] dt2823 [ 258.876449][ T8495] dt2824-pgh [ 258.879731][ T8495] dt2824-pgl [ 258.898731][ T8495] dt2825 [ 258.903485][ T8495] dt2827 [ 258.906625][ T8495] dt2828 [ 258.909594][ T8495] dt2829 [ 258.912888][ T8495] dt21-ez [ 258.915951][ T8495] dt23-ez [ 258.918976][ T8495] dt24-ez [ 258.922072][ T8495] dt24-ez-pgl [ 258.925491][ T8495] comedi: valid board names for dt2817 driver are: [ 258.932762][ T8495] dt2817 [ 258.935827][ T8495] comedi: valid board names for dt2815 driver are: [ 258.942439][ T8495] dt2815 [ 258.946555][ T8495] comedi: valid board names for dt2814 driver are: [ 258.953181][ T8495] dt2814 [ 258.956315][ T8495] comedi: valid board names for dt2811 driver are: [ 258.965388][ T8495] dt2811-pgh [ 258.968971][ T8495] dt2811-pgl [ 258.972565][ T8495] comedi: valid board names for dt2801 driver are: [ 258.980715][ T8495] dt2801 [ 258.984057][ T8495] comedi: valid board names for das6402 driver are: [ 259.078273][ T8495] das6402-12 [ 259.221305][ T8495] das6402-16 [ 259.256589][ T8495] comedi: valid board names for das1800 driver are: [ 259.316613][ T8495] das-1701st [ 259.331107][ T8495] das-1701st-da [ 259.336667][ T8495] das-1702st [ 259.339985][ T8495] das-1702st-da [ 259.344942][ T8495] das-1702hr [ 259.348283][ T8495] das-1702hr-da [ 259.351958][ T8495] das-1701ao [ 259.355530][ T8495] das-1702ao [ 259.358966][ T8495] das-1801st [ 259.362401][ T8495] das-1801st-da [ 259.379781][ T8495] das-1802st [ 259.400421][ T8495] das-1802st-da [ 259.409137][ T8495] das-1802hr [ 259.416677][ T8495] das-1802hr-da [ 259.451416][ T8495] das-1801hc [ 259.605491][ T8495] das-1802hc [ 259.681350][ T8495] das-1801ao [ 259.684674][ T8495] das-1802ao [ 259.687954][ T8495] comedi: valid board names for das800 driver are: [ 260.221616][ T8495] das-800 [ 260.224744][ T8495] cio-das800 [ 260.228091][ T8495] das-801 [ 260.264649][ T8495] cio-das801 [ 260.272707][ T8495] das-802 [ 260.277928][ T8495] cio-das802 [ 260.541982][ T8495] cio-das802/16 [ 260.624028][ T8495] comedi: valid board names for isa-das08 driver are: [ 260.741650][ T8495] isa-das08 [ 260.751410][ T8495] das08-pgm [ 260.754683][ T8495] das08-pgh [ 260.764777][ T8495] das08-pgl [ 260.778151][ T8495] das08-aoh [ 260.820642][ T8495] das08-aol [ 260.826871][ T8541] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 260.842710][ T8495] das08-aom [ 260.859523][ T8495] das08/jr-ao [ 260.869151][ T8495] das08jr-16-ao [ 260.874033][ T8495] pc104-das08 [ 260.877477][ T8495] das08jr/16 [ 260.880757][ T8495] comedi: valid board names for das16m1 driver are: [ 260.998361][ T8495] das16m1 [ 261.009815][ T8495] comedi: valid board names for dac02 driver are: [ 261.027528][ T8495] dac02 [ 261.031142][ T8495] comedi: valid board names for rti802 driver are: [ 261.083044][ T8495] rti802 [ 261.138487][ T8495] comedi: valid board names for rti800 driver are: [ 261.249853][ T8554] overlayfs: failed to clone lowerpath [ 261.304367][ T8555] overlayfs: failed to clone upperpath [ 261.579588][ T8495] rti800 [ 261.624992][ T8495] rti815 [ 261.633185][ T8495] comedi: valid board names for pcm3724 driver are: [ 261.640169][ T8495] pcm3724 [ 261.645693][ T8495] comedi: valid board names for pcl818 driver are: [ 261.652990][ T8495] pcl818l [ 261.656090][ T8495] pcl818h [ 261.659234][ T8495] pcl818hd [ 261.665042][ T8495] pcl818hg [ 261.668232][ T8495] pcl818 [ 261.671293][ T8495] pcl718 [ 261.740742][ T8495] pcm3718 [ 261.744675][ T8495] comedi: valid board names for pcl816 driver are: [ 261.776932][ T8495] pcl816 [ 261.806758][ T8495] pcl814b [ 261.821248][ T8495] comedi: valid board names for pcl812 driver are: [ 261.969864][ T8495] pcl812 [ 261.981515][ T8495] pcl812pg [ 261.984634][ T8495] acl8112pg [ 261.987821][ T8495] acl8112dg [ 262.471590][ T8495] acl8112hg [ 262.474822][ T8495] a821pgl [ 262.477840][ T8495] a821pglnda [ 262.481120][ T8495] a821pgh [ 262.528648][ T8495] a822pgl [ 262.548571][ T8495] a822pgh [ 262.559035][ T8495] a823pgl [ 262.566497][ T8495] a823pgh [ 262.574393][ T8573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41232 sclass=netlink_route_socket pid=8573 comm=syz.1.725 [ 262.577965][ T8495] pcl813 [ 262.601006][ T8495] pcl813b [ 262.604900][ T30] audit: type=1400 audit(1753997204.610:612): avc: denied { map } for pid=8567 comm="syz.2.727" path="socket:[19486]" dev="sockfs" ino=19486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.607412][ T8495] acl8113 [ 262.643645][ T8495] iso813 [ 262.648816][ T8495] acl8216 [ 262.658465][ T8495] a826pg [ 262.666818][ T8495] comedi: valid board names for pcl730 driver are: [ 262.689372][ T8495] pcl730 [ 262.697518][ T8495] iso730 [ 262.700500][ T8495] acl7130 [ 262.703858][ T8495] pcm3730 [ 262.706959][ T8495] pcl725 [ 262.710079][ T8495] p8r8dio [ 262.742295][ T5839] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 262.761336][ T8495] acl7225b [ 262.899966][ T8495] p16r16dio [ 262.903285][ T8495] pcl733 [ 262.906278][ T8495] pcl734 [ 262.909276][ T8495] opmm-1616-xt [ 262.912918][ T8495] pearl-mm-p [ 262.916651][ T8495] ir104-pbf [ 262.920077][ T8495] comedi: valid board names for pcl726 driver are: [ 262.926872][ T8495] pcl726 [ 262.930128][ T8495] pcl727 [ 262.933186][ T8495] pcl728 [ 262.937089][ T8495] acl6126 [ 262.940184][ T8495] acl6128 [ 262.945602][ T8495] comedi: valid board names for pcl724 driver are: [ 262.952419][ T8495] pcl724 [ 262.955404][ T8495] pcl722 [ 262.958394][ T8495] pcl731 [ 262.961405][ T8495] acl7122 [ 262.964757][ T8495] acl7124 [ 262.967853][ T8495] pet48dio [ 262.971009][ T8495] pcmio48 [ 262.974103][ T8495] onyx-mm-dio [ 262.977512][ T8495] comedi: valid board names for pcl711 driver are: [ 262.984111][ T8495] pcl711 [ 262.987090][ T8495] pcl711b [ 262.990335][ T8495] acl8112hg [ 262.993609][ T8495] acl8112dg [ 262.996863][ T8495] comedi: valid board names for amplc_pc263 driver are: [ 263.003869][ T8495] pc263 [ 263.006757][ T8495] comedi: valid board names for amplc_pc236 driver are: [ 263.013749][ T8495] pc36at [ 263.016730][ T8495] comedi: valid board names for amplc_dio200 driver are: [ 263.043562][ T8583] pim6reg: entered allmulticast mode [ 263.049339][ T8495] pc212e [ 263.068339][ T8495] pc214e [ 263.071294][ T8495] pc215e [ 263.078359][ T8495] pc218e [ 263.081326][ T8495] pc272e [ 263.085988][ T8495] comedi: valid board names for comedi_parport driver are: [ 263.093231][ T8495] comedi_parport [ 263.096945][ T8495] comedi: valid board names for comedi_test driver are: [ 263.108751][ T8495] comedi_test [ 263.114088][ T8495] comedi: valid board names for comedi_bond driver are: [ 263.121035][ T8495] comedi_bond [ 263.144113][ T8588] FAULT_INJECTION: forcing a failure. [ 263.144113][ T8588] name failslab, interval 1, probability 0, space 0, times 0 [ 263.156796][ T8588] CPU: 1 UID: 0 PID: 8588 Comm: syz.1.731 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 263.156811][ T8588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.156817][ T8588] Call Trace: [ 263.156821][ T8588] [ 263.156825][ T8588] dump_stack_lvl+0x16c/0x1f0 [ 263.156845][ T8588] should_fail_ex+0x512/0x640 [ 263.156861][ T8588] ? __kmalloc_noprof+0xbf/0x510 [ 263.156878][ T8588] ? copy_splice_read+0x1a8/0xba0 [ 263.156892][ T8588] should_failslab+0xc2/0x120 [ 263.156902][ T8588] __kmalloc_noprof+0xd2/0x510 [ 263.156921][ T8588] copy_splice_read+0x1a8/0xba0 [ 263.156938][ T8588] ? __pfx_copy_splice_read+0x10/0x10 [ 263.156954][ T8588] ? look_up_lock_class+0x6b/0x150 [ 263.156972][ T8588] ? lockdep_init_map_type+0x5c/0x280 [ 263.156983][ T8588] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 263.157000][ T8588] ? __pfx_copy_splice_read+0x10/0x10 [ 263.157014][ T8588] do_splice_read+0x282/0x370 [ 263.157030][ T8588] splice_direct_to_actor+0x2a1/0xa30 [ 263.157046][ T8588] ? __pfx_direct_splice_actor+0x10/0x10 [ 263.157063][ T8588] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 263.157077][ T8588] ? get_pid_task+0xfc/0x250 [ 263.157090][ T8588] do_splice_direct+0x174/0x240 [ 263.157105][ T8588] ? __pfx_do_splice_direct+0x10/0x10 [ 263.157120][ T8588] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 263.157137][ T8588] ? rw_verify_area+0xcf/0x680 [ 263.157152][ T8588] do_sendfile+0xb06/0xe50 [ 263.157172][ T8588] ? __pfx_do_sendfile+0x10/0x10 [ 263.157190][ T8588] __x64_sys_sendfile64+0x154/0x220 [ 263.157202][ T8588] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 263.157222][ T8588] do_syscall_64+0xcd/0x4c0 [ 263.157240][ T8588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.157257][ T8588] RIP: 0033:0x7f5958b8e9a9 [ 263.157270][ T8588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.157282][ T8588] RSP: 002b:00007f5959965038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 263.157291][ T8588] RAX: ffffffffffffffda RBX: 00007f5958db5fa0 RCX: 00007f5958b8e9a9 [ 263.157298][ T8588] RDX: 0000200000002080 RSI: 000000000000000b RDI: 000000000000000c [ 263.157304][ T8588] RBP: 00007f5959965090 R08: 0000000000000000 R09: 0000000000000000 [ 263.157310][ T8588] R10: 000000000000023b R11: 0000000000000246 R12: 0000000000000001 [ 263.157315][ T8588] R13: 0000000000000000 R14: 00007f5958db5fa0 R15: 00007ffed1630df8 [ 263.157329][ T8588] [ 263.456571][ T8496] comedi: valid board names for 8255 driver are: [ 263.515086][ T8496] 8255 [ 263.521213][ T8496] comedi: valid board names for vmk80xx driver are: [ 263.537299][ T8496] vmk80xx [ 263.544868][ T8496] comedi: valid board names for usbduxsigma driver are: [ 263.553379][ T8496] usbduxsigma [ 263.556811][ T8496] comedi: valid board names for usbduxfast driver are: [ 263.565834][ T8496] usbduxfast [ 263.610983][ T8496] comedi: valid board names for usbdux driver are: [ 263.682077][ T8496] usbdux [ 263.685156][ T8496] comedi: valid board names for ni6501 driver are: [ 263.692404][ T8496] ni6501 [ 263.737509][ T8496] comedi: valid board names for dt9812 driver are: [ 263.744314][ T8496] dt9812 [ 263.747250][ T8496] comedi: valid board names for ni_labpc_cs driver are: [ 263.761061][ T8496] ni_labpc_cs [ 263.764530][ T8496] comedi: valid board names for ni_daq_700 driver are: [ 263.780769][ T8496] ni_daq_700 [ 263.784161][ T8496] comedi: valid board names for labpc_pci driver are: [ 263.791033][ T8496] labpc_pci [ 263.801232][ T8496] comedi: valid board names for adl_pci9118 driver are: [ 263.815093][ T8496] pci9118dg [ 263.818298][ T8496] pci9118hg [ 263.821537][ T8496] pci9118hr [ 263.824812][ T8496] comedi: valid board names for 8255_pci driver are: [ 263.831868][ T8496] 8255_pci [ 263.835000][ T8496] comedi: valid board names for s526 driver are: [ 263.841390][ T8496] s526 [ 263.846605][ T8496] comedi: valid board names for multiq3 driver are: [ 263.853263][ T8496] multiq3 [ 263.856334][ T8496] comedi: valid board names for pcmuio driver are: [ 263.864167][ T8496] pcmuio48 [ 263.867331][ T8496] pcmuio96 [ 263.870685][ T8496] comedi: valid board names for pcmmio driver are: [ 263.877263][ T8496] pcmmio [ 263.880899][ T8496] comedi: valid board names for pcmda12 driver are: [ 263.889135][ T8496] pcmda12 [ 263.893209][ T8496] comedi: valid board names for pcmad driver are: [ 263.899698][ T8496] pcmad12 [ 263.904542][ T8496] pcmad16 [ 263.907567][ T8496] comedi: valid board names for ni_labpc driver are: [ 263.925267][ T8496] lab-pc-1200 [ 263.932399][ T8496] lab-pc-1200ai [ 263.937358][ T8496] lab-pc+ [ 263.940484][ T8496] comedi: valid board names for atmio16 driver are: [ 263.948193][ T8496] atmio16 [ 263.951335][ T8496] atmio16d [ 263.958344][ T30] audit: type=1400 audit(1753997205.959:613): avc: denied { read append } for pid=8598 comm="syz.1.736" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 263.986720][ T8496] comedi: valid board names for ni_at_ao driver are: [ 263.993611][ T8496] at-ao-6 [ 263.996914][ T8496] at-ao-10 [ 264.000063][ T8496] comedi: valid board names for ni_at_a2150 driver are: [ 264.007390][ T30] audit: type=1400 audit(1753997205.959:614): avc: denied { open } for pid=8598 comm="syz.1.736" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 264.031719][ T8496] ni_at_a2150 [ 264.035141][ T8496] comedi: valid board names for adq12b driver are: [ 264.041969][ T8496] adq12b [ 264.044949][ T8496] comedi: valid board names for mpc624 driver are: [ 264.051492][ T8496] mpc624 [ 264.054851][ T30] audit: type=1400 audit(1753997205.969:615): avc: denied { ioctl } for pid=8598 comm="syz.1.736" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x620e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 264.087132][ T8496] comedi: valid board names for c6xdigio driver are: [ 264.099082][ T8496] c6xdigio [ 264.102997][ T8496] comedi: valid board names for aio_iiro_16 driver are: [ 264.110024][ T8496] aio_iiro_16 [ 264.115813][ T8496] comedi: valid board names for aio_aio12_8 driver are: [ 264.125094][ T8496] aio_aio12_8 [ 264.129196][ T8496] aio_ai12_8 [ 264.133939][ T8496] aio_ao12_4 [ 264.138985][ T8496] comedi: valid board names for fl512 driver are: [ 264.162147][ T798] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 264.162345][ T8496] fl512 [ 264.173964][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 264.206202][ T8496] comedi: valid board names for dmm32at driver are: [ 264.213109][ T8496] dmm32at [ 264.216318][ T8496] comedi: valid board names for dt282x driver are: [ 264.282224][ T8496] dt2821 [ 264.305725][ T8496] dt2821-f [ 264.319444][ T8496] dt2821-g [ 264.412196][ T8496] dt2823 [ 264.422142][ T8496] dt2824-pgh [ 264.511191][ T8496] dt2824-pgl [ 264.599308][ T8496] dt2825 [ 264.627450][ T8496] dt2827 [ 264.645549][ T8496] dt2828 [ 264.648503][ T8496] dt2829 [ 264.651431][ T8496] dt21-ez [ 264.656547][ T8496] dt23-ez [ 264.659570][ T8496] dt24-ez [ 264.667122][ T8496] dt24-ez-pgl [ 264.670502][ T8496] comedi: valid board names for dt2817 driver are: [ 265.514706][ T8609] syz.0.739 (8609): drop_caches: 1 [ 265.542362][ T8496] dt2817 [ 265.545329][ T8496] comedi: valid board names for dt2815 driver are: [ 265.551817][ T8496] dt2815 [ 265.628823][ T8609] syz.0.739 (8609): drop_caches: 1 [ 265.644006][ T8496] comedi: valid board names for dt2814 driver are: [ 265.650765][ T8496] dt2814 [ 265.655526][ T8496] comedi: valid board names for dt2811 driver are: [ 265.669517][ T8496] dt2811-pgh [ 265.677398][ T8496] dt2811-pgl [ 265.680688][ T8496] comedi: valid board names for dt2801 driver are: [ 265.691451][ T8496] dt2801 [ 265.705296][ T8496] comedi: valid board names for das6402 driver are: [ 265.711992][ T8496] das6402-12 [ 265.715615][ T8496] das6402-16 [ 265.718898][ T8496] comedi: valid board names for das1800 driver are: [ 265.725647][ T8496] das-1701st [ 265.728931][ T8496] das-1701st-da [ 265.733400][ T8496] das-1702st [ 265.736994][ T8496] das-1702st-da [ 265.740579][ T8496] das-1702hr [ 265.743981][ T8496] das-1702hr-da [ 265.747657][ T8496] das-1701ao [ 265.750936][ T8496] das-1702ao [ 265.796331][ T8496] das-1801st [ 265.799638][ T8496] das-1801st-da [ 265.803267][ T8496] das-1802st [ 265.806586][ T8496] das-1802st-da [ 265.810822][ T8496] das-1802hr [ 265.814152][ T8496] das-1802hr-da [ 265.818169][ T8496] das-1801hc [ 265.823117][ T8496] das-1802hc [ 265.826902][ T8496] das-1801ao [ 265.830953][ T8496] das-1802ao [ 265.841073][ T8496] comedi: valid board names for das800 driver are: [ 265.847591][ T8615] overlayfs: failed to clone upperpath [ 265.854755][ T8496] das-800 [ 265.857780][ T8496] cio-das800 [ 265.861738][ T8496] das-801 [ 265.893368][ T8496] cio-das801 [ 265.901490][ T8496] das-802 [ 265.906322][ T8496] cio-das802 [ 265.912239][ T8496] cio-das802/16 [ 265.915927][ T8496] comedi: valid board names for isa-das08 driver are: [ 265.928900][ T8496] isa-das08 [ 265.982441][ T8496] das08-pgm [ 265.985672][ T8496] das08-pgh [ 265.991404][ T8496] das08-pgl [ 266.002089][ T8496] das08-aoh [ 266.005303][ T8496] das08-aol [ 266.008493][ T8496] das08-aom [ 266.011709][ T8496] das08/jr-ao [ 266.029664][ T8496] das08jr-16-ao [ 266.037488][ T8496] pc104-das08 [ 266.045081][ T8496] das08jr/16 [ 266.053913][ T8496] comedi: valid board names for das16m1 driver are: [ 266.067762][ T8496] das16m1 [ 266.074100][ T8496] comedi: valid board names for dac02 driver are: [ 266.105271][ T8496] dac02 [ 266.114400][ T8496] comedi: valid board names for rti802 driver are: [ 266.133173][ T8496] rti802 [ 266.139269][ T8496] comedi: valid board names for rti800 driver are: [ 266.151315][ T8496] rti800 [ 266.156402][ T8496] rti815 [ 266.163313][ T8496] comedi: valid board names for pcm3724 driver are: [ 266.178187][ T8496] pcm3724 [ 266.190808][ T5839] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 266.204130][ T8496] comedi: valid board names for pcl818 driver are: [ 266.216044][ T8496] pcl818l [ 266.219126][ T8496] pcl818h [ 266.222230][ T8496] pcl818hd [ 266.225384][ T8496] pcl818hg [ 266.229479][ T8496] pcl818 [ 266.235111][ T8496] pcl718 [ 266.238101][ T8496] pcm3718 [ 266.457715][ T8496] comedi: valid board names for pcl816 driver are: [ 266.483223][ T8496] pcl816 [ 266.491700][ T8496] pcl814b [ 266.500565][ T8496] comedi: valid board names for pcl812 driver are: [ 266.513026][ T8496] pcl812 [ 266.517101][ T8496] pcl812pg [ 266.520293][ T8496] acl8112pg [ 266.667851][ T8496] acl8112dg [ 266.989746][ T8496] acl8112hg [ 267.015878][ T8496] a821pgl [ 267.018937][ T8496] a821pglnda [ 267.022737][ T8496] a821pgh [ 267.025798][ T8496] a822pgl [ 267.028865][ T8496] a822pgh [ 267.031927][ T8496] a823pgl [ 267.035237][ T8496] a823pgh [ 267.038299][ T8496] pcl813 [ 267.041264][ T8496] pcl813b [ 267.067881][ T8496] acl8113 [ 267.081422][ T8496] iso813 [ 267.096443][ T8496] acl8216 [ 267.099494][ T8496] a826pg [ 267.113705][ T8496] comedi: valid board names for pcl730 driver are: [ 267.120225][ T8496] pcl730 [ 267.127805][ T8496] iso730 [ 267.130749][ T8496] acl7130 [ 267.157139][ T8496] pcm3730 [ 267.165557][ T8496] pcl725 [ 267.168502][ T8496] p8r8dio [ 267.171572][ T8496] acl7225b [ 267.175134][ T8496] p16r16dio [ 267.179601][ T8496] pcl733 [ 267.183013][ T8496] pcl734 [ 267.186061][ T8496] opmm-1616-xt [ 267.189551][ T8496] pearl-mm-p [ 267.237919][ T8496] ir104-pbf [ 267.247958][ T8496] comedi: valid board names for pcl726 driver are: [ 267.280862][ T8496] pcl726 [ 267.304850][ T8496] pcl727 [ 267.322533][ T8496] pcl728 [ 267.336992][ T8636] netlink: 40 bytes leftover after parsing attributes in process `syz.5.746'. [ 267.349739][ T8641] Driver unsupported XDP return value 0 on prog (id 159) dev N/A, expect packet loss! [ 267.351319][ T8496] acl6126 [ 267.439956][ T8496] acl6128 [ 267.443308][ T8496] comedi: valid board names for pcl724 driver are: [ 267.451212][ T8496] pcl724 [ 267.457916][ T8496] pcl722 [ 267.460945][ T8496] pcl731 [ 267.474286][ T8496] acl7122 [ 267.480627][ T8496] acl7124 [ 267.487050][ T8496] pet48dio [ 267.496901][ T8496] pcmio48 [ 267.503070][ T8496] onyx-mm-dio [ 267.528084][ T8496] comedi: valid board names for pcl711 driver are: [ 267.534757][ T8496] pcl711 [ 267.537927][ T8496] pcl711b [ 267.543638][ T8496] acl8112hg [ 267.554796][ T8496] acl8112dg [ 267.565894][ T8496] comedi: valid board names for amplc_pc263 driver are: [ 267.581348][ T8496] pc263 [ 267.587850][ T8496] comedi: valid board names for amplc_pc236 driver are: [ 267.602064][ T8496] pc36at [ 267.610110][ T8496] comedi: valid board names for amplc_dio200 driver are: [ 267.613795][ T8651] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 267.617372][ T8496] pc212e [ 267.819348][ T8496] pc214e [ 267.882393][ T8496] pc215e [ 267.885838][ T8496] pc218e [ 267.891536][ T8496] pc272e [ 267.901845][ T8496] comedi: valid board names for comedi_parport driver are: [ 267.915871][ T8496] comedi_parport [ 267.919546][ T8496] comedi: valid board names for comedi_test driver are: [ 267.926814][ T8496] comedi_test [ 267.930182][ T8496] comedi: valid board names for comedi_bond driver are: [ 267.937154][ T8496] comedi_bond [ 268.110622][ T8656] syzkaller1: entered promiscuous mode [ 268.119515][ T8656] syzkaller1: entered allmulticast mode [ 268.132102][ T8656] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 268.140758][ T5839] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 268.817674][ T8668] netlink: 'syz.1.756': attribute type 14 has an invalid length. [ 268.973857][ T5839] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 269.124519][ T8672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.284196][ T6008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.399131][ T30] audit: type=1400 audit(1753997211.409:616): avc: denied { mount } for pid=8676 comm="syz.2.759" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 269.427047][ T8677] netlink: 'syz.2.759': attribute type 5 has an invalid length. [ 269.605237][ T8681] vcan0: tx address claim with dest, not broadcast [ 269.616535][ T8681] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 269.624725][ T8681] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 269.925939][ T6008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.274197][ T8693] FAULT_INJECTION: forcing a failure. [ 270.274197][ T8693] name failslab, interval 1, probability 0, space 0, times 0 [ 270.291655][ T8693] CPU: 0 UID: 0 PID: 8693 Comm: syz.0.766 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 270.291681][ T8693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.291691][ T8693] Call Trace: [ 270.291697][ T8693] [ 270.291704][ T8693] dump_stack_lvl+0x16c/0x1f0 [ 270.291736][ T8693] should_fail_ex+0x512/0x640 [ 270.291763][ T8693] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 270.291790][ T8693] should_failslab+0xc2/0x120 [ 270.291808][ T8693] __kmalloc_cache_noprof+0x6a/0x3e0 [ 270.291829][ T8693] ? __lock_acquire+0x622/0x1c90 [ 270.291845][ T8693] ? ovl_encode_real_fh+0xca/0x420 [ 270.291870][ T8693] ovl_encode_real_fh+0xca/0x420 [ 270.291897][ T8693] ? __pfx_ovl_encode_real_fh+0x10/0x10 [ 270.291920][ T8693] ? find_held_lock+0x2b/0x80 [ 270.291944][ T8693] ovl_encode_fh+0x276/0xe80 [ 270.291968][ T8693] ? __pfx_ovl_encode_fh+0x10/0x10 [ 270.291991][ T8693] exportfs_encode_inode_fh+0x11d/0x2d0 [ 270.292015][ T8693] fanotify_encode_fh_len+0x81/0xf0 [ 270.292037][ T8693] ? __pfx_fanotify_encode_fh_len+0x10/0x10 [ 270.292059][ T8693] ? fanotify_handle_event+0x31a0/0x48b0 [ 270.292084][ T8693] fanotify_handle_event+0x326b/0x48b0 [ 270.292120][ T8693] ? __pfx_fanotify_handle_event+0x10/0x10 [ 270.292154][ T8693] ? __pfx_fanotify_handle_event+0x10/0x10 [ 270.292175][ T8693] fsnotify+0xc5b/0x1dc0 [ 270.292207][ T8693] ? __pfx_fsnotify+0x10/0x10 [ 270.292235][ T8693] ? __pfx___might_resched+0x10/0x10 [ 270.292263][ T8693] __fput+0x864/0xb70 [ 270.292289][ T8693] task_work_run+0x150/0x240 [ 270.292311][ T8693] ? __pfx_task_work_run+0x10/0x10 [ 270.292336][ T8693] exit_to_user_mode_loop+0xeb/0x110 [ 270.292358][ T8693] do_syscall_64+0x3f6/0x4c0 [ 270.292377][ T8693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.292396][ T8693] RIP: 0033:0x7f733bd8e9a9 [ 270.292410][ T8693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.292427][ T8693] RSP: 002b:00007f733cc87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 270.292444][ T8693] RAX: 0000000000000005 RBX: 00007f733bfb5fa0 RCX: 00007f733bd8e9a9 [ 270.292455][ T8693] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 270.292464][ T8693] RBP: 00007f733cc87090 R08: 0000000000000000 R09: 0000000000000000 [ 270.292475][ T8693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.292488][ T8693] R13: 0000000000000000 R14: 00007f733bfb5fa0 R15: 00007ffe0c3be458 [ 270.292514][ T8693] [ 270.537546][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.561783][ T8693] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 271.772743][ T8704] syz.0.770 (8704): drop_caches: 1 [ 271.844599][ T8704] syz.0.770 (8704): drop_caches: 1 [ 271.865421][ T8709] 9pnet_fd: Insufficient options for proto=fd [ 271.872565][ T30] audit: type=1400 audit(1753997213.878:617): avc: denied { read write } for pid=8697 comm="syz.5.768" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 272.020545][ T30] audit: type=1400 audit(1753997213.878:618): avc: denied { open } for pid=8697 comm="syz.5.768" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 272.510582][ T8720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.526528][ T8720] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.593538][ T8720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.926974][ T8736] tipc: Started in network mode [ 273.945435][ T8736] tipc: Node identity 7f000001, cluster identity 4711 [ 273.962900][ T8736] tipc: New replicast peer: 0.0.0.0 [ 273.986268][ T8736] tipc: Enabled bearer , priority 15 [ 274.171104][ T30] audit: type=1400 audit(1753997216.178:619): avc: denied { getopt } for pid=8747 comm="syz.2.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 274.650649][ T5890] kernel read not supported for file /dsp1 (pid: 5890 comm: kworker/0:5) [ 274.697237][ T8748] fuse: Bad value for 'fd' [ 274.836486][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.786'. [ 275.014714][ T8759] libceph: resolve '4' (ret=-3): failed [ 275.048986][ T6007] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.113351][ T5937] tipc: Node number set to 2130706433 [ 275.218845][ T8771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.376860][ T8771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.484481][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 275.686342][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.723302][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 275.991191][ T9] usb 2-1: config 0 has an invalid interface number: 24 but max is 0 [ 276.000295][ T9] usb 2-1: config 0 has no interface number 0 [ 276.012018][ T9] usb 2-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=5b.65 [ 276.021385][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.029503][ T9] usb 2-1: Product: syz [ 276.043374][ T9] usb 2-1: Manufacturer: syz [ 276.068659][ T9] usb 2-1: SerialNumber: syz [ 276.096098][ T9] usb 2-1: config 0 descriptor?? [ 276.261697][ T30] audit: type=1400 audit(1753997218.268:620): avc: denied { mount } for pid=8785 comm="syz.0.797" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 277.269446][ T9] pegasus 2-1:0.24: probe with driver pegasus failed with error -71 [ 277.441113][ T30] audit: type=1400 audit(1753997219.438:621): avc: denied { unmount } for pid=7701 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 277.508775][ T9] usb 2-1: USB disconnect, device number 14 [ 277.717711][ T8806] netlink: 128 bytes leftover after parsing attributes in process `syz.2.803'. [ 278.106214][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 278.235946][ T8813] tmpfs: Unknown parameter 'usrquota(p' [ 278.722558][ T8821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.330318][ T8828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.810'. [ 279.571218][ T30] audit: type=1400 audit(1753997221.577:622): avc: denied { bind } for pid=8837 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 280.336272][ T5839] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 280.544052][ T8862] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.574927][ T30] audit: type=1400 audit(1753997222.567:623): avc: denied { mounton } for pid=8857 comm="syz.5.819" path="/35/file0" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 280.805506][ T6008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.888534][ T8875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.826'. [ 281.199245][ T8879] lo speed is unknown, defaulting to 1000 [ 281.462013][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.543111][ T8884] syz.1.828: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 282.587685][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.613728][ T8884] CPU: 1 UID: 0 PID: 8884 Comm: syz.1.828 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 282.613753][ T8884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.613759][ T8884] Call Trace: [ 282.613763][ T8884] [ 282.613767][ T8884] dump_stack_lvl+0x16c/0x1f0 [ 282.613790][ T8884] warn_alloc+0x248/0x3a0 [ 282.613807][ T8884] ? __pfx_warn_alloc+0x10/0x10 [ 282.613827][ T8884] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 282.613842][ T8884] ? __vmalloc_node_noprof+0xad/0xf0 [ 282.613858][ T8884] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 282.613876][ T8884] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 282.613892][ T8884] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 282.613909][ T8884] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 282.613922][ T8884] vmalloc_user_noprof+0x9e/0xe0 [ 282.613935][ T8884] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 282.613948][ T8884] vb2_vmalloc_alloc+0x135/0x3f0 [ 282.613961][ T8884] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 282.613973][ T8884] __vb2_queue_alloc+0x8c6/0x1280 [ 282.613992][ T8884] vb2_core_reqbufs+0xa90/0xfe0 [ 282.614007][ T8884] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 282.614019][ T8884] ? __pfx___mutex_trylock_common+0x10/0x10 [ 282.614031][ T8884] ? __pfx___might_resched+0x10/0x10 [ 282.614046][ T8884] ? trace_contention_end+0xdd/0x130 [ 282.614056][ T8884] ? __mutex_lock+0x1ca/0xb90 [ 282.614069][ T8884] vb2_reqbufs+0x1a3/0x1f0 [ 282.614079][ T8884] ? __pfx_vb2_reqbufs+0x10/0x10 [ 282.614092][ T8884] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 282.614106][ T8884] ? kasan_quarantine_put+0x10a/0x240 [ 282.614121][ T8884] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 282.614141][ T8884] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 282.614161][ T8884] v4l_reqbufs+0x14f/0x1e0 [ 282.614185][ T8884] __video_do_ioctl+0xb40/0xfc0 [ 282.614213][ T8884] ? __might_fault+0xe3/0x190 [ 282.614236][ T8884] ? __pfx___video_do_ioctl+0x10/0x10 [ 282.614272][ T8884] video_usercopy+0x4d0/0x1720 [ 282.614289][ T8884] ? __pfx___video_do_ioctl+0x10/0x10 [ 282.614314][ T8884] ? selinux_kernel_read_file+0xf0/0x130 [ 282.614331][ T8884] ? __pfx_video_usercopy+0x10/0x10 [ 282.614365][ T8884] v4l2_ioctl+0x1ba/0x250 [ 282.614391][ T8884] ? __pfx_v4l2_ioctl+0x10/0x10 [ 282.614419][ T8884] __x64_sys_ioctl+0x18e/0x210 [ 282.614446][ T8884] do_syscall_64+0xcd/0x4c0 [ 282.614464][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.614481][ T8884] RIP: 0033:0x7f5958b8e9a9 [ 282.614496][ T8884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.614512][ T8884] RSP: 002b:00007f5959965038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.614528][ T8884] RAX: ffffffffffffffda RBX: 00007f5958db5fa0 RCX: 00007f5958b8e9a9 [ 282.614540][ T8884] RDX: 0000200000000240 RSI: 00000000c0145608 RDI: 0000000000000003 [ 282.614550][ T8884] RBP: 00007f5958c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 282.614560][ T8884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.614571][ T8884] R13: 0000000000000000 R14: 00007f5958db5fa0 R15: 00007ffed1630df8 [ 282.614594][ T8884] [ 282.916571][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.984029][ T8884] Mem-Info: [ 282.993467][ T8884] active_anon:22666 inactive_anon:0 isolated_anon:0 [ 282.993467][ T8884] active_file:1317 inactive_file:3596 isolated_file:0 [ 282.993467][ T8884] unevictable:768 dirty:213 writeback:0 [ 282.993467][ T8884] slab_reclaimable:11794 slab_unreclaimable:115524 [ 282.993467][ T8884] mapped:33247 shmem:17706 pagetables:1501 [ 282.993467][ T8884] sec_pagetables:0 bounce:0 [ 282.993467][ T8884] kernel_misc_reclaimable:0 [ 282.993467][ T8884] free:1306957 free_pcp:21829 free_cma:0 [ 283.046400][ T8884] Node 0 active_anon:90464kB inactive_anon:0kB active_file:5268kB inactive_file:14248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132988kB dirty:852kB writeback:0kB shmem:69288kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11796kB pagetables:5812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 283.079633][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.187424][ T8884] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 283.651809][ T8884] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.680604][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.690168][ T8884] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 283.697620][ T8884] Node 0 DMA32 free:1329612kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:101632kB inactive_anon:0kB active_file:5252kB inactive_file:13324kB unevictable:1536kB writepending:884kB present:3129332kB managed:2540180kB mlocked:0kB bounce:0kB free_pcp:41596kB local_pcp:12108kB free_cma:0kB [ 283.731807][ T8884] lowmem_reserve[]: 0 0 1 1 1 [ 283.736789][ T8884] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:448kB inactive_anon:0kB active_file:16kB inactive_file:924kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.863743][ T8884] lowmem_reserve[]: 0 0 0 0 0 [ 283.876262][ T8884] Node 1 Normal free:3882996kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:33880kB local_pcp:11168kB free_cma:0kB [ 283.907466][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.958897][ T8884] lowmem_reserve[]: 0 0 0 0 0 [ 283.964824][ T8884] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 283.990879][ T8884] Node 0 DMA32: 2*4kB (UM) 661*8kB (M) 1921*16kB (UME) 1652*32kB (UM) 1166*64kB (UME) 623*128kB (UM) 509*256kB (UME) 321*512kB (UM) 146*1024kB (UME) 20*2048kB (UM) 145*4096kB (UM) = 1322304kB [ 284.028931][ T8884] Node 0 Normal: 3*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 284.041177][ T8884] Node 1 Normal: 204*4kB (UME) 69*8kB (UME) 43*16kB (UME) 77*32kB (UME) 38*64kB (UE) 10*128kB (UE) 8*256kB (UME) 6*512kB (UME) 5*1024kB (UME) 5*2048kB (U) 941*4096kB (UM) = 3883048kB [ 284.060495][ T8884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.070400][ T8884] Node 0 hugepages_total=8 hugepages_free=2 hugepages_surp=4 hugepages_size=2048kB [ 284.080581][ T8884] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.090532][ T8884] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 284.100181][ T8884] 25512 total pagecache pages [ 284.106090][ T8884] 0 pages in swap cache [ 284.110474][ T8884] Free swap = 124996kB [ 284.114836][ T8884] Total swap = 124996kB [ 284.119225][ T8884] 2097051 pages RAM [ 284.123261][ T8884] 0 pages HighMem/MovableOnly [ 284.779035][ T30] audit: type=1400 audit(1753997226.137:624): avc: denied { ioctl } for pid=8921 comm="syz.3.839" path="socket:[20161]" dev="sockfs" ino=20161 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 284.805567][ T8884] 430028 pages reserved [ 284.813811][ T8884] 0 pages cma reserved [ 285.221664][ T8930] geneve2: entered promiscuous mode [ 285.583431][ T30] audit: type=1400 audit(1753997227.587:625): avc: denied { map } for pid=8934 comm="syz.0.845" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 285.606235][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.625479][ T30] audit: type=1400 audit(1753997227.587:626): avc: denied { execute } for pid=8934 comm="syz.0.845" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 285.723254][ T8938] netlink: 76 bytes leftover after parsing attributes in process `syz.2.846'. [ 285.808235][ T30] audit: type=1400 audit(1753997227.817:627): avc: denied { write } for pid=8926 comm="syz.3.841" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 285.979430][ T8944] netlink: 56 bytes leftover after parsing attributes in process `syz.0.848'. [ 286.414724][ T8946] lo speed is unknown, defaulting to 1000 [ 286.433316][ T30] audit: type=1400 audit(1753997228.266:628): avc: denied { setopt } for pid=8947 comm="syz.5.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 286.641200][ T8953] siw: device registration error -23 [ 286.999639][ T6008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.015116][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.307971][ T9] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 288.000793][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.028973][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 288, setting to 64 [ 288.042280][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 288.056913][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.079460][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.093770][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 288.119162][ T9] usb 2-1: SerialNumber: syz [ 288.225844][ T8954] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 288.236458][ T9] cdc_acm 2-1:1.0: skipping garbage [ 288.715909][ T9] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 288.723756][ T9] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 288.730496][ T9] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 288.823102][ T8985] netlink: 1304 bytes leftover after parsing attributes in process `syz.1.851'. [ 288.893661][ T8987] lo speed is unknown, defaulting to 1000 [ 289.239814][ T8999] netlink: 96 bytes leftover after parsing attributes in process `syz.2.863'. [ 289.514971][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 289.694959][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 289.705995][ T9] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 289.717395][ T9] usb 1-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 289.728435][ T9] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 289.728459][ T9] usb 1-1: config 150 has no interface number 0 [ 289.728483][ T9] usb 1-1: config 150 interface 204 has no altsetting 0 [ 289.732505][ T9] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 289.774912][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.783320][ T9] usb 1-1: Product: syz [ 289.814538][ T9] usb 1-1: Manufacturer: syz [ 289.832005][ T9] usb 1-1: SerialNumber: syz [ 290.043710][ T5963] usb 2-1: USB disconnect, device number 15 [ 290.383540][ T5937] usb 1-1: USB disconnect, device number 19 [ 290.992828][ T30] audit: type=1400 audit(1753999810.999:629): avc: denied { map } for pid=9028 comm="syz.0.872" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.144686][ T30] audit: type=1326 audit(1753999811.149:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4398e9a9 code=0x7ffc0000 [ 291.206254][ T9039] sctp: [Deprecated]: syz.3.876 (pid 9039) Use of int in maxseg socket option. [ 291.206254][ T9039] Use struct sctp_assoc_value instead [ 291.485290][ T30] audit: type=1326 audit(1753999811.149:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdf4398d45f code=0x7ffc0000 [ 291.516063][ T30] audit: type=1326 audit(1753999811.149:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4398e9a9 code=0x7ffc0000 [ 291.600028][ T9043] netlink: 'syz.5.878': attribute type 4 has an invalid length. [ 291.611710][ T30] audit: type=1326 audit(1753999811.149:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdf4398e9a9 code=0x7ffc0000 [ 291.955014][ T30] audit: type=1326 audit(1753999811.149:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4398e9a9 code=0x7ffc0000 [ 291.980596][ T30] audit: type=1326 audit(1753999811.149:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf4398e9a9 code=0x7ffc0000 [ 292.083219][ T30] audit: type=1326 audit(1753999811.149:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4398e9a9 code=0x7ffc0000 [ 292.109583][ T9051] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.119003][ T30] audit: type=1326 audit(1753999811.149:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fdf4398e9a9 code=0x7ffc0000 [ 292.163188][ T30] audit: type=1326 audit(1753999811.149:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4398e9a9 code=0x7ffc0000 [ 292.186419][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.294538][ T9059] vlan2: entered promiscuous mode [ 292.299626][ T9059] bond0: entered promiscuous mode [ 292.304631][ T9059] bond_slave_0: entered promiscuous mode [ 292.310411][ T9059] bond_slave_1: entered promiscuous mode [ 292.331384][ T7828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.335206][ T5963] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 292.343215][ T6007] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.524905][ T5883] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 292.532578][ T5963] usb 1-1: Using ep0 maxpacket: 32 [ 292.642076][ T5963] usb 1-1: unable to get BOS descriptor or descriptor too short [ 292.665447][ T5963] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 292.686344][ T5883] usb 4-1: device descriptor read/64, error -71 [ 292.706348][ T5963] usb 1-1: can't read configurations, error -71 [ 292.924893][ T5883] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 293.054884][ T5883] usb 4-1: device descriptor read/64, error -71 [ 293.124881][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 293.170689][ T5883] usb usb4-port1: attempt power cycle [ 293.301464][ T9061] syz.5.885: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 293.329106][ T9061] CPU: 1 UID: 0 PID: 9061 Comm: syz.5.885 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 293.329132][ T9061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.329141][ T9061] Call Trace: [ 293.329146][ T9061] [ 293.329153][ T9061] dump_stack_lvl+0x16c/0x1f0 [ 293.329184][ T9061] warn_alloc+0x248/0x3a0 [ 293.329212][ T9061] ? __pfx_warn_alloc+0x10/0x10 [ 293.329247][ T9061] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 293.329266][ T9061] ? __vmalloc_node_noprof+0xad/0xf0 [ 293.329295][ T9061] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 293.329325][ T9061] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 293.329355][ T9061] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 293.329390][ T9061] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 293.329413][ T9061] vmalloc_user_noprof+0x9e/0xe0 [ 293.329431][ T9061] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 293.329452][ T9061] vb2_vmalloc_alloc+0x135/0x3f0 [ 293.329473][ T9061] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 293.329493][ T9061] __vb2_queue_alloc+0x8c6/0x1280 [ 293.329526][ T9061] vb2_core_reqbufs+0xa90/0xfe0 [ 293.329550][ T9061] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 293.329571][ T9061] ? __pfx___mutex_trylock_common+0x10/0x10 [ 293.329592][ T9061] ? __pfx___might_resched+0x10/0x10 [ 293.329619][ T9061] ? trace_contention_end+0xdd/0x130 [ 293.329638][ T9061] ? __mutex_lock+0x1ca/0xb90 [ 293.329659][ T9061] vb2_reqbufs+0x1a3/0x1f0 [ 293.329678][ T9061] ? __pfx_vb2_reqbufs+0x10/0x10 [ 293.329694][ T9061] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 293.329718][ T9061] ? kasan_quarantine_put+0x10a/0x240 [ 293.329744][ T9061] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 293.329768][ T9061] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 293.329791][ T9061] v4l_reqbufs+0x14f/0x1e0 [ 293.329817][ T9061] __video_do_ioctl+0xb40/0xfc0 [ 293.329848][ T9061] ? __might_fault+0xe3/0x190 [ 293.329875][ T9061] ? __pfx___video_do_ioctl+0x10/0x10 [ 293.329912][ T9061] video_usercopy+0x4d0/0x1720 [ 293.329931][ T9061] ? __pfx___video_do_ioctl+0x10/0x10 [ 293.329958][ T9061] ? selinux_kernel_read_file+0xf0/0x130 [ 293.329976][ T9061] ? __pfx_video_usercopy+0x10/0x10 [ 293.330011][ T9061] v4l2_ioctl+0x1ba/0x250 [ 293.330038][ T9061] ? __pfx_v4l2_ioctl+0x10/0x10 [ 293.330072][ T9061] __x64_sys_ioctl+0x18e/0x210 [ 293.330099][ T9061] do_syscall_64+0xcd/0x4c0 [ 293.330119][ T9061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.330137][ T9061] RIP: 0033:0x7f7577d8e9a9 [ 293.330153][ T9061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.330171][ T9061] RSP: 002b:00007f7578bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.330189][ T9061] RAX: ffffffffffffffda RBX: 00007f7577fb5fa0 RCX: 00007f7577d8e9a9 [ 293.330201][ T9061] RDX: 0000200000000240 RSI: 00000000c0145608 RDI: 0000000000000003 [ 293.330212][ T9061] RBP: 00007f7577e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 293.330223][ T9061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.330235][ T9061] R13: 0000000000000000 R14: 00007f7577fb5fa0 R15: 00007ffd7df356c8 [ 293.330259][ T9061] [ 294.089149][ T5963] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 294.096750][ T9061] Mem-Info: [ 294.099912][ T9061] active_anon:34645 inactive_anon:0 isolated_anon:0 [ 294.099912][ T9061] active_file:10414 inactive_file:3603 isolated_file:0 [ 294.099912][ T9061] unevictable:768 dirty:12 writeback:0 [ 294.099912][ T9061] slab_reclaimable:11834 slab_unreclaimable:116071 [ 294.099912][ T9061] mapped:39304 shmem:29460 pagetables:1530 [ 294.099912][ T9061] sec_pagetables:0 bounce:0 [ 294.099912][ T9061] kernel_misc_reclaimable:0 [ 294.099912][ T9061] free:1279916 free_pcp:17618 free_cma:0 [ 294.145270][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.152888][ T9061] Node 0 active_anon:139580kB inactive_anon:0kB active_file:41756kB inactive_file:14276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157216kB dirty:48kB writeback:0kB shmem:117204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11924kB pagetables:5928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 294.186284][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.203430][ T9061] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 294.234915][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.246730][ T9061] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 294.275487][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.287747][ T5963] usb 1-1: LPM exit latency is zeroed, disabling LPM. [ 294.295101][ T5883] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 294.296295][ T9075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.889'. [ 294.334289][ T5963] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x82 is Bulk; changing to Interrupt [ 294.345517][ T5883] usb 4-1: device descriptor read/8, error -71 [ 294.352264][ T5963] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x3 is Bulk; changing to Interrupt [ 294.364957][ T5963] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.389796][ T5963] usb 1-1: config 1 interface 0 has no altsetting 0 [ 294.409608][ T5963] usb 1-1: string descriptor 0 read error: -22 [ 294.418734][ T5963] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.438084][ T9061] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 294.446166][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.483074][ T9061] Node 0 DMA32 free:1215444kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:150988kB inactive_anon:0kB active_file:41940kB inactive_file:13344kB unevictable:1536kB writepending:80kB present:3129332kB managed:2540180kB mlocked:0kB bounce:0kB free_pcp:29756kB local_pcp:13020kB free_cma:0kB [ 294.525044][ T9061] lowmem_reserve[]: 0 0 1 1 1 [ 294.527628][ T9069] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 294.529877][ T9061] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:428kB inactive_anon:0kB active_file:24kB inactive_file:932kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 294.566007][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.595009][ T9069] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 294.612974][ T5883] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 294.641644][ T9061] lowmem_reserve[]: 0 0 0 0 0 [ 294.646223][ T5963] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 294.661921][ T9061] Node 1 Normal free:3883552kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:33376kB local_pcp:22208kB free_cma:0kB [ 294.693137][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.715457][ T5883] usb 4-1: device descriptor read/8, error -71 [ 294.721693][ T9061] lowmem_reserve[]: 0 0 0 0 0 [ 294.727033][ T9061] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 294.743429][ T9061] Node 0 DMA32: 2*4kB (UE) 3*8kB (UME) 1*16kB (E) 783*32kB (UM) 810*64kB (UME) 529*128kB (U) 458*256kB (UE) 313*512kB (UM) 147*1024kB (UME) 22*2048kB (UM) 145*4096kB (UM) = 1211664kB [ 294.769446][ T9061] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 294.781330][ T9061] Node 1 Normal: 204*4kB (UME) 70*8kB (UME) 42*16kB (UME) 77*32kB (UME) 40*64kB (UE) 11*128kB (UE) 9*256kB (UME) 6*512kB (UME) 5*1024kB (UME) 5*2048kB (U) 941*4096kB (UM) = 3883552kB [ 294.799411][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.823855][ T9069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.825044][ T5883] usb usb4-port1: unable to enumerate USB device [ 294.837303][ T9069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.858842][ T9061] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.861608][ T5890] usb 1-1: USB disconnect, device number 21 [ 294.894673][ T9061] Node 0 hugepages_total=8 hugepages_free=2 hugepages_surp=4 hugepages_size=2048kB [ 294.910051][ T9061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.919999][ T9061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 294.932241][ T9061] 45495 total pagecache pages [ 294.937803][ T9061] 0 pages in swap cache [ 294.942006][ T9061] Free swap = 124996kB [ 294.948948][ T9061] Total swap = 124996kB [ 294.953154][ T9061] 2097051 pages RAM [ 294.959814][ T9061] 0 pages HighMem/MovableOnly [ 294.964556][ T9061] 430028 pages reserved [ 294.974255][ T9061] 0 pages cma reserved [ 295.318325][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 295.531170][ T9084] netlink: 36 bytes leftover after parsing attributes in process `syz.5.892'. [ 295.540123][ T9084] netlink: 16 bytes leftover after parsing attributes in process `syz.5.892'. [ 295.549038][ T9084] netlink: 36 bytes leftover after parsing attributes in process `syz.5.892'. [ 295.557945][ T9084] netlink: 36 bytes leftover after parsing attributes in process `syz.5.892'. [ 296.604935][ T9112] netlink: 'syz.1.899': attribute type 14 has an invalid length. [ 296.727265][ T9112] lo speed is unknown, defaulting to 1000 [ 296.814979][ T1203] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.496384][ T7828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.628504][ T9120] netlink: 'syz.1.902': attribute type 10 has an invalid length. [ 298.093094][ T2897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.630402][ T9145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.908'. [ 298.671737][ T9145] x_tables: ip_tables: udp match: only valid for protocol 17 [ 298.798576][ T9149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9149 comm=syz.3.909 [ 298.931355][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 298.931369][ T30] audit: type=1400 audit(1753999818.939:659): avc: denied { getopt } for pid=9147 comm="syz.3.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 298.956675][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.032253][ T5963] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 299.156149][ T9154] syz.0.911: attempt to access beyond end of device [ 299.156149][ T9154] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 299.206262][ T5963] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 299.221841][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 299.242621][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 299.290874][ T5963] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 299.592713][ T5963] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.914901][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.044345][ T5963] usb 2-1: config 0 descriptor?? [ 300.603647][ T30] audit: type=1400 audit(1753999820.609:660): avc: denied { connect } for pid=9172 comm="syz.5.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 300.623046][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.679035][ T5963] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 300.688470][ T30] audit: type=1400 audit(1753999820.689:661): avc: denied { create } for pid=9177 comm="syz.5.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 300.884184][ T9178] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.168039][ T9186] xt_hashlimit: max too large, truncated to 1048576 [ 301.210234][ T30] audit: type=1400 audit(1753999821.199:662): avc: denied { nlmsg_write } for pid=9185 comm="syz.2.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 301.389900][ T30] audit: type=1400 audit(1753999821.269:663): avc: denied { listen } for pid=9185 comm="syz.2.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 301.510620][ T9200] 9pnet_fd: Insufficient options for proto=fd [ 301.904513][ T30] audit: type=1400 audit(1753999821.269:664): avc: denied { accept } for pid=9185 comm="syz.2.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 302.143535][ T1203] usb 2-1: reset high-speed USB device number 16 using dummy_hcd [ 302.893850][ T9218] overlay: ./file0 is not a directory [ 303.553829][ T5890] usb 2-1: USB disconnect, device number 16 [ 303.846340][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.851781][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.482871][ T9254] support for cryptoloop has been removed. Use dm-crypt instead. [ 305.744318][ T9264] netlink: 'syz.1.942': attribute type 5 has an invalid length. [ 305.992626][ T9266] netlink: 28 bytes leftover after parsing attributes in process `syz.5.943'. [ 306.002819][ T30] audit: type=1400 audit(1753999826.009:665): avc: denied { listen } for pid=9267 comm="syz.3.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 306.044866][ T30] audit: type=1400 audit(1753999826.009:666): avc: denied { accept } for pid=9267 comm="syz.3.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 306.087502][ T9269] netlink: 596 bytes leftover after parsing attributes in process `syz.3.944'. [ 306.411838][ T5890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.428083][ T1203] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.494712][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 306.654718][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 306.670089][ T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 306.681415][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.695114][ T9] usb 2-1: Product: syz [ 306.701413][ T9] usb 2-1: Manufacturer: syz [ 306.707914][ T9] usb 2-1: SerialNumber: syz [ 306.716436][ T9] usb 2-1: config 0 descriptor?? [ 306.947541][ T9273] netlink: 96 bytes leftover after parsing attributes in process `syz.1.946'. [ 306.974548][ T9] usb 2-1: USB disconnect, device number 17 [ 307.143414][ T9287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.952'. [ 307.679941][ T9290] netlink: 44 bytes leftover after parsing attributes in process `syz.0.952'. [ 309.080099][ T9292] syz.1.953: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 309.214634][ T9292] CPU: 1 UID: 0 PID: 9292 Comm: syz.1.953 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 309.214661][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.214671][ T9292] Call Trace: [ 309.214677][ T9292] [ 309.214685][ T9292] dump_stack_lvl+0x16c/0x1f0 [ 309.214715][ T9292] warn_alloc+0x248/0x3a0 [ 309.214733][ T9292] ? __pfx_warn_alloc+0x10/0x10 [ 309.214754][ T9292] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 309.214767][ T9292] ? __vmalloc_node_noprof+0xad/0xf0 [ 309.214782][ T9292] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 309.214800][ T9292] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 309.214816][ T9292] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 309.214840][ T9292] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 309.214852][ T9292] vmalloc_user_noprof+0x9e/0xe0 [ 309.214866][ T9292] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 309.214879][ T9292] vb2_vmalloc_alloc+0x135/0x3f0 [ 309.214892][ T9292] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 309.214905][ T9292] __vb2_queue_alloc+0x8c6/0x1280 [ 309.214924][ T9292] vb2_core_reqbufs+0xa90/0xfe0 [ 309.214939][ T9292] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 309.214951][ T9292] ? __pfx___mutex_trylock_common+0x10/0x10 [ 309.214963][ T9292] ? __pfx___might_resched+0x10/0x10 [ 309.214978][ T9292] ? trace_contention_end+0xdd/0x130 [ 309.214989][ T9292] ? __mutex_lock+0x1ca/0xb90 [ 309.215001][ T9292] vb2_reqbufs+0x1a3/0x1f0 [ 309.215011][ T9292] ? __pfx_vb2_reqbufs+0x10/0x10 [ 309.215020][ T9292] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 309.215034][ T9292] ? kasan_quarantine_put+0x10a/0x240 [ 309.215048][ T9292] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 309.215062][ T9292] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 309.215075][ T9292] v4l_reqbufs+0x14f/0x1e0 [ 309.215090][ T9292] __video_do_ioctl+0xb40/0xfc0 [ 309.215107][ T9292] ? __might_fault+0xe3/0x190 [ 309.215122][ T9292] ? __pfx___video_do_ioctl+0x10/0x10 [ 309.215143][ T9292] video_usercopy+0x4d0/0x1720 [ 309.215153][ T9292] ? __pfx___video_do_ioctl+0x10/0x10 [ 309.215168][ T9292] ? selinux_kernel_read_file+0xf0/0x130 [ 309.215179][ T9292] ? __pfx_video_usercopy+0x10/0x10 [ 309.215197][ T9292] v4l2_ioctl+0x1ba/0x250 [ 309.215211][ T9292] ? __pfx_v4l2_ioctl+0x10/0x10 [ 309.215227][ T9292] __x64_sys_ioctl+0x18e/0x210 [ 309.215242][ T9292] do_syscall_64+0xcd/0x4c0 [ 309.215254][ T9292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.215264][ T9292] RIP: 0033:0x7f5958b8e9a9 [ 309.215273][ T9292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.215283][ T9292] RSP: 002b:00007f5959965038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.215294][ T9292] RAX: ffffffffffffffda RBX: 00007f5958db5fa0 RCX: 00007f5958b8e9a9 [ 309.215300][ T9292] RDX: 0000200000000240 RSI: 00000000c0145608 RDI: 0000000000000003 [ 309.215307][ T9292] RBP: 00007f5958c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 309.215312][ T9292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.215318][ T9292] R13: 0000000000000000 R14: 00007f5958db5fa0 R15: 00007ffed1630df8 [ 309.215331][ T9292] [ 309.215335][ T9292] Mem-Info: [ 309.605829][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.618345][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.726459][ T9292] active_anon:28695 inactive_anon:0 isolated_anon:0 [ 309.726459][ T9292] active_file:11521 inactive_file:3654 isolated_file:0 [ 309.726459][ T9292] unevictable:768 dirty:277 writeback:0 [ 309.726459][ T9292] slab_reclaimable:11704 slab_unreclaimable:117036 [ 309.726459][ T9292] mapped:36037 shmem:23426 pagetables:1517 [ 309.726459][ T9292] sec_pagetables:0 bounce:0 [ 309.726459][ T9292] kernel_misc_reclaimable:0 [ 309.726459][ T9292] free:1283955 free_pcp:18938 free_cma:0 [ 309.772313][ C0] vkms_vblank_simulate: vblank timer overrun [ 310.216999][ T9292] Node 0 active_anon:114780kB inactive_anon:0kB active_file:46084kB inactive_file:14480kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144148kB dirty:1108kB writeback:0kB shmem:92168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12100kB pagetables:5876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 310.264711][ T5909] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 310.279542][ T9292] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 310.311512][ T9292] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 310.359540][ T9292] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 310.368340][ T9292] Node 0 DMA32 free:1235424kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:114460kB inactive_anon:0kB active_file:46060kB inactive_file:13548kB unevictable:1536kB writepending:1112kB present:3129332kB managed:2540180kB mlocked:0kB bounce:0kB free_pcp:44072kB local_pcp:33200kB free_cma:0kB [ 310.401205][ T9292] lowmem_reserve[]: 0 0 1 1 1 [ 310.407571][ T9292] Node 0 Normal free:24kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:352kB inactive_anon:0kB active_file:24kB inactive_file:932kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:52kB local_pcp:12kB free_cma:0kB [ 310.439384][ T9292] lowmem_reserve[]: 0 0 0 [ 310.439636][ T5909] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.456842][ T5909] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 288, setting to 64 [ 310.470429][ T9292] 0 0 [ 310.546167][ T5909] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 310.556261][ T9292] Node 1 Normal free:3884812kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32116kB local_pcp:20948kB free_cma:0kB [ 310.564608][ T5909] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.636105][ T9292] lowmem_reserve[]: 0 0 0 0 0 [ 310.642042][ T9342] netlink: 'syz.3.967': attribute type 4 has an invalid length. [ 310.653488][ T9292] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 310.665518][ T5909] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.668756][ T9342] netlink: 152 bytes leftover after parsing attributes in process `syz.3.967'. [ 310.684610][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 310.684631][ T5909] usb 1-1: SerialNumber: syz [ 310.700483][ T9327] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 310.711562][ T9292] Node 0 DMA32: 6*4kB (ME) 7*8kB (E) 7*16kB (UME) 989*32kB (UME) 963*64kB (UME) 553*128kB (UM) 499*256kB (UME) 314*512kB (UM) 146*1024kB (UME) 21*2048kB (UM) 144*4096kB (UM) = 1235104kB [ 310.721281][ T5909] cdc_acm 1-1:1.0: skipping garbage [ 310.734830][ T9342] : renamed from bond0 (while UP) [ 310.740377][ T9292] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 310.760404][ T9292] Node 1 Normal: 205*4kB (UME) 69*8kB (UME) 43*16kB (UME) 78*32kB (UME) 39*64kB (UE) 11*128kB (UE) 8*256kB (UME) 7*512kB (UME) 6*1024kB (UME) 5*2048kB (U) 941*4096kB (UM) = 3884812kB [ 310.778099][ T5909] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 310.795284][ T5909] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 310.797891][ T9292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.818548][ T5909] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 310.828982][ T9292] Node 0 hugepages_total=8 hugepages_free=2 hugepages_surp=4 hugepages_size=2048kB [ 310.862081][ T9292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.880315][ T9345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.968'. [ 310.890466][ T9292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 310.924273][ T9292] 36219 total pagecache pages [ 310.937433][ T9292] 0 pages in swap cache [ 310.946061][ T9292] Free swap = 124996kB [ 310.956094][ T9292] Total swap = 124996kB [ 310.968739][ T9292] 2097051 pages RAM [ 310.975480][ T9347] netlink: 1304 bytes leftover after parsing attributes in process `syz.0.963'. [ 310.987047][ T9292] 0 pages HighMem/MovableOnly [ 310.998323][ T9292] 430028 pages reserved [ 311.010256][ T9292] 0 pages cma reserved [ 311.594904][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 312.021915][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 312.034575][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.045102][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 312.054382][ T9] usb 4-1: config 1 has no interface number 1 [ 312.060908][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 312.090528][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.099834][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.108630][ T9] usb 4-1: Product: syz [ 312.129198][ T9] usb 4-1: Manufacturer: syz [ 312.139446][ T9] usb 4-1: SerialNumber: syz [ 312.214409][ T5839] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 312.318912][ T30] audit: type=1400 audit(1753999832.329:667): avc: denied { ioctl } for pid=9357 comm="syz.5.973" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 312.344381][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.968081][ T1203] usb 1-1: USB disconnect, device number 22 [ 313.193856][ T9] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 313.332914][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 313.365437][ T30] audit: type=1400 audit(1753999833.369:668): avc: denied { mount } for pid=9375 comm="syz.2.978" name="/" dev="hugetlbfs" ino=21436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 313.388206][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.876604][ T9] usb 4-1: USB disconnect, device number 20 [ 313.905689][ T30] audit: type=1400 audit(1753999833.519:669): avc: denied { connect } for pid=9377 comm="syz.0.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 314.859007][ T8796] udevd[8796]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.285027][ T9405] netlink: 44 bytes leftover after parsing attributes in process `syz.1.981'. [ 315.311864][ T9398] lo speed is unknown, defaulting to 1000 [ 315.367477][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.368267][ T2897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.555105][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.673634][ T9417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.987'. [ 315.770539][ T5839] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 316.060304][ T9423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.164534][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 316.459821][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.616138][ T9] usb 4-1: config 0 has no interfaces? [ 316.621651][ T9] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 316.683719][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.703565][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.736792][ T9] usb 4-1: config 0 descriptor?? [ 317.045077][ T10] usb 4-1: USB disconnect, device number 21 [ 317.143612][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'. [ 317.153381][ T9441] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 317.161073][ T9441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.174530][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 318.354633][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 318.400270][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.476939][ T5839] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 318.585584][ T5909] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 318.671143][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 318.682872][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 318.694477][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 318.703532][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.721293][ T10] usb 2-1: config 0 descriptor?? [ 318.727265][ T9455] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 318.753546][ T10] hub 2-1:0.0: USB hub found [ 319.360362][ T5909] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 319.374527][ T10] hub 2-1:0.0: 2 ports detected [ 319.394575][ T5909] usb 1-1: config 0 has no interface number 0 [ 319.400692][ T5909] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 319.449018][ T5909] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 319.463068][ T5909] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 319.492255][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 319.523431][ T5909] usb 1-1: Product: syz [ 319.539817][ T5883] IPVS: starting estimator thread 0... [ 319.552337][ T9473] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 319.552337][ T9473] program syz.3.1003 not setting count and/or reply_len properly [ 319.591167][ T9469] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 319.616159][ T5909] usb 1-1: SerialNumber: syz [ 319.687388][ T5909] usb 1-1: config 0 descriptor?? [ 319.704540][ T9472] IPVS: using max 44 ests per chain, 105600 per kthread [ 319.817551][ T5909] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 319.950106][ T5909] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input21 [ 320.879851][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 320.940118][ T30] audit: type=1400 audit(1753999840.919:670): avc: denied { read } for pid=5187 comm="acpid" name="event4" dev="devtmpfs" ino=2984 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.061435][ T30] audit: type=1400 audit(1753999840.929:671): avc: denied { open } for pid=5187 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2984 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.218739][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.231160][ T8699] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.240732][ T30] audit: type=1400 audit(1753999840.929:672): avc: denied { ioctl } for pid=5187 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2984 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.814769][ T1203] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.848110][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.857206][ T30] audit: type=1400 audit(1753999841.479:673): avc: denied { mount } for pid=9478 comm="syz.2.1005" name="/" dev="rpc_pipefs" ino=22609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 322.056873][ T1218] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 322.270893][ T1218] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 322.924420][ T1218] usb 4-1: Using ep0 maxpacket: 16 [ 322.939709][ T1218] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 322.955653][ T1218] usb 4-1: config 0 has no interface number 0 [ 322.973409][ T5909] usb 1-1: USB disconnect, device number 23 [ 322.974808][ T1218] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.998877][ T5909] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 323.022815][ T1218] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.064432][ T1218] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 323.103904][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.114004][ T1218] usb 4-1: config 0 descriptor?? [ 323.138501][ T9496] loop6: detected capacity change from 0 to 524287999 [ 323.152779][ T9404] buffer_io_error: 10 callbacks suppressed [ 323.152792][ T9404] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.171955][ T9404] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.190527][ T9404] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.200907][ T9404] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.224850][ T9404] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.242564][ T9404] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.253472][ T9404] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.268029][ T9404] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.279215][ T9404] ldm_validate_partition_table(): Disk read failed. [ 323.290851][ T9404] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.302812][ T9404] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.317153][ T9404] Dev loop6: unable to read RDB block 0 [ 323.330702][ T9404] loop6: unable to read partition table [ 323.346489][ T9496] ldm_validate_partition_table(): Disk read failed. [ 323.376343][ T9496] Dev loop6: unable to read RDB block 0 [ 323.403370][ T9496] loop6: unable to read partition table [ 323.427700][ T9496] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 323.504395][ T5909] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 323.645237][ T9500] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1010'. [ 323.795427][ T5909] usb 1-1: Using ep0 maxpacket: 8 [ 323.802220][ T5909] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 323.811128][ T5909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.821483][ T5909] usb 1-1: config 0 has no interface number 0 [ 323.823807][ T1218] uclogic 0003:28BD:0071.0009: failed retrieving string descriptor #100: -71 [ 323.828032][ T5909] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 323.828059][ T5909] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.828083][ T5909] usb 1-1: config 0 interface 52 has no altsetting 0 [ 323.829072][ T5909] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 323.884838][ T5909] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 323.890618][ T1218] uclogic 0003:28BD:0071.0009: failed retrieving pen parameters: -71 [ 323.893226][ T5909] usb 1-1: Manufacturer: syz [ 323.920733][ T5909] usb 1-1: config 0 descriptor?? [ 323.922884][ T1218] uclogic 0003:28BD:0071.0009: pen probing failed: -71 [ 323.947210][ T1218] uclogic 0003:28BD:0071.0009: failed probing parameters: -71 [ 323.963231][ T1218] uclogic 0003:28BD:0071.0009: probe with driver uclogic failed with error -71 [ 324.019164][ T1218] usb 4-1: USB disconnect, device number 22 [ 324.078644][ T5909] hub 1-1:0.52: bad descriptor, ignoring hub [ 324.086190][ T5909] hub 1-1:0.52: probe with driver hub failed with error -5 [ 324.140222][ T5909] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input22 [ 324.492649][ T30] audit: type=1400 audit(1753999844.249:674): avc: denied { module_request } for pid=9505 comm="syz.3.1011" kmod="netdev-syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 324.511418][ T9496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.556993][ T9496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.650457][ T30] audit: type=1400 audit(1753999844.659:675): avc: denied { accept } for pid=9494 comm="syz.0.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 325.104558][ T1218] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 325.186816][ T5909] usb 2-1: USB disconnect, device number 18 [ 325.325923][ T1218] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 325.456388][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.483731][ T1218] usb 4-1: config 0 descriptor?? [ 325.789477][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.855358][ T1218] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 326.081587][ T30] audit: type=1400 audit(1753999846.089:676): avc: denied { getopt } for pid=9515 comm="syz.3.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 326.588389][ T9538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 326.660192][ T5937] usb 1-1: USB disconnect, device number 24 [ 326.900188][ T2897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.900317][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.986244][ T5839] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 327.133430][ T9541] binder: 9540:9541 ioctl c0306201 200000000240 returned -11 [ 327.422482][ T9550] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1026'. [ 327.448000][ T9550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1026'. [ 327.525502][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.575132][ T5937] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 327.741323][ T5937] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 327.858628][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.269055][ T5937] usb 2-1: config 0 descriptor?? [ 328.543224][ T9] usb 4-1: USB disconnect, device number 23 [ 328.626248][ T9548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.664076][ T9548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.721085][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1024'. [ 328.767859][ T9559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.792402][ T5937] usb 2-1: USB disconnect, device number 19 [ 329.513201][ T30] audit: type=1400 audit(1753999849.519:677): avc: denied { create } for pid=9570 comm="syz.3.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 329.533262][ T30] audit: type=1400 audit(1753999849.519:678): avc: denied { ioctl } for pid=9570 comm="syz.3.1032" path="socket:[22765]" dev="sockfs" ino=22765 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 330.114096][ T9577] lo speed is unknown, defaulting to 1000 [ 330.342216][ T9585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1036'. [ 331.279471][ T5839] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 331.546748][ T9614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.017428][ T8699] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 332.053209][ T9619] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 332.652329][ T6008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.288218][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 334.432831][ T9630] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1048'. [ 334.927125][ T5839] Bluetooth: hci2: unexpected event for opcode 0x041b [ 335.204719][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 336.264797][ T9635] syz.3.1050: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 336.576592][ T9635] CPU: 0 UID: 0 PID: 9635 Comm: syz.3.1050 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 336.576617][ T9635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.576627][ T9635] Call Trace: [ 336.576633][ T9635] [ 336.576640][ T9635] dump_stack_lvl+0x16c/0x1f0 [ 336.576671][ T9635] warn_alloc+0x248/0x3a0 [ 336.576704][ T9635] ? __pfx_warn_alloc+0x10/0x10 [ 336.576738][ T9635] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 336.576760][ T9635] ? __vmalloc_node_noprof+0xad/0xf0 [ 336.576788][ T9635] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 336.576818][ T9635] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 336.576844][ T9635] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 336.576869][ T9635] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 336.576882][ T9635] vmalloc_user_noprof+0x9e/0xe0 [ 336.576895][ T9635] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 336.576908][ T9635] vb2_vmalloc_alloc+0x135/0x3f0 [ 336.576921][ T9635] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 336.576934][ T9635] __vb2_queue_alloc+0x8c6/0x1280 [ 336.576953][ T9635] vb2_core_reqbufs+0xa90/0xfe0 [ 336.576969][ T9635] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 336.576980][ T9635] ? __pfx___mutex_trylock_common+0x10/0x10 [ 336.576993][ T9635] ? __pfx___might_resched+0x10/0x10 [ 336.577008][ T9635] ? trace_contention_end+0xdd/0x130 [ 336.577018][ T9635] ? __mutex_lock+0x1ca/0xb90 [ 336.577030][ T9635] vb2_reqbufs+0x1a3/0x1f0 [ 336.577041][ T9635] ? __pfx_vb2_reqbufs+0x10/0x10 [ 336.577050][ T9635] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 336.577064][ T9635] ? kasan_quarantine_put+0x10a/0x240 [ 336.577079][ T9635] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 336.577092][ T9635] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 336.577105][ T9635] v4l_reqbufs+0x14f/0x1e0 [ 336.577120][ T9635] __video_do_ioctl+0xb40/0xfc0 [ 336.577138][ T9635] ? __might_fault+0xe3/0x190 [ 336.577152][ T9635] ? __pfx___video_do_ioctl+0x10/0x10 [ 336.577173][ T9635] video_usercopy+0x4d0/0x1720 [ 336.577183][ T9635] ? __pfx___video_do_ioctl+0x10/0x10 [ 336.577198][ T9635] ? selinux_kernel_read_file+0xf0/0x130 [ 336.577208][ T9635] ? __pfx_video_usercopy+0x10/0x10 [ 336.577227][ T9635] v4l2_ioctl+0x1ba/0x250 [ 336.577241][ T9635] ? __pfx_v4l2_ioctl+0x10/0x10 [ 336.577256][ T9635] __x64_sys_ioctl+0x18e/0x210 [ 336.577271][ T9635] do_syscall_64+0xcd/0x4c0 [ 336.577283][ T9635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.577294][ T9635] RIP: 0033:0x7fdf4398e9a9 [ 336.577303][ T9635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.577313][ T9635] RSP: 002b:00007fdf4485d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.577323][ T9635] RAX: ffffffffffffffda RBX: 00007fdf43bb5fa0 RCX: 00007fdf4398e9a9 [ 336.577330][ T9635] RDX: 0000200000000240 RSI: 00000000c0145608 RDI: 0000000000000003 [ 336.577336][ T9635] RBP: 00007fdf43a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 336.577342][ T9635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.577347][ T9635] R13: 0000000000000000 R14: 00007fdf43bb5fa0 R15: 00007ffd9662c0b8 [ 336.577360][ T9635] [ 336.577744][ T9635] Mem-Info: [ 336.926570][ T30] audit: type=1400 audit(1753999856.910:679): avc: denied { create } for pid=9659 comm="syz.1.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 336.927205][ T9635] active_anon:23461 inactive_anon:0 isolated_anon:0 [ 336.927205][ T9635] active_file:12716 inactive_file:3665 isolated_file:0 [ 336.927205][ T9635] unevictable:775 dirty:221 writeback:0 [ 336.927205][ T9635] slab_reclaimable:11671 slab_unreclaimable:116559 [ 336.927205][ T9635] mapped:30551 shmem:17703 pagetables:1526 [ 336.927205][ T9635] sec_pagetables:0 bounce:0 [ 336.927205][ T9635] kernel_misc_reclaimable:0 [ 336.927205][ T9635] free:1277933 free_pcp:26567 free_cma:0 [ 336.946612][ T30] audit: type=1400 audit(1753999856.920:680): avc: denied { ioctl } for pid=9659 comm="syz.1.1058" path="socket:[22942]" dev="sockfs" ino=22942 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 337.030008][ T9635] Node 0 active_anon:93844kB inactive_anon:0kB active_file:50864kB inactive_file:14524kB unevictable:1564kB isolated(anon):0kB isolated(file):0kB mapped:122204kB dirty:884kB writeback:0kB shmem:69276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11960kB pagetables:6016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 337.065576][ T9635] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 337.168193][ T5963] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 337.196063][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 337.209419][ T9635] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 337.241529][ T9635] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 337.277260][ T30] audit: type=1400 audit(1753999857.290:681): avc: denied { mount } for pid=9666 comm="syz.2.1060" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 337.309021][ T9635] Node 0 DMA32 free:1209524kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:104680kB inactive_anon:0kB active_file:50820kB inactive_file:13584kB unevictable:1564kB writepending:880kB present:3129332kB managed:2540180kB mlocked:28kB bounce:0kB free_pcp:65012kB local_pcp:26036kB free_cma:0kB [ 337.342455][ T9635] lowmem_reserve[]: 0 0 1 1 1 [ 337.348205][ T9635] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:364kB inactive_anon:0kB active_file:44kB inactive_file:940kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 337.372672][ T9670] lo speed is unknown, defaulting to 1000 [ 337.386290][ T9635] lowmem_reserve[]: 0 0 0 0 0 [ 337.388905][ T5963] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 337.400935][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.403575][ T9635] Node 1 [ 337.418057][ T5963] usb 2-1: Product: syz [ 337.436376][ T5963] usb 2-1: Manufacturer: syz [ 337.440995][ T5963] usb 2-1: SerialNumber: syz [ 337.456929][ T9635] Normal free:3886828kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:30104kB local_pcp:18936kB free_cma:0kB [ 337.521981][ T5963] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 337.543852][ T9635] lowmem_reserve[]: 0 0 0 0 0 [ 337.559559][ T9635] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 337.566404][ T5909] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 337.677212][ T9635] Node 0 DMA32: 1538*4kB (UME) 762*8kB (UME) 1525*16kB (UME) 1140*32kB (UME) 873*64kB (UME) 563*128kB (UM) 462*256kB (UME) 301*512kB (UM) 143*1024kB (UME) 2*2048kB (UM) 143*4096kB (UM) = 1209704kB [ 337.677391][ T9635] Node 0 Normal: 3*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 337.677483][ T9635] Node 1 Normal: 205*4kB (UME) 69*8kB (UME) 43*16kB (UME) 77*32kB (UME) 39*64kB (UE) 11*128kB (UE) 8*256kB (UME) 7*512kB (UME) 6*1024kB (UME) 6*2048kB (U) 941*4096kB (UM) = 3886828kB [ 337.677592][ T9635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 337.677606][ T9635] Node 0 hugepages_total=8 hugepages_free=2 hugepages_surp=4 hugepages_size=2048kB [ 337.677621][ T9635] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 337.677635][ T9635] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 337.677648][ T9635] 36976 total pagecache pages [ 337.677655][ T9635] 0 pages in swap cache [ 337.677661][ T9635] Free swap = 124996kB [ 337.677667][ T9635] Total swap = 124996kB [ 337.677673][ T9635] 2097051 pages RAM [ 337.677680][ T9635] 0 pages HighMem/MovableOnly [ 337.677686][ T9635] 430028 pages reserved [ 337.677695][ T9635] 0 pages cma reserved [ 338.225504][ T5963] usb 2-1: USB disconnect, device number 20 [ 338.299747][ T9683] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1063'. [ 338.353637][ T9684] netlink: 1304 bytes leftover after parsing attributes in process `syz.2.1063'. [ 338.436225][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 338.493516][ T51] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 338.736148][ T9680] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 338.736966][ T9680] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 338.746587][ T9680] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 338.746711][ T9680] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 338.748004][ T5909] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 338.748150][ T5909] ath9k_htc: Failed to initialize the device [ 338.749193][ T5963] usb 2-1: ath9k_htc: USB layer deinitialized [ 338.757155][ T9680] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 338.757579][ T9680] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 338.772077][ T9680] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 338.772402][ T9680] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 338.951141][ T9680] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 338.953373][ T9680] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 338.983416][ T9680] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 339.253663][ T2897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 339.732811][ T9697] netlink: 'syz.3.1067': attribute type 25 has an invalid length. [ 339.732834][ T9697] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1067'. [ 340.762805][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 340.772945][ T9714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.808578][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 340.815120][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 340.821924][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 340.821953][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 340.851861][ T9714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.965201][ T5836] Bluetooth: hci5: command 0x0405 tx timeout [ 341.325618][ T30] audit: type=1400 audit(1753999861.340:682): avc: denied { ioctl } for pid=9722 comm="syz.1.1074" path="socket:[23047]" dev="sockfs" ino=23047 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 341.559038][ T10] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 341.587789][ T9726] netlink: 'syz.0.1075': attribute type 12 has an invalid length. [ 341.596758][ T30] audit: type=1400 audit(1753999861.590:683): avc: denied { write } for pid=9719 comm="syz.0.1075" path="socket:[23979]" dev="sockfs" ino=23979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 341.623587][ T9726] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1075'. [ 341.786125][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.814971][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.837958][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 341.856503][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 341.874703][ T10] usb 4-1: SerialNumber: syz [ 341.889580][ T10] usb 4-1: 0:2 : does not exist [ 342.162983][ T10] usb 4-1: USB disconnect, device number 24 [ 342.171022][ T9739] bridge_slave_0: default FDB implementation only supports local addresses [ 342.206685][ T30] audit: type=1400 audit(1753999862.210:684): avc: denied { bind } for pid=9735 comm="syz.1.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 342.279512][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 342.377888][ T30] audit: type=1400 audit(1753999862.220:685): avc: denied { accept } for pid=9735 comm="syz.1.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 342.472632][ T30] audit: type=1400 audit(1753999862.480:686): avc: denied { setopt } for pid=9746 comm="syz.0.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 342.664667][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 342.794763][ T10] usb 4-1: device descriptor read/64, error -71 [ 342.884959][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 342.884962][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 342.884995][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 342.891014][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 342.918364][ T9760] random: crng reseeded on system resumption [ 343.092047][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 344.032774][ T30] audit: type=1400 audit(1753999862.930:687): avc: denied { append } for pid=9758 comm="syz.5.1087" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 344.058428][ T5836] Bluetooth: hci5: command 0x0405 tx timeout [ 344.110088][ T8699] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.155183][ T10] usb 4-1: device descriptor read/64, error -71 [ 344.265945][ T10] usb usb4-port1: attempt power cycle [ 344.425107][ T5836] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 344.714671][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 344.779529][ T10] usb 4-1: device descriptor read/8, error -71 [ 344.790592][ T5836] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 344.807064][ T8699] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 345.144876][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 345.177317][ T10] usb 4-1: device descriptor read/8, error -71 [ 345.294853][ T10] usb usb4-port1: unable to enumerate USB device [ 345.619128][ T9791] lo speed is unknown, defaulting to 1000 [ 346.074376][ T9802] fuse: Bad value for 'fd' [ 346.094135][ T5836] Bluetooth: hci5: command 0x0405 tx timeout [ 346.196986][ T9797] lo speed is unknown, defaulting to 1000 [ 346.769863][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 346.899481][ T9818] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1102'. [ 347.450257][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 347.894596][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 348.034033][ T9] usb 4-1: device descriptor read/64, error -71 [ 348.275475][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 348.414609][ T9] usb 4-1: device descriptor read/64, error -71 [ 348.594826][ T9] usb usb4-port1: attempt power cycle [ 348.934352][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 349.700400][ T9] usb 4-1: device descriptor read/8, error -71 [ 349.926923][ T6007] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 349.944493][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 349.985988][ T9] usb 4-1: device descriptor read/8, error -71 [ 350.333971][ T5909] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 350.572476][ T6007] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 350.580715][ T9] usb usb4-port1: unable to enumerate USB device [ 350.835847][ T5909] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 350.860824][ T5909] usb 2-1: config 0 has no interface number 0 [ 350.896394][ T5909] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 351.009594][ T5909] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 351.283719][ T5909] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 351.283748][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 351.283766][ T5909] usb 2-1: Product: syz [ 351.283779][ T5909] usb 2-1: SerialNumber: syz [ 351.289799][ T5909] usb 2-1: config 0 descriptor?? [ 351.293772][ T5909] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 351.300304][ T5909] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input23 [ 351.504367][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 353.575882][ T6007] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 353.579097][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 353.729788][ T9870] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 355.255757][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.255866][ T9] usb 2-1: USB disconnect, device number 21 [ 355.257223][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.257244][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 355.545278][ T9] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 355.680817][ T9881] lo speed is unknown, defaulting to 1000 [ 355.685256][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 355.964448][ T1218] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 356.327122][ T6007] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 356.594253][ T1218] usb 4-1: Using ep0 maxpacket: 16 [ 357.018028][ T1218] usb 4-1: config 0 has no interfaces? [ 357.025390][ T1218] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 357.044365][ T1218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.052381][ T1218] usb 4-1: Product: syz [ 357.065601][ T1218] usb 4-1: Manufacturer: syz [ 357.070212][ T1218] usb 4-1: SerialNumber: syz [ 357.101735][ T1218] usb 4-1: config 0 descriptor?? [ 357.403161][ T1218] usb 4-1: USB disconnect, device number 33 [ 357.761363][ T9936] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 358.191316][ T9940] fuse: Bad value for 'fd' [ 358.412914][ T9944] ------------[ cut here ]------------ [ 358.418812][ T9944] WARNING: CPU: 0 PID: 9944 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 358.429389][ T9944] Modules linked in: [ 358.433450][ T9944] CPU: 0 UID: 0 PID: 9944 Comm: syz.3.1138 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 358.445800][ T9944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.456198][ T9944] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 358.462873][ T9944] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 9d 46 7d 0e 00 75 0b c6 05 94 46 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 358.482863][ T9944] RSP: 0018:ffffc900035374f8 EFLAGS: 00010246 [ 358.489471][ T9944] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 358.498689][ T9944] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040dc0 [ 358.507667][ T9944] RBP: 0000000000800000 R08: 0000000000000005 R09: 0000000000000000 [ 358.516091][ T9944] R10: 0000000000100000 R11: 0000000000000001 R12: 000000000000000b [ 358.524636][ T9944] R13: 1ffff920006a6eb4 R14: 0000000000800000 R15: 000000000000000b [ 358.532593][ T9944] FS: 00007fdf4483c6c0(0000) GS:ffff888124720000(0000) knlGS:0000000000000000 [ 358.541733][ T9944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.548761][ T9944] CR2: 000020000000f000 CR3: 0000000040763000 CR4: 00000000003526f0 [ 358.557086][ T9944] Call Trace: [ 358.560345][ T9944] [ 358.563265][ T9944] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 358.570213][ T9944] ? rcu_is_watching+0x12/0xc0 [ 358.575319][ T9944] ? trace_kmem_cache_alloc+0x28/0xc0 [ 358.580673][ T9944] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 358.586885][ T9944] ? hashtab_init+0x1b1/0x290 [ 358.591579][ T9944] __alloc_pages_noprof+0xb/0x1b0 [ 358.597680][ T9944] ___kmalloc_large_node+0x84/0x1e0 [ 358.602887][ T9944] ? hashtab_init+0x1b1/0x290 [ 358.608125][ T9944] __kmalloc_large_node_noprof+0x1c/0x70 [ 358.613757][ T9944] ? __pfx_ebitmap_read+0x10/0x10 [ 358.619348][ T9944] __kmalloc_noprof.cold+0xc/0x61 [ 358.624971][ T9944] hashtab_init+0x1b1/0x290 [ 358.629462][ T9944] ? __asan_memcpy+0x3c/0x60 [ 358.634408][ T9944] policydb_read+0x7b4/0x3220 [ 358.639090][ T9944] ? __pfx_policydb_read+0x10/0x10 [ 358.644599][ T9944] security_load_policy+0x15c/0x12c0 [ 358.649906][ T9944] ? lockdep_hardirqs_on+0x7c/0x110 [ 358.655465][ T9944] ? __pfx_security_load_policy+0x10/0x10 [ 358.661176][ T9944] ? rep_movs_alternative+0x4a/0x90 [ 358.666752][ T9944] sel_write_load+0x332/0x1bd0 [ 358.671503][ T9944] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 358.677860][ T9944] ? __lock_acquire+0xb8a/0x1c90 [ 358.682809][ T9944] ? __pfx_sel_write_load+0x10/0x10 [ 358.688440][ T9944] ? __pfx_sel_write_load+0x10/0x10 [ 358.693624][ T9944] vfs_write+0x2a0/0x1150 [ 358.698603][ T9944] ? __pfx___mutex_lock+0x10/0x10 [ 358.703615][ T9944] ? __pfx_vfs_write+0x10/0x10 [ 358.708996][ T9944] ? __fget_files+0x20e/0x3c0 [ 358.713674][ T9944] ksys_write+0x12a/0x250 [ 358.718538][ T9944] ? __pfx_ksys_write+0x10/0x10 [ 358.723394][ T9944] do_syscall_64+0xcd/0x4c0 [ 358.728422][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.734700][ T9944] RIP: 0033:0x7fdf4398e9a9 [ 358.739100][ T9944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.759055][ T9944] RSP: 002b:00007fdf4483c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 358.767845][ T9944] RAX: ffffffffffffffda RBX: 00007fdf43bb6080 RCX: 00007fdf4398e9a9 [ 358.776208][ T9944] RDX: 000000000000ffaf RSI: 0000200000000000 RDI: 0000000000000003 [ 358.784542][ T9944] RBP: 00007fdf43a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 358.792495][ T9944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.801134][ T9944] R13: 0000000000000000 R14: 00007fdf43bb6080 R15: 00007ffd9662c0b8 [ 358.809788][ T9944] [ 358.812813][ T9944] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 358.820071][ T9944] CPU: 0 UID: 0 PID: 9944 Comm: syz.3.1138 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 358.832020][ T9944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.842052][ T9944] Call Trace: [ 358.845309][ T9944] [ 358.848218][ T9944] dump_stack_lvl+0x3d/0x1f0 [ 358.852792][ T9944] panic+0x71c/0x800 [ 358.856673][ T9944] ? __pfx_panic+0x10/0x10 [ 358.861084][ T9944] ? show_trace_log_lvl+0x29b/0x3e0 [ 358.866269][ T9944] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 358.872321][ T9944] check_panic_on_warn+0xab/0xb0 [ 358.877243][ T9944] __warn+0xf6/0x3c0 [ 358.881134][ T9944] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 358.887186][ T9944] report_bug+0x3c3/0x580 [ 358.891509][ T9944] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 358.897570][ T9944] handle_bug+0x184/0x210 [ 358.901880][ T9944] exc_invalid_op+0x17/0x50 [ 358.906362][ T9944] asm_exc_invalid_op+0x1a/0x20 [ 358.911189][ T9944] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 358.917845][ T9944] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 9d 46 7d 0e 00 75 0b c6 05 94 46 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 358.937430][ T9944] RSP: 0018:ffffc900035374f8 EFLAGS: 00010246 [ 358.943473][ T9944] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 358.951422][ T9944] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040dc0 [ 358.959369][ T9944] RBP: 0000000000800000 R08: 0000000000000005 R09: 0000000000000000 [ 358.967318][ T9944] R10: 0000000000100000 R11: 0000000000000001 R12: 000000000000000b [ 358.975264][ T9944] R13: 1ffff920006a6eb4 R14: 0000000000800000 R15: 000000000000000b [ 358.983227][ T9944] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 358.989549][ T9944] ? rcu_is_watching+0x12/0xc0 [ 358.994295][ T9944] ? trace_kmem_cache_alloc+0x28/0xc0 [ 358.999646][ T9944] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 359.005262][ T9944] ? hashtab_init+0x1b1/0x290 [ 359.009917][ T9944] __alloc_pages_noprof+0xb/0x1b0 [ 359.014920][ T9944] ___kmalloc_large_node+0x84/0x1e0 [ 359.020095][ T9944] ? hashtab_init+0x1b1/0x290 [ 359.024750][ T9944] __kmalloc_large_node_noprof+0x1c/0x70 [ 359.030357][ T9944] ? __pfx_ebitmap_read+0x10/0x10 [ 359.035368][ T9944] __kmalloc_noprof.cold+0xc/0x61 [ 359.040386][ T9944] hashtab_init+0x1b1/0x290 [ 359.044870][ T9944] ? __asan_memcpy+0x3c/0x60 [ 359.049436][ T9944] policydb_read+0x7b4/0x3220 [ 359.054101][ T9944] ? __pfx_policydb_read+0x10/0x10 [ 359.059214][ T9944] security_load_policy+0x15c/0x12c0 [ 359.064477][ T9944] ? lockdep_hardirqs_on+0x7c/0x110 [ 359.069665][ T9944] ? __pfx_security_load_policy+0x10/0x10 [ 359.075380][ T9944] ? rep_movs_alternative+0x4a/0x90 [ 359.080570][ T9944] sel_write_load+0x332/0x1bd0 [ 359.085322][ T9944] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 359.091141][ T9944] ? __lock_acquire+0xb8a/0x1c90 [ 359.096066][ T9944] ? __pfx_sel_write_load+0x10/0x10 [ 359.101265][ T9944] ? __pfx_sel_write_load+0x10/0x10 [ 359.106462][ T9944] vfs_write+0x2a0/0x1150 [ 359.110785][ T9944] ? __pfx___mutex_lock+0x10/0x10 [ 359.115802][ T9944] ? __pfx_vfs_write+0x10/0x10 [ 359.120556][ T9944] ? __fget_files+0x20e/0x3c0 [ 359.125230][ T9944] ksys_write+0x12a/0x250 [ 359.129543][ T9944] ? __pfx_ksys_write+0x10/0x10 [ 359.134390][ T9944] do_syscall_64+0xcd/0x4c0 [ 359.138869][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.144742][ T9944] RIP: 0033:0x7fdf4398e9a9 [ 359.149145][ T9944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.168729][ T9944] RSP: 002b:00007fdf4483c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 359.177128][ T9944] RAX: ffffffffffffffda RBX: 00007fdf43bb6080 RCX: 00007fdf4398e9a9 [ 359.185074][ T9944] RDX: 000000000000ffaf RSI: 0000200000000000 RDI: 0000000000000003 [ 359.193022][ T9944] RBP: 00007fdf43a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 359.200968][ T9944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.208914][ T9944] R13: 0000000000000000 R14: 00007fdf43bb6080 R15: 00007ffd9662c0b8 [ 359.216885][ T9944] [ 359.220087][ T9944] Kernel Offset: disabled [ 359.224391][ T9944] Rebooting in 86400 seconds..