last executing test programs: 2m47.504102641s ago: executing program 1 (id=318): syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x20600) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x0, 0x0, &(0x7f0000000340)={0x6, 0x6, 0xfffffffffffffffd, 0x3c89, 0x89e, 0x7, 0x0, 0x7}, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000440)={&(0x7f0000000400)={[0x80]}, 0x8}) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffc, 0x40002, 0x2, {0xd, @vbi={0x2, 0x2400000, 0x3, 0x56555959, [0x3, 0x8], [0x3, 0x4], 0x108}}}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 2m46.2712985s ago: executing program 1 (id=322): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r8, 0x0, 0x0) 2m43.975909741s ago: executing program 1 (id=324): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) fallocate(r3, 0x3, 0x3, 0x80000000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0x2, 0x4e33, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x4}]}}}], 0x18}}], 0x2, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r4, 0x1, 0x2, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000200)) 2m43.141830347s ago: executing program 1 (id=328): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x8e8, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}], [], 0xfc}, {}, {[{}, {}, {}, {}, {}, {}, {0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}], 0x0, 0x6}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {0x0, 0xac}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x9}]}, {[{}, {}, {}, {}, {0x0, 0x2}]}, {[{}, {}, {0x1000000}, {}, {}, {}, {0x0, 0x1}]}, {}, {[{}, {}, {}, {}, {}, {0x3}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r7) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x29096263}, {0x6}]}, 0x10) 2m41.487513371s ago: executing program 1 (id=333): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x8e8, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}], [], 0xfc}, {}, {[{}, {}, {}, {}, {}, {}, {0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}], 0x0, 0x6}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {0x0, 0xac}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x9}]}, {[{}, {}, {}, {}, {0x0, 0x2}]}, {[{}, {}, {0x1000000}, {}, {}, {}, {0x0, 0x1}]}, {}, {[{}, {}, {}, {}, {}, {0x3}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r7) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x29096263}, {0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) 2m39.949119976s ago: executing program 1 (id=336): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="ec0767", 0x3}, {&(0x7f000000c640)="4dea2e9fc630f1670cf70c207e43667038bf092497c42179b09807f9b234acd0e2bf920be733d5e21ac510b279753142e15c366bd567563a39dc8a1f82c12b5e23e4297fa70d70110fd408097aa1b9c560dae166223968985d838c4dc5cf0b9122d7df3e79c64af3b05fe3dd65bdba33b66aa6e67e71127deb6cab6c7b1ee2858dc8e2aed6de1a8e07dd75b017df1bd495c59812ac39c2066b761f596a88ece33728617f756fd136f6b2819c27981ce35b449f192aec94239f56e68ea969881ae13899dd2fe4193b18c0210a47dd57b02240ed5fbe3b902caf598599", 0xdc}, {&(0x7f00000000c0)="80819a406c4532b29ab729dd0e4b12cffeb3347d8b69fb0fd7cbd350f01b17ad694672000cf10c8ed49156aa8617da1d70dde03283db4bd40fafaf2acecd0b59707d0b4ffbe1d938673cfc2099646e761ddded8cd96605ce080e313344ca123c103fe1bcf68fd4f2890418d9b67537405b0bc2889546f05bd712495b0600000000000000407923b2fff8bf1cfce5b74dd7d77c2e0d02", 0x96}, {&(0x7f000000c5c0)="2cad1cb24db0481cba0fe4efcc9b012f9976ea7f782c100ce30fca34ffa9c98e5c24851bc899a730ff662353fa6cad61e53be4c5d14f555ef2a1a9e7dfca05c8532236694df200cd9fba820c02cec743286b58f4380acfec90d09a8f38dee5976a2b5204b2", 0x65}], 0x4}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000500)="25bbf953d9e63a86502326a91bcb452d049906b8663a98ffd6eb4a9471a6b34a725ae193d99db3d460f7bc4aed2217ef4f96211bcb85f3c5b29b0357cb5526a2bf026fce752e9453032fe77673f0bf89cd0d842e437d5d7c0a6af5493a6160e4019655e7ec27c1566b7e5c625149dc633e4c132a9118796e0dae4b094d7030d37e3b268c2da4c0716e9c9da8be9ad79d176059ed950c425404eee5c70a91acb3a80fa82c61d5637be14a66056edc33e8111e50e43eadc326d80dd63563cf75b7dc86f5aa26ac30bc812b0a4244625753", 0xd0}, {&(0x7f0000000600)="c88b24f13e46650376bd62b2a4a9e5529d9c1d28afea7a51dc9057907876a2b013890ed7000000000000000000", 0x2d}, {&(0x7f0000000640)="2d8535ae0c438abd0bc4f58c4e3b", 0xe}, {&(0x7f00000003c0)="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", 0x12b}, {&(0x7f0000000800)="dfda34e3ee7dda93a0aeed729cd5cabedf707118f5cf8acfe7747fccf72b6612754caddf60baf2dbe649d3fe02595d224cf75c98174effb4bb82011113ff74b68dc8a2c49e31b3f9576f654b87b67e4e1599c5f0eaa01acb7e6aaf2ad51cb7b0cb2463d665daddf0bd903aa0e78c0912a84c1b3ff60a75dff896f3e8ef5ac614a8223484e5662ab03b927cb375820928976f3f6c4aba8ff8c5cd4671e8f46d1670f45379e9a15d4e27ec2b0a1fd6fbe11c482169b34525f89ced9acc31f6d22df3914597f296aa7b01efcd849bc089e84da99e84b07f22e5f2a4d557f7a7eb86dee45a986a87ba29447a33f15f62be723a", 0xf1}, {&(0x7f0000000900)="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", 0xb00}], 0x6}}], 0x2, 0x8058) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000680)={0x7fffffff, {{0x2, 0x4e22, @loopback}}}, 0x88) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r6}, 0x18) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578e2ec58adee6b56c6831f9f48815f345d4640ea5f0af150fa32b4530c82382ee7793a6a0976b956a556b58c34caca190934acaadad2ce8cc8fa4a4a41f0392cd862b18d3c51bd51b3aa2e7e616c8a73833e299a9005"], 0xfffffd97) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0103000000000000000001000000080001001400000008000300", @ANYRES64=r10], 0x30}}, 0x44) 2m24.793874316s ago: executing program 32 (id=336): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="ec0767", 0x3}, {&(0x7f000000c640)="4dea2e9fc630f1670cf70c207e43667038bf092497c42179b09807f9b234acd0e2bf920be733d5e21ac510b279753142e15c366bd567563a39dc8a1f82c12b5e23e4297fa70d70110fd408097aa1b9c560dae166223968985d838c4dc5cf0b9122d7df3e79c64af3b05fe3dd65bdba33b66aa6e67e71127deb6cab6c7b1ee2858dc8e2aed6de1a8e07dd75b017df1bd495c59812ac39c2066b761f596a88ece33728617f756fd136f6b2819c27981ce35b449f192aec94239f56e68ea969881ae13899dd2fe4193b18c0210a47dd57b02240ed5fbe3b902caf598599", 0xdc}, {&(0x7f00000000c0)="80819a406c4532b29ab729dd0e4b12cffeb3347d8b69fb0fd7cbd350f01b17ad694672000cf10c8ed49156aa8617da1d70dde03283db4bd40fafaf2acecd0b59707d0b4ffbe1d938673cfc2099646e761ddded8cd96605ce080e313344ca123c103fe1bcf68fd4f2890418d9b67537405b0bc2889546f05bd712495b0600000000000000407923b2fff8bf1cfce5b74dd7d77c2e0d02", 0x96}, {&(0x7f000000c5c0)="2cad1cb24db0481cba0fe4efcc9b012f9976ea7f782c100ce30fca34ffa9c98e5c24851bc899a730ff662353fa6cad61e53be4c5d14f555ef2a1a9e7dfca05c8532236694df200cd9fba820c02cec743286b58f4380acfec90d09a8f38dee5976a2b5204b2", 0x65}], 0x4}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000500)="25bbf953d9e63a86502326a91bcb452d049906b8663a98ffd6eb4a9471a6b34a725ae193d99db3d460f7bc4aed2217ef4f96211bcb85f3c5b29b0357cb5526a2bf026fce752e9453032fe77673f0bf89cd0d842e437d5d7c0a6af5493a6160e4019655e7ec27c1566b7e5c625149dc633e4c132a9118796e0dae4b094d7030d37e3b268c2da4c0716e9c9da8be9ad79d176059ed950c425404eee5c70a91acb3a80fa82c61d5637be14a66056edc33e8111e50e43eadc326d80dd63563cf75b7dc86f5aa26ac30bc812b0a4244625753", 0xd0}, {&(0x7f0000000600)="c88b24f13e46650376bd62b2a4a9e5529d9c1d28afea7a51dc9057907876a2b013890ed7000000000000000000", 0x2d}, {&(0x7f0000000640)="2d8535ae0c438abd0bc4f58c4e3b", 0xe}, {&(0x7f00000003c0)="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", 0x12b}, {&(0x7f0000000800)="dfda34e3ee7dda93a0aeed729cd5cabedf707118f5cf8acfe7747fccf72b6612754caddf60baf2dbe649d3fe02595d224cf75c98174effb4bb82011113ff74b68dc8a2c49e31b3f9576f654b87b67e4e1599c5f0eaa01acb7e6aaf2ad51cb7b0cb2463d665daddf0bd903aa0e78c0912a84c1b3ff60a75dff896f3e8ef5ac614a8223484e5662ab03b927cb375820928976f3f6c4aba8ff8c5cd4671e8f46d1670f45379e9a15d4e27ec2b0a1fd6fbe11c482169b34525f89ced9acc31f6d22df3914597f296aa7b01efcd849bc089e84da99e84b07f22e5f2a4d557f7a7eb86dee45a986a87ba29447a33f15f62be723a", 0xf1}, {&(0x7f0000000900)="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", 0xb00}], 0x6}}], 0x2, 0x8058) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000680)={0x7fffffff, {{0x2, 0x4e22, @loopback}}}, 0x88) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r6}, 0x18) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578e2ec58adee6b56c6831f9f48815f345d4640ea5f0af150fa32b4530c82382ee7793a6a0976b956a556b58c34caca190934acaadad2ce8cc8fa4a4a41f0392cd862b18d3c51bd51b3aa2e7e616c8a73833e299a9005"], 0xfffffd97) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0103000000000000000001000000080001001400000008000300", @ANYRES64=r10], 0x30}}, 0x44) 11.900369211s ago: executing program 2 (id=737): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x60, {0x0, 0x100}}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000001c0)="276c71be2dc00d00d615309de3248e7afa5e0b2744ca844d05d22a9b05bb1e3f625659799f6144e0f2542838e04b6f8964809683d023ad701e44b6671f5815cfc7d8e59ebdcaed25fb0b5914aefb0292d3cd4ccc176e71b8b10878356da6c303d0160bf0cf24af193485665fdd9ea71c12162d40c187ec168d6e9d653c6e72ca612b06b94f6a397807c6958d521f0e7dde6f00f997ec172ad698241941d9a79032b60ab72217f48b0574a343c641f9363ccf98f54809dadc525b86bfbe523042a803bd676a8ae4d674d80aa1afd1270e28547c66cce47d00e02c2083c7e65a654d4edb4c9475ccd48047c9c7f1eaceb087f40713fd58bbcf579111bf94fbc4ea") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000002c0)={0x3f}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x3, &(0x7f0000000000)=0xfffffff8, 0x4) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000200), &(0x7f00000003c0)=r8}, 0x20) sendfile(r4, r4, 0x0, 0x40008) write$uinput_user_dev(r1, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 10.653264543s ago: executing program 2 (id=741): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000006800010000000000fddbdf250a0000000000000004000400080005", @ANYRES32=0x0], 0x24}}, 0x4054) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r7 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='numa_maps\x00') preadv(r8, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0) quotactl_fd$Q_SETINFO(r7, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x8, 0x8, 0x0, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) close(r8) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) 9.457136485s ago: executing program 3 (id=744): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x181800) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x200, 0x1ff, "21000200000000e1425d44acb12b35", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3000100007389827f04", "33af343c60abc64f2fdc9ddf", "f63800000000a93c00"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000d40)={0x10000000000001, 0x1, 0x400, 0xffffffff, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000340)="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", 0xff, 0x8000, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @mcast2, 0x400}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@deltfilter={0x380, 0x2d, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0xd}, {0xfff2, 0xfff2}, {0x8, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9d}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x10}, @filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x4}, @TCA_U32_HASH={0x8, 0x2, 0x6339}]}}, @TCA_CHAIN={0x8, 0xb, 0x1a72}, @filter_kind_options=@f_matchall={{0xd}, {0x2f0, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xffe0}}, @TCA_MATCHALL_ACT={0x2e4, 0x2, [@m_sample={0xb4, 0x17, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xa6f}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5c8e, 0x8, 0x10000000, 0xffff8000, 0x9}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x40}]}, {0x4d, 0x6, "663ca8f6e5566fb08dbfcaaa919ae0ab8cf03d8837b1c87c0e57bf72c540c78e4306c37e185b510cdcd817f1924ee3a60582867481bd768948712fe8102850d19519fc07f3566fae80"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}, @m_connmark={0xd0, 0x1e, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x400, 0x20000000, 0xd, 0x4}, 0x71}}]}, {0x83, 0x6, "7d6553a885e93a2d37c520adc3dec42c1a7e9c7cda1262413c0e859083eb33eba54107345be6ee8fa3fda6be55775b539581e8c48b0b58248b6aec07f9470d5653743e0a05a96908255d246db85d318ee6084dc245a91ffa3e6db37b0dc1a5381d902c2f3454cfb71050e682031ef75117158247792b8b63be4d8e3c093dcb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_csum={0x15c, 0x4, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x6, 0x1, 0xda}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x800, 0x20000000, 0x5, 0xdc}, 0x6b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x0, 0x3, 0x2}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x2, 0x20000000, 0x0, 0x80}, 0x2}}]}, {0xbe, 0x6, "9f00e010f1f0ae15ee06dadd88849cb1f67e84057b3eff91459ba6ea96e9bbf6251dde617bfdd9a13313582df196d5c1013661f0e132dcfedb9eae5a84ac741cafe9570b9bc0c8f5360cd1ce70a9393a0c48e79794e278ee858522a7d32c3b6cdf8e57a7f3a678cd9b6b6609820c6c1a0ac783873b3f6936c4d93be1ed3a3008b32bb074881f5af126aadd97135179cc9d05c3068ad18cc613a43579845544ce1069fd60e1696f12897c3c20ad63b98bcb55a7052ac41add5bb2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x380}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x6, 0xc9, 0x9, 0x2, 0x7}}}, 0xc) 9.106287429s ago: executing program 4 (id=749): syz_clone(0x4042080, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="db5e8e8c2cfcfc128f7b5fa1c6") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "feeeff000000001b"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 9.015803684s ago: executing program 4 (id=751): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @loopback, 0x3}, 0x1c) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="5e54e574da93883e8cfa850a728461ff75d2e73c683e8c4f31db141965f3fbcf0e16db6e759d4201", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000290000003700feff2a00000000000000"], 0x18}}], 0x2, 0x44000) 8.846581826s ago: executing program 2 (id=752): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x181800) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x200, 0x1ff, "21000200000000e1425d44acb12b35", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3000100007389827f04", "33af343c60abc64f2fdc9ddf", "f63800000000a93c00"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000d40)={0x10000000000001, 0x1, 0x400, 0xffffffff, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000340)="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", 0xff, 0x8000, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @mcast2, 0x400}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@deltfilter={0x380, 0x2d, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0xd}, {0xfff2, 0xfff2}, {0x8, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9d}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x10}, @filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x4}, @TCA_U32_HASH={0x8, 0x2, 0x6339}]}}, @TCA_CHAIN={0x8, 0xb, 0x1a72}, @filter_kind_options=@f_matchall={{0xd}, {0x2f0, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xffe0}}, @TCA_MATCHALL_ACT={0x2e4, 0x2, [@m_sample={0xb4, 0x17, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xa6f}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5c8e, 0x8, 0x10000000, 0xffff8000, 0x9}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x40}]}, {0x4d, 0x6, "663ca8f6e5566fb08dbfcaaa919ae0ab8cf03d8837b1c87c0e57bf72c540c78e4306c37e185b510cdcd817f1924ee3a60582867481bd768948712fe8102850d19519fc07f3566fae80"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}, @m_connmark={0xd0, 0x1e, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x400, 0x20000000, 0xd, 0x4}, 0x71}}]}, {0x83, 0x6, "7d6553a885e93a2d37c520adc3dec42c1a7e9c7cda1262413c0e859083eb33eba54107345be6ee8fa3fda6be55775b539581e8c48b0b58248b6aec07f9470d5653743e0a05a96908255d246db85d318ee6084dc245a91ffa3e6db37b0dc1a5381d902c2f3454cfb71050e682031ef75117158247792b8b63be4d8e3c093dcb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_csum={0x15c, 0x4, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x6, 0x1, 0xda}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x800, 0x20000000, 0x5, 0xdc}, 0x6b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x0, 0x3, 0x2}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x2, 0x20000000, 0x0, 0x80}, 0x2}}]}, {0xbe, 0x6, "9f00e010f1f0ae15ee06dadd88849cb1f67e84057b3eff91459ba6ea96e9bbf6251dde617bfdd9a13313582df196d5c1013661f0e132dcfedb9eae5a84ac741cafe9570b9bc0c8f5360cd1ce70a9393a0c48e79794e278ee858522a7d32c3b6cdf8e57a7f3a678cd9b6b6609820c6c1a0ac783873b3f6936c4d93be1ed3a3008b32bb074881f5af126aadd97135179cc9d05c3068ad18cc613a43579845544ce1069fd60e1696f12897c3c20ad63b98bcb55a7052ac41add5bb2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x380}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x6, 0xc9, 0x9, 0x2, 0x7}}}, 0xc) 8.815841454s ago: executing program 5 (id=753): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x60, {0x0, 0x100}}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000001c0)="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") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000002c0)={0x3f}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x3, &(0x7f0000000000)=0xfffffff8, 0x4) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendfile(r4, r4, 0x0, 0x40008) write$uinput_user_dev(r1, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 8.04089917s ago: executing program 3 (id=754): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x400, 0x1, 0xbfdffffc}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000080), 0x0}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffff9c, 0x0, 0x14000, 0x0) unshare(0x6e060000) 7.740217362s ago: executing program 4 (id=756): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x400, 0x1, 0xbfdffffc}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000080), 0x0}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffff9c, 0x0, 0x14000, 0x0) unshare(0x6e060000) 7.428992248s ago: executing program 5 (id=757): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000006800010000000000fddbdf250a0000000000000004000400080005", @ANYRES32=0x0], 0x24}}, 0x4054) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r7 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='numa_maps\x00') read$FUSE(r8, &(0x7f00000023c0)={0x2020}, 0x2020) preadv(r8, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0) quotactl_fd$Q_SETINFO(r7, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x8, 0x8, 0x0, 0x1}) 6.271331205s ago: executing program 2 (id=759): setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)={0x0, 0x7, 0x3, [0x40, 0xe8e2, 0x1]}, 0xe) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x1404c840}, 0x4000010) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000000a0a01dfff000000000000000a0000096f5aa448cd3adf32029c08418d08354c94bce32fbcb99ae315ea2659c6f787653a200f9d8830cb9beca6917faddb8acca0cb97c1b67dce8a2ae6cd6a80c10613ebac07e76ba768debdbc604e669ea5bda569b9fcbc447b2e3e8c53955be1d1fe74d2905cad31504d9943c708bfd8f49454d6b9c3b4661a0863c6840e5c0136f23fa2a107dd175608c33e412b5024bde9aeffe79a1e9acd3f69e8952f21ab65aac2b5f34ecf4c25c6f145820feb77fa98e9675a7adde5acd9421eebf48bbd33a588004f97825787596bdca9833a610e44aa550021"], 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) pwritev2(r4, &(0x7f0000002b00)=[{&(0x7f0000001c00)="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", 0x1ec}, {&(0x7f0000001b00)="76e7e8fb0cea95d4d75ab601b9fa4fc27c7f465427c515396f493a28dddd74d0e60a678c08ae0dec10a20c5bc4b524d7347ad02f5f64111c761e91c9dc15ed86ea9ebbefe8490e52f6c599a94b54785f1ad734844bade9a5e83afaf9f355d94c4e3c8533f535abd043b7e8100d0a99e6ed320078006b40d25a937c55a20ce24c6b1a1dd1be1d52b04b7ac33bb6bd175ce21552db51e3b72acd66119bf69fde1c12527064939947d1c2bacd9ee9762a629209e382d9a7c135555d6dda47cfb5c9a5b9cb0e39050683d828541b85559671c3035e5703c4de90b3b6940000000000", 0xe0}, {&(0x7f0000000500)="f8fd511f648e1cde9b5595629326a94d7c5f2b1c4e7e3f02855e41a6f12b5cd53a99ca2bf3366fc25b00294760d1ce75563fb55cf22babf54cc19ddbb9297308bb064a35c1776a53c1116ad75856720f04dd41ac4ac8c228e122b95f34c8ee2dbae9d20d6b159b370aa9dd2e82d001b059e65966329d93a1e7823bf8524907866c06157065e993eef1ea2cc8ce0bb6c75678fb0701cfea85ccbbadfc1f4ee54b3f7b3793dedd1934ae9f58e523d2ad97af2e837aff4b21cfb5a011186a9ed56f324d916dfad425458fbf9def7304a0909770540e29de49ba797bbd77f244fd9c695558f3db3d4267077bc755b3f33f3400de5c8a81", 0xf5}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000003b80)}, {&(0x7f00000003c0)}, {&(0x7f0000000900)="3baf1a54853c9eb705f02e89dc6d7d69b06f52462d62247bbf20fc2c54e3847daf002fd752059074d07707277b58848abd56e21bce3c0878c11f92df298e995d61079411a2f6217c78b9e7c9506e238a997c135ddaf3bf8f0d5ea682fa427f4bd9cad205aef90b154c134c9a40efa868356635857a65a4ea45918c0351c071180fca8fcd4c508322783fd0b24db21ea9a5b08e86c8aa6f15e1b4b5356af9d9c815175d9dd6a7f486ab3b930c066449", 0xaf}, {&(0x7f00000003c0)="d1375aacaf", 0x5}], 0x8, 0xfffffffd, 0x7, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) add_key(&(0x7f0000000300)='rxrpc_s\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000180)=' ', 0x1, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x0, 0x10000040, 0x4, 0x0, 0x4, 0x0, 0xfffffffffffffff6, 0x0, 0x94}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) 6.173138467s ago: executing program 0 (id=760): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x2) accept4(r0, &(0x7f0000000100)=@ethernet={0x0, @dev}, &(0x7f0000000000)=0x80, 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0x2000101c}) syz_open_dev$hidraw(&(0x7f0000000340), 0x8000000000000000, 0x14400) epoll_pwait(r6, &(0x7f00000000c0)=[{}], 0x1, 0x80000000, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.147611664s ago: executing program 4 (id=761): syz_clone(0x4042080, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="db5e8e8c2cfcfc128f7b5fa1c6") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "feeeff000000001b"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 5.105266312s ago: executing program 2 (id=762): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x200000000000000) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x400, 0x1, 0xbfdffffc}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000080), 0x0}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffff9c, 0x0, 0x14000, 0x0) unshare(0x6e060000) 5.018639634s ago: executing program 4 (id=763): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x114}, 0x1, 0x0, 0x0, 0x8004}, 0x488c4) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r2 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x4e2481, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000240), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @mcast2, 0x1}, 0x1c) write$rfkill(r2, &(0x7f0000000080)={0xfd, 0x0, 0x3, 0x1}, 0x8) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_connect(0x2, 0x35, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r5, @ANYRES32=r2, @ANYRES64=0x0, @ANYRES32=r1, @ANYRES8, @ANYRES16=r0, @ANYRES8=r1], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 5.004148763s ago: executing program 0 (id=764): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x1d, 0x0, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aab5fb91a4fc73b36849c8a9be678e5df8b0291c0d"], 0xc8}}, 0x0) dup(0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r4, 0x401870cb, &(0x7f0000000040)) 4.783203147s ago: executing program 3 (id=765): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='vnet_skip_tx_trigger\x00', r2}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xd19b}}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000300), 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x10000) r8 = syz_io_uring_setup(0x17, &(0x7f0000000400)={0x0, 0x88db, 0x40, 0xff7fffff, 0xdd}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='io_uring_req_failed\x00', 0xffffffffffffffff, 0x0, 0xffffffffffff3bac}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x4, 0x0, 0x1, 0xc}) io_uring_enter(r8, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 4.709368731s ago: executing program 0 (id=766): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x8e8, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}], [], 0xfc}, {}, {[{}, {}, {}, {}, {}, {}, {0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}], 0x0, 0x6}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {0x0, 0xac}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x9}]}, {[{}, {}, {}, {}, {0x0, 0x2}]}, {[{}, {}, {0x1000000}, {}, {}, {}, {0x0, 0x1}]}, {}, {[{}, {}, {}, {}, {}, {0x3}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x29096263}, {0x6}]}, 0x10) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) 4.334648784s ago: executing program 5 (id=767): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x9cdc2384256b48a8) 3.281682634s ago: executing program 3 (id=768): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x8e8, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}], [], 0xfc}, {}, {[{}, {}, {}, {}, {}, {}, {0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}], 0x0, 0x6}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {0x0, 0xac}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x9}]}, {[{}, {}, {}, {}, {0x0, 0x2}]}, {[{}, {}, {0x1000000}, {}, {}, {}, {0x0, 0x1}]}, {}, {[{}, {}, {}, {}, {}, {0x3}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0x0, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f0000000180), 0x4000190, 0x0) 3.2289689s ago: executing program 5 (id=769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="f6", 0x1}], 0x1}}, {{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x2bed4a8cad9601b9, @my=0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000000240)=[{0x10, 0x3a, 0xfa}], 0x10}}], 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r0, 0x4, 0x0, &(0x7f00000001c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0xfffffffffffffea8) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x17, 0x6, 0x1, 0x0, 0x2000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a00", @ANYRES32], 0x58}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0xfffffffffffffffb, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3.055012402s ago: executing program 0 (id=770): fsopen(&(0x7f00000000c0)='befs\x00', 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x40}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 1.6305575s ago: executing program 3 (id=771): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1112800b0001006d61637365630000100002800c0004000200000100c2800008000500"/44, @ANYRES32=r7, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_START_POLL(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x34, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x86}, @NFC_ATTR_IM_PROTOCOLS={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IEEE802154_LIST_PHY(r8, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dbdc01}, 0x14}, 0x1, 0x0, 0x0, 0x8004190}, 0x20004000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) 1.529326258s ago: executing program 5 (id=772): setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)={0x0, 0x7, 0x3, [0x40, 0xe8e2, 0x1]}, 0xe) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x1404c840}, 0x4000010) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000000a0a01dfff000000000000000a0000096f5aa448cd3adf32029c08418d08354c94bce32fbcb99ae315ea2659c6f787653a200f9d8830cb9beca6917faddb8acca0cb97c1b67dce8a2ae6cd6a80c10613ebac07e76ba768debdbc604e669ea5bda569b9fcbc447b2e3e8c53955be1d1fe74d2905cad31504d9943c708bfd8f49454d6b9c3b4661a0863c6840e5c0136f23fa2a107dd175608c33e412b5024bde9aeffe79a1e9acd3f69e8952f21ab65aac2b5f34ecf4c25c6f145820feb77fa98e9675a7adde5acd9421eebf48bbd33a588004f97825787596bdca9833a610e44aa550021"], 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) pwritev2(r4, &(0x7f0000002b00)=[{&(0x7f0000001c00)="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", 0x1ec}, {&(0x7f0000001b00)="76e7e8fb0cea95d4d75ab601b9fa4fc27c7f465427c515396f493a28dddd74d0e60a678c08ae0dec10a20c5bc4b524d7347ad02f5f64111c761e91c9dc15ed86ea9ebbefe8490e52f6c599a94b54785f1ad734844bade9a5e83afaf9f355d94c4e3c8533f535abd043b7e8100d0a99e6ed320078006b40d25a937c55a20ce24c6b1a1dd1be1d52b04b7ac33bb6bd175ce21552db51e3b72acd66119bf69fde1c12527064939947d1c2bacd9ee9762a629209e382d9a7c135555d6dda47cfb5c9a5b9cb0e39050683d828541b85559671c3035e5703c4de90b3b6940000000000", 0xe0}, {&(0x7f0000000500)="f8fd511f648e1cde9b5595629326a94d7c5f2b1c4e7e3f02855e41a6f12b5cd53a99ca2bf3366fc25b00294760d1ce75563fb55cf22babf54cc19ddbb9297308bb064a35c1776a53c1116ad75856720f04dd41ac4ac8c228e122b95f34c8ee2dbae9d20d6b159b370aa9dd2e82d001b059e65966329d93a1e7823bf8524907866c06157065e993eef1ea2cc8ce0bb6c75678fb0701cfea85ccbbadfc1f4ee54b3f7b3793dedd1934ae9f58e523d2ad97af2e837aff4b21cfb5a011186a9ed56f324d916dfad425458fbf9def7304a0909770540e29de49ba797bbd77f244fd9c695558f3db3d4267077bc755b3f33f3400de5c8a81", 0xf5}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000003b80)}, {&(0x7f00000003c0)}, {&(0x7f0000000900)="3baf1a54853c9eb705f02e89dc6d7d69b06f52462d62247bbf20fc2c54e3847daf002fd752059074d07707277b58848abd56e21bce3c0878c11f92df298e995d61079411a2f6217c78b9e7c9506e238a997c135ddaf3bf8f0d5ea682fa427f4bd9cad205aef90b154c134c9a40efa868356635857a65a4ea45918c0351c071180fca8fcd4c508322783fd0b24db21ea9a5b08e86c8aa6f15e1b4b5356af9d9c815175d9dd6a7f486ab3b930c066449", 0xaf}, {&(0x7f00000003c0)="d1375aacaf", 0x5}], 0x8, 0xfffffffd, 0x7, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) add_key(&(0x7f0000000300)='rxrpc_s\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000180)=' ', 0x1, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x0, 0x10000040, 0x4, 0x0, 0x4, 0x0, 0xfffffffffffffff6, 0x0, 0x94}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) 1.522815484s ago: executing program 4 (id=773): syz_clone(0x4042080, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="db5e8e8c2cfcfc128f7b5fa1c6") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.442851667s ago: executing program 0 (id=774): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2}) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x100010, r6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=@newtaction={0x60, 0x30, 0x48b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x0, 0x6, 0x1ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) 449.633579ms ago: executing program 0 (id=775): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x2) accept4(r0, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x2000101c}) syz_open_dev$hidraw(&(0x7f0000000340), 0x8000000000000000, 0x14400) epoll_pwait(r5, &(0x7f00000000c0)=[{}], 0x1, 0x80000000, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 411.577549ms ago: executing program 3 (id=776): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x40088f, 0x0, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000413582ba00f1ff0000390000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r5, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r7, r6, 0x0, 0x80000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xf, &(0x7f00000006c0)=@raw=[@generic={0x9, 0x0, 0x4, 0x200, 0x6}, @generic={0x5, 0xc, 0x6, 0x5, 0xfffffffd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_fd={0x18, 0x7, 0x1, 0x0, r6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f00000005c0)='GPL\x00'}, 0x94) r8 = io_uring_setup(0x17f1, &(0x7f0000000040)={0x0, 0xd475, 0x20000, 0x0, 0x36f}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f0000000200)={0x7a84c5bb, 0x0, &(0x7f00000001c0)=[r4]}, 0x1) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r9, &(0x7f0000000480)={0x1f, @none}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_ifreq(r10, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_addrs=@can}) ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000)) 392.469643ms ago: executing program 5 (id=777): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x60, {0x0, 0x100}}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000001c0)="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") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000002c0)={0x3f}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x3, &(0x7f0000000000)=0xfffffff8, 0x4) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000200), &(0x7f00000003c0)=r8}, 0x20) sendfile(r4, r4, 0x0, 0x40008) write$uinput_user_dev(r1, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 0s ago: executing program 2 (id=778): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='vnet_skip_tx_trigger\x00', r2}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xd19b}}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000300), 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x10000) r8 = syz_io_uring_setup(0x17, &(0x7f0000000400)={0x0, 0x88db, 0x40, 0xff7fffff, 0xdd}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='io_uring_req_failed\x00', 0xffffffffffffffff, 0x0, 0xffffffffffff3bac}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x4, 0x0, 0x1, 0xc}) io_uring_enter(r8, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T6708] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 118.407524][ T6708] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 118.646266][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 118.656591][ T5837] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 118.674531][ T5837] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 118.674556][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 118.674573][ T5837] usb 4-1: Product: syz [ 118.674583][ T5837] usb 4-1: Manufacturer: syz [ 118.674591][ T5837] usb 4-1: SerialNumber: syz [ 118.677259][ T5837] usb 4-1: config 0 descriptor?? [ 118.678041][ T6671] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 118.727228][ T6707] FAULT_INJECTION: forcing a failure. [ 118.727228][ T6707] name failslab, interval 1, probability 0, space 0, times 0 [ 118.795339][ T6707] CPU: 1 UID: 0 PID: 6707 Comm: syz.1.178 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 118.795365][ T6707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.795371][ T6707] Call Trace: [ 118.795374][ T6707] [ 118.795378][ T6707] dump_stack_lvl+0x16c/0x1f0 [ 118.795400][ T6707] should_fail_ex+0x512/0x640 [ 118.795416][ T6707] ? __kmalloc_noprof+0xbf/0x510 [ 118.795438][ T6707] ? io_cache_alloc_new+0x45/0xf0 [ 118.795453][ T6707] should_failslab+0xc2/0x120 [ 118.795464][ T6707] __kmalloc_noprof+0xd2/0x510 [ 118.795481][ T6707] io_cache_alloc_new+0x45/0xf0 [ 118.795497][ T6707] __io_prep_rw+0x21d/0x1000 [ 118.795511][ T6707] ? __pfx___io_prep_rw+0x10/0x10 [ 118.795522][ T6707] ? mark_held_locks+0x49/0x80 [ 118.795538][ T6707] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 118.795554][ T6707] io_prep_rw+0x24/0x220 [ 118.795566][ T6707] io_prep_readv+0x20/0xa0 [ 118.795579][ T6707] io_submit_sqes+0x832/0x2580 [ 118.795600][ T6707] __do_sys_io_uring_enter+0xd6a/0x1630 [ 118.795617][ T6707] ? __fget_files+0x20e/0x3c0 [ 118.795626][ T6707] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 118.795642][ T6707] ? fput+0x70/0xf0 [ 118.795653][ T6707] ? ksys_write+0x1ac/0x250 [ 118.795667][ T6707] ? __pfx_ksys_write+0x10/0x10 [ 118.795685][ T6707] do_syscall_64+0xcd/0x4c0 [ 118.795700][ T6707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.795710][ T6707] RIP: 0033:0x7f3498b8e9a9 [ 118.795718][ T6707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.795728][ T6707] RSP: 002b:00007f34969d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 118.795738][ T6707] RAX: ffffffffffffffda RBX: 00007f3498db6080 RCX: 00007f3498b8e9a9 [ 118.795744][ T6707] RDX: 0000000000000000 RSI: 0000000000002ffb RDI: 0000000000000004 [ 118.795750][ T6707] RBP: 00007f34969d5090 R08: 0000000000000000 R09: 0000000000000000 [ 118.795756][ T6707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.795761][ T6707] R13: 0000000000000000 R14: 00007f3498db6080 R15: 00007fff34a02008 [ 118.795774][ T6707] [ 119.027596][ T5906] usb 4-1: USB disconnect, device number 8 [ 119.731210][ T30] audit: type=1326 audit(1753492663.577:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.3.172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f689b38e9a9 code=0x0 [ 120.351959][ T30] audit: type=1400 audit(1753492664.207:284): avc: denied { sqpoll } for pid=6723 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 120.366941][ T6724] fuse: Unknown parameter '000000000000000000000040x0000000000000005' [ 120.367641][ T30] audit: type=1400 audit(1753492664.217:285): avc: denied { create } for pid=6723 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 120.373492][ T30] audit: type=1400 audit(1753492664.227:286): avc: denied { create } for pid=6723 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 120.373854][ T30] audit: type=1400 audit(1753492664.227:287): avc: denied { ioctl } for pid=6723 comm="syz.3.182" path="socket:[9882]" dev="sockfs" ino=9882 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 120.374316][ T30] audit: type=1400 audit(1753492664.227:288): avc: denied { write } for pid=6723 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.599289][ T30] audit: type=1400 audit(1753492664.617:289): avc: denied { read write } for pid=6726 comm="syz.3.183" name="dlm-monitor" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.599333][ T30] audit: type=1400 audit(1753492664.617:290): avc: denied { open } for pid=6726 comm="syz.3.183" path="/dev/dlm-monitor" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.034281][ T30] audit: type=1400 audit(1753492665.887:291): avc: denied { ioctl } for pid=6732 comm="syz.4.184" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.270391][ T5956] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 122.423339][ T5956] usb 5-1: no configurations [ 122.423417][ T5956] usb 5-1: can't read configurations, error -22 [ 122.582804][ T5956] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 123.190005][ T5956] usb 5-1: no configurations [ 123.190024][ T5956] usb 5-1: can't read configurations, error -22 [ 123.199180][ T5956] usb usb5-port1: attempt power cycle [ 123.540229][ T5956] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 124.214618][ T6754] geneve2: entered promiscuous mode [ 124.214648][ T6754] geneve2: entered allmulticast mode [ 124.279686][ T6756] ======================================================= [ 124.279686][ T6756] WARNING: The mand mount option has been deprecated and [ 124.279686][ T6756] and is ignored by this kernel. Remove the mand [ 124.279686][ T6756] option from the mount to silence this warning. [ 124.279686][ T6756] ======================================================= [ 124.474665][ T5956] usb 5-1: no configurations [ 124.532506][ T6740] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 124.543553][ T5956] usb 5-1: can't read configurations, error -22 [ 124.667893][ T6750] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 124.773228][ T6759] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[6759] [ 124.824195][ T5956] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 124.862711][ T5956] usb 5-1: no configurations [ 124.869804][ T6768] netlink: 'syz.0.193': attribute type 4 has an invalid length. [ 124.870077][ T5956] usb 5-1: can't read configurations, error -22 [ 124.892917][ T6768] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.193'. [ 124.897474][ T5956] usb usb5-port1: unable to enumerate USB device [ 125.207953][ T6775] sd 0:0:1:0: PR command failed: 1026 [ 125.213544][ T6775] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 125.220416][ T6775] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 126.349334][ T30] audit: type=1400 audit(1753492670.147:292): avc: denied { create } for pid=6783 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 126.368648][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.411214][ T6797] Bluetooth: MGMT ver 1.23 [ 126.869160][ T6795] vivid-000: kernel_thread() failed [ 127.613670][ T6786] sctp: failed to load transform for md5: -4 [ 127.779958][ T30] audit: type=1400 audit(1753492671.627:293): avc: denied { read write } for pid=6804 comm="syz.2.203" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 127.804024][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.078629][ T30] audit: type=1400 audit(1753492671.627:294): avc: denied { open } for pid=6804 comm="syz.2.203" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 128.103645][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.116731][ T30] audit: type=1400 audit(1753492671.627:295): avc: denied { mount } for pid=6804 comm="syz.2.203" name="/" dev="ramfs" ino=10015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 128.199177][ T30] audit: type=1400 audit(1753492671.917:296): avc: denied { create } for pid=6815 comm="syz.4.205" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 128.219703][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.234036][ T30] audit: type=1400 audit(1753492671.917:297): avc: denied { unlink } for pid=6815 comm="syz.4.205" name="file0" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 128.600211][ T5956] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 128.800593][ T6828] sd 0:0:1:0: PR command failed: 1026 [ 128.806172][ T6828] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 128.813055][ T6828] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 129.160394][ T5956] usb 5-1: no configurations [ 129.165457][ T5956] usb 5-1: can't read configurations, error -22 [ 129.400096][ T5956] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 129.585320][ T5956] usb 5-1: no configurations [ 129.607075][ T5956] usb 5-1: can't read configurations, error -22 [ 129.620502][ T5956] usb usb5-port1: attempt power cycle [ 129.659989][ T5837] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 129.718706][ T30] audit: type=1400 audit(1753492673.567:298): avc: denied { read } for pid=6835 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.899950][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 129.907069][ T5837] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 129.921583][ T5837] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 129.931010][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 129.970735][ T5837] usb 4-1: Product: syz [ 130.437897][ T5837] usb 4-1: Manufacturer: syz [ 130.476302][ T5837] usb 4-1: SerialNumber: syz [ 130.489928][ T5956] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 130.513553][ T5837] usb 4-1: config 0 descriptor?? [ 130.531042][ T5956] usb 5-1: no configurations [ 130.535670][ T5956] usb 5-1: can't read configurations, error -22 [ 130.558369][ T6831] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 130.669971][ T5956] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 130.827032][ T5837] usb 4-1: USB disconnect, device number 9 [ 130.838054][ T30] audit: type=1400 audit(1753492674.687:299): avc: denied { getopt } for pid=6848 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.841212][ T5956] usb 5-1: no configurations [ 131.458691][ T30] audit: type=1326 audit(1753492675.307:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.3.209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f689b38e9a9 code=0x0 [ 131.542864][ T5956] usb 5-1: can't read configurations, error -22 [ 131.549712][ T5956] usb usb5-port1: unable to enumerate USB device [ 131.630216][ T5906] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 131.832077][ T5906] usb 3-1: No LPM exit latency info found, disabling LPM. [ 131.833376][ T5906] usb 3-1: config 1 has an invalid descriptor of length 172, skipping remainder of the config [ 131.853711][ T5906] usb 3-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 131.853730][ T5906] usb 3-1: config 1 interface 0 has no altsetting 0 [ 132.335037][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.335146][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.352589][ T30] audit: type=1400 audit(1753492675.777:301): avc: denied { read write } for pid=6856 comm="syz.1.218" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 132.352620][ T30] audit: type=1400 audit(1753492675.777:302): avc: denied { open } for pid=6856 comm="syz.1.218" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 132.780098][ T5883] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 132.861682][ T30] audit: type=1400 audit(1753492676.707:303): avc: denied { write } for pid=6865 comm="syz.4.222" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.081855][ T5883] usb 1-1: not running at top speed; connect to a high speed hub [ 133.189238][ T5883] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 133.425097][ T5883] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 133.450022][ T5883] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 133.506673][ T5883] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.551493][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.561070][ T5883] usb 1-1: Product: Ⰺ [ 133.565975][ T5883] usb 1-1: Manufacturer: 癱犗礊䨖鹛］㭭棉誸ਸﱦ꒬푉䚱㛳㦓햕抾礆΢階䦐꾽膤㷥뒬昱♈劥 [ 133.586460][ T5883] usb 1-1: SerialNumber: ࡡ [ 133.606611][ T6862] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.757323][ T5906] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.813101][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.855764][ T5906] usb 3-1: can't set config #1, error -71 [ 133.876194][ T5906] usb 3-1: USB disconnect, device number 11 [ 133.957688][ T5883] cdc_ncm 1-1:1.0: bind() failure [ 133.990990][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.224'. [ 134.014222][ T5883] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 134.086207][ T5883] cdc_ncm 1-1:1.1: bind() failure [ 134.130476][ T5883] usb 1-1: USB disconnect, device number 14 [ 134.162322][ T5837] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 134.370034][ T5837] usb 4-1: Using ep0 maxpacket: 16 [ 134.377376][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.391217][ T5837] usb 4-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=7f.c5 [ 134.410005][ T5837] usb 4-1: New USB device strings: Mfr=242, Product=2, SerialNumber=3 [ 134.418362][ T5837] usb 4-1: Product: syz [ 134.423059][ T5837] usb 4-1: Manufacturer: syz [ 134.427630][ T5837] usb 4-1: SerialNumber: syz [ 134.452925][ T5837] usb 4-1: config 0 descriptor?? [ 134.472886][ T5837] usb 4-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 134.510923][ T5837] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 134.531627][ T5837] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 134.539359][ T5837] usb 4-1: media controller created [ 134.569404][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.594425][ T5837] usb 4-1: selecting invalid altsetting 2 [ 134.600363][ T5837] set interface failed [ 134.600681][ T5837] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 134.651030][ T5837] error writing reg: 0xff, val: 0x00 [ 134.690112][ T30] audit: type=1400 audit(1753492678.527:304): avc: denied { create } for pid=6876 comm="syz.3.223" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 134.692053][ T5837] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 134.696118][ T30] audit: type=1400 audit(1753492678.527:305): avc: denied { read write } for pid=6876 comm="syz.3.223" name="file1" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 134.696161][ T30] audit: type=1400 audit(1753492678.527:306): avc: denied { open } for pid=6876 comm="syz.3.223" path="/55/file1" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 134.773387][ T5964] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 134.940417][ T5964] usb 3-1: no configurations [ 134.945170][ T5964] usb 3-1: can't read configurations, error -22 [ 135.844457][ T5964] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 136.030420][ T5964] usb 3-1: no configurations [ 136.035073][ T5964] usb 3-1: can't read configurations, error -22 [ 136.041796][ T5964] usb usb3-port1: attempt power cycle [ 136.061881][ T5906] usb 4-1: USB disconnect, device number 10 [ 136.800029][ T5964] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 136.836522][ T5964] usb 3-1: no configurations [ 136.874254][ T5964] usb 3-1: can't read configurations, error -22 [ 136.881492][ T5958] Bluetooth: (null): Invalid header checksum [ 136.887539][ T5958] Bluetooth: (null): Invalid header checksum [ 136.930810][ T30] audit: type=1400 audit(1753492680.777:307): avc: denied { unlink } for pid=5825 comm="syz-executor" name="file1" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 137.004421][ T30] audit: type=1400 audit(1753492680.777:308): avc: denied { ioctl } for pid=6910 comm="syz.1.232" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 137.021876][ T5964] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 137.106069][ T30] audit: type=1400 audit(1753492680.957:309): avc: denied { mounton } for pid=6914 comm="syz.4.234" path="/42/file0" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 137.140998][ T5964] usb 3-1: no configurations [ 137.145629][ T5964] usb 3-1: can't read configurations, error -22 [ 137.180720][ T5964] usb usb3-port1: unable to enumerate USB device [ 137.182885][ T6918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'. [ 138.229355][ T30] audit: type=1400 audit(1753492681.727:310): avc: denied { firmware_load } for pid=6923 comm="syz.4.237" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 138.368336][ T6928] syz.4.237 (6928) used greatest stack depth: 19304 bytes left [ 139.697570][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 141.342827][ T30] audit: type=1400 audit(1753492685.137:311): avc: denied { create } for pid=6955 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 141.688422][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.248'. [ 141.708916][ T30] audit: type=1400 audit(1753492685.137:312): avc: denied { read write } for pid=6955 comm="syz.1.246" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 141.744916][ T30] audit: type=1400 audit(1753492685.137:313): avc: denied { open } for pid=6955 comm="syz.1.246" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 141.820583][ T30] audit: type=1400 audit(1753492685.527:314): avc: denied { connect } for pid=6955 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 141.843588][ T30] audit: type=1400 audit(1753492685.667:315): avc: denied { ioctl } for pid=6955 comm="syz.1.246" path="socket:[11510]" dev="sockfs" ino=11510 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 141.941184][ T5883] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 142.912840][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 142.930797][ T5883] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 142.961756][ T5883] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 143.001991][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.088892][ T5883] usb 4-1: Product: syz [ 143.101199][ T5883] usb 4-1: Manufacturer: syz [ 143.109198][ T5883] usb 4-1: SerialNumber: syz [ 144.017948][ T5883] pn533_usb 4-1:5.0: NFC: Could not find bulk-in or bulk-out endpoint [ 144.643271][ T5883] usb 4-1: USB disconnect, device number 11 [ 148.140108][ T5883] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 148.148078][ T973] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 148.225235][ T30] audit: type=1400 audit(1753492692.077:316): avc: denied { ioctl } for pid=7051 comm="syz.1.271" path="/dev/input/mouse0" dev="devtmpfs" ino=981 ioctlcmd=0x641b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 148.310289][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 148.330235][ T973] usb 5-1: Using ep0 maxpacket: 8 [ 148.336677][ T973] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 148.794372][ T973] usb 5-1: config 0 has no interface number 1 [ 148.800993][ T973] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 148.852811][ T973] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 148.866951][ T973] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 148.878649][ T973] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 148.889024][ T973] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.902226][ T973] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.915203][ T5883] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 148.929465][ T5883] usb 3-1: config 0 has no interface number 0 [ 148.945005][ T5883] usb 3-1: config 0 interface 196 has no altsetting 0 [ 148.969474][ T5883] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 148.982934][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 148.993932][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.012951][ T5883] usb 3-1: Product: syz [ 149.018549][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 149.040249][ T5883] usb 3-1: Manufacturer: syz [ 149.044972][ T5883] usb 3-1: SerialNumber: syz [ 149.059664][ T30] audit: type=1400 audit(1753492692.867:317): avc: denied { append } for pid=7062 comm="syz.1.274" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 149.061623][ T5883] usb 3-1: config 0 descriptor?? [ 149.108388][ T973] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 149.169417][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.189728][ T30] audit: type=1400 audit(1753492692.937:318): avc: denied { read } for pid=7062 comm="syz.1.274" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 149.202456][ T973] usb 5-1: Product: syz [ 149.251115][ T973] usb 5-1: Manufacturer: syz [ 149.277817][ T973] usb 5-1: SerialNumber: syz [ 149.307348][ T30] audit: type=1400 audit(1753492692.937:319): avc: denied { open } for pid=7062 comm="syz.1.274" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 149.328145][ T973] usb 5-1: config 0 descriptor?? [ 149.357196][ T5883] ipheth 3-1:0.196: Unable to find endpoints [ 149.369476][ T7043] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 149.375189][ T5883] usb 3-1: USB disconnect, device number 16 [ 149.398348][ T973] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.425410][ T973] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.535033][ T30] audit: type=1400 audit(1753492693.007:320): avc: denied { create } for pid=7053 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.690656][ T30] audit: type=1400 audit(1753492693.007:321): avc: denied { bind } for pid=7053 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.324847][ T7080] sd 0:0:1:0: PR command failed: 1026 [ 150.330468][ T7080] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 150.337307][ T7080] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 150.926556][ T30] audit: type=1400 audit(1753492694.777:322): avc: denied { write } for pid=7086 comm="syz.3.280" path="socket:[11685]" dev="sockfs" ino=11685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.361431][ T30] audit: type=1400 audit(1753492695.207:323): avc: denied { create } for pid=7086 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 152.249341][ T7125] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 152.614175][ T7128] sd 0:0:1:0: PR command failed: 1026 [ 152.619726][ T7128] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 152.626627][ T7128] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 152.880878][ T5906] usb 5-1: USB disconnect, device number 15 [ 152.930863][ T7131] capability: warning: `syz.4.289' uses deprecated v2 capabilities in a way that may be insecure [ 152.968364][ T30] audit: type=1400 audit(1753492696.817:324): avc: denied { write } for pid=7130 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 152.988472][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.243308][ T7137] FAULT_INJECTION: forcing a failure. [ 154.243308][ T7137] name failslab, interval 1, probability 0, space 0, times 0 [ 154.368932][ T7137] CPU: 0 UID: 0 PID: 7137 Comm: syz.0.292 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 154.368961][ T7137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.368971][ T7137] Call Trace: [ 154.368977][ T7137] [ 154.368984][ T7137] dump_stack_lvl+0x16c/0x1f0 [ 154.369017][ T7137] should_fail_ex+0x512/0x640 [ 154.369044][ T7137] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 154.369076][ T7137] should_failslab+0xc2/0x120 [ 154.369093][ T7137] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 154.369117][ T7137] ? do_raw_spin_lock+0x12c/0x2b0 [ 154.369135][ T7137] ? dup_fd+0x4e/0xb90 [ 154.369150][ T7137] ? find_held_lock+0x2b/0x80 [ 154.369174][ T7137] dup_fd+0x4e/0xb90 [ 154.369190][ T7137] ? do_raw_spin_unlock+0x172/0x230 [ 154.369210][ T7137] ? _raw_spin_unlock+0x28/0x50 [ 154.369233][ T7137] ? copy_fs_struct+0x2a0/0x340 [ 154.369256][ T7137] ksys_unshare+0x831/0xa40 [ 154.369282][ T7137] ? __pfx_ksys_unshare+0x10/0x10 [ 154.369305][ T7137] ? ksys_write+0x1ac/0x250 [ 154.369337][ T7137] __x64_sys_unshare+0x31/0x40 [ 154.369361][ T7137] do_syscall_64+0xcd/0x4c0 [ 154.369380][ T7137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.369397][ T7137] RIP: 0033:0x7fc29ad8e9a9 [ 154.369410][ T7137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.369426][ T7137] RSP: 002b:00007fc29bc1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 154.369444][ T7137] RAX: ffffffffffffffda RBX: 00007fc29afb5fa0 RCX: 00007fc29ad8e9a9 [ 154.369455][ T7137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 154.369465][ T7137] RBP: 00007fc29bc1f090 R08: 0000000000000000 R09: 0000000000000000 [ 154.369475][ T7137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.369484][ T7137] R13: 0000000000000000 R14: 00007fc29afb5fa0 R15: 00007ffcb7463428 [ 154.369508][ T7137] [ 154.559834][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.570200][ T5906] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 154.799307][ T7145] kvm: vcpu 0: requested 3584 ns lapic timer period limited to 200000 ns [ 154.999980][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 155.198818][ T5906] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 155.207037][ T5906] usb 5-1: config 0 has no interface number 0 [ 155.220877][ T5906] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 155.236889][ T30] audit: type=1400 audit(1753492698.847:325): avc: denied { remount } for pid=7143 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 155.270046][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.290646][ T5906] usb 5-1: Product: syz [ 155.314976][ T5906] usb 5-1: Manufacturer: syz [ 155.320738][ T30] audit: type=1400 audit(1753492698.847:326): avc: denied { read } for pid=7143 comm="syz.0.293" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 155.343957][ T5906] usb 5-1: SerialNumber: syz [ 155.372264][ T5906] usb 5-1: config 0 descriptor?? [ 155.403094][ T30] audit: type=1400 audit(1753492698.847:327): avc: denied { open } for pid=7143 comm="syz.0.293" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 155.565044][ T5906] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 155.695163][ T30] audit: type=1400 audit(1753492699.547:328): avc: denied { load_policy } for pid=7154 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 156.968855][ T5906] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 156.982744][ T5906] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 157.633039][ T5151] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 157.642569][ T30] audit: type=1400 audit(1753492701.487:329): avc: denied { getopt } for pid=7164 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 157.644383][ T7165] usb usb8: usbfs: process 7165 (syz.1.297) did not claim interface 0 before use [ 157.695237][ T30] audit: type=1400 audit(1753492701.497:330): avc: denied { write } for pid=7164 comm="syz.1.297" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 158.483098][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 158.502838][ T915] usb 5-1: USB disconnect, device number 16 [ 158.546505][ T915] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 158.612410][ T915] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 158.649649][ T915] quatech2 5-1:0.51: device disconnected [ 159.982481][ T915] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 160.542908][ T915] usb 5-1: Using ep0 maxpacket: 32 [ 160.574924][ T915] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 160.619645][ T915] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 161.227877][ T7194] sd 0:0:1:0: PR command failed: 1026 [ 161.233513][ T7194] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 161.240357][ T7194] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 161.627656][ T915] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 161.635945][ T915] usb 5-1: Product: syz [ 161.640199][ T915] usb 5-1: Manufacturer: syz [ 161.644830][ T915] usb 5-1: SerialNumber: syz [ 161.683578][ T915] usb 5-1: config 0 descriptor?? [ 161.734724][ T915] usb 5-1: can't set config #0, error -71 [ 161.763487][ T915] usb 5-1: USB disconnect, device number 17 [ 164.593637][ T7155] syz.0.296: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 164.611515][ T1812] Bluetooth: (null): Invalid header checksum [ 164.617547][ T1812] Bluetooth: (null): Invalid header checksum [ 164.631561][ T7155] CPU: 0 UID: 0 PID: 7155 Comm: syz.0.296 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 164.631577][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.631583][ T7155] Call Trace: [ 164.631586][ T7155] [ 164.631590][ T7155] dump_stack_lvl+0x16c/0x1f0 [ 164.631611][ T7155] warn_alloc+0x248/0x3a0 [ 164.631627][ T7155] ? __pfx_warn_alloc+0x10/0x10 [ 164.631648][ T7155] ? sel_write_load+0x2ac/0x1bd0 [ 164.631667][ T7155] ? __vmalloc_node_noprof+0xad/0xf0 [ 164.631682][ T7155] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 164.631700][ T7155] ? sel_write_load+0x2ac/0x1bd0 [ 164.631717][ T7155] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 164.631736][ T7155] ? sel_write_load+0x2ac/0x1bd0 [ 164.631748][ T7155] __vmalloc_node_noprof+0xad/0xf0 [ 164.631761][ T7155] ? sel_write_load+0x2ac/0x1bd0 [ 164.631776][ T7155] __vmalloc_node_range_noprof+0xb73/0x14b0 [ 164.631788][ T7155] ? slow_avc_audit+0x18b/0x210 [ 164.631801][ T7155] ? __pfx_slow_avc_audit+0x10/0x10 [ 164.631815][ T7155] ? sel_write_load+0x2ac/0x1bd0 [ 164.631831][ T7155] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 164.631845][ T7155] ? avc_has_perm+0x196/0x1c0 [ 164.631858][ T7155] ? __pfx_avc_has_perm+0x10/0x10 [ 164.631871][ T7155] ? sel_write_load+0x2ac/0x1bd0 [ 164.631883][ T7155] __vmalloc_node_noprof+0xad/0xf0 [ 164.631896][ T7155] ? sel_write_load+0x2ac/0x1bd0 [ 164.631910][ T7155] sel_write_load+0x2ac/0x1bd0 [ 164.631929][ T7155] ? irqentry_exit+0x3b/0x90 [ 164.631938][ T7155] ? lockdep_hardirqs_on+0x7c/0x110 [ 164.631953][ T7155] ? __pfx_sel_write_load+0x10/0x10 [ 164.631971][ T7155] ? lock_acquire+0x62/0x350 [ 164.631986][ T7155] ? __pfx_sel_write_load+0x10/0x10 [ 164.631999][ T7155] vfs_write+0x2a0/0x1150 [ 164.632016][ T7155] ? __pfx___mutex_lock+0x10/0x10 [ 164.632026][ T7155] ? __pfx_vfs_write+0x10/0x10 [ 164.632044][ T7155] ? __fget_files+0x20e/0x3c0 [ 164.632058][ T7155] ksys_write+0x12a/0x250 [ 164.632072][ T7155] ? __pfx_ksys_write+0x10/0x10 [ 164.632091][ T7155] do_syscall_64+0xcd/0x4c0 [ 164.632102][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.632112][ T7155] RIP: 0033:0x7fc29ad8e9a9 [ 164.632121][ T7155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.632131][ T7155] RSP: 002b:00007fc29bc1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.632141][ T7155] RAX: ffffffffffffffda RBX: 00007fc29afb5fa0 RCX: 00007fc29ad8e9a9 [ 164.632147][ T7155] RDX: 00000000fffffd97 RSI: 0000200000000200 RDI: 000000000000000d [ 164.632153][ T7155] RBP: 00007fc29ae10d69 R08: 0000000000000000 R09: 0000000000000000 [ 164.632159][ T7155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.632167][ T7155] R13: 0000000000000000 R14: 00007fc29afb5fa0 R15: 00007ffcb7463428 [ 164.632181][ T7155] [ 164.632199][ T7155] Mem-Info: [ 164.876605][ T30] audit: type=1400 audit(1753492708.727:331): avc: denied { create } for pid=7242 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 164.941584][ T7155] active_anon:10723 inactive_anon:0 isolated_anon:0 [ 164.941584][ T7155] active_file:2961 inactive_file:40641 isolated_file:0 [ 164.941584][ T7155] unevictable:768 dirty:486 writeback:0 [ 164.941584][ T7155] slab_reclaimable:11369 slab_unreclaimable:98752 [ 164.941584][ T7155] mapped:31487 shmem:1367 pagetables:1556 [ 164.941584][ T7155] sec_pagetables:0 bounce:0 [ 164.941584][ T7155] kernel_misc_reclaimable:0 [ 164.941584][ T7155] free:1234731 free_pcp:28242 free_cma:0 [ 164.941622][ T7155] Node 0 active_anon:42892kB inactive_anon:0kB active_file:11844kB inactive_file:162360kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125948kB dirty:1944kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12464kB pagetables:6096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 164.941652][ T7155] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 164.941677][ T7155] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 164.941706][ T7155] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 164.941728][ T7155] Node 0 DMA32 free:1022568kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42892kB inactive_anon:0kB active_file:11844kB inactive_file:161012kB unevictable:1536kB writepending:1944kB present:3129332kB managed:2540180kB mlocked:0kB bounce:0kB free_pcp:94544kB local_pcp:58732kB free_cma:0kB [ 164.941758][ T7155] lowmem_reserve[]: 0 0 1 1 1 [ 164.941778][ T7155] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:1348kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 164.941806][ T7155] lowmem_reserve[]: 0 0 0 0 0 [ 164.941826][ T7155] Node 1 Normal free:3900980kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18400kB local_pcp:7552kB free_cma:0kB [ 164.941855][ T7155] lowmem_reserve[]: 0 0 0 0 0 [ 164.941875][ T7155] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 164.941963][ T7155] Node 0 DMA32: 0*4kB 1*8kB (M) 1*16kB (M) 2*32kB (UM) 1*64kB (U) 1*128kB (E) 1*256kB (U) 2*512kB (UM) 1*1024kB (M) 2*2048kB (ME) 248*4096kB (M) = 1022488kB [ 164.942051][ T7155] Node 0 Normal: 2*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 164.942113][ T7155] Node 1 Normal: 189*4kB (UE) 50*8kB (UME) 49*16kB (UME) 61*32kB (UME) 22*64kB (UME) 11*128kB (UME) 4*256kB (UM) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 949*4096kB (M) = 3900980kB [ 164.942205][ T7155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.942214][ T7155] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.942222][ T7155] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.942230][ T7155] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.942238][ T7155] 44965 total pagecache pages [ 164.942242][ T7155] 0 pages in swap cache [ 164.942246][ T7155] Free swap = 124996kB [ 164.942250][ T7155] Total swap = 124996kB [ 164.942255][ T7155] 2097051 pages RAM [ 164.942258][ T7155] 0 pages HighMem/MovableOnly [ 164.942262][ T7155] 430028 pages reserved [ 164.942266][ T7155] 0 pages cma reserved [ 164.995975][ T36] Bluetooth: (null): Invalid header checksum [ 164.996061][ T36] Bluetooth: (null): Invalid header checksum [ 165.021638][ T1812] Bluetooth: (null): Invalid header checksum [ 165.093273][ T1812] Bluetooth: (null): Invalid header checksum [ 165.118947][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.151966][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.220115][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.254379][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.290614][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.889953][ T30] audit: type=1400 audit(1753492709.447:332): avc: denied { connect } for pid=7242 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 166.869952][ T915] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 167.729940][ T915] usb 3-1: Using ep0 maxpacket: 16 [ 167.736784][ T915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.756029][ T915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.789911][ T915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 168.142525][ T915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 168.142812][ T30] audit: type=1400 audit(1753492711.717:333): avc: denied { mount } for pid=7271 comm="syz.3.323" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 168.272948][ T915] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.317744][ T915] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 168.333787][ T915] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 168.360131][ T915] usb 3-1: Manufacturer: syz [ 168.375466][ T915] usb 3-1: config 0 descriptor?? [ 168.829915][ T915] rc_core: IR keymap rc-hauppauge not found [ 168.849895][ T915] Registered IR keymap rc-empty [ 168.862636][ T915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 168.890253][ T915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 168.922136][ T7288] overlayfs: failed to resolve './file0': -2 [ 169.306398][ T30] audit: type=1400 audit(1753492712.847:334): avc: denied { write } for pid=7282 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.381965][ T915] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 169.417660][ T30] audit: type=1400 audit(1753492712.857:335): avc: denied { setopt } for pid=7282 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.551253][ T915] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 170.153627][ T30] audit: type=1400 audit(1753492712.857:336): avc: denied { read } for pid=7282 comm="syz.0.326" path="socket:[12341]" dev="sockfs" ino=12341 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.231327][ T915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.942446][ T915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.980746][ T915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 171.009554][ T30] audit: type=1400 audit(1753492714.857:337): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 171.035777][ T915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 171.211210][ T915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 171.251155][ T915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 171.430808][ T7317] sd 0:0:1:0: PR command failed: 1026 [ 171.436373][ T7317] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 171.443233][ T7317] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 171.740675][ T915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 172.505035][ T915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 172.566743][ T915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 172.643931][ T7327] IPv6: NLM_F_CREATE should be specified when creating new route [ 172.656945][ T7327] usb usb8: check_ctrlrecip: process 7327 (syz.4.335) requesting ep 01 but needs 81 [ 172.667122][ T7327] usb usb8: usbfs: process 7327 (syz.4.335) did not claim interface 0 before use [ 172.670299][ T915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 172.700671][ T30] audit: type=1400 audit(1753492716.547:338): avc: denied { create } for pid=7326 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 172.731301][ T1821] Bluetooth: (null): Invalid header checksum [ 172.748053][ T1821] Bluetooth: (null): Invalid header checksum [ 172.755341][ T30] audit: type=1400 audit(1753492716.587:339): avc: denied { getopt } for pid=7326 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 172.808328][ T915] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 172.837250][ T915] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 173.276142][ T30] audit: type=1400 audit(1753492716.907:340): avc: denied { write } for pid=7329 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 173.569647][ T915] usb 3-1: USB disconnect, device number 17 [ 173.773912][ T7343] loop5: detected capacity change from 0 to 1903 [ 173.816853][ T5964] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 173.827701][ T7343] loop5: detected capacity change from 1903 to 3767 [ 173.980383][ T5964] usb 4-1: Using ep0 maxpacket: 32 [ 173.996533][ T5964] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 174.005124][ T5840] Buffer I/O error on dev loop5, logical block 470, async page read [ 174.070708][ T5964] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 174.088171][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 174.113176][ T5964] usb 4-1: Product: syz [ 174.239969][ T5964] usb 4-1: Manufacturer: syz [ 174.255118][ T5964] usb 4-1: SerialNumber: syz [ 174.762730][ T5964] usb 4-1: config 0 descriptor?? [ 174.795397][ T7340] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.666397][ T5964] usb 4-1: USB disconnect, device number 12 [ 176.739959][ T30] audit: type=1326 audit(1753492720.587:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="syz.3.339" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f689b38e9a9 code=0x0 [ 177.907393][ T7374] sd 0:0:1:0: PR command failed: 1026 [ 177.913029][ T7374] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 177.919907][ T7374] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 178.804861][ T30] audit: type=1400 audit(1753492722.657:342): avc: denied { connect } for pid=7385 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 178.975417][ T30] audit: type=1400 audit(1753492722.827:343): avc: denied { read } for pid=7385 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 179.470662][ T30] audit: type=1400 audit(1753492723.317:344): avc: denied { write } for pid=7385 comm="syz.3.349" path="socket:[13357]" dev="sockfs" ino=13357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 179.641561][ T7108] Bluetooth: (null): Invalid header checksum [ 179.652195][ T7108] Bluetooth: (null): Invalid header checksum [ 180.193320][ T5883] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 180.385767][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.405369][ T5883] usb 4-1: config 0 has no interfaces? [ 180.421736][ T5883] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 180.441147][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 180.449790][ T7325] warn_alloc: 1 callbacks suppressed [ 180.449800][ T7325] syz.1.336: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 180.466750][ T5883] usb 4-1: Product: syz [ 180.486893][ T7325] ,cpuset=/,mems_allowed=0-1 [ 180.501010][ T7325] CPU: 1 UID: 0 PID: 7325 Comm: syz.1.336 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 180.501027][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.501034][ T7325] Call Trace: [ 180.501037][ T7325] [ 180.501042][ T7325] dump_stack_lvl+0x16c/0x1f0 [ 180.501063][ T7325] warn_alloc+0x248/0x3a0 [ 180.501080][ T7325] ? __pfx_warn_alloc+0x10/0x10 [ 180.501101][ T7325] ? sel_write_load+0x2ac/0x1bd0 [ 180.501116][ T7325] ? __vmalloc_node_noprof+0xad/0xf0 [ 180.501132][ T7325] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 180.501150][ T7325] ? sel_write_load+0x2ac/0x1bd0 [ 180.501167][ T7325] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 180.501185][ T7325] ? sel_write_load+0x2ac/0x1bd0 [ 180.501198][ T7325] __vmalloc_node_noprof+0xad/0xf0 [ 180.501211][ T7325] ? sel_write_load+0x2ac/0x1bd0 [ 180.501226][ T7325] __vmalloc_node_range_noprof+0xb73/0x14b0 [ 180.501244][ T7325] ? sel_write_load+0x2ac/0x1bd0 [ 180.501260][ T7325] ? avc_has_perm_noaudit+0x149/0x3b0 [ 180.501273][ T7325] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 180.501289][ T7325] ? __pfx_avc_has_perm+0x10/0x10 [ 180.501302][ T7325] ? sel_write_load+0x2ac/0x1bd0 [ 180.501315][ T7325] __vmalloc_node_noprof+0xad/0xf0 [ 180.501328][ T7325] ? sel_write_load+0x2ac/0x1bd0 [ 180.501342][ T7325] sel_write_load+0x2ac/0x1bd0 [ 180.501361][ T7325] ? __lock_acquire+0xb8a/0x1c90 [ 180.501372][ T7325] ? __pfx_sel_write_load+0x10/0x10 [ 180.501396][ T7325] ? __pfx_sel_write_load+0x10/0x10 [ 180.501409][ T7325] vfs_write+0x2a0/0x1150 [ 180.501427][ T7325] ? __pfx___mutex_lock+0x10/0x10 [ 180.501437][ T7325] ? __pfx_vfs_write+0x10/0x10 [ 180.501456][ T7325] ? __fget_files+0x20e/0x3c0 [ 180.501469][ T7325] ksys_write+0x12a/0x250 [ 180.501483][ T7325] ? __pfx_ksys_write+0x10/0x10 [ 180.501502][ T7325] do_syscall_64+0xcd/0x4c0 [ 180.501514][ T7325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.501524][ T7325] RIP: 0033:0x7f3498b8e9a9 [ 180.501534][ T7325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.501544][ T7325] RSP: 002b:00007f34969f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 180.501554][ T7325] RAX: ffffffffffffffda RBX: 00007f3498db5fa0 RCX: 00007f3498b8e9a9 [ 180.501560][ T7325] RDX: 00000000fffffd97 RSI: 0000200000000200 RDI: 000000000000000d [ 180.501566][ T7325] RBP: 00007f3498c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 180.501572][ T7325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.501578][ T7325] R13: 0000000000000000 R14: 00007f3498db5fa0 R15: 00007fff34a02008 [ 180.501591][ T7325] [ 180.501594][ T7325] Mem-Info: [ 180.517094][ T5883] usb 4-1: Manufacturer: syz [ 180.779493][ T5883] usb 4-1: config 0 descriptor?? [ 180.901074][ T7325] active_anon:13648 inactive_anon:0 isolated_anon:0 [ 180.901074][ T7325] active_file:2961 inactive_file:40647 isolated_file:0 [ 180.901074][ T7325] unevictable:768 dirty:530 writeback:0 [ 180.901074][ T7325] slab_reclaimable:11367 slab_unreclaimable:98465 [ 180.901074][ T7325] mapped:36402 shmem:4216 pagetables:1628 [ 180.901074][ T7325] sec_pagetables:0 bounce:0 [ 180.901074][ T7325] kernel_misc_reclaimable:0 [ 180.901074][ T7325] free:1238960 free_pcp:21771 free_cma:0 [ 181.127291][ T7412] sd 0:0:1:0: PR command failed: 1026 [ 181.132894][ T7412] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 181.139722][ T7412] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 181.436508][ T7325] Node 0 active_anon:43964kB inactive_anon:0kB active_file:11844kB inactive_file:162384kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134160kB dirty:2196kB writeback:0kB shmem:4808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12464kB pagetables:6580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 181.484354][ T7401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.515336][ T7325] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 181.547186][ T7401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.616513][ T7325] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 181.648271][ T7325] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 181.654194][ T7325] Node 0 DMA32 free:1039472kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43064kB inactive_anon:0kB active_file:11844kB inactive_file:161036kB unevictable:1536kB writepending:2196kB present:3129332kB managed:2540180kB mlocked:0kB bounce:0kB free_pcp:79800kB local_pcp:46576kB free_cma:0kB [ 181.710042][ T7325] lowmem_reserve[]: 0 0 1 1 1 [ 181.718922][ T7325] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:1348kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 181.951609][ T7325] lowmem_reserve[]: 0 0 0 0 0 [ 181.956325][ T7325] Node 1 Normal free:3900980kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18400kB local_pcp:7552kB free_cma:0kB [ 182.403070][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 182.422217][ T7325] lowmem_reserve[]: 0 0 0 0 0 [ 182.429109][ T7325] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 182.510891][ T5151] Bluetooth: hci1: unknown advertising packet type: 0x7f [ 182.510926][ T5151] Bluetooth: hci1: unknown advertising packet type: 0x40 [ 182.522358][ T5151] Bluetooth: hci1: Malformed LE Event: 0x02 [ 182.535571][ T5151] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 182.546820][ T30] audit: type=1400 audit(1753492726.337:345): avc: denied { create } for pid=7428 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.547205][ T7431] FAULT_INJECTION: forcing a failure. [ 182.547205][ T7431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.583099][ T7325] Node 0 DMA32: 2*4kB (UE) 1*8kB (U) 0*16kB 53*32kB (UM) 9*64kB (ME) 15*128kB (UME) 6*256kB (UME) 4*512kB (UME) 7*1024kB (UE) 2*2048kB (U) 249*4096kB (UM) = 1038960kB [ 182.602855][ T7325] Node 0 Normal: 2*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 182.675529][ T7325] Node 1 Normal: 189*4kB (UE) 50*8kB (UME) 49*16kB (UME) 61*32kB (UME) 22*64kB (UME) 11*128kB (UME) 4*256kB (UM) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 949*4096kB (M) = 3900980kB [ 182.702068][ T7431] CPU: 1 UID: 0 PID: 7431 Comm: syz.0.360 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 182.702088][ T7431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.702094][ T7431] Call Trace: [ 182.702098][ T7431] [ 182.702102][ T7431] dump_stack_lvl+0x16c/0x1f0 [ 182.702123][ T7431] should_fail_ex+0x512/0x640 [ 182.702141][ T7431] _copy_to_user+0x32/0xd0 [ 182.702153][ T7431] simple_read_from_buffer+0xcb/0x170 [ 182.702170][ T7431] proc_fail_nth_read+0x197/0x270 [ 182.702186][ T7431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.702201][ T7431] ? rw_verify_area+0xcf/0x680 [ 182.702214][ T7431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.702229][ T7431] vfs_read+0x1e1/0xc60 [ 182.702246][ T7431] ? __pfx___mutex_lock+0x10/0x10 [ 182.702256][ T7431] ? __pfx_vfs_read+0x10/0x10 [ 182.702274][ T7431] ? __fget_files+0x20e/0x3c0 [ 182.702287][ T7431] ksys_read+0x12a/0x250 [ 182.702301][ T7431] ? __pfx_ksys_read+0x10/0x10 [ 182.702319][ T7431] do_syscall_64+0xcd/0x4c0 [ 182.702330][ T7431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.702341][ T7431] RIP: 0033:0x7fc29ad8d3bc [ 182.702349][ T7431] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 182.702359][ T7431] RSP: 002b:00007fc29bbfe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.702369][ T7431] RAX: ffffffffffffffda RBX: 00007fc29afb6080 RCX: 00007fc29ad8d3bc [ 182.702376][ T7431] RDX: 000000000000000f RSI: 00007fc29bbfe0a0 RDI: 0000000000000005 [ 182.702381][ T7431] RBP: 00007fc29bbfe090 R08: 0000000000000000 R09: 0000000000000000 [ 182.702387][ T7431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.702393][ T7431] R13: 0000000000000001 R14: 00007fc29afb6080 R15: 00007ffcb7463428 [ 182.702405][ T7431] [ 182.989988][ T7325] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.028669][ T7325] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.129922][ T7325] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.139934][ T7325] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.607733][ T7325] 47834 total pagecache pages [ 183.634468][ T7325] 0 pages in swap cache [ 183.651334][ T7325] Free swap = 124996kB [ 183.663696][ T7325] Total swap = 124996kB [ 183.775705][ T7325] 2097051 pages RAM [ 183.779547][ T7325] 0 pages HighMem/MovableOnly [ 183.784931][ T7325] 430028 pages reserved [ 183.789224][ T7325] 0 pages cma reserved [ 185.565156][ T30] audit: type=1400 audit(1753492729.277:346): avc: denied { create } for pid=7445 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 185.822979][ T5883] usb 4-1: USB disconnect, device number 13 [ 185.847979][ T30] audit: type=1400 audit(1753492729.307:347): avc: denied { bind } for pid=7445 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 185.885711][ T30] audit: type=1400 audit(1753492729.317:348): avc: denied { listen } for pid=7445 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 185.912705][ T30] audit: type=1400 audit(1753492729.337:349): avc: denied { connect } for pid=7445 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 185.932387][ T30] audit: type=1400 audit(1753492729.387:350): avc: denied { accept } for pid=7445 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 185.981500][ T1080] Bluetooth: (null): Invalid header checksum [ 185.987605][ T1080] Bluetooth: (null): Invalid header checksum [ 186.086438][ T30] audit: type=1400 audit(1753492729.937:351): avc: denied { ioctl } for pid=7452 comm="syz.3.366" path="socket:[13539]" dev="sockfs" ino=13539 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 186.427463][ T7461] sd 0:0:1:0: PR command failed: 1026 [ 186.433086][ T7461] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 186.439971][ T7461] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 188.360481][ T5883] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 188.531572][ T5883] usb 4-1: device descriptor read/64, error -71 [ 189.246371][ T5883] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 189.262210][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.271558][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 189.279994][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 189.287320][ T5947] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 189.300484][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 189.308443][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 189.413906][ T30] audit: type=1400 audit(1753492733.267:352): avc: denied { mounton } for pid=7491 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 189.927982][ T5883] usb 4-1: device descriptor read/64, error -71 [ 190.012864][ T5947] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.047730][ T5947] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.062496][ T12] Bluetooth: (null): Invalid header checksum [ 190.071626][ T5883] usb usb4-port1: attempt power cycle [ 190.106666][ T12] Bluetooth: (null): Invalid header checksum [ 190.129903][ T5947] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 190.172336][ T5947] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.181504][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.189545][ T5947] usb 1-1: Product: syz [ 190.196160][ T5947] usb 1-1: Manufacturer: syz [ 190.420504][ T7486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.450446][ T7486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.464691][ T5883] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 190.571300][ T7491] chnl_net:caif_netlink_parms(): no params data found [ 191.152428][ T5883] usb 4-1: device descriptor read/8, error -71 [ 191.249887][ T30] audit: type=1400 audit(1753492735.097:353): avc: denied { override_creds } for pid=7484 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 191.265923][ T7513] binder: BINDER_SET_CONTEXT_MGR already set [ 191.293936][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.383'. [ 191.310517][ T7513] binder: 7512:7513 ioctl 4018620d 200000000040 returned -16 [ 191.373934][ T5839] Bluetooth: hci3: unknown advertising packet type: 0x7f [ 191.373996][ T5839] Bluetooth: hci3: unknown advertising packet type: 0x40 [ 191.381507][ T5839] Bluetooth: hci3: Malformed LE Event: 0x02 [ 191.395358][ T5839] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 191.405331][ T30] audit: type=1400 audit(1753492735.107:354): avc: denied { set_context_mgr } for pid=7512 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 191.431167][ T5839] Bluetooth: hci5: command tx timeout [ 191.438314][ T30] audit: type=1400 audit(1753492735.117:355): avc: denied { map } for pid=7512 comm="syz.2.382" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 191.469581][ T30] audit: type=1400 audit(1753492735.317:356): avc: denied { read } for pid=7512 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 191.520967][ T7519] FAULT_INJECTION: forcing a failure. [ 191.520967][ T7519] name failslab, interval 1, probability 0, space 0, times 0 [ 191.548080][ T7519] CPU: 1 UID: 0 PID: 7519 Comm: syz.2.382 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 191.548104][ T7519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 191.548113][ T7519] Call Trace: [ 191.548118][ T7519] [ 191.548124][ T7519] dump_stack_lvl+0x16c/0x1f0 [ 191.548153][ T7519] should_fail_ex+0x512/0x640 [ 191.548179][ T7519] ? fs_reclaim_acquire+0xae/0x150 [ 191.548200][ T7519] ? tomoyo_encode2+0x100/0x3e0 [ 191.548215][ T7519] should_failslab+0xc2/0x120 [ 191.548231][ T7519] __kmalloc_noprof+0xd2/0x510 [ 191.548256][ T7519] ? d_absolute_path+0x136/0x1a0 [ 191.548280][ T7519] tomoyo_encode2+0x100/0x3e0 [ 191.548300][ T7519] tomoyo_encode+0x29/0x50 [ 191.548315][ T7519] tomoyo_realpath_from_path+0x18f/0x6e0 [ 191.548338][ T7519] tomoyo_path_number_perm+0x245/0x580 [ 191.548360][ T7519] ? tomoyo_path_number_perm+0x237/0x580 [ 191.548387][ T7519] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 191.548413][ T7519] ? find_held_lock+0x2b/0x80 [ 191.548457][ T7519] ? find_held_lock+0x2b/0x80 [ 191.548477][ T7519] ? hook_file_ioctl_common+0x145/0x410 [ 191.548503][ T7519] ? __fget_files+0x20e/0x3c0 [ 191.548523][ T7519] security_file_ioctl+0x9b/0x240 [ 191.548541][ T7519] __x64_sys_ioctl+0xb7/0x210 [ 191.548566][ T7519] do_syscall_64+0xcd/0x4c0 [ 191.548590][ T7519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.548606][ T7519] RIP: 0033:0x7fb02598e9a9 [ 191.548620][ T7519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.548636][ T7519] RSP: 002b:00007fb0268ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.548653][ T7519] RAX: ffffffffffffffda RBX: 00007fb025bb6080 RCX: 00007fb02598e9a9 [ 191.548664][ T7519] RDX: 0000000000000000 RSI: 0000000040046208 RDI: 0000000000000005 [ 191.548674][ T7519] RBP: 00007fb0268ab090 R08: 0000000000000000 R09: 0000000000000000 [ 191.548684][ T7519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.548694][ T7519] R13: 0000000000000000 R14: 00007fb025bb6080 R15: 00007ffff69075d8 [ 191.548717][ T7519] [ 191.548733][ T7519] ERROR: Out of memory at tomoyo_realpath_from_path. [ 191.774965][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.850378][ T7516] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 191.986764][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.064159][ T7491] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.086224][ T7491] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.094186][ T5906] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 192.104318][ T7527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7527 comm=syz.2.385 [ 192.114654][ T7491] bridge_slave_0: entered allmulticast mode [ 192.145232][ T7491] bridge_slave_0: entered promiscuous mode [ 192.178130][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.292682][ T5906] usb 5-1: config 3 has an invalid interface number: 61 but max is 0 [ 192.300929][ T5906] usb 5-1: config 3 has no interface number 0 [ 192.320733][ T5906] usb 5-1: config 3 interface 61 has no altsetting 0 [ 192.370357][ T7491] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.377474][ T7491] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.406356][ T5906] usb 5-1: string descriptor 0 read error: -22 [ 192.484245][ T5906] usb 5-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 192.493955][ T5947] usb 1-1: USB disconnect, device number 15 [ 192.530122][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.538832][ T7491] bridge_slave_1: entered allmulticast mode [ 192.550704][ T7491] bridge_slave_1: entered promiscuous mode [ 192.569704][ T5906] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 192.744619][ T5906] snd-usb-audio 5-1:3.61: probe with driver snd-usb-audio failed with error -2 [ 192.776892][ T7522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.787495][ T7522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.178109][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.61/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.214495][ T5906] usb 5-1: USB disconnect, device number 18 [ 193.254808][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.328186][ T7536] geneve2: entered promiscuous mode [ 193.335097][ T7536] geneve2: entered allmulticast mode [ 193.512950][ T5839] Bluetooth: hci5: command tx timeout [ 193.558061][ T7491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.596383][ T7491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.786119][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.796984][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.165385][ T1080] Bluetooth: (null): Invalid header checksum [ 194.247164][ T1080] Bluetooth: (null): Invalid header checksum [ 194.275545][ T7491] team0: Port device team_slave_0 added [ 194.313688][ T7491] team0: Port device team_slave_1 added [ 194.324167][ T1080] Bluetooth: (null): Invalid header checksum [ 194.488479][ T7491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.503990][ T7491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.017385][ T7491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.124733][ T7491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.140660][ T7491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.240834][ T7491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.266706][ T30] audit: type=1400 audit(1753492739.097:357): avc: denied { bind } for pid=7560 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 195.846860][ T5947] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 196.124997][ T5883] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 196.255393][ T5839] Bluetooth: hci5: command tx timeout [ 196.410444][ T7567] usb usb8: usbfs: process 7567 (syz.4.395) did not claim interface 0 before use [ 196.420173][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 196.445558][ T5883] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 196.474927][ T36] bridge_slave_1: left allmulticast mode [ 196.482022][ T5883] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.492335][ T36] bridge_slave_1: left promiscuous mode [ 196.499517][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.514725][ T36] bridge_slave_0: left allmulticast mode [ 196.516533][ T5883] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.522976][ T36] bridge_slave_0: left promiscuous mode [ 196.702104][ T7571] sd 0:0:1:0: PR command failed: 1026 [ 196.707671][ T7571] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 196.714682][ T7571] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 196.916373][ T5883] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.926491][ T5883] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.927408][ T5947] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 196.940677][ T5883] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 196.963825][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.979035][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.979126][ T5947] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 197.000356][ T5947] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 197.009498][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.063977][ T7565] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 197.086492][ T5947] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.204821][ T5883] usb 3-1: GET_CAPABILITIES returned 0 [ 197.222608][ T5883] usbtmc 3-1:16.0: can't read capabilities [ 197.805362][ T5883] usb 3-1: USB disconnect, device number 18 [ 198.320052][ T5839] Bluetooth: hci5: command tx timeout [ 198.334613][ T5883] usb 1-1: USB disconnect, device number 16 [ 198.719706][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.865819][ T5883] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 198.876847][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.902283][ T36] bond0 (unregistering): Released all slaves [ 198.931964][ T7491] hsr_slave_0: entered promiscuous mode [ 198.963131][ T7491] hsr_slave_1: entered promiscuous mode [ 198.990413][ T7491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.019205][ T7491] Cannot create hsr debugfs directory [ 199.063345][ T7576] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 199.063670][ T5883] usb 1-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=eb.c6 [ 199.063693][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.073156][ T7576] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 199.100011][ T7576] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 199.164132][ T30] audit: type=1400 audit(1753492742.947:358): avc: denied { firmware_load } for pid=7573 comm="syz.4.396" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 199.229939][ T5883] usb 1-1: Product: syz [ 199.234131][ T5883] usb 1-1: Manufacturer: syz [ 199.259066][ T5883] usb 1-1: SerialNumber: syz [ 199.264435][ T7591] warn_alloc: 1 callbacks suppressed [ 199.264448][ T7591] syz.3.399: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 199.309987][ T7591] CPU: 0 UID: 0 PID: 7591 Comm: syz.3.399 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 199.310015][ T7591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 199.310024][ T7591] Call Trace: [ 199.310031][ T7591] [ 199.310037][ T7591] dump_stack_lvl+0x16c/0x1f0 [ 199.310072][ T7591] warn_alloc+0x248/0x3a0 [ 199.310100][ T7591] ? __pfx_warn_alloc+0x10/0x10 [ 199.310137][ T7591] ? fq_pie_init+0x55a/0x900 [ 199.310155][ T7591] ? __vmalloc_node_noprof+0xad/0xf0 [ 199.310182][ T7591] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 199.310214][ T7591] ? fq_pie_init+0x55a/0x900 [ 199.310238][ T7591] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 199.310262][ T7591] ? __alloc_pages_noprof+0xb/0x1b0 [ 199.310286][ T7591] ? ___kmalloc_large_node+0x84/0x1e0 [ 199.310313][ T7591] __kvmalloc_node_noprof+0x30a/0x620 [ 199.310337][ T7591] ? fq_pie_init+0x55a/0x900 [ 199.310354][ T7591] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 199.310379][ T7591] ? fq_pie_init+0x55a/0x900 [ 199.310397][ T7591] ? lockdep_init_map_type+0x5c/0x280 [ 199.310418][ T7591] ? fq_pie_init+0x55a/0x900 [ 199.310435][ T7591] fq_pie_init+0x55a/0x900 [ 199.310453][ T7591] ? __pfx_fq_pie_init+0x10/0x10 [ 199.310473][ T7591] qdisc_create+0x454/0xfc0 [ 199.310499][ T7591] tc_modify_qdisc+0x11d8/0x2170 [ 199.310529][ T7591] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 199.310551][ T7591] ? __mutex_lock+0x1ca/0xb90 [ 199.310588][ T7591] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 199.310618][ T7591] rtnetlink_rcv_msg+0x3c9/0xe90 [ 199.310640][ T7591] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 199.310665][ T7591] ? ref_tracker_free+0x37c/0x830 [ 199.310687][ T7591] netlink_rcv_skb+0x158/0x420 [ 199.310708][ T7591] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 199.310728][ T7591] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 199.310757][ T7591] ? netlink_deliver_tap+0x1ae/0xd30 [ 199.310782][ T7591] netlink_unicast+0x58a/0x850 [ 199.310806][ T7591] ? __pfx_netlink_unicast+0x10/0x10 [ 199.310834][ T7591] netlink_sendmsg+0x8d1/0xdd0 [ 199.310859][ T7591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.310889][ T7591] ____sys_sendmsg+0xa98/0xc70 [ 199.310913][ T7591] ? copy_msghdr_from_user+0x10a/0x160 [ 199.310930][ T7591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.310958][ T7591] ? __pfx_futex_wake_mark+0x10/0x10 [ 199.310979][ T7591] ___sys_sendmsg+0x134/0x1d0 [ 199.310998][ T7591] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.311012][ T7591] ? __lock_acquire+0x622/0x1c90 [ 199.311060][ T7591] __sys_sendmsg+0x16d/0x220 [ 199.311077][ T7591] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.311094][ T7591] ? __x64_sys_futex+0x1e0/0x4c0 [ 199.311134][ T7591] do_syscall_64+0xcd/0x4c0 [ 199.311155][ T7591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.311172][ T7591] RIP: 0033:0x7f689b38e9a9 [ 199.311186][ T7591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.311203][ T7591] RSP: 002b:00007f689c24b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.311222][ T7591] RAX: ffffffffffffffda RBX: 00007f689b5b6080 RCX: 00007f689b38e9a9 [ 199.311233][ T7591] RDX: 000000002000400c RSI: 0000200000000300 RDI: 0000000000000004 [ 199.311243][ T7591] RBP: 00007f689b410d69 R08: 0000000000000000 R09: 0000000000000000 [ 199.311253][ T7591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.311263][ T7591] R13: 0000000000000000 R14: 00007f689b5b6080 R15: 00007fff1e403ba8 [ 199.311287][ T7591] [ 199.311311][ T7591] Mem-Info: [ 199.743352][ T5883] pwc: Visionite VCS-UC300 USB webcam detected. [ 199.809951][ T5883] pwc: Failed to set LED on/off time (-71) [ 199.824388][ T5883] pwc: send_video_command error -71 [ 200.058119][ T7591] active_anon:14638 inactive_anon:0 isolated_anon:0 [ 200.058119][ T7591] active_file:7921 inactive_file:40656 isolated_file:0 [ 200.058119][ T7591] unevictable:768 dirty:460 writeback:0 [ 200.058119][ T7591] slab_reclaimable:11416 slab_unreclaimable:99240 [ 200.058119][ T7591] mapped:34728 shmem:4233 pagetables:1708 [ 200.058119][ T7591] sec_pagetables:0 bounce:0 [ 200.058119][ T7591] kernel_misc_reclaimable:0 [ 200.058119][ T7591] free:1302661 free_pcp:16158 free_cma:0 [ 200.112194][ T5883] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 200.141360][ T30] audit: type=1400 audit(1753492743.667:359): avc: denied { audit_read } for pid=7599 comm="syz.4.400" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 200.148872][ T5883] Philips webcam 1-1:5.0: probe with driver Philips webcam failed with error -71 [ 200.228989][ T7591] Node 0 active_anon:58852kB inactive_anon:0kB active_file:31684kB inactive_file:162420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133312kB dirty:1840kB writeback:0kB shmem:15396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12616kB pagetables:6704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 200.287405][ T7591] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 200.443694][ T5883] usb 1-1: USB disconnect, device number 17 [ 200.488655][ T7591] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.614645][ T7591] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 200.634751][ T7591] Node 0 DMA32 free:1296336kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50632kB inactive_anon:0kB active_file:31684kB inactive_file:161072kB unevictable:1536kB writepending:1860kB present:3129332kB managed:2540180kB mlocked:0kB bounce:0kB free_pcp:53920kB local_pcp:25288kB free_cma:0kB [ 200.985392][ T7591] lowmem_reserve[]: 0 0 1 1 1 [ 201.008511][ T7591] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:1348kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 201.068124][ T7591] lowmem_reserve[]: 0 0 0 0 0 [ 201.079961][ T7591] Node 1 Normal free:3900980kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18432kB local_pcp:7584kB free_cma:0kB [ 201.292446][ T7591] lowmem_reserve[]: 0 0 0 0 0 [ 201.377735][ T7591] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 201.410526][ T7591] Node 0 DMA32: 2088*4kB (UME) 1358*8kB (UM) 763*16kB (UM) 972*32kB (UME) 484*64kB (UME) 383*128kB (UME) 267*256kB (UME) 133*512kB (UME) 42*1024kB (UME) 4*2048kB (UM) 237*4096kB (M) = 1300928kB [ 201.482028][ T7591] Node 0 Normal: 2*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 201.496295][ T7591] Node 1 Normal: 189*4kB (UE) 50*8kB (UME) 49*16kB (UME) 61*32kB (UME) 22*64kB (UME) 11*128kB (UME) 4*256kB (UM) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 949*4096kB (M) = 3900980kB [ 201.519303][ T7591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.569627][ T7591] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.579124][ T30] audit: type=1400 audit(1753492745.427:360): avc: denied { create } for pid=7633 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 201.601785][ T7591] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.604279][ T30] audit: type=1400 audit(1753492745.457:361): avc: denied { write } for pid=7633 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 201.611670][ T7591] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.641469][ T7591] 49936 total pagecache pages [ 201.646143][ T7591] 0 pages in swap cache [ 201.650756][ T7591] Free swap = 124996kB [ 201.655361][ T7591] Total swap = 124996kB [ 201.660412][ T7591] 2097051 pages RAM [ 201.667639][ T7591] 0 pages HighMem/MovableOnly [ 201.673310][ T7591] 430028 pages reserved [ 201.677594][ T7591] 0 pages cma reserved [ 201.758092][ T7613] vlan2: entered promiscuous mode [ 201.767618][ T7613] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 201.788233][ T7613] vlan2: entered allmulticast mode [ 201.920269][ T7613] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 202.051175][ T30] audit: type=1400 audit(1753492745.857:362): avc: denied { ioctl } for pid=7635 comm="syz.0.408" path="socket:[13157]" dev="sockfs" ino=13157 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.238779][ T7650] tipc: Enabling of bearer rejected, failed to enable media [ 202.395108][ T7637] syzkaller0: entered promiscuous mode [ 202.410986][ T7637] syzkaller0: entered allmulticast mode [ 202.509508][ T7650] syzkaller0: entered promiscuous mode [ 202.516742][ T7650] syzkaller0: entered allmulticast mode [ 202.701159][ T5837] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 202.860741][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 202.873164][ T5837] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 202.886193][ T5837] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 202.896850][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 202.905525][ T5837] usb 4-1: Product: syz [ 202.909710][ T5837] usb 4-1: Manufacturer: syz [ 202.914864][ T5837] usb 4-1: SerialNumber: syz [ 202.921857][ T5837] usb 4-1: config 0 descriptor?? [ 202.932601][ T7660] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 203.170124][ T5947] usb 4-1: USB disconnect, device number 18 [ 205.014835][ T7677] sd 0:0:1:0: PR command failed: 1026 [ 205.020536][ T7677] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 205.027358][ T7677] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 205.485893][ T36] hsr_slave_0: left promiscuous mode [ 205.553428][ T36] hsr_slave_1: left promiscuous mode [ 205.598001][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.613706][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.635665][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.659034][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.699508][ T30] audit: type=1400 audit(1753492749.547:363): avc: denied { append } for pid=7681 comm="syz.4.418" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 205.730007][ T36] veth1_macvtap: left promiscuous mode [ 205.884118][ T36] veth0_macvtap: left promiscuous mode [ 206.391223][ T36] veth1_vlan: left promiscuous mode [ 206.447935][ T36] veth0_vlan: left promiscuous mode [ 206.611673][ T30] audit: type=1400 audit(1753492750.457:364): avc: denied { mounton } for pid=7697 comm="syz.3.420" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 206.732097][ T30] audit: type=1400 audit(1753492750.487:365): avc: denied { append } for pid=7697 comm="syz.3.420" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 210.436126][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 210.436412][ T30] audit: type=1400 audit(1753492754.287:366): avc: denied { nlmsg_write } for pid=7733 comm="syz.4.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 211.024751][ T36] team0 (unregistering): Port device team_slave_1 removed [ 211.057161][ T36] team0 (unregistering): Port device team_slave_0 removed [ 211.151342][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'. [ 212.973099][ T7756] pim6reg: entered allmulticast mode [ 213.210147][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.434'. [ 213.278913][ T7769] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.288025][ T7769] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.296797][ T7769] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.305486][ T7769] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.323210][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.434'. [ 213.410730][ T7778] netlink: 'syz.2.435': attribute type 4 has an invalid length. [ 213.418468][ T7778] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.435'. [ 213.545919][ T7491] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.608599][ T7491] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.659976][ T7491] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 213.677241][ T7786] FAULT_INJECTION: forcing a failure. [ 213.677241][ T7786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.713624][ T7491] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.721847][ T7786] CPU: 1 UID: 0 PID: 7786 Comm: syz.3.437 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 213.721872][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.721881][ T7786] Call Trace: [ 213.721886][ T7786] [ 213.721892][ T7786] dump_stack_lvl+0x16c/0x1f0 [ 213.721924][ T7786] should_fail_ex+0x512/0x640 [ 213.721954][ T7786] _copy_to_user+0x32/0xd0 [ 213.721973][ T7786] simple_read_from_buffer+0xcb/0x170 [ 213.722001][ T7786] proc_fail_nth_read+0x197/0x270 [ 213.722027][ T7786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.722054][ T7786] ? rw_verify_area+0xcf/0x680 [ 213.722075][ T7786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.722099][ T7786] vfs_read+0x1e1/0xc60 [ 213.722126][ T7786] ? __pfx___mutex_lock+0x10/0x10 [ 213.722144][ T7786] ? __pfx_vfs_read+0x10/0x10 [ 213.722174][ T7786] ? __fget_files+0x20e/0x3c0 [ 213.722197][ T7786] ksys_read+0x12a/0x250 [ 213.722221][ T7786] ? __pfx_ksys_read+0x10/0x10 [ 213.722245][ T7786] ? fput+0x70/0xf0 [ 213.722267][ T7786] do_syscall_64+0xcd/0x4c0 [ 213.722285][ T7786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.722303][ T7786] RIP: 0033:0x7f689b38d3bc [ 213.722317][ T7786] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 213.722340][ T7786] RSP: 002b:00007f689c26c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.722356][ T7786] RAX: ffffffffffffffda RBX: 00007f689b5b5fa0 RCX: 00007f689b38d3bc [ 213.722367][ T7786] RDX: 000000000000000f RSI: 00007f689c26c0a0 RDI: 0000000000000004 [ 213.722377][ T7786] RBP: 00007f689c26c090 R08: 0000000000000000 R09: 0000000000000000 [ 213.722387][ T7786] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 213.722396][ T7786] R13: 0000000000000000 R14: 00007f689b5b5fa0 R15: 00007fff1e403ba8 [ 213.722420][ T7786] [ 214.034885][ T7800] netlink: 'syz.0.438': attribute type 4 has an invalid length. [ 214.042742][ T7800] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.438'. [ 214.339253][ T7491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.468362][ T7491] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.685488][ T7822] random: crng reseeded on system resumption [ 214.699421][ T30] audit: type=1400 audit(1753492758.537:367): avc: denied { append } for pid=7820 comm="syz.0.442" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 214.734505][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.741667][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.988147][ T1812] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.995285][ T1812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.993956][ T7849] sd 0:0:1:0: PR command failed: 1026 [ 215.999668][ T7849] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 216.006710][ T7849] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 216.238096][ T7847] geneve2: entered promiscuous mode [ 216.243745][ T7847] geneve2: entered allmulticast mode [ 216.747118][ T7491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.771593][ T30] audit: type=1400 audit(1753492760.627:368): avc: denied { create } for pid=7856 comm="syz.0.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 216.844688][ T30] audit: type=1400 audit(1753492760.657:369): avc: denied { read write } for pid=7856 comm="syz.0.448" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 216.899297][ T30] audit: type=1400 audit(1753492760.657:370): avc: denied { open } for pid=7856 comm="syz.0.448" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 216.952405][ T30] audit: type=1400 audit(1753492760.667:371): avc: denied { ioctl } for pid=7856 comm="syz.0.448" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 216.980836][ T30] audit: type=1400 audit(1753492760.667:372): avc: denied { ioctl } for pid=7856 comm="syz.0.448" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 218.661820][ T7884] geneve2: entered promiscuous mode [ 218.667079][ T7884] geneve2: entered allmulticast mode [ 220.410406][ T7491] veth0_vlan: entered promiscuous mode [ 220.732151][ T7491] veth1_vlan: entered promiscuous mode [ 220.765389][ T7491] veth0_macvtap: entered promiscuous mode [ 220.774864][ T7491] veth1_macvtap: entered promiscuous mode [ 221.088871][ T7491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.099511][ T7491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.112054][ T7491] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.122396][ T7491] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.131719][ T7491] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.140626][ T7491] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.208813][ T7915] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.458'. [ 221.443944][ T7915] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 222.141888][ T7932] geneve2: entered promiscuous mode [ 222.148489][ T7932] geneve2: entered allmulticast mode [ 222.421556][ T1812] Bluetooth: (null): Invalid header checksum [ 222.427593][ T1812] Bluetooth: (null): Invalid header checksum [ 222.645384][ T7942] sd 0:0:1:0: PR command failed: 1026 [ 222.650988][ T7942] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 222.658066][ T7942] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 222.907224][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.933482][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.061567][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.091006][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.268005][ T30] audit: type=1400 audit(1753492767.107:373): avc: denied { mount } for pid=7491 comm="syz-executor" name="/" dev="gadgetfs" ino=6530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 226.118336][ T7974] geneve2: entered promiscuous mode [ 226.123620][ T7974] geneve2: entered allmulticast mode [ 227.235039][ T7982] tipc: Started in network mode [ 227.267540][ T7982] tipc: Node identity dec10c8cc662, cluster identity 4711 [ 227.290219][ T7982] tipc: Enabled bearer , priority 0 [ 227.298895][ T7982] syzkaller0: entered promiscuous mode [ 227.319959][ T7982] syzkaller0: entered allmulticast mode [ 227.330342][ T5883] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 227.801773][ T5883] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 227.824978][ T5883] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.135486][ T5883] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 228.168225][ T5883] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 228.193496][ T7981] tipc: Resetting bearer [ 228.205484][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 228.232275][ T30] audit: type=1400 audit(1753492772.087:374): avc: denied { map } for pid=8007 comm="syz.0.476" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 228.277164][ T5883] usb 5-1: Product: syz [ 228.400148][ T5883] usb 5-1: Manufacturer: syz [ 228.410822][ T7981] tipc: Disabling bearer [ 228.887669][ T5906] tipc: Node number set to 413338764 [ 229.314312][ T7983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.330313][ T7983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.180502][ T5986] kernel write not supported for file bpf-prog (pid: 5986 comm: kworker/1:7) [ 231.509778][ T30] audit: type=1400 audit(1753492774.907:375): avc: denied { setopt } for pid=8042 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 232.870245][ T5883] usb 5-1: USB disconnect, device number 19 [ 233.462664][ T5947] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 233.978904][ T5947] usb 6-1: Using ep0 maxpacket: 16 [ 234.012719][ T5947] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.041640][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.560189][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 234.575220][ T5947] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 234.585211][ T5947] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.621754][ T5947] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 234.681739][ T5947] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 234.794122][ T5947] usb 6-1: Manufacturer: syz [ 234.816128][ T5947] usb 6-1: config 0 descriptor?? [ 236.349897][ T5947] rc_core: IR keymap rc-hauppauge not found [ 236.355881][ T5947] Registered IR keymap rc-empty [ 236.813955][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.854385][ T30] audit: type=1400 audit(1753492780.707:376): avc: denied { getopt } for pid=8068 comm="syz.5.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 236.869993][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.961778][ T30] audit: type=1400 audit(1753492780.817:377): avc: denied { setopt } for pid=8121 comm="syz.2.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 237.041843][ T5947] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 237.062953][ T5947] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 237.106302][ T8127] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 237.113102][ T8127] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 237.121953][ T8127] vhci_hcd vhci_hcd.0: Device attached [ 237.180117][ T8131] qrtr: Invalid version 255 [ 237.538842][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 237.562705][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 237.590908][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 237.620232][ T5986] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 238.763240][ T8128] vhci_hcd: connection reset by peer [ 238.780468][ T13] vhci_hcd: stop threads [ 238.785299][ T30] audit: type=1400 audit(1753492782.367:378): avc: denied { open } for pid=8121 comm="syz.2.495" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 238.810572][ T13] vhci_hcd: release socket [ 238.833340][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 238.842553][ T13] vhci_hcd: disconnect device [ 238.880969][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 238.887208][ T30] audit: type=1400 audit(1753492782.387:379): avc: denied { ioctl } for pid=8121 comm="syz.2.495" path="/dev/ttyq9" dev="devtmpfs" ino=384 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 238.950076][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 238.971220][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 238.991723][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 239.130932][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 239.149607][ T30] audit: type=1400 audit(1753492782.837:380): avc: denied { ioctl } for pid=8138 comm="syz.0.497" path="socket:[16149]" dev="sockfs" ino=16149 ioctlcmd=0x4946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 239.202736][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 239.263820][ T5947] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 239.331495][ T5947] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 239.363635][ T5947] usb 6-1: USB disconnect, device number 2 [ 239.510034][ T5964] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 240.228513][ T5964] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 240.284413][ T5964] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.409471][ T5964] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 240.581525][ T5964] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 240.591106][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.306645][ T5964] usb 3-1: Product: syz [ 241.649997][ T5964] usb 3-1: Manufacturer: syz [ 241.930642][ T5906] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 242.095903][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 242.238758][ T5906] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 242.329157][ T5906] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 242.351155][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 242.359354][ T5906] usb 1-1: Product: syz [ 242.415552][ T5964] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 242.416807][ T5906] usb 1-1: Manufacturer: syz [ 242.451573][ T5906] usb 1-1: SerialNumber: syz [ 242.483563][ T5906] usb 1-1: config 0 descriptor?? [ 242.492076][ T5839] Bluetooth: hci2: unknown advertising packet type: 0x7f [ 242.492132][ T5839] Bluetooth: hci2: unknown advertising packet type: 0x40 [ 242.493643][ T8172] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 242.499351][ T5839] Bluetooth: hci2: Malformed LE Event: 0x02 [ 242.520247][ T5839] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 242.599896][ T5964] usb 6-1: device descriptor read/64, error -71 [ 242.777026][ T5986] vhci_hcd: vhci_device speed not set [ 243.266209][ T5964] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 243.399094][ T30] audit: type=1326 audit(1753492787.247:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.0.504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc29ad8e9a9 code=0x0 [ 243.432025][ T5964] usb 6-1: device descriptor read/64, error -71 [ 243.721007][ T5964] usb usb6-port1: attempt power cycle [ 243.734781][ T8205] sch_fq: defrate 4294967295 ignored. [ 244.139014][ T5947] usb 1-1: USB disconnect, device number 18 [ 244.384728][ T5964] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 244.400791][ T5897] usb 3-1: USB disconnect, device number 19 [ 244.419940][ T5986] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 244.444367][ T5964] usb 6-1: device descriptor read/8, error -71 [ 244.763974][ T5986] usb 5-1: Using ep0 maxpacket: 32 [ 244.915810][ T8232] sd 0:0:1:0: PR command failed: 1026 [ 244.921395][ T8232] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 244.928219][ T8232] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 245.134536][ T5964] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 245.199609][ T5986] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 245.206495][ T5964] usb 6-1: device descriptor read/8, error -71 [ 245.244701][ T5986] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 245.294853][ T5986] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 245.398260][ T5964] usb usb6-port1: unable to enumerate USB device [ 245.433089][ T5986] usb 5-1: Product: syz [ 245.437287][ T5986] usb 5-1: Manufacturer: syz [ 245.444482][ T5986] usb 5-1: SerialNumber: syz [ 245.451443][ T5986] usb 5-1: config 0 descriptor?? [ 245.457066][ T8208] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 245.596949][ T30] audit: type=1400 audit(1753492789.447:382): avc: denied { setopt } for pid=8242 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 246.113335][ T5964] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 246.278388][ T30] audit: type=1326 audit(1753492790.127:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.4.509" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f4218e9a9 code=0x0 [ 246.480452][ T5964] usb 6-1: Using ep0 maxpacket: 32 [ 246.493624][ T5964] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 246.516462][ T5964] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 246.531358][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 246.629486][ T8257] geneve2: entered promiscuous mode [ 246.634888][ T8257] geneve2: entered allmulticast mode [ 246.975496][ T5964] usb 6-1: Product: syz [ 246.979694][ T5964] usb 6-1: Manufacturer: syz [ 246.984346][ T5964] usb 6-1: SerialNumber: syz [ 246.999158][ T5964] usb 6-1: config 0 descriptor?? [ 247.012872][ T8237] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 247.027956][ T5947] usb 5-1: USB disconnect, device number 20 [ 247.036792][ T5964] chaoskey 6-1:0.0: Unable to register with hwrng [ 247.389667][ T30] audit: type=1326 audit(1753492791.237:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.5.512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e94b8e9a9 code=0x0 [ 247.539246][ T8275] geneve2: entered promiscuous mode [ 247.544643][ T8275] geneve2: entered allmulticast mode [ 248.650248][ T5883] usb 6-1: USB disconnect, device number 7 [ 254.098293][ T5883] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 254.144880][ T8309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 254.272571][ T5883] usb 6-1: device descriptor read/64, error -71 [ 254.282476][ T8334] netlink: 'syz.3.527': attribute type 4 has an invalid length. [ 254.332901][ T8334] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.527'. [ 254.699982][ T5883] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 255.774337][ T8351] geneve2: entered promiscuous mode [ 255.779625][ T8351] geneve2: entered allmulticast mode [ 255.948258][ T5883] usb 6-1: device descriptor read/64, error -71 [ 255.992557][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.998832][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.210857][ T5883] usb usb6-port1: attempt power cycle [ 262.184175][ T8403] xt_TPROXY: Can be used only with -p tcp or -p udp [ 263.104663][ T8412] sd 0:0:1:0: PR command failed: 1026 [ 263.110348][ T8412] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 263.117173][ T8412] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 263.829325][ T8423] xt_TPROXY: Can be used only with -p tcp or -p udp [ 267.929967][ T30] audit: type=1400 audit(1753492811.757:385): avc: denied { accept } for pid=8464 comm="syz.5.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 268.003197][ T30] audit: type=1400 audit(1753492811.757:386): avc: denied { bind } for pid=8464 comm="syz.5.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 268.024179][ T30] audit: type=1400 audit(1753492811.827:387): avc: denied { listen } for pid=8464 comm="syz.5.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 268.082574][ T973] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 268.258095][ T973] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.295033][ T973] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 268.328701][ T8484] netlink: 104 bytes leftover after parsing attributes in process `syz.3.557'. [ 268.330313][ T973] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 268.361502][ T30] audit: type=1400 audit(1753492812.217:388): avc: denied { write } for pid=8487 comm="syz.0.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 268.410889][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 268.422673][ T973] usb 3-1: SerialNumber: syz [ 268.435172][ T973] usb 3-1: bad CDC descriptors [ 268.450370][ T973] usb-storage 3-1:1.0: USB Mass Storage device detected [ 268.525752][ T30] audit: type=1400 audit(1753492812.357:389): avc: denied { write } for pid=8492 comm="syz.0.560" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 268.563474][ T973] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 268.632196][ T973] scsi host1: usb-storage 3-1:1.0 [ 268.779716][ T8508] input: syz1 as /devices/virtual/input/input11 [ 268.790609][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 268.905341][ T8510] netlink: 24 bytes leftover after parsing attributes in process `syz.3.563'. [ 268.949947][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 268.958194][ T10] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 268.967725][ T10] usb 1-1: config 0 has no interface number 0 [ 268.977751][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 268.987297][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.988176][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 268.995420][ T10] usb 1-1: Product: syz [ 268.995445][ T10] usb 1-1: Manufacturer: syz [ 268.995460][ T10] usb 1-1: SerialNumber: syz [ 268.998520][ T10] usb 1-1: config 0 descriptor?? [ 269.067467][ T10] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.69/input/input12 [ 269.256028][ T30] audit: type=1400 audit(1753492813.107:390): avc: denied { ioctl } for pid=8492 comm="syz.0.560" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 269.284545][ T5186] bcm5974 1-1:0.69: could not read from device [ 269.317628][ T5186] bcm5974 1-1:0.69: could not read from device [ 269.351634][ T5186] bcm5974 1-1:0.69: could not read from device [ 269.354901][ T10] usb 1-1: USB disconnect, device number 19 [ 269.382652][ T5186] bcm5974 1-1:0.69: could not read from device [ 270.205428][ T5906] usb 3-1: USB disconnect, device number 20 [ 270.380943][ T30] audit: type=1400 audit(1753492814.227:391): avc: denied { ioctl } for pid=8543 comm="syz.4.571" path="socket:[16855]" dev="sockfs" ino=16855 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 270.618851][ T30] audit: type=1400 audit(1753492814.437:392): avc: denied { write } for pid=8543 comm="syz.4.571" path="socket:[17743]" dev="sockfs" ino=17743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 271.003997][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 272.201386][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 272.211382][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 272.245879][ T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 272.732404][ T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 272.741043][ T10] usb 4-1: Product: syz [ 272.745279][ T10] usb 4-1: Manufacturer: syz [ 272.750272][ T10] usb 4-1: SerialNumber: syz [ 272.761855][ T10] usb 4-1: config 0 descriptor?? [ 272.772860][ T8547] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 273.209736][ T5906] usb 4-1: USB disconnect, device number 19 [ 273.432858][ T30] audit: type=1326 audit(1753492817.287:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8546 comm="syz.3.572" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f689b38e9a9 code=0x0 [ 275.609801][ T30] audit: type=1400 audit(1753492819.437:394): avc: denied { mount } for pid=8604 comm="syz.0.583" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 275.777492][ T8609] comedi comedi2: dt2814: I/O port conflict (0xb000,2) [ 276.025397][ T30] audit: type=1400 audit(1753492819.627:395): avc: denied { append } for pid=8604 comm="syz.0.583" name="comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.089980][ T5906] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 277.254319][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.270905][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.282733][ T5906] usb 6-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 277.293181][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.415645][ T5906] usb 6-1: config 0 descriptor?? [ 278.235146][ T5906] viewsonic 0003:0543:E621.0002: item fetching failed at offset 3/5 [ 278.260752][ T5906] viewsonic 0003:0543:E621.0002: probe with driver viewsonic failed with error -22 [ 278.484394][ T5986] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 278.524634][ T5906] usb 6-1: USB disconnect, device number 11 [ 279.032713][ T5986] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 279.053099][ T5986] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.092246][ T5986] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 279.154410][ T5986] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 279.228656][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 279.237102][ T5986] usb 3-1: Product: syz [ 279.242660][ T5986] usb 3-1: Manufacturer: syz [ 279.877560][ T8672] geneve2: entered promiscuous mode [ 279.882906][ T8672] geneve2: entered allmulticast mode [ 279.891898][ T8656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.036803][ T8656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.051451][ T5839] Bluetooth: hci2: unknown advertising packet type: 0x7f [ 281.051494][ T5839] Bluetooth: hci2: unknown advertising packet type: 0x40 [ 281.106715][ T5839] Bluetooth: hci2: Malformed LE Event: 0x02 [ 281.119983][ T5839] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 281.240276][ T973] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 281.556144][ T973] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 281.657276][ T973] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.713846][ T973] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 281.750272][ T973] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 281.761704][ T973] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 281.778420][ T973] usb 6-1: Product: syz [ 281.787888][ T973] usb 6-1: Manufacturer: syz [ 282.081674][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.134342][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.433782][ T5986] usb 3-1: USB disconnect, device number 21 [ 282.457134][ T5839] Bluetooth: hci5: unknown advertising packet type: 0x7f [ 282.457185][ T5839] Bluetooth: hci5: unknown advertising packet type: 0x40 [ 282.474191][ T5839] Bluetooth: hci5: Malformed LE Event: 0x02 [ 283.765267][ T30] audit: type=1400 audit(1753492827.617:396): avc: denied { setattr } for pid=8751 comm="chmod" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 284.530131][ T973] usb 6-1: USB disconnect, device number 12 [ 284.663575][ T8767] geneve2: entered promiscuous mode [ 284.668855][ T8767] geneve2: entered allmulticast mode [ 292.319896][ T5906] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 292.610947][ T5906] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 292.924054][ T5906] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.094500][ T5906] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 293.142425][ T5906] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 293.402532][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 293.410917][ T5906] usb 1-1: Product: syz [ 293.415699][ T5906] usb 1-1: Manufacturer: syz [ 294.373140][ T8882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.409996][ T8918] input: syz1 as /devices/virtual/input/input15 [ 294.425469][ T8882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.291150][ T5839] Bluetooth: hci3: unknown advertising packet type: 0x7f [ 295.291196][ T5839] Bluetooth: hci3: unknown advertising packet type: 0x40 [ 295.298329][ T5839] Bluetooth: hci3: Malformed LE Event: 0x02 [ 295.314596][ T5839] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 295.658258][ T8943] geneve2: entered promiscuous mode [ 295.663563][ T8943] geneve2: entered allmulticast mode [ 296.910258][ T5837] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 297.039943][ T5837] usb 3-1: device descriptor read/64, error -71 [ 297.616184][ T5837] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 298.019920][ T5837] usb 3-1: device descriptor read/64, error -71 [ 298.369446][ T5837] usb usb3-port1: attempt power cycle [ 298.562704][ T5964] usb 1-1: USB disconnect, device number 20 [ 308.442907][ T5897] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 308.617101][ T5897] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 308.808282][ T30] audit: type=1326 audit(1753492852.657:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.2.697" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb02598e9a9 code=0x0 [ 308.840102][ T5897] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.860110][ T5897] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 308.874549][ T5897] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 308.888681][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 308.912687][ T5897] usb 5-1: Product: syz [ 308.916851][ T5897] usb 5-1: Manufacturer: syz [ 309.039894][ T5837] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 309.174939][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.186425][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.204390][ T5837] usb 1-1: device descriptor read/64, error -71 [ 309.510303][ T5837] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 309.891751][ T5837] usb 1-1: device descriptor read/64, error -71 [ 309.959904][ T5839] Bluetooth: hci0: unknown advertising packet type: 0x7f [ 309.959949][ T5839] Bluetooth: hci0: unknown advertising packet type: 0x40 [ 309.967757][ T5839] Bluetooth: hci0: Malformed LE Event: 0x02 [ 309.980976][ T5839] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 310.022623][ T5837] usb usb1-port1: attempt power cycle [ 310.845567][ T5837] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 310.873850][ T5837] usb 1-1: device descriptor read/8, error -71 [ 311.189908][ T5837] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 311.233477][ T5837] usb 1-1: device descriptor read/8, error -71 [ 311.329122][ T9140] geneve2: entered promiscuous mode [ 311.335166][ T9140] geneve2: entered allmulticast mode [ 311.780188][ T5837] usb usb1-port1: unable to enumerate USB device [ 312.831025][ T5906] usb 5-1: USB disconnect, device number 21 [ 313.679952][ T5151] Bluetooth: hci5: command 0x0405 tx timeout [ 314.283839][ T973] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 314.503775][ T973] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 314.518141][ T973] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.753484][ T973] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 314.807894][ T973] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 314.819101][ T973] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 314.839430][ T973] usb 1-1: Product: syz [ 314.852047][ T973] usb 1-1: Manufacturer: syz [ 315.306950][ T9174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.348375][ T9174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.579919][ T973] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 315.583329][ T5839] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 315.719955][ T973] usb 4-1: device descriptor read/64, error -71 [ 316.543277][ T973] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 316.667824][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.675837][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.329920][ T973] usb 4-1: device descriptor read/64, error -71 [ 317.450467][ T973] usb usb4-port1: attempt power cycle [ 319.078485][ T5906] usb 1-1: USB disconnect, device number 25 [ 320.234354][ T9255] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.731' sets config #1 [ 321.481948][ T973] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 321.880011][ T973] usb 6-1: device descriptor read/64, error -71 [ 322.259901][ T973] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 322.270756][ T9283] sd 0:0:1:0: PR command failed: 1026 [ 322.276206][ T9283] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 322.282936][ T9283] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 322.550053][ T973] usb 6-1: device descriptor read/64, error -71 [ 322.550823][ T9295] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.743' sets config #1 [ 322.979374][ T973] usb usb6-port1: attempt power cycle [ 323.340140][ T973] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 323.392922][ T973] usb 6-1: device descriptor read/8, error -71 [ 324.377625][ T9312] geneve2: entered promiscuous mode [ 324.382895][ T9312] geneve2: entered allmulticast mode [ 327.743605][ T9359] sd 0:0:1:0: PR command failed: 1026 [ 327.749076][ T9359] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 327.756006][ T9359] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 328.250564][ T973] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 329.128637][ T973] usb 5-1: device descriptor read/64, error -71 [ 329.379926][ T973] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 330.513250][ T9384] input: syz1 as /devices/virtual/input/input23 [ 330.573912][ T973] usb 5-1: device descriptor read/64, error -71 [ 331.041268][ T973] usb usb5-port1: attempt power cycle [ 332.608505][ T5151] non-paged memory [ 332.613272][ T5151] list_del corruption, ffff888033c0f500->next is LIST_POISON1 (dead000000000100) [ 332.669852][ T5151] ------------[ cut here ]------------ [ 332.675349][ T5151] kernel BUG at lib/list_debug.c:56! [ 332.682417][ T5151] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 332.688849][ T5151] CPU: 1 UID: 0 PID: 5151 Comm: kworker/u9:1 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 332.700992][ T5151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.711039][ T5151] Workqueue: hci5 hci_conn_timeout [ 332.716147][ T5151] RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200 [ 332.723163][ T5151] Code: 48 c7 c7 20 78 15 8c e8 4d 9b ba fc 90 0f 0b 4c 89 e7 e8 72 86 1d fd 4c 89 e2 48 89 de 48 c7 c7 80 78 15 8c e8 30 9b ba fc 90 <0f> 0b 48 89 ef e8 55 86 1d fd 48 89 ea 48 89 de 48 c7 c7 e0 78 15 [ 332.742762][ T5151] RSP: 0018:ffffc9000facfb78 EFLAGS: 00010282 [ 332.748815][ T5151] RAX: 000000000000004e RBX: ffff888033c0f500 RCX: ffffffff819b0d89 [ 332.756771][ T5151] RDX: 0000000000000000 RSI: ffffffff819b8c16 RDI: 0000000000000005 [ 332.764725][ T5151] RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 [ 332.772678][ T5151] R10: 0000000080000000 R11: 0000000000000001 R12: dead000000000100 [ 332.780629][ T5151] R13: dffffc0000000000 R14: ffff88807bcb8658 R15: ffff888033c0f500 [ 332.788583][ T5151] FS: 0000000000000000(0000) GS:ffff888124820000(0000) knlGS:0000000000000000 [ 332.797493][ T5151] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.804058][ T5151] CR2: 000020000001d000 CR3: 0000000035468000 CR4: 00000000003526f0 [ 332.812014][ T5151] Call Trace: [ 332.815272][ T5151] [ 332.818186][ T5151] _hci_cmd_sync_cancel_entry.constprop.0+0x80/0x1d0 [ 332.824867][ T5151] hci_cancel_connect_sync+0xfa/0x2b0 [ 332.830265][ T5151] hci_abort_conn+0x15a/0x340 [ 332.834938][ T5151] hci_conn_timeout+0x1a2/0x210 [ 332.839779][ T5151] process_one_work+0x9cc/0x1b70 [ 332.844706][ T5151] ? __pfx_process_one_work+0x10/0x10 [ 332.850064][ T5151] ? assign_work+0x1a0/0x250 [ 332.854638][ T5151] worker_thread+0x6c8/0xf10 [ 332.859212][ T5151] ? __kthread_parkme+0x19e/0x250 [ 332.864236][ T5151] ? __pfx_worker_thread+0x10/0x10 [ 332.869327][ T5151] kthread+0x3c2/0x780 [ 332.873375][ T5151] ? __pfx_kthread+0x10/0x10 [ 332.877946][ T5151] ? rcu_is_watching+0x12/0xc0 [ 332.882696][ T5151] ? __pfx_kthread+0x10/0x10 [ 332.887265][ T5151] ret_from_fork+0x5d4/0x6f0 [ 332.891847][ T5151] ? __pfx_kthread+0x10/0x10 [ 332.896419][ T5151] ret_from_fork_asm+0x1a/0x30 [ 332.901181][ T5151] [ 332.904181][ T5151] Modules linked in: [ 332.908438][ T5151] ---[ end trace 0000000000000000 ]--- [ 333.162270][ T5151] RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200 [ 333.172491][ T5151] Code: 48 c7 c7 20 78 15 8c e8 4d 9b ba fc 90 0f 0b 4c 89 e7 e8 72 86 1d fd 4c 89 e2 48 89 de 48 c7 c7 80 78 15 8c e8 30 9b ba fc 90 <0f> 0b 48 89 ef e8 55 86 1d fd 48 89 ea 48 89 de 48 c7 c7 e0 78 15 [ 333.478104][ T5151] RSP: 0018:ffffc9000facfb78 EFLAGS: 00010282 [ 333.485409][ T5151] RAX: 000000000000004e RBX: ffff888033c0f500 RCX: ffffffff819b0d89 [ 333.500817][ T5151] RDX: 0000000000000000 RSI: ffffffff819b8c16 RDI: 0000000000000005 [ 333.508917][ T5151] RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 [ 333.520667][ T5151] R10: 0000000080000000 R11: 0000000000000001 R12: dead000000000100 [ 333.532216][ T5151] R13: dffffc0000000000 R14: ffff88807bcb8658 R15: ffff888033c0f500 [ 333.540356][ T5151] FS: 0000000000000000(0000) GS:ffff888124820000(0000) knlGS:0000000000000000 [ 333.549382][ T5151] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.556576][ T5151] CR2: 0000001b2fd08ff8 CR3: 000000006559e000 CR4: 00000000003526f0 [ 333.564714][ T5151] Kernel panic - not syncing: Fatal exception [ 333.570949][ T5151] Kernel Offset: disabled [ 333.575247][ T5151] Rebooting in 86400 seconds..