last executing test programs: 22m57.556030792s ago: executing program 4 (id=247): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000c0fe00000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 22m57.474687426s ago: executing program 4 (id=248): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, &(0x7f0000000000)) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/63, 0x3f}, 0x7}], 0x4000135, 0x2, 0x0) write(r0, &(0x7f00000000c0)="510003000000", 0x6) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, &(0x7f0000000000)) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) (async) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/63, 0x3f}, 0x7}], 0x4000135, 0x2, 0x0) (async) write(r0, &(0x7f00000000c0)="510003000000", 0x6) (async) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) (async) 22m54.415044988s ago: executing program 4 (id=260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) setresgid(0xee00, 0xee01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2, 0x18, 0x2, 0x3, 0x1f, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d4, 0x9, 0x4, 0x0, 0x0, 0xa95ec91eb72a7374}, @sadb_key={0x15, 0x8, 0x4f8, 0x0, "39ec8985c076295052da632a178110f5c8f1ea3118a0dbe2dfabc28755cc2d8457bc7316ab8797228fb3fb2b32fecaeed0a7685a979a8b4eb54736be170a13872a0555ba8e87998706c45a01497330314d8ee782fd1643ca054bc6152058c8decbce64c58b2d278bc41390ff4c058ae9917d372ebf2222d1669787aa1ef9c337c9128a8d405f164d573008fb1ce352c75aa9130402a145944e94952509b41b"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_x_filter={0x5, 0x1a, @in6=@local, @in6=@loopback, 0x26, 0x10, 0x3c}]}, 0xf8}}, 0x2000011) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000680)="0f27ac55f62bf4391f0f0b37fa20c463c539fae4e24318614003298549477f9c09f683319dfce6ddc513f007de48038b506ec901009f15507b77511947ead40e76718cfe172ca9a623496e2a3c484700"/92, &(0x7f0000000580), 0x1000, r1}, 0x38) 22m54.072168565s ago: executing program 4 (id=261): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="14f12c02000000ffffffff00f1b2cee01ee504b4027d3068acb69c4aff16529427718e1e07b2075d3ec6e8f7a762d3c8f75c562d3003d22a48fa928a9e581fbe6855e20c776672b3913b750890b578836ca73a094bad47d53755f0ef85650583b2f559aa9fe1b5bdc972cd93493436b325ff3b0c452cfee33f00"/134], 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c"], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030500000000000700", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000200)=0x3, 0x4) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) utime(&(0x7f0000000240)='./bus\x00', &(0x7f0000000340)={0x1, 0x100}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300001200", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$SG_BLKSECTGET(r0, 0x1267, &(0x7f00000000c0)) 22m53.387249s ago: executing program 4 (id=263): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x46, &(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x5b0}, 0xc000) sendmsg$inet6(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)="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", 0xa2}, {&(0x7f0000000600)="fa4930e2f7feb52241e739006ef78c0aeb4dd989f1bf69e01e4eb4bb743569e49e3db4ab502ed698e9d1015794e38f83dc9d177719cb1f7991ee501ad1ff9d69f88d4bb78c0b76402fd5b363a275a95533bc9300c69d731162f7d6591a1b120ae0aabdef8442bd3f3fcc0a8928ca09c02696e77c4a5344365ad0cddf7ae2313cf21a3677d60a3eafb6b0da9fd92de9a62986ab654c007488442d960a80f67bf2818b90107398ff4fa56183282bbb", 0x4f}, {&(0x7f0000002a00)="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", 0xa98}, {&(0x7f0000000780)="a2446674edd4275bc83e412b8c09a1c8e7409b9b315ecceb090d4d90cd27c803d8cde772bb5151df31d975085361bd3da584cb376b69dec6ba3710496439710c453b4648dd4d36ead03f3a2863cda07e2d902f5ba0a922c6b85f5dccc95dafb2da9a39fa2a0ea2aae321d3466f3f5c1775adc5d35089385fc1870d4e4b7048b97505c19f86c17ef3f23ab73f87cd4e28006ddadd4b3ab12abd1241a45b2668db623ee02f92dad0613dceb6"}], 0x1}, 0x20000044) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) syz_emit_ethernet(0x2f, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045f800210000000000119078000000000000000000004e22000d6ff8a0c786e2ca"], 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) splice(r3, 0x0, r5, 0x0, 0xbcc, 0x1) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@private2, @dev={0xfe, 0x80, '\x00', 0x30}, @dev={0xfe, 0x80, '\x00', 0x20}, 0x2, 0x3, 0x8, 0x500, 0x8, 0x80000}) 22m53.151849168s ago: executing program 4 (id=266): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) syz_emit_ethernet(0x86, &(0x7f0000000300)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x11, 0x2, @broadcast, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@multicast1]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private, 0x1}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@local}]}]}}}}}}}, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) (async, rerun: 64) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000400)={r4, r4, 0x3b, 0x0, 0x0, 0xc, 0xfa, 0x100, 0xff01, 0x0, 0x5, 0x0, 'syz0\x00'}) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000040)) 22m52.578214s ago: executing program 32 (id=266): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) syz_emit_ethernet(0x86, &(0x7f0000000300)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x11, 0x2, @broadcast, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@multicast1]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private, 0x1}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@local}]}]}}}}}}}, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) (async, rerun: 64) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000400)={r4, r4, 0x3b, 0x0, 0x0, 0xc, 0xfa, 0x100, 0xff01, 0x0, 0x5, 0x0, 'syz0\x00'}) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000040)) 18m19.504167807s ago: executing program 3 (id=1343): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x400200, 0x5c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) accept$inet6(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xb6) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x480400, 0x0) getgroups(0x1, &(0x7f0000000240)=[0x0]) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}, 0x1, 0xe4ffffffffffffff}, 0x0) 18m18.503646806s ago: executing program 3 (id=1344): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x6) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x400, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) close(0x3) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=wit']) r6 = open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)={'#! ', './file0'}, 0xfffffd9d) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 18m15.808328588s ago: executing program 3 (id=1354): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, 0x0, &(0x7f0000001480)=""/93}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000740)=@assoc_value={0x0, 0xf5}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) 18m15.099995788s ago: executing program 3 (id=1355): r0 = socket$kcm(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f00000000c0)={0x0, 0xa, 0x70, {0x70, 0x22, "dc050000000000000056efb20ecf60ae23f3d5d53243f1ad682e0e3fe607525d4dfee22c110998bbf391f0dfbdc281bfd4fee031c468e99d4a2350dd55474a5f50824fcbc7000000000000003dd9ce5bd1bec0e671b9407c5c28203c6252050205dfee031fa794823845d5ec320f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000c00"], 0x10b8}, 0xff00) 18m12.079852614s ago: executing program 3 (id=1366): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 18m11.732435387s ago: executing program 3 (id=1369): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000180)=[r5], 0x1, r3, r4, 0x3, 0xc, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000f1ff0000800040000000000000000200"}}) 18m11.326032235s ago: executing program 33 (id=1369): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000180)=[r5], 0x1, r3, r4, 0x3, 0xc, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000f1ff0000800040000000000000000200"}}) 16m17.70383564s ago: executing program 6 (id=1785): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = dup(r0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x15b, 0x0, r1}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000000000001000000050003000100000006000240000000000c"], 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4040) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x1a, 0x0, 0x0) bind$unix(r1, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) r8 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x24}}, 0x0) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 16m16.59311096s ago: executing program 6 (id=1789): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="94010000100001000000000000000000fc0000000000000000000000000000000000000000000000000100000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00040000000000480002006563622863"], 0x194}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) read$FUSE(r0, &(0x7f0000001d40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300627269"], 0x118}, 0x1, 0x0, 0x0, 0x4040994}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000080)={0x0, 0x0, "5adef1fc9a4ea720955b021c302c6444"}) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x85e1, 0x463}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0xcc03, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) getpid() bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r6, 0x0, r7, 0x0, 0x10000000000016, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0x7040, 0x0) 16m15.575606429s ago: executing program 6 (id=1797): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syslog(0x3, 0x0, 0x0) recvmsg(r0, &(0x7f0000000540)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000500), 0x0, 0x0, 0x48, 0xf5ffffff}, 0x14123) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x10, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x1c9243, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}, 0x1, 0xf0ff}, 0x0) 16m15.168340329s ago: executing program 6 (id=1799): io_uring_setup(0x3eae, &(0x7f0000000100)={0x0, 0x206d33, 0x10000, 0x2, 0x5e}) prctl$PR_SCHED_CORE(0x27, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000016c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) syz_open_dev$usbfs(0x0, 0x205, 0x2) dup(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/98, 0x62}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 16m12.007807305s ago: executing program 6 (id=1810): syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x720e0000, 0x4000}, 0x48) 16m10.615455339s ago: executing program 6 (id=1814): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) syz_open_dev$usbfs(0x0, 0xf, 0xc340) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xfffffffffffff000, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000080), r4, 0x0, 0xfffffffffffffff8, 0x0) 16m10.182893923s ago: executing program 34 (id=1814): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) syz_open_dev$usbfs(0x0, 0xf, 0xc340) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xfffffffffffff000, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000080), r4, 0x0, 0xfffffffffffffff8, 0x0) 15.734125402s ago: executing program 0 (id=5345): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x3c, 0xfc, 0x7f, 0x8}, {0x6, 0x5, 0x1, 0x100}]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0x7f, 0x4) ioctl$BLKFINISHZONE(r0, 0x40101288, &(0x7f0000000080)={0x6, 0x3ff}) 14.80005382s ago: executing program 0 (id=5347): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 14.799793561s ago: executing program 1 (id=5348): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$mixer(0xffffffffffffff9c, 0x0, 0x1c1140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x9, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0xb}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0857f9f582f03000000000000", 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@null, 0x101, 'veth0_macvtap\x00'}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 13.697995556s ago: executing program 7 (id=5351): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$mixer(0xffffffffffffff9c, 0x0, 0x1c1140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x9, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0xb}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0857f9f582f03000000000000", 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@null, 0x101, 'veth0_macvtap\x00'}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 13.198325926s ago: executing program 1 (id=5352): r0 = semget$private(0x0, 0x20000000102, 0x0) semctl$SEM_STAT(r0, 0x2, 0x12, 0x0) semop(r0, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x1, 0xe65b}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) r1 = semget$private(0x0, 0x0, 0xc1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfff6}, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x0, 0x40, 0x8, 0xab9, 0x75, 0x3, 0x348, 0x8, 0x3ff}, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000280)=0x40000002) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000000c0)) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) 12.581492555s ago: executing program 7 (id=5355): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x80a0000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xd2, 0x40, 0x96, 0x0, 0x0, 0x19}, {0x5000, 0xeeee8000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x1, 0x7, 0x0, 0x9, 0xff, 0xa7, 0x8, 0x81}, {0x6000, 0x100000, 0xa, 0x6, 0x4, 0x42, 0xb, 0xf8, 0x8, 0x7, 0xe, 0xf1}, {0xeeee0000, 0xeeee0000, 0xb, 0x3, 0x15, 0x6, 0xab, 0x7f, 0x3, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0xc, 0x7, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x100000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0xdddd0000, 0x1000, 0x1e, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x1000, 0x7}, 0x80000031, 0x0, 0x8080000, 0x2026, 0x40003, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f00000001c0)=[@cr4={0x1, 0x200000}], 0x1) r3 = syz_open_dev$vcsn(&(0x7f0000000240), 0x8, 0x2080) readahead(r3, 0x8000000000000000, 0x100) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe60, 0x11, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1}, [{0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0xfff, 0x4}, {0x0, 0x0, 0x6}, {0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffffffe, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x7fff, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x80000000}, {0x7, 0xfffffffc}, {0xfffffffc}, {}, {}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x3}, {}, {0x0, 0x2000, 0x40000}, {0x0, 0x0, 0x0, 0x0, 0xec0}, {0x0, 0x0, 0xa}, {0x2}, {}, {}, {0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x7f0}, {}, {}, {0x0, 0x0, 0x200}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x5b}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x1}, {0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0xffffffff, 0x0, 0x1}, {}, {}, {0x401}, {}, {0x0, 0xfffffffe, 0x8}, {}, {0x0, 0x4, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000, 0x100, 0x8}, {0x0, 0x0, 0x2, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x1, 0x0, 0x10}, {}, {}, {}, {0x0, 0xfffffffe, 0x2}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x3}, {0x2}, {0x0, 0x0, 0x2}, {0x0, 0xcb1, 0x0, 0x0, 0x3}, {}, {0x0, 0xffffffff, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd28d}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x200000}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x200002}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x70}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x6, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x5}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x391a04c0a5f5edad}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100000000000000e8ffffffff0920000000000a05000000000000000000070000000900010073797a300000004048000000090a010400000000000000000700000008000a40000000000915d5a18175eaeae70000000900010073797a300000000008000540000000030c00f580080001408000ffff140000001800010000000000000000000084000aff62f71b4cdfcdfc9aa25da5d81a3dae584a449aff73617a04bab166d21616c2b6cb278a8f98987e"], 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) r8 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x18) symlinkat(&(0x7f0000000180)='./file0\x00', r9, &(0x7f0000000140)='./file0\x00') openat2(r9, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)={0x10c00, 0x0, 0x8}, 0x18) 12.562994654s ago: executing program 0 (id=5356): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000007c0)=0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)=@getlink={0x8c, 0x12, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, [@IFLA_PHYS_PORT_ID={0x1e, 0x22, "0dd9eb1868d9a72dba9459ae308b4a5b185b2f52b63483baeec9"}, @IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}]}, @IFLA_MTU={0x8, 0x4, 0x7}, @IFLA_NET_NS_PID={0x8, 0x13, r6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00'}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lseek(r4, 0x0, 0x4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r7, 0x4b33, &(0x7f0000000000)) open(0x0, 0x4540, 0x0) dup(r1) 9.055369003s ago: executing program 2 (id=5360): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x4021) (async) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='nsfs\x00', 0x40, &(0x7f0000000280)='{\x00') (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8b}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x404c080) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r5, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2001, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r6}, 0x8) (async) connect$can_bcm(r3, &(0x7f0000000640), 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000680)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) r7 = socket$alg(0x26, 0x5, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x198, 0x1, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_EXP={0xb0, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x101}]}, @NFQA_PAYLOAD={0xa7, 0xa, "c2391c959b4d6d2460e1415ac02b7c8ed6e36f258d01cc12f6f4fcc87b0bf6e7589c7b49f2adbf417ba89e4ddc3ec0fb27e931088e9c25aba24f578c2ff456581005b571aea9f2f81d170c2732843cc876734f98217b8e889328b7541ceaae2ddfee2e05ffc9cddbe3cb41da7a59d17fc14097389e9ef981448f169a6d026b634703aa76302f38d0b842b6ecddccce247980c1d84fbb3156d4ce3be78b6f4ed2ac1d0f"}, @NFQA_EXP={0x14, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_TIMEOUT={0x8}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x9}}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000080) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r8, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0xc5) (async) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000ac0)={'syztnl0\x00', r4, 0x1, 0x700, 0xff, 0x8868, {{0x20, 0x4, 0x0, 0x17, 0x80, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast1, @broadcast, {[@cipso={0x86, 0x15, 0x3, [{0x6, 0x8, "5c9b7ad5dc2b"}, {0x526aebbb30881e1c, 0x7, "cb97a015e7"}]}, @timestamp_prespec={0x44, 0x24, 0x44, 0x3, 0xd, [{@empty, 0x2}, {@private=0xa010102, 0x81}, {@private=0xa010101, 0x9}, {@multicast2, 0xbaf6}]}, @lsrr={0x83, 0x23, 0x60, [@multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @multicast2, @multicast1, @loopback]}, @noop, @generic={0x86, 0xf, "3342ad8542e84b4682ef0536e1"}]}}}}}) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000c00)={0x0, @phonet={0x23, 0x6, 0x2, 0x9}, @can={0x1d, r10}, @l2={0x1f, 0x5, @none, 0x1000, 0x1}, 0xf001, 0x0, 0x0, 0x0, 0x43, &(0x7f0000000bc0)='pimreg0\x00', 0x57, 0x6}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000cc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000ec0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d00)={0x158, r1, 0x114, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0xd4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x64, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1fbe7c90}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000001}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x401}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x22c}]}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8001}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x158}, 0x1, 0x0, 0x0, 0x4004081}, 0x4000000) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000f00)={{0x1, 0x1, 0x18, r9, {0x3}}, './file0\x00'}) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000f80)=0x0) sendmsg$nl_xfrm(r12, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)=@delpolicy={0x78, 0x14, 0x10, 0x70bd2d, 0x25dfdbfe, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24, 0x8, 0x4e21, 0x7, 0x2, 0xa0, 0x80, 0x62, r4, r13}, 0x6e6bb8, 0x1}, [@replay_esn_val={0x28, 0x17, {0x3, 0x70bd2c, 0x70bd25, 0x70bd27, 0x70bd28, 0xeeb, [0xfffffbeb, 0x3ff, 0xb377]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x840) (async) sendmsg$IPSET_CMD_TYPE(r12, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x2c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x44, r14, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ':-\x00'}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'nsfs\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan1\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000001340), r3) 8.836387223s ago: executing program 2 (id=5361): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITHAW(r1, 0xc0045878) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000180)=[r8, r8], 0x2, r6, r7, 0x3, 0xc, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000f1ff0000800040000000000000004000"}}) 7.683589027s ago: executing program 2 (id=5362): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb0603000000000023010902240001000064000904340102"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_open_dev$media(&(0x7f00000001c0), 0x10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}, {&(0x7f0000000480)="624a04bdf6f5755fed27b148e41c60250609c557b45ae05257a3b3ba00a119823113f9391ba43f3eb4ab3aef80be02a0d4aabe608eb0a21e2829b7c089e79967910a8d60b4f339a1081d70f6b272aecbc1bcd0edbbf93fe711f63ebec2715ecc1d5091971c181c8c2463c51e2efb8e4ec648233792bd767a0866ec2b3fd177fe3a9031913be6fbf8eceb73a9452261507b86a3d9a970c80552c471fbb9bb9895837e6ab7af8951325523a41a5699fc4b35c745ebeb3228de3e299e4b21da3b5da96ef33c9eb5ae90c9d63b1f607f58b113569baa117fc9d13e9f5b1e02cf377553faf316c9", 0xe5, 0x4001}, {&(0x7f0000000100)="1947a774e7718efbd993bbdc739d13eff5a01012856900ee1f1c4720", 0x1c, 0x3}]}, 0x3, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) 6.151747317s ago: executing program 5 (id=5367): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0xffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x2000000) 6.058837119s ago: executing program 1 (id=5368): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x9) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe763044bcb3fbff48eb964283000000000000000100"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 5.940020542s ago: executing program 5 (id=5369): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000004000000000a0060003b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="001d20001a0000003251471b46cad3360000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000900000000000000000002000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@empty, 0x0, 0x400, 0x0, 0x200, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000002000001ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000008bb7fda49b4f269800000000000000000000000000090000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000ba6b6e000000000000000000"], 0xb8}}, 0x4000) 5.885361906s ago: executing program 1 (id=5370): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=@v2={0x3, 0x2, 0xfe, 0xe79f, 0x2, 'JE'}, 0xb, 0x1) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x0, 0x202, 0x2, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000048feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 5.845516924s ago: executing program 5 (id=5371): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4, @ANYBLOB="0a0001000000648a63ff"], 0x48}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000001, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r7, 0xc040563e, &(0x7f0000000100)={0x1, 0x0, 0x103, 0x0, {0x1908a9ff, 0x3, 0x7fff, 0x8}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f00000005c0)={0x1, 0xfffffffc, 0x0, 0x10001, 0xffffffffffffffff, 0xfffffffffffff748, 0x5, 0x9, 0x0, 0x2c, 0x1, 0x1}) ioctl$SNDRV_PCM_IOCTL_RESET(r6, 0x4141, 0x0) 5.782469988s ago: executing program 0 (id=5372): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='kvm_mmio\x00', r0, 0x0, 0x3}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x80, r4, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "0898bc2791f5f015e265745c15959e412a73e9816e631d9741c75331f1a8378a"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xfa}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x80}}, 0x811) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000016050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32000000001400000011000100"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r8, 0x2, 0x18c, 0xa}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000002000)=""/102400, 0x19000) r10 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, r11}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r10, 0xc01064ab, &(0x7f0000000e00)={0x4ff1, 0x0, r11}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 5.750522523s ago: executing program 7 (id=5373): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000fcff00000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 5.047909454s ago: executing program 0 (id=5374): syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffd) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001b00)={0x0, [{0x1, 0x0, 0x800, 0x0}, {0x1, 0x88, 0x0, &(0x7f0000000080)="88d25e0ca8183bf6a582c1fd44f736747e"}, {0x1, 0x0, 0xffffff80, 0x0}, {0x0, 0x0, 0xfffffbc1, 0x0}, {0x0, 0x0, 0x10000, 0x0}, {0x2, 0x0, 0xf, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x1, 0x0, 0xfffffffa, 0x0}, {0x0, 0x0, 0x54, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x2b, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x9, 0x0}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x1e, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x6, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x8000, 0x100000, 0x0, 0x2004c4, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x10) sysinfo(&(0x7f0000000000)=""/35) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x4040814) socket$inet6(0xa, 0x2, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick=0xf9a6, {0x40, 0xff}, {0x10, 0x9}, @queue={0xeb, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80}, @queue={0x0, {0x9, 0x8}}}], 0x38) 4.82643336s ago: executing program 2 (id=5375): socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0480000021200000280012800900010076657468000000", @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 4.361052497s ago: executing program 5 (id=5376): r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket(0xa, 0x3, 0x3a) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000016000000000800007f"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) syz_usb_connect(0x5, 0x24, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x3000, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.240129399s ago: executing program 2 (id=5377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x1, 0x80000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg(r0, 0x0, 0xc004) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000780)=@newtaction={0xf4, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xe0, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x5, 0x0, 0x0, 0x7}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x7000000}}}}, @m_gact={0x48, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x6, 0x2, 0x7, 0x400}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xf4}}, 0x0) 3.841233514s ago: executing program 0 (id=5378): r0 = semget$private(0x0, 0x20000000102, 0x0) semctl$SEM_STAT(r0, 0x2, 0x12, 0x0) semop(r0, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x1, 0xe65b}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) r1 = semget$private(0x0, 0x0, 0xc1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfff6}, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x0, 0x40, 0x8, 0xab9, 0x75, 0x3, 0x348, 0x8, 0x3ff}, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000280)=0x40000002) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000000c0)) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) 3.774063446s ago: executing program 2 (id=5379): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = io_uring_setup(0x45a6, &(0x7f0000000500)={0x0, 0x0, 0x1, 0x0, 0x228}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000d600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="82d2", 0x2}], 0x1}}], 0x1, 0x114027d77c4637a9) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r4 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x80047441, &(0x7f0000000180)) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, 0x0, r4}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) 3.503565746s ago: executing program 1 (id=5380): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r5, 0x0, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x17, 0x66, 0xfcd66a900070b359}, 0x24}}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="00006003ffffffffffffaaaaaaaaaa"], 0x16a) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0xffff}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32], 0x40c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.905839114s ago: executing program 5 (id=5381): prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$video(0x0, 0x7ff, 0x40400) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.795372346s ago: executing program 1 (id=5382): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000007c0)=0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)=@getlink={0x8c, 0x12, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, [@IFLA_PHYS_PORT_ID={0x1e, 0x22, "0dd9eb1868d9a72dba9459ae308b4a5b185b2f52b63483baeec9"}, @IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}]}, @IFLA_MTU={0x8, 0x4, 0x7}, @IFLA_NET_NS_PID={0x8, 0x13, r6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00'}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lseek(r4, 0x0, 0x4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r7, 0x4b33, &(0x7f0000000000)) open(0x0, 0x4540, 0x0) dup(r1) 1.179899004s ago: executing program 5 (id=5383): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000034000)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000003480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='bbr\x00', 0xfffffffffffffef5) sendmmsg$inet(r3, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 251.523124ms ago: executing program 7 (id=5384): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x404000, @loopback, 0x7cfd1f0f, 0x4}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f00000024c0)={0xa, 0x7, 0x0, @loopback, 0x8}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000300aa00000000", @ANYRES8], 0x0) 137.198711ms ago: executing program 7 (id=5385): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070000000000fddb34e602000000080002000e0000000c00990001"], 0x28}, 0x1, 0x1400, 0x0, 0x20000084}, 0x4c040) 0s ago: executing program 7 (id=5386): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r4 = socket(0x2, 0x1, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_DO_IT(r5, 0xab03) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000400)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x2, 0x0, 0xa5, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x3, "c54bfe6bddb0a35b8f1fcd3d0418dc12b949b7e5560635b5bf39b5152819a973", "88e8514f8160134e4b86cd3e9853ff8bb2024c88c1a600b7f9a70565e32cf58050038d629eb196dcd2c40d3753d18268", "577bf699b4ac2010bd21ec5099fc45596d43ee96eace82320cc38da0", {"2897c63fce331822b0bbca5143bfb766", "4f4c76b74a261703c827481abff75b19"}}}}}}}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): D: 24287 Comm: syz.0.4438 Not tainted syzkaller #0 PREEMPT(full) [ 1273.642220][T24287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1273.642231][T24287] Call Trace: [ 1273.642238][T24287] [ 1273.642246][T24287] dump_stack_lvl+0x16c/0x1f0 [ 1273.642271][T24287] should_fail_ex+0x512/0x640 [ 1273.642296][T24287] should_fail_alloc_page+0xe7/0x130 [ 1273.642320][T24287] prepare_alloc_pages+0x3c2/0x610 [ 1273.642355][T24287] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1273.642375][T24287] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 1273.642398][T24287] ? __pfx___might_resched+0x10/0x10 [ 1273.642423][T24287] ? find_held_lock+0x2b/0x80 [ 1273.642447][T24287] ? process_measurement+0x4a6/0x23e0 [ 1273.642473][T24287] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1273.642491][T24287] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1273.642512][T24287] ? up_write+0x1b2/0x520 [ 1273.642544][T24287] ? __lock_acquire+0xb97/0x1ce0 [ 1273.642569][T24287] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1273.642593][T24287] ? policy_nodemask+0xea/0x4e0 [ 1273.642617][T24287] alloc_pages_mpol+0x1fb/0x550 [ 1273.642639][T24287] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1273.642659][T24287] ? do_raw_spin_lock+0x12c/0x2b0 [ 1273.642678][T24287] ? find_held_lock+0x2b/0x80 [ 1273.642705][T24287] alloc_pages_noprof+0x131/0x390 [ 1273.642726][T24287] __pmd_alloc+0x3b/0x930 [ 1273.642748][T24287] ? __pud_alloc+0x526/0x750 [ 1273.642773][T24287] __handle_mm_fault+0xa06/0x2a50 [ 1273.642804][T24287] ? mt_find+0x3ef/0xa30 [ 1273.642827][T24287] ? __pfx___handle_mm_fault+0x10/0x10 [ 1273.642852][T24287] ? __pfx_mt_find+0x10/0x10 [ 1273.642889][T24287] ? find_vma+0xbf/0x140 [ 1273.642908][T24287] ? __pfx_find_vma+0x10/0x10 [ 1273.642932][T24287] handle_mm_fault+0x589/0xd10 [ 1273.642960][T24287] ? __bpf_trace_exceptions+0x1/0x40 [ 1273.642990][T24287] do_user_addr_fault+0x7a6/0x1370 [ 1273.643012][T24287] ? rcu_is_watching+0x12/0xc0 [ 1273.643036][T24287] exc_page_fault+0x5c/0xb0 [ 1273.643056][T24287] asm_exc_page_fault+0x26/0x30 [ 1273.643074][T24287] RIP: 0010:strncpy_from_user+0x147/0x2e0 [ 1273.643092][T24287] Code: 00 00 4d 89 74 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 47 b7 a4 fc 48 83 fd 07 76 22 e8 cc bb a4 fc 45 31 ff <49> 8b 04 1c 31 ff 44 89 fe 49 89 c6 e8 f8 b6 a4 fc 45 85 ff 0f 84 [ 1273.643109][T24287] RSP: 0018:ffffc90003f6fcb8 EFLAGS: 00050246 [ 1273.643124][T24287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8516cf96 [ 1273.643136][T24287] RDX: ffff88801bf22440 RSI: ffffffff8516d034 RDI: 0000000000000007 [ 1273.643151][T24287] RBP: 0000000000000100 R08: 0000000000000007 R09: 0000000000000007 [ 1273.643162][T24287] R10: 0000000000000100 R11: 0000000000000000 R12: 0000200000000340 [ 1273.643173][T24287] R13: ffffc90003f6fd90 R14: 0000000000000100 R15: 0000000000000000 [ 1273.643191][T24287] ? strncpy_from_user+0xa6/0x2e0 [ 1273.643209][T24287] ? strncpy_from_user+0x144/0x2e0 [ 1273.643229][T24287] ? strncpy_from_user+0x144/0x2e0 [ 1273.643250][T24287] path_getxattrat+0xfa/0x2d0 [ 1273.643274][T24287] ? __pfx_path_getxattrat+0x10/0x10 [ 1273.643294][T24287] ? ksys_write+0x190/0x250 [ 1273.643317][T24287] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1273.643363][T24287] ? __pfx_ksys_write+0x10/0x10 [ 1273.643389][T24287] do_syscall_64+0xcd/0x4c0 [ 1273.643411][T24287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.643429][T24287] RIP: 0033:0x7fb1af58ebe9 [ 1273.643443][T24287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1273.643460][T24287] RSP: 002b:00007fb1b0486038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 1273.643477][T24287] RAX: ffffffffffffffda RBX: 00007fb1af7b5fa0 RCX: 00007fb1af58ebe9 [ 1273.643488][T24287] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000000 [ 1273.643499][T24287] RBP: 00007fb1b0486090 R08: 0000000000000000 R09: 0000000000000000 [ 1273.643510][T24287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.643520][T24287] R13: 00007fb1af7b6038 R14: 00007fb1af7b5fa0 R15: 00007ffea9149d98 [ 1273.643546][T24287] [ 1274.739810][T24293] fuse: Bad value for 'fd' [ 1275.504553][T24252] gtp0: entered promiscuous mode [ 1275.534249][ T5994] usb 3-1: USB disconnect, device number 86 [ 1276.093310][ T5994] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1276.433872][ T5994] usb 6-1: Using ep0 maxpacket: 32 [ 1276.463783][ T5994] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1276.463812][ T5994] usb 6-1: config 0 has no interface number 0 [ 1276.463849][ T5994] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1276.468672][ T5994] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 1276.468725][ T5994] usb 6-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 1276.468746][ T5994] usb 6-1: Product: syz [ 1276.468759][ T5994] usb 6-1: Manufacturer: syz [ 1276.468774][ T5994] usb 6-1: SerialNumber: syz [ 1276.470861][ T5994] usb 6-1: config 0 descriptor?? [ 1277.542142][T24324] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1278.629359][ T5994] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 1278.810847][ T5994] f81534 6-1:0.12: f81534_find_config_idx: read failed: -32 [ 1278.868342][ T5994] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 1278.953649][ T5994] f81534 6-1:0.12: probe with driver f81534 failed with error -32 [ 1279.051563][ T5994] usb 6-1: USB disconnect, device number 96 [ 1279.419588][T24345] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4451'. [ 1279.563417][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 1279.695514][T24350] input: syz0 as /devices/virtual/input/input55 [ 1279.822408][T24350] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4452'. [ 1280.280658][T24359] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24359 comm=syz.7.4452 [ 1280.825338][T24369] overlay: ./file1 is not a directory [ 1280.955086][T24373] netlink: 'syz.0.4459': attribute type 21 has an invalid length. [ 1283.694929][T24410] bridge_slave_0: left allmulticast mode [ 1283.701241][T24410] bridge_slave_0: left promiscuous mode [ 1283.715757][T24410] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.902068][T24410] bridge_slave_1: left allmulticast mode [ 1284.033706][T24410] bridge_slave_1: left promiscuous mode [ 1284.060545][T24410] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.135683][T24410] bond0: (slave bond_slave_0): Releasing backup interface [ 1284.187741][T24410] bond0: (slave bond_slave_1): Releasing backup interface [ 1284.252918][T24410] team0: Port device team_slave_0 removed [ 1284.265897][T24410] team0: Port device team_slave_1 removed [ 1284.305703][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1284.419977][T24412] lo speed is unknown, defaulting to 1000 [ 1285.160139][ T24] usb 2-1: config 0 has an invalid interface number: 204 but max is 0 [ 1285.319346][ T24] usb 2-1: config 0 has no interface number 0 [ 1285.503142][T24420] netlink: 'syz.5.4469': attribute type 1 has an invalid length. [ 1285.513704][T24420] netlink: 'syz.5.4469': attribute type 4 has an invalid length. [ 1285.527891][T24420] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4469'. [ 1285.550873][ T24] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 1285.579620][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.707649][ T24] usb 2-1: Product: syz [ 1285.712135][ T24] usb 2-1: Manufacturer: syz [ 1285.717494][ T24] usb 2-1: SerialNumber: syz [ 1285.734409][ T24] usb 2-1: config 0 descriptor?? [ 1286.201450][T24426] netlink: 'syz.5.4469': attribute type 1 has an invalid length. [ 1286.263780][T24426] netlink: 'syz.5.4469': attribute type 4 has an invalid length. [ 1286.290357][T24426] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4469'. [ 1286.320335][ T24] ems_usb 2-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1286.374294][ T5994] IPVS: starting estimator thread 0... [ 1286.429786][ T24] ems_usb 2-1:0.204: probe with driver ems_usb failed with error -22 [ 1286.523385][T24433] IPVS: using max 72 ests per chain, 172800 per kthread [ 1287.139242][ T5917] usb 2-1: USB disconnect, device number 13 [ 1287.720242][T24459] fuse: Unknown parameter '0x0000000000000005' [ 1288.187577][T24466] TCP: TCP_TX_DELAY enabled [ 1289.545445][ T30] audit: type=1400 audit(1756105414.909:1550): avc: denied { read } for pid=24480 comm="syz.7.4482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1290.794625][T24492] binder: 24491:24492 ioctl c0306201 200000000040 returned -22 [ 1290.848702][T24492] binder: 24491:24492 ioctl c018937b 200000000100 returned -22 [ 1290.873958][T24492] binder: 24491:24492 ioctl 40044591 0 returned -22 [ 1290.945954][T24502] binder: 24491:24502 ioctl c0306201 200000000640 returned -22 [ 1291.120853][ T30] audit: type=1400 audit(1756105416.479:1551): avc: denied { ioctl } for pid=24505 comm="syz.2.4491" path="socket:[81387]" dev="sockfs" ino=81387 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1291.405958][ T5916] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1291.573454][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 1291.580976][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1291.600634][ T5916] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1291.807547][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.906373][ T5916] usb 2-1: config 0 descriptor?? [ 1291.914291][ T5916] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1294.282371][T24542] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4496'. [ 1294.397939][T24546] netlink: 'syz.7.4497': attribute type 29 has an invalid length. [ 1294.406008][T24546] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4497'. [ 1295.578016][ T5916] usb 2-1: USB disconnect, device number 14 [ 1295.622533][T24560] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1297.237660][T24577] binder: 24576:24577 ioctl c018937c 200000000240 returned -22 [ 1297.699554][T24594] netlink: 'syz.2.4510': attribute type 21 has an invalid length. [ 1297.895862][T24597] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4509'. [ 1298.607751][T24599] block nbd5: shutting down sockets [ 1299.726047][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.978134][T24633] delete_channel: no stack [ 1299.990413][ T30] audit: type=1400 audit(1756105425.349:1552): avc: denied { setopt } for pid=24632 comm="syz.5.4523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1300.806737][T24652] netdevsim netdevsim5 : renamed from netdevsim0 [ 1300.912403][T24656] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1300.923396][T24656] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1302.233427][ T5916] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1302.269963][T24681] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1302.385524][ T5916] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.416536][ T5916] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1302.682432][ T5916] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1302.844918][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.941898][ T5916] usb 2-1: Product: syz [ 1302.947049][ T5916] usb 2-1: Manufacturer: syz [ 1302.951838][ T5916] usb 2-1: SerialNumber: syz [ 1302.981897][T24688] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4540'. [ 1302.992536][T24688] team0: left promiscuous mode [ 1303.000838][T24688] team_slave_0: left promiscuous mode [ 1303.006554][T24688] team_slave_1: left promiscuous mode [ 1303.012242][T24688] bridge0: port 3(team0) entered disabled state [ 1303.025124][T24688] bridge_slave_0: left promiscuous mode [ 1303.033463][T24688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.044175][T24688] bridge_slave_1: left promiscuous mode [ 1303.049861][T24688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.092309][T24688] bond0: (slave bond_slave_0): Releasing backup interface [ 1303.223178][T24688] bond0: (slave bond_slave_1): Releasing backup interface [ 1303.252354][T24688] team0: Port device team_slave_0 removed [ 1303.289957][T24688] team0: Port device team_slave_1 removed [ 1303.290292][T24699] 9pnet_fd: Insufficient options for proto=fd [ 1303.296589][ T30] audit: type=1400 audit(1756105428.649:1553): avc: denied { mounton } for pid=24698 comm="syz.7.4544" path="/499/file0" dev="tmpfs" ino=2676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1303.550696][T24705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4534'. [ 1304.808191][T24722] netlink: 'syz.2.4550': attribute type 2 has an invalid length. [ 1304.983046][ T5916] usb 2-1: 0:2 : does not exist [ 1305.008214][ T5916] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1305.036793][T24727] netlink: 'syz.5.4549': attribute type 11 has an invalid length. [ 1305.047571][ T5916] usb 2-1: USB disconnect, device number 15 [ 1305.060468][T24729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4553'. [ 1305.125525][T24729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4553'. [ 1305.179905][T24734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4551'. [ 1305.990236][ T30] audit: type=1400 audit(1756105431.349:1554): avc: denied { read write } for pid=24742 comm="syz.5.4557" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1306.053980][ T30] audit: type=1400 audit(1756105431.379:1555): avc: denied { open } for pid=24742 comm="syz.5.4557" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1306.133842][ T30] audit: type=1326 audit(1756105431.419:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24744 comm="syz.1.4556" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08f758ebe9 code=0x0 [ 1306.157781][ T30] audit: type=1326 audit(1756105431.419:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24744 comm="syz.1.4556" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08f758ebe9 code=0x0 [ 1307.052241][ T30] audit: type=1400 audit(1756105432.399:1558): avc: denied { append } for pid=24762 comm="syz.5.4561" name="pfkey" dev="proc" ino=4026534907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1307.899744][ T30] audit: type=1400 audit(1756105433.249:1559): avc: denied { unmount } for pid=19794 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1309.728235][T24801] FAULT_INJECTION: forcing a failure. [ 1309.728235][T24801] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.741181][T24801] CPU: 1 UID: 0 PID: 24801 Comm: syz.2.4572 Not tainted syzkaller #0 PREEMPT(full) [ 1309.741197][T24801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1309.741204][T24801] Call Trace: [ 1309.741208][T24801] [ 1309.741212][T24801] dump_stack_lvl+0x16c/0x1f0 [ 1309.741230][T24801] should_fail_ex+0x512/0x640 [ 1309.741245][T24801] should_failslab+0xc2/0x120 [ 1309.741259][T24801] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1309.741271][T24801] ? fdb_create+0x22d/0x1900 [ 1309.741291][T24801] fdb_create+0x22d/0x1900 [ 1309.741310][T24801] ? find_held_lock+0x2b/0x80 [ 1309.741324][T24801] ? __pfx_fdb_create+0x10/0x10 [ 1309.741340][T24801] ? br_fdb_find+0xe4/0x240 [ 1309.741366][T24801] __br_fdb_add+0xb43/0xd90 [ 1309.741381][T24801] br_fdb_add+0x769/0xe30 [ 1309.741395][T24801] ? __pfx_br_fdb_add+0x10/0x10 [ 1309.741409][T24801] ? __nla_parse+0x40/0x60 [ 1309.741424][T24801] ? __pfx_br_fdb_add+0x10/0x10 [ 1309.741435][T24801] rtnl_fdb_add+0x649/0xac0 [ 1309.741451][T24801] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 1309.741474][T24801] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 1309.741487][T24801] rtnetlink_rcv_msg+0x3c6/0xe90 [ 1309.741501][T24801] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1309.741517][T24801] ? __lock_acquire+0x62e/0x1ce0 [ 1309.741538][T24801] netlink_rcv_skb+0x158/0x420 [ 1309.741552][T24801] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1309.741566][T24801] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1309.741585][T24801] ? netlink_deliver_tap+0x1ae/0xd30 [ 1309.741596][T24801] ? selinux_netlink_send+0x578/0x830 [ 1309.741611][T24801] ? is_vmalloc_addr+0x86/0xa0 [ 1309.741625][T24801] netlink_unicast+0x5a7/0x870 [ 1309.741640][T24801] ? __pfx_netlink_unicast+0x10/0x10 [ 1309.741653][T24801] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1309.741670][T24801] netlink_sendmsg+0x8d1/0xdd0 [ 1309.741685][T24801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1309.741704][T24801] ____sys_sendmsg+0xa95/0xc70 [ 1309.741719][T24801] ? copy_msghdr_from_user+0x10a/0x160 [ 1309.741732][T24801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1309.741753][T24801] ___sys_sendmsg+0x134/0x1d0 [ 1309.741766][T24801] ? __pfx____sys_sendmsg+0x10/0x10 [ 1309.741795][T24801] __sys_sendmsg+0x16d/0x220 [ 1309.741808][T24801] ? __pfx___sys_sendmsg+0x10/0x10 [ 1309.741829][T24801] do_syscall_64+0xcd/0x4c0 [ 1309.741843][T24801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.741854][T24801] RIP: 0033:0x7f7cdd38ebe9 [ 1309.741863][T24801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1309.741874][T24801] RSP: 002b:00007f7cde2c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1309.741886][T24801] RAX: ffffffffffffffda RBX: 00007f7cdd5b5fa0 RCX: 00007f7cdd38ebe9 [ 1309.741893][T24801] RDX: 0000000024040040 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1309.741900][T24801] RBP: 00007f7cde2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1309.741907][T24801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1309.741913][T24801] R13: 00007f7cdd5b6038 R14: 00007f7cdd5b5fa0 R15: 00007fff93260618 [ 1309.741927][T24801] [ 1311.356289][T24825] fuse: Unknown parameter 'fd0x0000000000000005' [ 1311.793733][T24844] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1311.809299][T24844] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1313.743929][ T5994] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1313.753622][T24890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4598'. [ 1313.963316][ T5994] usb 2-1: Using ep0 maxpacket: 16 [ 1313.983110][ T5994] usb 2-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 1313.993980][ T5994] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1314.024763][ T5994] usb 2-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 1314.060704][ T5994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.104274][ T5994] usb 2-1: config 0 descriptor?? [ 1314.612000][T24902] fuse: Unknown parameter 'fd0x0000000000000005' [ 1314.688367][ T5994] usb 2-1: string descriptor 0 read error: -71 [ 1314.720090][ T5994] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1314.747302][ T5994] usb 2-1: USB disconnect, device number 16 [ 1314.985876][T24914] netlink: 'syz.5.4605': attribute type 10 has an invalid length. [ 1314.994272][T24914] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4605'. [ 1315.006293][T24914] team0: entered promiscuous mode [ 1315.013082][T24914] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.021405][T24914] bridge0: port 1(team0) entered blocking state [ 1315.028779][T24914] bridge0: port 1(team0) entered disabled state [ 1317.083832][ T5916] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1317.561950][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 1317.703747][ T5916] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1317.722068][ T5916] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1318.191035][ T5916] usb 3-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.40 [ 1318.200876][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.211131][ T5916] usb 3-1: Product: syz [ 1318.217536][ T5916] usb 3-1: Manufacturer: syz [ 1318.224258][ T5916] usb 3-1: SerialNumber: syz [ 1318.587330][ T5916] usbhid 3-1:1.0: can't add hid device: -71 [ 1318.667792][ T5916] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1318.913314][ T5916] usb 3-1: USB disconnect, device number 87 [ 1320.135008][T24975] fuse: Unknown parameter 'fd0x0000000000000005' [ 1320.650869][T24996] No control pipe specified [ 1321.283396][ T5916] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1321.423490][T25010] comedi comedi1: adq12b: I/O port conflict (0xcf7,16) [ 1321.443782][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 1321.449020][T25010] syz.0.4628 (25010) used obsolete PPPIOCDETACH ioctl [ 1321.457668][ T5916] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1321.550562][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.560757][ T5916] usb 2-1: config 0 has no interface number 0 [ 1321.569108][ T5916] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1321.579005][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.590720][ T5916] usb 2-1: Product: syz [ 1321.603270][ T5916] usb 2-1: Manufacturer: syz [ 1321.608123][ T5916] usb 2-1: SerialNumber: syz [ 1321.609108][T25023] input: syz0 as /devices/virtual/input/input56 [ 1321.620341][ T5916] usb 2-1: config 0 descriptor?? [ 1321.646640][T25023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4632'. [ 1321.680598][T25023] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25023 comm=syz.2.4632 [ 1322.417530][ T5916] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 1322.433366][ T5916] usb 2-1: No valid video chain found. [ 1322.809238][T25050] siw: device registration error -23 [ 1323.497593][T25056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1323.517498][T25056] random: crng reseeded on system resumption [ 1323.663616][ T30] audit: type=1400 audit(1756105448.879:1560): avc: denied { write } for pid=25048 comm="syz.0.4640" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1323.966664][ T24] usb 2-1: USB disconnect, device number 17 [ 1324.583925][T25068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4645'. [ 1324.622282][T25068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4645'. [ 1324.633095][T25068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4645'. [ 1324.642924][T25068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4645'. [ 1329.919162][T25115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25115 comm=syz.0.4658 [ 1330.632273][ T30] audit: type=1400 audit(1756105455.389:1561): avc: denied { write } for pid=25118 comm="syz.2.4659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1331.777974][T25146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4661'. [ 1331.880331][T25146] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4661'. [ 1334.009996][T25194] netlink: 'syz.2.4674': attribute type 27 has an invalid length. [ 1334.017996][T25194] lo: left allmulticast mode [ 1334.022826][T25194] tunl0: left allmulticast mode [ 1334.028107][T25194] gre0: left allmulticast mode [ 1334.033746][T25194] gretap0: left allmulticast mode [ 1334.491396][T25194] erspan0: left allmulticast mode [ 1334.665027][T25194] ip_vti0: left allmulticast mode [ 1334.722974][T25194] ip6_vti0: left allmulticast mode [ 1334.793833][T25194] sit0: left allmulticast mode [ 1334.801525][T25199] netlink: 'syz.2.4674': attribute type 4 has an invalid length. [ 1335.000582][T25194] ip6tnl0: left allmulticast mode [ 1335.468993][T25194] ip6gre0: left allmulticast mode [ 1335.474912][T25194] syz_tun: left allmulticast mode [ 1335.480156][T25194] ip6gretap0: left allmulticast mode [ 1335.535400][T25199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4674'. [ 1335.585351][T25194] bridge0: left allmulticast mode [ 1335.893824][T25194] vcan0: left allmulticast mode [ 1335.909047][T25194] bond0: left allmulticast mode [ 1335.919734][T25194] team0: left allmulticast mode [ 1335.925095][T25194] dummy0: left allmulticast mode [ 1335.933344][ T5917] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1335.964383][T25194] nlmon0: left allmulticast mode [ 1335.975108][T25194] caif0: left allmulticast mode [ 1335.980307][T25194] vxcan0: left allmulticast mode [ 1335.985547][T25194] vxcan1: left allmulticast mode [ 1335.990719][T25194] veth0: left allmulticast mode [ 1335.995924][T25194] veth1: left allmulticast mode [ 1336.001144][T25194] wg0: left allmulticast mode [ 1336.006215][T25194] wg1: left allmulticast mode [ 1336.011222][T25194] wg2: left allmulticast mode [ 1336.016284][T25194] veth0_to_bridge: left allmulticast mode [ 1336.022593][T25194] veth1_to_bridge: left allmulticast mode [ 1336.028957][T25194] veth0_to_bond: left allmulticast mode [ 1336.034868][T25194] bond_slave_0: left allmulticast mode [ 1336.040664][T25194] veth1_to_bond: left allmulticast mode [ 1336.046529][T25194] bond_slave_1: left allmulticast mode [ 1336.052314][T25194] veth0_to_team: left allmulticast mode [ 1336.058191][T25194] team_slave_0: left allmulticast mode [ 1336.063952][T25194] veth1_to_team: left allmulticast mode [ 1336.069816][T25194] team_slave_1: left allmulticast mode [ 1336.075616][T25194] veth0_to_batadv: left allmulticast mode [ 1336.081609][T25194] batadv_slave_0: left allmulticast mode [ 1336.087613][T25194] veth1_to_batadv: left allmulticast mode [ 1336.093670][T25194] batadv_slave_1: left allmulticast mode [ 1336.113430][T25194] xfrm0: left allmulticast mode [ 1336.123502][T25194] veth0_to_hsr: left allmulticast mode [ 1336.143564][T25194] veth1_to_hsr: left allmulticast mode [ 1336.149598][T25194] hsr0: left allmulticast mode [ 1336.154451][T25194] hsr_slave_0: left allmulticast mode [ 1336.159829][T25194] hsr_slave_1: left allmulticast mode [ 1336.165570][T25194] veth1_virt_wifi: left allmulticast mode [ 1336.171601][T25194] veth0_virt_wifi: left allmulticast mode [ 1336.177695][T25194] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 1336.185373][T25194] veth0_macvtap: left allmulticast mode [ 1336.191078][T25194] macvtap0: left allmulticast mode [ 1336.225917][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 1336.233028][ T5917] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1336.241675][T25194] veth1_macvtap: left allmulticast mode [ 1336.248624][T25194] macsec0: left promiscuous mode [ 1336.253645][T25194] macsec0: left allmulticast mode [ 1336.283090][ T5917] usb 3-1: config 0 has no interface number 0 [ 1336.294809][T25194] geneve0: left allmulticast mode [ 1336.301224][T25194] geneve1: left allmulticast mode [ 1336.307267][T25194] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1336.314536][T25194] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1336.322996][T25194] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 1336.330825][T25194] netdevsim netdevsim2 netdevsim2: left allmulticast mode [ 1336.339091][T25194] netdevsim netdevsim2 netdevsim3: left allmulticast mode [ 1336.346878][T25194] mac80211_hwsim hwsim41 wlan1: left allmulticast mode [ 1336.354836][T25194] batadv1: left allmulticast mode [ 1336.360490][T25194] bond1: left allmulticast mode [ 1336.366294][T25194] vcan1: left allmulticast mode [ 1336.371581][T25194] syztnl1: left allmulticast mode [ 1336.377754][T25194] bridge1: left allmulticast mode [ 1336.383512][T25194] veth2: left allmulticast mode [ 1336.389286][T25194] veth3: left allmulticast mode [ 1336.394416][T25194] veth4: left allmulticast mode [ 1336.399633][T25194] veth5: left allmulticast mode [ 1336.409905][T25194] geneve2: left allmulticast mode [ 1336.418448][ T5917] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1336.427698][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.436051][T25194] bond2: left allmulticast mode [ 1336.441057][ T5917] usb 3-1: Product: syz [ 1336.445622][T25194] geneve3: left allmulticast mode [ 1336.450708][ T5917] usb 3-1: Manufacturer: syz [ 1336.458980][ T5917] usb 3-1: SerialNumber: syz [ 1336.466229][T25194] gtp0: left promiscuous mode [ 1336.472540][ T5917] usb 3-1: config 0 descriptor?? [ 1336.508474][ T5917] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1337.714047][ T5917] gspca_spca1528: reg_w err -110 [ 1337.734648][ T5917] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 1338.222837][T25247] FAULT_INJECTION: forcing a failure. [ 1338.222837][T25247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1338.236403][T25247] CPU: 0 UID: 0 PID: 25247 Comm: syz.0.4691 Not tainted syzkaller #0 PREEMPT(full) [ 1338.236427][T25247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1338.236438][T25247] Call Trace: [ 1338.236445][T25247] [ 1338.236452][T25247] dump_stack_lvl+0x16c/0x1f0 [ 1338.236478][T25247] should_fail_ex+0x512/0x640 [ 1338.236503][T25247] _copy_to_user+0x32/0xd0 [ 1338.236529][T25247] simple_read_from_buffer+0xcb/0x170 [ 1338.236551][T25247] proc_fail_nth_read+0x197/0x240 [ 1338.236573][T25247] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1338.236597][T25247] ? rw_verify_area+0xcf/0x6c0 [ 1338.236624][T25247] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1338.236649][T25247] vfs_read+0x1e4/0xcf0 [ 1338.236673][T25247] ? __pfx___mutex_lock+0x10/0x10 [ 1338.236694][T25247] ? __pfx_vfs_read+0x10/0x10 [ 1338.236722][T25247] ? __fget_files+0x20e/0x3c0 [ 1338.236753][T25247] ksys_read+0x12a/0x250 [ 1338.236771][T25247] ? __pfx_ksys_read+0x10/0x10 [ 1338.236799][T25247] do_syscall_64+0xcd/0x4c0 [ 1338.236823][T25247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.236842][T25247] RIP: 0033:0x7fb1af58d5fc [ 1338.236857][T25247] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1338.236874][T25247] RSP: 002b:00007fb1b0444030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1338.236892][T25247] RAX: ffffffffffffffda RBX: 00007fb1af7b6180 RCX: 00007fb1af58d5fc [ 1338.236904][T25247] RDX: 000000000000000f RSI: 00007fb1b04440a0 RDI: 0000000000000006 [ 1338.236915][T25247] RBP: 00007fb1b0444090 R08: 0000000000000000 R09: 0000000000000000 [ 1338.236926][T25247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1338.236936][T25247] R13: 00007fb1af7b6218 R14: 00007fb1af7b6180 R15: 00007ffea9149d98 [ 1338.236970][T25247] [ 1338.960514][T25255] overlayfs: failed lookup in lower (newroot/323, name='bus', err=-40): overlapping layers [ 1339.218227][ T5994] usb 3-1: USB disconnect, device number 88 [ 1339.456139][T21144] Bluetooth: hci3: unexpected event 0x09 length: 6 > 3 [ 1340.157341][T25278] netlink: 'syz.0.4700': attribute type 2 has an invalid length. [ 1341.803503][ T5917] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1342.006662][ T5917] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 1342.125958][ T5917] usb 6-1: can't read configurations, error -22 [ 1342.393299][ T5917] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1342.541367][T25303] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4707'. [ 1342.694587][ T5917] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 1342.705442][ T5917] usb 6-1: can't read configurations, error -22 [ 1342.743887][ T5917] usb usb6-port1: attempt power cycle [ 1343.083346][ T5917] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1343.133980][ T5917] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 1343.163555][ T5917] usb 6-1: can't read configurations, error -22 [ 1343.493341][ T5917] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1343.547103][ T5917] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 1343.579107][ T5917] usb 6-1: can't read configurations, error -22 [ 1343.601609][ T5917] usb usb6-port1: unable to enumerate USB device [ 1345.022802][T25350] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1347.500641][T25381] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4725'. [ 1347.569031][T25381] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1347.922875][T25387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4726'. [ 1347.953478][ T5916] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1348.104465][T25391] nfs: Unknown parameter '' [ 1348.243799][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 1348.262942][ T5916] usb 3-1: config 1 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1348.321117][ T5916] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1348.458317][ T5916] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 1348.513300][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.521308][ T5916] usb 3-1: Product: 㠊 [ 1348.541735][ T5916] usb 3-1: Manufacturer: 孕溯ቻ鬘썪侌ꡆ⏊荕咱텅馶혨쓾駢䯁轂甌남袡発峝ࢸ녰簷폠㚟ꠤ㖲嬏ত᤭붑༯岩찣눈ᴔꗤ뿛蟂鞍몎㜫⟷ކ鿟乮䤒⩭湧欃컍씕࢒閨뻫脅鰊퍪ᰄ긤庂퇕ꩠﲧ졿⧫醳汱疝ꟑힳﱇ鶜䝙჎뚜鬛 [ 1348.568324][ T5916] usb 3-1: SerialNumber: syz [ 1348.911767][ T5916] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input57 [ 1348.975197][ T5916] usb 3-1: USB disconnect, device number 89 [ 1348.991589][T25398] binder: 25397:25398 ioctl c00c620f 200000000080 returned -22 [ 1349.035180][T25398] binder: 25397:25398 ioctl c00c620f 200000000080 returned -22 [ 1349.049525][T25403] netlink: 'syz.1.4732': attribute type 2 has an invalid length. [ 1349.117033][T25408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4734'. [ 1350.420352][T25420] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4738'. [ 1350.567522][T25420] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4738'. [ 1351.196100][T25433] netlink: 'syz.5.4741': attribute type 3 has an invalid length. [ 1351.444895][T25438] tmpfs: Invalid uid '0x00000000ffffffff' [ 1351.450783][ T30] audit: type=1400 audit(1756105476.809:1562): avc: denied { create } for pid=25436 comm="syz.2.4744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1351.486117][T25438] overlay: Unknown parameter 'smackfsfloor' [ 1351.516157][ T30] audit: type=1400 audit(1756105476.809:1563): avc: denied { getopt } for pid=25436 comm="syz.2.4744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1351.540247][T25440] lo speed is unknown, defaulting to 1000 [ 1351.598350][ T30] audit: type=1400 audit(1756105476.859:1564): avc: denied { write } for pid=25436 comm="syz.2.4744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1351.639130][T25441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4743'. [ 1351.666259][T19634] netdevsim netdevsim5 : set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.691343][T19634] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.713861][T25440] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4743'. [ 1351.719234][T19634] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.732643][T19634] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.742329][T25444] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4745'. [ 1352.162666][T25454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4749'. [ 1352.251878][T25454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1352.269385][T25457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1352.277491][T25457] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 1352.320522][T25457] bond1: (slave vcan1): Error -95 calling set_mac_address [ 1353.330963][ T30] audit: type=1326 audit(1756105478.689:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25474 comm="syz.5.4753" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76d538ebe9 code=0x0 [ 1355.488056][T25502] No control pipe specified [ 1356.060593][T25511] syzkaller1: entered promiscuous mode [ 1356.070416][T25511] syzkaller1: entered allmulticast mode [ 1358.640862][ T30] audit: type=1326 audit(1756105483.999:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25542 comm="syz.7.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526098ebe9 code=0x7ffc0000 [ 1358.813112][ T30] audit: type=1326 audit(1756105484.039:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25542 comm="syz.7.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526098ebe9 code=0x7ffc0000 [ 1358.836591][ C1] vkms_vblank_simulate: vblank timer overrun [ 1358.963241][ T30] audit: type=1326 audit(1756105484.039:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25542 comm="syz.7.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f526098ebe9 code=0x7ffc0000 [ 1359.176609][ T30] audit: type=1326 audit(1756105484.039:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25542 comm="syz.7.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526098ebe9 code=0x7ffc0000 [ 1359.769044][T25557] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4776'. [ 1360.640160][ T30] audit: type=1400 audit(1756105485.999:1570): avc: denied { name_bind } for pid=25572 comm="syz.7.4782" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1360.909480][T25582] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4784'. [ 1361.195352][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.804353][ T30] audit: type=1400 audit(1756105487.169:1571): avc: denied { ioctl } for pid=25573 comm="syz.1.4783" path="socket:[85857]" dev="sockfs" ino=85857 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1361.933616][T25575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4783'. [ 1362.185590][T25598] overlayfs: failed lookup in lower (newroot/358, name='bus', err=-40): overlapping layers [ 1362.355885][T25600] fuse: Unknown parameter 'fd?0x0000000000000003' [ 1362.428040][ T30] audit: type=1400 audit(1756105487.789:1572): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.186 dest=40668 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1362.453058][ C0] vkms_vblank_simulate: vblank timer overrun [ 1366.957047][T25648] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1367.316770][T25659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4806'. [ 1367.583601][ T5994] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1367.782807][ T5994] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1367.791618][ T5994] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1367.805164][ T5994] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1367.814917][ T5994] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1367.826256][ T5994] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1367.839989][ T5994] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1367.850825][ T5994] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1367.858972][ T5994] usb 2-1: Product: syz [ 1367.863242][ T5994] usb 2-1: Manufacturer: syz [ 1367.888553][ T5994] cdc_wdm 2-1:1.0: skipping garbage [ 1367.893958][ T5994] cdc_wdm 2-1:1.0: skipping garbage [ 1367.913560][ T5994] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1367.919534][ T5994] cdc_wdm 2-1:1.0: Unknown control protocol [ 1368.136370][ T5994] usb 2-1: USB disconnect, device number 18 [ 1369.063294][ T5994] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1369.226681][ T5994] usb 2-1: config 0 has an invalid descriptor of length 179, skipping remainder of the config [ 1369.240779][ T5994] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1369.249863][ T5994] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1369.261100][ T5994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.271349][ T5994] usb 2-1: config 0 descriptor?? [ 1370.363569][T25681] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4811'. [ 1372.909535][ T5994] usb 2-1: string descriptor 0 read error: -71 [ 1372.915747][T25715] netlink: 'syz.2.4821': attribute type 11 has an invalid length. [ 1372.963645][ T5994] usb 2-1: USB disconnect, device number 19 [ 1373.004623][ T30] audit: type=1800 audit(1756105498.359:1573): pid=25716 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.4819" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1373.163341][ T5917] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1373.325550][ T5917] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1373.335189][ T5917] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1373.355616][ T5917] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1373.378708][ T5917] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1373.403337][ T5917] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1373.430085][ T5917] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1373.443260][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1373.472858][ T5917] usb 6-1: Product: syz [ 1373.484288][ T5917] usb 6-1: Manufacturer: syz [ 1373.541475][ T5917] cdc_wdm 6-1:1.0: skipping garbage [ 1373.553429][ T5917] cdc_wdm 6-1:1.0: skipping garbage [ 1373.580191][ T5917] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1373.636133][ T5917] cdc_wdm 6-1:1.0: Unknown control protocol [ 1374.018396][ T5917] usb 6-1: USB disconnect, device number 101 [ 1374.434488][ T5917] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1374.755315][ T5917] usb 6-1: config 0 has an invalid descriptor of length 179, skipping remainder of the config [ 1374.785333][ T5917] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1374.797524][ T5917] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1374.807203][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.818828][ T5917] usb 6-1: config 0 descriptor?? [ 1375.613281][ T5994] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1376.715002][ T5994] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.767250][ T5994] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1376.776378][ T5994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.793953][ T5994] usb 3-1: config 0 descriptor?? [ 1376.808480][ T5994] pwc: Askey VC010 type 2 USB webcam detected. [ 1377.119255][T25774] overlayfs: overlapping lowerdir path [ 1377.210347][T25775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1377.548719][ T5994] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1377.563754][ T5994] pwc: recv_control_msg error -32 req 02 val 2700 [ 1377.572397][ T5994] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1377.585921][ T5994] pwc: recv_control_msg error -32 req 04 val 1000 [ 1377.614248][ T5994] pwc: recv_control_msg error -32 req 04 val 1300 [ 1377.914635][ T5994] pwc: recv_control_msg error -71 req 04 val 1400 [ 1377.931678][ T5917] usb 6-1: string descriptor 0 read error: -71 [ 1377.941157][ T5917] usb 6-1: USB disconnect, device number 102 [ 1377.950998][ T5994] pwc: recv_control_msg error -71 req 02 val 2000 [ 1377.972411][ T5994] pwc: recv_control_msg error -71 req 02 val 2100 [ 1377.980669][ T5994] pwc: recv_control_msg error -71 req 04 val 1500 [ 1377.988312][ T5994] pwc: recv_control_msg error -71 req 02 val 2500 [ 1377.999902][ T5994] pwc: recv_control_msg error -71 req 02 val 2400 [ 1378.007254][ T5994] pwc: recv_control_msg error -71 req 02 val 2600 [ 1378.022719][ T5994] pwc: recv_control_msg error -71 req 02 val 2900 [ 1378.032551][ T5994] pwc: recv_control_msg error -71 req 02 val 2800 [ 1378.040464][ T5994] pwc: recv_control_msg error -71 req 04 val 1100 [ 1378.061242][ T5994] pwc: recv_control_msg error -71 req 04 val 1200 [ 1378.086112][ T5994] pwc: Registered as video103. [ 1378.094738][ T5994] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input58 [ 1378.114774][ T5994] usb 3-1: USB disconnect, device number 90 [ 1379.188417][T25816] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20000 [ 1379.206253][T25817] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4844'. [ 1379.610972][T25826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4857'. [ 1380.425805][T25832] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4858'. [ 1380.629919][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064eaac00: rx timeout, send abort [ 1380.640440][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888064eaac00: 0x3f001: (3) A timeout occurred and this is the connection abort to close the session. [ 1380.654928][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064ea8400: rx timeout, send abort [ 1380.663553][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888064ea8400: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 1380.678771][ T30] audit: type=1400 audit(1756105506.019:1574): avc: denied { read } for pid=5200 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1380.710845][ T30] audit: type=1400 audit(1756105506.019:1575): avc: denied { search } for pid=5200 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1380.732887][ T30] audit: type=1400 audit(1756105506.019:1576): avc: denied { search } for pid=5200 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1380.754963][ T30] audit: type=1400 audit(1756105506.019:1577): avc: denied { add_name } for pid=5200 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1380.781387][ T30] audit: type=1400 audit(1756105506.019:1578): avc: denied { create } for pid=5200 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1381.033236][ T30] audit: type=1400 audit(1756105506.019:1579): avc: denied { append open } for pid=5200 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1381.164308][ T30] audit: type=1400 audit(1756105506.019:1580): avc: denied { getattr } for pid=5200 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1381.406248][T25849] No control pipe specified [ 1381.576223][T25854] gre0: left allmulticast mode [ 1381.589225][T25854] netlink: 136 bytes leftover after parsing attributes in process `syz.7.4867'. [ 1383.424141][ T5994] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1384.483245][ T5994] usb 3-1: Using ep0 maxpacket: 16 [ 1384.495177][ T5994] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1384.504453][T25891] FAULT_INJECTION: forcing a failure. [ 1384.504453][T25891] name failslab, interval 1, probability 0, space 0, times 0 [ 1384.519459][ T5994] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1384.532200][T25891] CPU: 0 UID: 0 PID: 25891 Comm: syz.0.4880 Not tainted syzkaller #0 PREEMPT(full) [ 1384.532223][T25891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1384.532233][T25891] Call Trace: [ 1384.532239][T25891] [ 1384.532246][T25891] dump_stack_lvl+0x16c/0x1f0 [ 1384.532271][T25891] should_fail_ex+0x512/0x640 [ 1384.532291][T25891] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1384.532313][T25891] should_failslab+0xc2/0x120 [ 1384.532333][T25891] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1384.532351][T25891] ? __alloc_skb+0x2b2/0x380 [ 1384.532371][T25891] __alloc_skb+0x2b2/0x380 [ 1384.532388][T25891] ? __pfx___alloc_skb+0x10/0x10 [ 1384.532414][T25891] netlink_ack+0x15d/0xb80 [ 1384.532434][T25891] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1384.532460][T25891] netlink_rcv_skb+0x332/0x420 [ 1384.532480][T25891] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1384.532509][T25891] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1384.532541][T25891] ? ns_capable+0xd7/0x110 [ 1384.532566][T25891] nfnetlink_rcv+0x1b3/0x430 [ 1384.532592][T25891] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1384.532616][T25891] ? netlink_deliver_tap+0x1ae/0xd30 [ 1384.532634][T25891] ? selinux_netlink_send+0x578/0x830 [ 1384.532656][T25891] ? is_vmalloc_addr+0x86/0xa0 [ 1384.532678][T25891] netlink_unicast+0x5a7/0x870 [ 1384.532704][T25891] ? __pfx_netlink_unicast+0x10/0x10 [ 1384.532725][T25891] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1384.532753][T25891] netlink_sendmsg+0x8d1/0xdd0 [ 1384.532779][T25891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1384.532809][T25891] ____sys_sendmsg+0xa95/0xc70 [ 1384.532834][T25891] ? copy_msghdr_from_user+0x10a/0x160 [ 1384.532854][T25891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1384.532897][T25891] ___sys_sendmsg+0x134/0x1d0 [ 1384.532919][T25891] ? __pfx____sys_sendmsg+0x10/0x10 [ 1384.532972][T25891] __sys_sendmsg+0x16d/0x220 [ 1384.532993][T25891] ? __pfx___sys_sendmsg+0x10/0x10 [ 1384.533030][T25891] do_syscall_64+0xcd/0x4c0 [ 1384.533053][T25891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.533071][T25891] RIP: 0033:0x7fb1af58ebe9 [ 1384.533089][T25891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1384.533106][T25891] RSP: 002b:00007fb1b0486038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1384.533123][T25891] RAX: ffffffffffffffda RBX: 00007fb1af7b5fa0 RCX: 00007fb1af58ebe9 [ 1384.533135][T25891] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1384.533145][T25891] RBP: 00007fb1b0486090 R08: 0000000000000000 R09: 0000000000000000 [ 1384.533157][T25891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1384.533170][T25891] R13: 00007fb1af7b6038 R14: 00007fb1af7b5fa0 R15: 00007ffea9149d98 [ 1384.533195][T25891] [ 1384.536086][ T5994] usb 3-1: config 1 has no interface number 1 [ 1384.603994][T25896] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4881'. [ 1384.610455][ T5994] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1384.633852][ T5917] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1384.640248][ T5994] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1384.823758][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 1384.828844][ T5994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.906386][ T5994] usb 3-1: Product: syz [ 1384.940448][T25906] loop9: detected capacity change from 0 to 7 [ 1384.955249][T25906] buffer_io_error: 4 callbacks suppressed [ 1384.955280][T25906] Buffer I/O error on dev loop9, logical block 0, async page read [ 1384.970649][T25906] Buffer I/O error on dev loop9, logical block 0, async page read [ 1384.980566][T25906] Buffer I/O error on dev loop9, logical block 0, async page read [ 1384.989092][T25906] Buffer I/O error on dev loop9, logical block 0, async page read [ 1384.997823][T25906] Buffer I/O error on dev loop9, logical block 0, async page read [ 1385.007754][T25906] Buffer I/O error on dev loop9, logical block 0, async page read [ 1385.016522][T25906] Buffer I/O error on dev loop9, logical block 0, async page read [ 1385.025103][T25906] ldm_validate_partition_table(): Disk read failed. [ 1385.032115][T25906] Buffer I/O error on dev loop9, logical block 0, async page read [ 1385.042275][T25906] Buffer I/O error on dev loop9, logical block 0, async page read [ 1385.050657][T25906] Buffer I/O error on dev loop9, logical block 0, async page read [ 1385.059958][T25906] Dev loop9: unable to read RDB block 0 [ 1385.067313][T25906] loop9: unable to read partition table [ 1385.075758][T25906] loop9: partition table beyond EOD, truncated [ 1385.082066][T25906] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1385.082066][T25906] ) failed (rc=-5) [ 1385.176192][ T5994] usb 3-1: Manufacturer: syz [ 1385.180922][ T5994] usb 3-1: SerialNumber: syz [ 1385.293332][ T5917] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1385.304954][ T5917] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1385.324448][ T5917] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1385.333609][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.360577][ T5917] usb 2-1: config 0 descriptor?? [ 1385.363543][ T30] audit: type=1400 audit(1756105510.719:1581): avc: denied { read append } for pid=25910 comm="syz.7.4886" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1385.422890][ T30] audit: type=1400 audit(1756105510.719:1582): avc: denied { open } for pid=25910 comm="syz.7.4886" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1385.474260][T25915] nbd: socks must be embedded in a SOCK_ITEM attr [ 1385.482834][T25915] block nbd4: shutting down sockets [ 1385.504889][ T5994] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 1385.523322][ T5994] usb 3-1: 2:1 : sample bitwidth 100 in over sample bytes 2 [ 1385.534186][ T5994] usb 3-1: 2:1: cannot set freq 16101201 to ep 0x82 [ 1385.577304][ T5994] usb 3-1: USB disconnect, device number 91 [ 1385.690039][T25919] lo speed is unknown, defaulting to 1000 [ 1386.110619][ T5917] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1386.497190][ T30] audit: type=1400 audit(1756105511.839:1583): avc: denied { watch } for pid=25886 comm="syz.1.4877" path="pipe:[87659]" dev="pipefs" ino=87659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1386.664147][T25933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4877'. [ 1386.998015][ T5994] usb 2-1: USB disconnect, device number 20 [ 1388.159426][ T30] audit: type=1326 audit(1756105513.519:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25954 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f758ebe9 code=0x7ffc0000 [ 1388.398842][ T30] audit: type=1326 audit(1756105513.609:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25954 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f08f758ebe9 code=0x7ffc0000 [ 1388.437019][T25961] random: crng reseeded on system resumption [ 1388.503992][ T30] audit: type=1326 audit(1756105513.609:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25954 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f758ebe9 code=0x7ffc0000 [ 1388.562845][ T30] audit: type=1326 audit(1756105513.609:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25954 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f758ebe9 code=0x7ffc0000 [ 1388.771686][ T30] audit: type=1326 audit(1756105513.609:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25954 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f08f758ebe9 code=0x7ffc0000 [ 1388.980261][T25972] netlink: 'syz.7.4898': attribute type 29 has an invalid length. [ 1389.091924][ T30] audit: type=1326 audit(1756105513.609:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25954 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f758ebe9 code=0x7ffc0000 [ 1389.409031][ T30] audit: type=1326 audit(1756105513.609:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25954 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f758ebe9 code=0x7ffc0000 [ 1389.563457][ T30] audit: type=1326 audit(1756105513.609:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25954 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f08f758ebe9 code=0x7ffc0000 [ 1389.711218][ T30] audit: type=1400 audit(1756105513.789:1592): avc: denied { lock } for pid=25954 comm="syz.1.4896" path="socket:[88405]" dev="sockfs" ino=88405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1390.420081][T25995] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1390.526323][T25995] bridge1: entered allmulticast mode [ 1390.534874][T25995] veth0_macvtap.3: entered allmulticast mode [ 1390.541335][T25995] bond1: entered allmulticast mode [ 1391.241506][T26014] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4909'. [ 1392.710832][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1392.710849][ T30] audit: type=1400 audit(1756105518.069:1594): avc: denied { listen } for pid=26032 comm="syz.0.4915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1394.239799][T26083] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4926'. [ 1395.529394][T26100] FAULT_INJECTION: forcing a failure. [ 1395.529394][T26100] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1395.646138][T26100] CPU: 1 UID: 0 PID: 26100 Comm: syz.0.4932 Not tainted syzkaller #0 PREEMPT(full) [ 1395.646165][T26100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1395.646175][T26100] Call Trace: [ 1395.646182][T26100] [ 1395.646189][T26100] dump_stack_lvl+0x16c/0x1f0 [ 1395.646213][T26100] should_fail_ex+0x512/0x640 [ 1395.646239][T26100] should_fail_alloc_page+0xe7/0x130 [ 1395.646263][T26100] prepare_alloc_pages+0x3c2/0x610 [ 1395.646291][T26100] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1395.646314][T26100] ? find_held_lock+0x2b/0x80 [ 1395.646340][T26100] ? mark_held_locks+0x49/0x80 [ 1395.646367][T26100] ? finish_task_switch.isra.0+0x221/0xc10 [ 1395.646390][T26100] ? lockdep_hardirqs_on+0x7c/0x110 [ 1395.646411][T26100] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1395.646430][T26100] ? rcu_is_watching+0x12/0xc0 [ 1395.646453][T26100] ? trace_sched_exit_tp+0xd1/0x120 [ 1395.646473][T26100] ? __schedule+0x11a3/0x5de0 [ 1395.646501][T26100] ? rcu_is_watching+0x12/0xc0 [ 1395.646523][T26100] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1395.646546][T26100] ? policy_nodemask+0xea/0x4e0 [ 1395.646575][T26100] alloc_pages_mpol+0x1fb/0x550 [ 1395.646597][T26100] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1395.646629][T26100] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1395.646656][T26100] vma_alloc_folio_noprof+0xed/0x1e0 [ 1395.646680][T26100] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1395.646707][T26100] ? do_pte_missing+0x115b/0x3ba0 [ 1395.646739][T26100] do_pte_missing+0x2230/0x3ba0 [ 1395.646766][T26100] ? find_held_lock+0x2b/0x80 [ 1395.646796][T26100] __handle_mm_fault+0x152a/0x2a50 [ 1395.646828][T26100] ? mt_find+0x3ef/0xa30 [ 1395.646852][T26100] ? __pfx___handle_mm_fault+0x10/0x10 [ 1395.646877][T26100] ? __pfx_mt_find+0x10/0x10 [ 1395.646917][T26100] ? find_vma+0xbf/0x140 [ 1395.646937][T26100] ? __pfx_find_vma+0x10/0x10 [ 1395.646962][T26100] handle_mm_fault+0x589/0xd10 [ 1395.646990][T26100] ? __bpf_trace_exceptions+0x1/0x40 [ 1395.647022][T26100] do_user_addr_fault+0x7a6/0x1370 [ 1395.647043][T26100] ? rcu_is_watching+0x12/0xc0 [ 1395.647070][T26100] exc_page_fault+0x5c/0xb0 [ 1395.647093][T26100] asm_exc_page_fault+0x26/0x30 [ 1395.647111][T26100] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1395.647136][T26100] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1395.647153][T26100] RSP: 0018:ffffc9000f26f8f0 EFLAGS: 00050202 [ 1395.647169][T26100] RAX: 0000000000000001 RBX: 0000000000000fff RCX: 0000000000000fff [ 1395.647180][T26100] RDX: 0000000000000000 RSI: ffff8880658c8001 RDI: 0000200000001740 [ 1395.647191][T26100] RBP: 0000200000001740 R08: 0000000000000000 R09: ffffed100cb191ff [ 1395.647202][T26100] R10: ffff8880658c8fff R11: 0000000000000000 R12: ffffc9000f26fda0 [ 1395.647214][T26100] R13: 000020000000273f R14: ffff8880658c8001 R15: 00007ffffffff000 [ 1395.647240][T26100] _copy_to_iter+0x383/0x1710 [ 1395.647272][T26100] ? __pfx__copy_to_iter+0x10/0x10 [ 1395.647294][T26100] ? irqentry_exit+0x3b/0x90 [ 1395.647311][T26100] ? lockdep_hardirqs_on+0x7c/0x110 [ 1395.647342][T26100] copy_page_to_iter+0x12a/0x1e0 [ 1395.647369][T26100] filemap_read+0x6b1/0xe40 [ 1395.647404][T26100] ? __pfx_filemap_read+0x10/0x10 [ 1395.647446][T26100] ? __pfx_down_read+0x10/0x10 [ 1395.647467][T26100] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1395.647489][T26100] ? avc_policy_seqno+0x9/0x20 [ 1395.647506][T26100] ? selinux_file_permission+0x126/0x660 [ 1395.647537][T26100] blkdev_read_iter+0x1ac/0x500 [ 1395.647560][T26100] vfs_read+0x8bf/0xcf0 [ 1395.647585][T26100] ? __pfx_vfs_read+0x10/0x10 [ 1395.647601][T26100] ? find_held_lock+0x2b/0x80 [ 1395.647641][T26100] ksys_read+0x12a/0x250 [ 1395.647658][T26100] ? __pfx_ksys_read+0x10/0x10 [ 1395.647685][T26100] do_syscall_64+0xcd/0x4c0 [ 1395.647708][T26100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.647726][T26100] RIP: 0033:0x7fb1af58ebe9 [ 1395.647739][T26100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1395.647756][T26100] RSP: 002b:00007fb1b0486038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1395.647771][T26100] RAX: ffffffffffffffda RBX: 00007fb1af7b5fa0 RCX: 00007fb1af58ebe9 [ 1395.647783][T26100] RDX: 0000000000002020 RSI: 0000200000001740 RDI: 0000000000000004 [ 1395.647794][T26100] RBP: 00007fb1b0486090 R08: 0000000000000000 R09: 0000000000000000 [ 1395.647805][T26100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1395.647815][T26100] R13: 00007fb1af7b6038 R14: 00007fb1af7b5fa0 R15: 00007ffea9149d98 [ 1395.647840][T26100] [ 1396.096788][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.248803][T26105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4936'. [ 1396.263259][ T5994] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1396.263476][T26105] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1396.450688][ T5994] usb 2-1: Using ep0 maxpacket: 8 [ 1396.688952][ T5994] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1396.700975][ T5994] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1396.718757][T26118] ipvlan1: entered allmulticast mode [ 1396.724679][T26118] netdevsim netdevsim5 : left promiscuous mode [ 1396.732724][T26118] vlan2: entered allmulticast mode [ 1396.739103][T26118] veth2: entered allmulticast mode [ 1396.744536][T26118] veth3: entered allmulticast mode [ 1396.749692][ T5994] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1396.749895][T26118] veth4: entered allmulticast mode [ 1396.765160][T26118] veth5: entered allmulticast mode [ 1396.770483][T26118] veth6: entered allmulticast mode [ 1396.775930][T26118] veth7: entered allmulticast mode [ 1396.782458][T26118] veth8: entered allmulticast mode [ 1396.782458][ T5994] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1396.788418][T26118] veth9: entered allmulticast mode [ 1396.812957][ T5994] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1396.827221][ T5994] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1396.836435][ T5994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.845128][T26118] geneve2: entered allmulticast mode [ 1396.852520][T19617] netdevsim netdevsim5 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.865255][T19617] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.889533][T19617] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.899058][T19617] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.050428][ T5994] usb 2-1: GET_CAPABILITIES returned 0 [ 1397.059813][ T5994] usbtmc 2-1:16.0: can't read capabilities [ 1397.601033][T26136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1397.610248][T26136] buffer_io_error: 4 callbacks suppressed [ 1397.610258][T26136] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1397.646998][T26136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1397.677807][T26136] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1397.694299][T26136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1397.704227][T26136] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1397.713403][T26136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1397.722656][T26136] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1397.733681][T26136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1397.760812][T26136] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1397.795801][T26136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1397.806357][T26136] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1397.814681][T26136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1397.825496][T26136] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1397.883421][T26136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1397.913277][ T5917] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1397.923203][T26136] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1398.064900][T26136] ldm_validate_partition_table(): Disk read failed. [ 1398.071586][T26136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1398.081037][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 1398.096501][ T5917] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1398.108474][ T5917] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.138868][ T5917] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1398.148000][T26136] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1398.176609][T26136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1398.188718][ T5917] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1398.198681][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.215448][ T5917] usb 3-1: Product: syz [ 1398.219728][ T5917] usb 3-1: Manufacturer: syz [ 1398.224697][ T5917] usb 3-1: SerialNumber: syz [ 1398.230834][T26136] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1398.262986][T26136] Dev nbd1: unable to read RDB block 0 [ 1398.273685][T26136] nbd1: unable to read partition table [ 1398.549118][ T10] usb 2-1: USB disconnect, device number 21 [ 1398.584666][ T30] audit: type=1400 audit(1756105523.949:1595): avc: denied { append } for pid=26147 comm="syz.0.4947" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1398.584770][T26148] random: crng reseeded on system resumption [ 1398.688362][T26149] binder: 26147:26149 ioctl c0306201 0 returned -14 [ 1398.695667][T26149] binder: 26147:26149 ioctl 40045566 0 returned -22 [ 1398.730564][ T5917] usb 3-1: 0:2 : does not exist [ 1399.086544][T26151] netlink: 'syz.5.4948': attribute type 11 has an invalid length. [ 1399.805898][ T5917] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 1399.846012][ T5917] usb 3-1: USB disconnect, device number 92 [ 1399.854827][ T30] audit: type=1400 audit(1756105525.219:1596): avc: denied { append } for pid=26165 comm="syz.7.4954" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1400.173386][ T30] audit: type=1400 audit(1756105525.409:1597): avc: denied { mount } for pid=26165 comm="syz.7.4954" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1401.623473][ T5916] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1401.795081][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 1401.808931][ T5916] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1402.189232][ T5916] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1402.275262][ T5916] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1402.360787][ T5916] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1402.399421][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.549995][ T30] audit: type=1400 audit(1756105527.779:1598): avc: denied { map } for pid=26203 comm="syz.0.4966" path="socket:[89116]" dev="sockfs" ino=89116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1402.575331][ T5916] usb 2-1: config 0 descriptor?? [ 1402.582265][ T30] audit: type=1400 audit(1756105527.779:1599): avc: denied { read write accept } for pid=26203 comm="syz.0.4966" path="socket:[89116]" dev="sockfs" ino=89116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1402.623867][ T30] audit: type=1400 audit(1756105527.779:1600): avc: denied { bind } for pid=26203 comm="syz.0.4966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1403.067596][ T5917] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1403.343565][ T5917] usb 6-1: Using ep0 maxpacket: 32 [ 1403.360684][ T5917] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1403.370972][ T5917] usb 6-1: config 0 has no interface number 0 [ 1403.386519][ T5917] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1403.395895][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.405249][ T5917] usb 6-1: Product: syz [ 1403.409585][ T5917] usb 6-1: Manufacturer: syz [ 1403.414482][ T5917] usb 6-1: SerialNumber: syz [ 1403.421936][ T5917] usb 6-1: config 0 descriptor?? [ 1403.430610][ T5917] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1403.768263][ T5917] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1403.873557][ T5917] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1404.895481][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1404.905274][ T5917] usb 6-1: USB disconnect, device number 103 [ 1404.929289][ T5917] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1404.953565][ T5917] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1404.966240][ T5917] quatech2 6-1:0.51: device disconnected [ 1405.009854][ T5916] usbhid 2-1:0.0: can't add hid device: -71 [ 1405.020325][ T5916] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1405.052070][ T5916] usb 2-1: USB disconnect, device number 22 [ 1406.276213][T26264] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1406.283457][T26264] IPv6: NLM_F_CREATE should be set when creating new route [ 1406.416602][ T24] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1406.548635][T26266] syzkaller0: entered promiscuous mode [ 1406.554170][T26266] syzkaller0: entered allmulticast mode [ 1406.574156][T26266] syzkaller0: create flow: hash 201644185 index 1 [ 1406.915858][ T24] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1406.930491][ T24] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1406.976392][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1406.998932][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1407.049638][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1407.122218][T26259] syzkaller0: delete flow: hash 201644185 index 1 [ 1407.164177][ T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1407.173574][ T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1407.181613][ T24] usb 6-1: Product: syz [ 1407.186863][ T24] usb 6-1: Manufacturer: syz [ 1407.196522][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 1407.201828][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 1407.227530][ T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1407.379589][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 1407.400644][ T24] usb 6-1: USB disconnect, device number 104 [ 1407.913440][ T24] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1408.106966][ T24] usb 6-1: config 0 has an invalid descriptor of length 179, skipping remainder of the config [ 1408.193644][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1408.219393][ T24] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1408.228550][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.238454][ T24] usb 6-1: config 0 descriptor?? [ 1408.707829][T26289] overlayfs: failed lookup in lower (newroot/438, name='bus', err=-40): overlapping layers [ 1409.128782][T26303] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4994'. [ 1411.003524][ T24] usb 6-1: string descriptor 0 read error: -71 [ 1411.014825][ T24] usb 6-1: USB disconnect, device number 105 [ 1411.593597][ T5917] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1411.883968][T26329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4999'. [ 1411.918345][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 1411.929029][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1411.963473][ T5917] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1411.972565][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.104226][ T5917] usb 3-1: config 0 descriptor?? [ 1412.282593][ T30] audit: type=1400 audit(1756105537.639:1601): avc: denied { listen } for pid=26340 comm="syz.5.5006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1412.328314][ T30] audit: type=1400 audit(1756105537.639:1602): avc: denied { name_bind } for pid=26343 comm="syz.0.5007" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1412.359781][ T30] audit: type=1400 audit(1756105537.669:1603): avc: denied { ioctl } for pid=26340 comm="syz.5.5006" path="net:[4026533032]" dev="nsfs" ino=4026533032 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1412.389507][ T30] audit: type=1400 audit(1756105537.669:1604): avc: denied { ioctl } for pid=26340 comm="syz.5.5006" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1412.643300][ T24] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1412.795230][ T24] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1412.804053][ T24] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1412.814345][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1412.823371][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1412.834394][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1412.846885][ T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1412.856009][ T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1412.864094][ T24] usb 6-1: Product: syz [ 1412.868239][ T24] usb 6-1: Manufacturer: syz [ 1412.876334][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 1412.881535][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 1412.888064][ T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1412.894011][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 1413.086063][ T5916] usb 6-1: USB disconnect, device number 106 [ 1413.543330][ T24] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1413.716447][ T24] usb 6-1: config 0 has an invalid descriptor of length 179, skipping remainder of the config [ 1413.729179][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1413.739822][ T24] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1413.751665][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.773328][ T24] usb 6-1: config 0 descriptor?? [ 1414.141330][ T5917] usbhid 3-1:0.0: can't add hid device: -71 [ 1414.147479][ T5917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1414.191864][ T5917] usb 3-1: USB disconnect, device number 93 [ 1415.008940][ T30] audit: type=1326 audit(1756105540.369:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26379 comm="syz.1.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f758ebe9 code=0x7ffc0000 [ 1415.091788][ T30] audit: type=1326 audit(1756105540.369:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26379 comm="syz.1.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f758ebe9 code=0x7ffc0000 [ 1415.119482][T26380] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5017'. [ 1415.212586][ T30] audit: type=1326 audit(1756105540.399:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26379 comm="syz.1.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f08f758ebe9 code=0x7ffc0000 [ 1415.463361][ T24] usb 6-1: string descriptor 0 read error: -71 [ 1415.478076][ T24] usb 6-1: USB disconnect, device number 107 [ 1415.492522][T26394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5022'. [ 1415.579995][T26394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5022'. [ 1415.599617][ T30] audit: type=1326 audit(1756105540.399:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26379 comm="syz.1.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f758ebe9 code=0x7ffc0000 [ 1415.759291][T26402] overlay: Unknown parameter 'fsname' [ 1415.795477][ T30] audit: type=1326 audit(1756105540.399:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26379 comm="syz.1.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f758ebe9 code=0x7ffc0000 [ 1415.988529][ T30] audit: type=1326 audit(1756105540.399:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26379 comm="syz.1.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08f758ebe9 code=0x7ffc0000 [ 1416.155417][T26402] block device autoloading is deprecated and will be removed. [ 1416.234859][T26406] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5026'. [ 1416.857486][T26421] afs: Unknown parameter '00000000000000000000003' [ 1417.357031][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1417.357047][ T30] audit: type=1804 audit(1756105542.719:1638): pid=26436 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.5037" name="file0" dev="ramfs" ino=90324 res=1 errno=0 [ 1418.115499][T26449] futex_wake_op: syz.2.5037 tries to shift op by 32; fix this program [ 1418.284602][T26450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5039'. [ 1422.119726][T26472] lo speed is unknown, defaulting to 1000 [ 1422.168656][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1422.606244][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.643327][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1423.578434][T26507] input: syz1 as /devices/virtual/input/input59 [ 1423.693300][ T5994] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1423.815323][T26520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5059'. [ 1423.834844][T26520] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1423.845312][ T5994] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1423.863238][ T5994] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1423.873993][ T5994] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1423.893261][ T5994] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1423.904656][ T5994] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1423.918476][ T5994] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1423.928864][ T5994] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1423.938041][ T5994] usb 3-1: Product: syz [ 1423.942321][ T30] audit: type=1400 audit(1756105549.299:1639): avc: denied { write } for pid=26521 comm="syz.0.5060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1423.942369][ T5994] usb 3-1: Manufacturer: syz [ 1423.972537][ T5994] cdc_wdm 3-1:1.0: skipping garbage [ 1423.977903][ T5994] cdc_wdm 3-1:1.0: skipping garbage [ 1423.986909][ T5994] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1423.993007][ T5994] cdc_wdm 3-1:1.0: Unknown control protocol [ 1424.182924][ T5994] usb 3-1: USB disconnect, device number 94 [ 1425.098368][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1425.124132][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1425.131702][ T24] usb 2-1: can't read configurations, error -71 [ 1425.244964][ T5994] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1425.407460][ T5994] usb 3-1: config 0 has an invalid descriptor of length 179, skipping remainder of the config [ 1425.430032][ T5994] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1425.559634][ T5994] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1425.587204][ T5994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.783469][ T5994] usb 3-1: config 0 descriptor?? [ 1426.876770][T26563] netlink: 'syz.1.5071': attribute type 26 has an invalid length. [ 1427.060169][T26570] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1427.072277][T26570] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1427.203329][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1427.462092][T26573] netlink: 120 bytes leftover after parsing attributes in process `syz.7.5075'. [ 1427.494690][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1427.502034][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1427.528552][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1427.538662][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1427.603659][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1427.651980][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.665038][ T24] usb 2-1: config 0 descriptor?? [ 1427.827756][ T5994] usb 3-1: string descriptor 0 read error: -71 [ 1427.835566][ T5994] usb 3-1: USB disconnect, device number 95 [ 1428.698467][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 1428.723470][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1428.759612][ T24] usb 2-1: USB disconnect, device number 25 [ 1429.094654][T25468] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1429.105823][T25468] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1429.117916][T25468] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1429.127260][T25468] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1429.134846][T25468] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1429.183864][T26599] lo speed is unknown, defaulting to 1000 [ 1429.622664][T26599] chnl_net:caif_netlink_parms(): no params data found [ 1430.014630][ T5916] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1430.122653][T26599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.130498][T26599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.138753][T26599] bridge_slave_0: entered allmulticast mode [ 1430.147424][T26599] bridge_slave_0: entered promiscuous mode [ 1430.155660][T26599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.162837][T26599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.173634][T26599] bridge_slave_1: entered allmulticast mode [ 1430.180891][T26599] bridge_slave_1: entered promiscuous mode [ 1430.190419][ T5916] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1430.199302][ T5916] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1430.214415][ T5916] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1430.255620][ T5916] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1430.270328][ T5916] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1430.286808][ T5916] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1430.301247][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1430.314260][T26599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1430.329412][ T5916] usb 3-1: Product: syz [ 1430.433928][T26599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1430.662624][ T5916] usb 3-1: Manufacturer: syz [ 1430.676887][ T5916] cdc_wdm 3-1:1.0: skipping garbage [ 1430.812209][ T5916] cdc_wdm 3-1:1.0: skipping garbage [ 1430.851583][ T5916] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1430.857913][ T5916] cdc_wdm 3-1:1.0: Unknown control protocol [ 1430.867885][T26599] team0: Port device team_slave_0 added [ 1431.028267][ T5916] usb 3-1: USB disconnect, device number 96 [ 1431.204082][T25468] Bluetooth: hci4: command tx timeout [ 1431.206695][T26641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5093'. [ 1431.230910][T26641] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1431.374707][ T37] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1431.429855][T26599] team0: Port device team_slave_1 added [ 1431.633521][ T5916] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1431.771959][ T37] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1431.802530][T26599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1431.812372][ T5916] usb 3-1: config 0 has an invalid descriptor of length 179, skipping remainder of the config [ 1431.812393][T26599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1431.860150][ T5916] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1431.960389][T26599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1431.962511][T26599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1431.962525][T26599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1431.962548][T26599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1431.975629][ T5916] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1431.975654][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.988172][ T5916] usb 3-1: config 0 descriptor?? [ 1432.005612][ T37] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1432.480687][ C1] vkms_vblank_simulate: vblank timer overrun [ 1432.532175][ T37] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1432.576672][T26599] hsr_slave_0: entered promiscuous mode [ 1432.577825][T26599] hsr_slave_1: entered promiscuous mode [ 1432.578440][T26599] debugfs: 'hsr0' already exists in 'hsr' [ 1432.578453][T26599] Cannot create hsr debugfs directory [ 1433.082578][ T37] team0: left promiscuous mode [ 1433.082626][ T37] team_slave_0: left promiscuous mode [ 1433.082806][ T37] team_slave_1: left promiscuous mode [ 1433.083213][ T37] bridge0: port 3(team0) entered disabled state [ 1433.087717][ T37] bridge_slave_1: left promiscuous mode [ 1433.087889][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.094993][ T37] bridge_slave_0: left promiscuous mode [ 1433.095181][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.253297][T25468] Bluetooth: hci4: command tx timeout [ 1433.920502][ T5916] usb 3-1: string descriptor 0 read error: -71 [ 1433.921367][ T5916] usb 3-1: USB disconnect, device number 97 [ 1433.959423][T26675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5099'. [ 1433.996172][T21144] Bluetooth: hci1: sending frame failed (-49) [ 1433.997370][T25468] Bluetooth: hci1: Entering manufacturer mode failed (-49) [ 1434.042411][T26678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5099'. [ 1434.185622][ T37] bond1 (unregistering): Released all slaves [ 1434.320980][ T37] bond2 (unregistering): Released all slaves [ 1434.348195][T26675] sp0: Synchronizing with TNC [ 1434.802866][ T37] hsr_slave_0: left promiscuous mode [ 1434.824885][ T37] hsr_slave_1: left promiscuous mode [ 1434.935701][T26691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.064790][T26692] overlayfs: failed lookup in lower (newroot/419, name='bus', err=-40): overlapping layers [ 1435.323252][T25468] Bluetooth: hci4: command tx timeout [ 1436.779681][T26713] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5109'. [ 1437.237578][T25468] Bluetooth: hci2: unexpected event 0x09 length: 6 > 3 [ 1437.317505][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1437.359886][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1437.404161][T25468] Bluetooth: hci4: command tx timeout [ 1437.669716][ T24] lo speed is unknown, defaulting to 1000 [ 1437.676979][ T24] syz0: Port: 1 Link DOWN [ 1438.513022][T26599] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1438.539224][T26599] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1438.572056][T26599] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1438.619004][T26599] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1439.161580][T26751] gretap0: mtu less than device minimum [ 1440.398481][T26765] vlan3: entered promiscuous mode [ 1440.403562][T26765] macvtap0: entered promiscuous mode [ 1440.439785][T26599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1440.515402][T26599] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.542613][T19619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.549703][T19619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1440.598760][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.605843][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1440.616087][ T30] audit: type=1400 audit(1756105565.979:1640): avc: denied { egress } for pid=5998 comm="kworker/1:6" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1440.745124][ T30] audit: type=1400 audit(1756105565.979:1641): avc: denied { sendto } for pid=5998 comm="kworker/1:6" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1441.932763][T26599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1442.235417][T26599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1443.813667][T26811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5131'. [ 1443.997158][T26599] veth0_vlan: entered promiscuous mode [ 1444.000179][T26599] veth1_vlan: entered promiscuous mode [ 1444.059275][T26599] veth0_macvtap: entered promiscuous mode [ 1444.071970][T26599] veth1_macvtap: entered promiscuous mode [ 1444.098192][T26599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1444.105661][T26599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1444.243891][T19619] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.243923][T19619] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.243943][T19619] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.243962][T19619] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.553862][T26809] 9pnet_fd: p9_fd_create_tcp (26809): problem connecting socket to 127.0.0.1 [ 1444.578181][T19614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1444.578201][T19614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.663626][T19614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1444.663645][T19614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.937761][ T30] audit: type=1400 audit(1756105570.229:1642): avc: denied { remount } for pid=26828 comm="syz.1.5135" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1445.428030][T26836] lo: entered allmulticast mode [ 1446.173433][T26836] tunl0: entered allmulticast mode [ 1446.261403][T26836] gre0: entered allmulticast mode [ 1446.306968][T26836] gretap0: entered allmulticast mode [ 1446.332175][T26836] erspan0: entered allmulticast mode [ 1446.418604][T26836] ip_vti0: entered allmulticast mode [ 1446.481105][T26836] ip6_vti0: entered allmulticast mode [ 1446.536243][T26836] sit0: entered allmulticast mode [ 1446.583609][T26836] ip6tnl0: entered allmulticast mode [ 1446.635439][T26836] ip6gre0: entered allmulticast mode [ 1446.655548][T26836] syz_tun: entered allmulticast mode [ 1447.140276][T26836] ip6gretap0: entered allmulticast mode [ 1447.148962][T26836] bridge0: entered allmulticast mode [ 1447.177896][T26836] vcan0: entered allmulticast mode [ 1447.234754][T26836] bond0: entered allmulticast mode [ 1447.296781][T26836] team0: entered allmulticast mode [ 1447.496948][T26836] nlmon0: entered allmulticast mode [ 1447.526865][T26836] caif0: entered allmulticast mode [ 1447.532758][T26836] vxcan0: entered allmulticast mode [ 1447.557196][T26855] FAULT_INJECTION: forcing a failure. [ 1447.557196][T26855] name (null), interval 1, probability 0, space 0, times 1 [ 1447.573055][T26855] CPU: 0 UID: 0 PID: 26855 Comm: syz.0.5141 Not tainted syzkaller #0 PREEMPT(full) [ 1447.573085][T26855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1447.573095][T26855] Call Trace: [ 1447.573101][T26855] [ 1447.573108][T26855] dump_stack_lvl+0x16c/0x1f0 [ 1447.573136][T26855] should_fail_ex+0x512/0x640 [ 1447.573161][T26855] null_queue_rq+0x24d/0xfd0 [ 1447.573183][T26855] ? submit_bio_noacct_nocheck+0x300/0xd30 [ 1447.573213][T26855] null_queue_rqs+0xe9/0x2f0 [ 1447.573234][T26855] ? __pfx_null_queue_rqs+0x10/0x10 [ 1447.573259][T26855] __blk_mq_flush_list+0x9a/0xc0 [ 1447.573281][T26855] blk_mq_dispatch_queue_requests+0x184/0x7b0 [ 1447.573313][T26855] blk_mq_flush_plug_list+0x1f2/0x600 [ 1447.573345][T26855] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1447.573380][T26855] __blk_flush_plug+0x2c4/0x4b0 [ 1447.573411][T26855] ? __pfx___blk_flush_plug+0x10/0x10 [ 1447.573434][T26855] ? __filemap_add_folio+0xb9c/0x11e0 [ 1447.573462][T26855] blk_finish_plug+0x53/0xa0 [ 1447.573487][T26855] read_pages+0x583/0xc70 [ 1447.573508][T26855] ? __pfx_read_pages+0x10/0x10 [ 1447.573536][T26855] page_cache_ra_unbounded+0x421/0x7d0 [ 1447.573564][T26855] page_cache_sync_ra+0x8f2/0xa00 [ 1447.573586][T26855] filemap_get_pages+0xb62/0x1c20 [ 1447.573617][T26855] ? __pfx_filemap_get_pages+0x10/0x10 [ 1447.573642][T26855] ? __pfx___might_resched+0x10/0x10 [ 1447.573665][T26855] ? copy_page_to_iter+0x199/0x1e0 [ 1447.573692][T26855] filemap_read+0x3d2/0xe40 [ 1447.573725][T26855] ? __pfx_filemap_read+0x10/0x10 [ 1447.573766][T26855] ? __pfx_down_read+0x10/0x10 [ 1447.573791][T26855] ? avc_policy_seqno+0x9/0x20 [ 1447.573807][T26855] ? selinux_file_permission+0x126/0x660 [ 1447.573837][T26855] blkdev_read_iter+0x1ac/0x500 [ 1447.573860][T26855] vfs_read+0x8bf/0xcf0 [ 1447.573884][T26855] ? __pfx_vfs_read+0x10/0x10 [ 1447.573899][T26855] ? find_held_lock+0x2b/0x80 [ 1447.573939][T26855] ksys_read+0x12a/0x250 [ 1447.573958][T26855] ? __pfx_ksys_read+0x10/0x10 [ 1447.573984][T26855] do_syscall_64+0xcd/0x4c0 [ 1447.574007][T26855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.574026][T26855] RIP: 0033:0x7fb1af58ebe9 [ 1447.574041][T26855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1447.574057][T26855] RSP: 002b:00007fb1b0486038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1447.574080][T26855] RAX: ffffffffffffffda RBX: 00007fb1af7b5fa0 RCX: 00007fb1af58ebe9 [ 1447.574092][T26855] RDX: 0000000000002020 RSI: 0000200000001740 RDI: 0000000000000004 [ 1447.574103][T26855] RBP: 00007fb1b0486090 R08: 0000000000000000 R09: 0000000000000000 [ 1447.574114][T26855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1447.574125][T26855] R13: 00007fb1af7b6038 R14: 00007fb1af7b5fa0 R15: 00007ffea9149d98 [ 1447.574151][T26855] [ 1447.865219][T26836] vxcan1: entered allmulticast mode [ 1447.918342][T26836] veth0: entered allmulticast mode [ 1448.423659][T26836] veth1: entered allmulticast mode [ 1448.453439][T26836] wg1: entered allmulticast mode [ 1448.486639][T26836] wg2: entered allmulticast mode [ 1448.495672][T26836] veth0_to_bridge: entered allmulticast mode [ 1448.512187][T26836] bridge_slave_0: entered allmulticast mode [ 1448.529922][T26836] veth1_to_bridge: entered allmulticast mode [ 1448.538204][T26836] bridge_slave_1: entered allmulticast mode [ 1448.545871][T26836] veth0_to_bond: entered allmulticast mode [ 1448.553324][T26836] bond_slave_0: entered allmulticast mode [ 1448.559383][T26836] veth1_to_bond: entered allmulticast mode [ 1448.567124][T26836] bond_slave_1: entered allmulticast mode [ 1448.573237][T26836] veth0_to_team: entered allmulticast mode [ 1448.581761][T26836] team_slave_0: entered allmulticast mode [ 1448.588637][T26836] veth1_to_team: entered allmulticast mode [ 1448.597132][T26836] team_slave_1: entered allmulticast mode [ 1448.606719][T26836] veth0_to_batadv: entered allmulticast mode [ 1448.616166][T26836] batadv_slave_0: entered allmulticast mode [ 1448.625426][T26836] xfrm0: entered allmulticast mode [ 1448.634078][T26836] veth0_to_hsr: entered allmulticast mode [ 1448.642566][T26836] hsr_slave_0: entered allmulticast mode [ 1448.651070][T26836] veth1_to_hsr: entered allmulticast mode [ 1448.659609][T26836] hsr_slave_1: entered allmulticast mode [ 1448.745285][T26875] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5144'. [ 1448.885595][T26836] hsr0: entered allmulticast mode [ 1449.051557][T26836] veth1_virt_wifi: entered allmulticast mode [ 1449.157551][T26836] veth0_virt_wifi: entered allmulticast mode [ 1449.200523][T26836] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1449.210375][T26836] veth1_vlan: entered allmulticast mode [ 1449.231785][T26836] veth0_vlan: entered allmulticast mode [ 1449.315707][T26836] vlan0: entered allmulticast mode [ 1449.321417][T26836] vlan1: entered allmulticast mode [ 1449.327829][T26836] macvlan0: entered allmulticast mode [ 1449.348416][T26836] macvlan1: entered allmulticast mode [ 1449.388796][T26836] ipvlan0: entered allmulticast mode [ 1449.394783][T26836] ipvlan1: entered allmulticast mode [ 1449.402068][T26836] veth1_macvtap: entered allmulticast mode [ 1449.410395][T26836] veth0_macvtap: entered allmulticast mode [ 1449.418574][T26836] macvtap0: entered allmulticast mode [ 1449.426688][T26836] macsec0: entered allmulticast mode [ 1449.434322][T26836] geneve0: entered allmulticast mode [ 1449.441494][T26836] geneve1: entered allmulticast mode [ 1449.450154][T26836] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1449.458104][T26836] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1449.467916][T26836] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 1449.477325][T26836] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 1449.489201][T26836] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode [ 1449.498772][T26836] K: entered allmulticast mode [ 1449.503768][T26836] veth2: entered allmulticast mode [ 1449.508942][T26836] veth3: entered allmulticast mode [ 1449.514530][T26836] veth4: entered allmulticast mode [ 1449.519767][T26836] veth5: entered allmulticast mode [ 1449.525272][T26836] bond1: entered allmulticast mode [ 1449.656990][T19611] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.695059][T19611] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.720336][T19611] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.733695][T26888] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1449.740210][T26888] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1449.748289][T19611] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.789479][T26888] vhci_hcd vhci_hcd.0: Device attached [ 1449.917934][T26906] overlayfs: failed lookup in lower (newroot/467, name='bus', err=-40): overlapping layers [ 1450.162167][ T10] vhci_hcd: vhci_device speed not set [ 1450.253302][ T10] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 1452.721249][T26892] vhci_hcd: connection reset by peer [ 1452.740700][T19614] vhci_hcd: stop threads [ 1452.826016][T19614] vhci_hcd: release socket [ 1452.830508][T19614] vhci_hcd: disconnect device [ 1452.880000][T26940] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5165'. [ 1452.914998][T26940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5165'. [ 1453.452029][T26943] netlink: 'syz.5.5166': attribute type 1 has an invalid length. [ 1453.484229][T26943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1453.499694][T26943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5166'. [ 1453.525943][T26943] bond1: (slave veth11): Enslaving as an active interface with a down link [ 1453.542998][T26943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1453.551541][T26943] bond1: (slave batadv0): making interface the new active one [ 1453.560547][T26943] batadv0: entered promiscuous mode [ 1453.566265][T26943] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 1453.964707][ T11] null_blk: rq ffff8880272b3c00 timed out [ 1453.970622][ T11] blk_print_req_error: 6 callbacks suppressed [ 1453.970636][ T11] timeout error, dev nullb0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 1453.993243][ T1208] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1454.020118][T26952] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1454.026616][T26952] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1454.034320][T26952] vhci_hcd vhci_hcd.0: Device attached [ 1454.123384][ T1208] usb 6-1: device descriptor read/64, error -71 [ 1454.214909][ T5994] vhci_hcd: vhci_device speed not set [ 1454.283512][ T5994] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 1454.363571][ T1208] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1454.503487][ T1208] usb 6-1: device descriptor read/64, error -71 [ 1454.624003][ T1208] usb usb6-port1: attempt power cycle [ 1454.633225][ T5916] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1454.783537][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 1454.789950][ T5916] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 1454.799947][ T5916] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1454.810672][ T5916] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1454.819880][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1454.828280][ T5916] usb 2-1: SerialNumber: syz [ 1454.839935][T26960] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1454.847741][T26960] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1454.985331][ T1208] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1455.014519][ T1208] usb 6-1: device descriptor read/8, error -71 [ 1455.145950][T26968] netlink: 'syz.2.5174': attribute type 11 has an invalid length. [ 1455.185499][ T5916] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1455.197393][ T5916] usb 2-1: USB disconnect, device number 26 [ 1455.263215][ T1208] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1455.295692][ T1208] usb 6-1: device descriptor read/8, error -71 [ 1455.393287][ T10] vhci_hcd: vhci_device speed not set [ 1455.423757][ T1208] usb usb6-port1: unable to enumerate USB device [ 1456.372706][ T30] audit: type=1400 audit(1756105581.729:1643): avc: denied { write } for pid=26975 comm="syz.7.5177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1456.604646][T26980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5178'. [ 1457.114233][T26953] vhci_hcd: connection reset by peer [ 1457.173502][ T5917] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1457.253450][T19617] vhci_hcd: stop threads [ 1457.257746][T19617] vhci_hcd: release socket [ 1457.262178][T19617] vhci_hcd: disconnect device [ 1457.404328][ T5917] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 68, changing to 10 [ 1457.418847][ T5917] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 8 [ 1457.430509][ T5917] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1457.568371][ T5917] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1457.578008][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.594211][ T5917] usb 2-1: Product: syz [ 1457.602795][ T5917] usb 2-1: Manufacturer: ᠌ [ 1458.565980][ T5917] usb 2-1: SerialNumber: syz [ 1458.781720][T26982] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1459.102651][ T5916] libceph: connect (1)[c::]:6789 error -1 [ 1459.137791][ T5916] libceph: mon0 (1)[c::]:6789 connect error [ 1459.372710][T27005] ceph: No mds server is up or the cluster is laggy [ 1459.479651][ T5916] libceph: connect (1)[c::]:6789 error -1 [ 1459.497552][ T5916] libceph: mon0 (1)[c::]:6789 connect error [ 1459.570011][ T5994] vhci_hcd: vhci_device speed not set [ 1459.576861][ T5917] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 1459.629097][ T5917] usb 2-1: USB disconnect, device number 27 [ 1460.466098][T27026] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1460.472633][T27026] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1460.513557][T27026] vhci_hcd vhci_hcd.0: Device attached [ 1460.929747][T27034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5191'. [ 1461.419941][ T1208] usb 44-1: SetAddress Request (2) to port 0 [ 1461.513315][ T1208] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1461.616423][T27028] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1461.624340][T27027] vhci_hcd: connection closed [ 1461.644336][T19614] vhci_hcd: stop threads [ 1461.695429][T19614] vhci_hcd: release socket [ 1461.799956][T19614] vhci_hcd: disconnect device [ 1464.000720][T27062] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1464.018176][T27062] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1466.038472][T26537] libceph: connect (1)[c::]:6789 error -101 [ 1466.044537][T26537] libceph: mon0 (1)[c::]:6789 connect error [ 1466.162617][T27090] ceph: No mds server is up or the cluster is laggy [ 1466.333196][ T5994] libceph: connect (1)[c::]:6789 error -101 [ 1466.339194][ T5994] libceph: mon0 (1)[c::]:6789 connect error [ 1466.454867][T27100] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5210'. [ 1466.683434][ T1208] usb 44-1: device descriptor read/8, error -110 [ 1467.140289][ T1208] usb usb44-port1: attempt power cycle [ 1467.994195][ T1208] usb usb44-port1: unable to enumerate USB device [ 1468.584586][T10924] batadv0: left promiscuous mode [ 1469.443271][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1470.043190][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1470.195241][ T24] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 1470.655416][ T24] usb 2-1: config 0 has no interface number 0 [ 1470.676928][ T24] usb 2-1: config 0 interface 230 has no altsetting 0 [ 1470.748318][ T24] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1470.758727][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.870467][T27172] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1470.878303][T27172] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1470.886603][T27172] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1470.894348][T27172] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1471.006401][ T24] usb 2-1: Product: syz [ 1471.010617][ T24] usb 2-1: Manufacturer: syz [ 1471.021219][ T24] usb 2-1: SerialNumber: syz [ 1471.039128][ T24] usb 2-1: config 0 descriptor?? [ 1471.055475][ T24] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 1471.074699][ T24] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1471.207428][ T30] audit: type=1400 audit(1756105596.569:1644): avc: denied { setopt } for pid=27176 comm="syz.2.5231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1471.789718][ T24] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 1471.904558][ T24] usb 2-1: USB disconnect, device number 28 [ 1472.798936][T25468] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 1474.396659][ T5844] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1474.563980][ T5844] usb 2-1: device descriptor read/64, error -71 [ 1474.647553][ T30] audit: type=1400 audit(1756105600.009:1645): avc: denied { setopt } for pid=27223 comm="syz.2.5243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1474.735332][ T30] audit: type=1400 audit(1756105600.099:1646): avc: denied { create } for pid=27225 comm="syz.7.5244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1474.823238][ T5844] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1474.903535][ T24] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1475.121411][ T5844] usb 2-1: device descriptor read/64, error -71 [ 1476.114462][ T5844] usb usb2-port1: attempt power cycle [ 1476.363509][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1476.371977][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1476.380418][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1476.391708][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1476.404905][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 54048, setting to 1024 [ 1476.417245][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1476.459386][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1476.463303][ T5844] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1476.480947][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1476.490748][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.512727][T27242] ksmbd: Unknown IPC event: 3, ignore. [ 1476.743969][ T5844] usb 2-1: device descriptor read/8, error -71 [ 1477.019222][ T24] usb 3-1: usb_control_msg returned -32 [ 1477.024942][ T24] usbtmc 3-1:16.0: can't read capabilities [ 1477.093806][ T5844] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1477.319404][ T5917] libceph: connect (1)[c::]:6789 error -101 [ 1477.325401][ T5844] usb 2-1: device not accepting address 32, error -71 [ 1477.332425][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 1477.338783][ T5844] usb usb2-port1: unable to enumerate USB device [ 1477.617988][ T5917] libceph: connect (1)[c::]:6789 error -101 [ 1477.624041][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 1477.630107][T27240] usb usb8: usbfs: process 27240 (syz.7.5247) did not claim interface 0 before use [ 1477.736945][T27254] ceph: No mds server is up or the cluster is laggy [ 1477.743947][T27262] netlink: 124 bytes leftover after parsing attributes in process `syz.5.5253'. [ 1477.753386][T27262] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5253'. [ 1477.787841][T27264] netlink: 124 bytes leftover after parsing attributes in process `syz.5.5253'. [ 1477.832975][T27264] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5253'. [ 1479.104551][ T5917] usb 3-1: USB disconnect, device number 98 [ 1479.393175][T27280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5259'. [ 1479.415557][T27280] netlink: 'syz.2.5259': attribute type 4 has an invalid length. [ 1479.495158][T27280] netlink: 'syz.2.5259': attribute type 4 has an invalid length. [ 1479.503080][T27280] netlink: 344 bytes leftover after parsing attributes in process `syz.2.5259'. [ 1479.647038][T27280] 9pnet_fd: Insufficient options for proto=fd [ 1479.663143][ T30] audit: type=1400 audit(1756105605.009:1647): avc: denied { append } for pid=27279 comm="syz.2.5259" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1481.242869][T27308] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5268'. [ 1481.926173][ T5844] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1481.984307][T27308] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1482.188410][ T5844] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1482.334790][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.394076][ T5844] usb 6-1: config 0 descriptor?? [ 1482.418626][T27313] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1482.427766][T27313] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1482.442461][T27313] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1482.772837][T27308] macvlan2: entered promiscuous mode [ 1482.812321][T27308] macvlan2: entered allmulticast mode [ 1482.822643][T27308] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 1483.039479][ T5844] usb 6-1: string descriptor 0 read error: -71 [ 1483.113481][ T5844] hackrf 6-1:0.0: usb_control_msg() failed -71 request 0e [ 1483.123814][ T5844] hackrf 6-1:0.0: Could not detect board [ 1483.129658][ T5844] hackrf 6-1:0.0: probe with driver hackrf failed with error -71 [ 1483.141550][ T5844] usb 6-1: USB disconnect, device number 112 [ 1483.513548][ T5917] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1483.676635][T27351] bond1: entered allmulticast mode [ 1483.683196][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 1483.694869][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.705091][ T5917] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1483.723545][T27351] batadv0: entered allmulticast mode [ 1483.735068][T27351] veth10: entered allmulticast mode [ 1483.747830][ T5917] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1483.764733][ T5917] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1483.790372][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.809206][T27351] veth11: entered allmulticast mode [ 1483.834259][T27351] bond2: entered allmulticast mode [ 1483.850198][ T5917] usb 2-1: config 0 descriptor?? [ 1483.871280][ T5917] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1484.063396][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.943487][ T5917] usb 2-1: USB disconnect, device number 33 [ 1485.208013][T27360] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5282'. [ 1485.604758][T27364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5283'. [ 1485.638121][T27366] netlink: 120 bytes leftover after parsing attributes in process `syz.7.5284'. [ 1485.687050][T27368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5283'. [ 1487.014382][ T30] audit: type=1400 audit(1756105612.379:1648): avc: denied { map } for pid=27407 comm="syz.7.5296" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1487.063584][T27409] binder: BINDER_SET_CONTEXT_MGR already set [ 1487.069563][T27409] binder: 27407:27409 ioctl 4018620d 200000000040 returned -16 [ 1488.585961][T27428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1491.904447][T27462] No control pipe specified [ 1492.059274][ T30] audit: type=1400 audit(1756105617.419:1649): avc: denied { mount } for pid=27449 comm="syz.1.5309" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1492.273851][T27469] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5314'. [ 1492.282768][T27469] netlink: 'syz.7.5314': attribute type 21 has an invalid length. [ 1492.298130][T27472] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1492.304713][T27472] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1492.314384][T27472] vhci_hcd vhci_hcd.0: Device attached [ 1492.553494][ T5917] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 1492.891531][ T5994] libceph: connect (1)[c::]:6789 error -101 [ 1492.899399][ T5994] libceph: mon0 (1)[c::]:6789 connect error [ 1492.906341][ T30] audit: type=1400 audit(1756105618.269:1650): avc: denied { unmount } for pid=19597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1493.020699][T27474] vhci_hcd: connection reset by peer [ 1493.178715][ T5994] libceph: connect (1)[c::]:6789 error -101 [ 1493.213077][ T5994] libceph: mon0 (1)[c::]:6789 connect error [ 1493.219364][T19611] vhci_hcd: stop threads [ 1493.232207][T19611] vhci_hcd: release socket [ 1493.236851][T19611] vhci_hcd: disconnect device [ 1493.828698][ T5994] libceph: connect (1)[c::]:6789 error -101 [ 1493.832517][T27483] ceph: No mds server is up or the cluster is laggy [ 1493.834820][ T5994] libceph: mon0 (1)[c::]:6789 connect error [ 1494.357700][ T5916] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1494.400927][ T5916] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1494.667869][T27507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1494.711155][T27507] random: crng reseeded on system resumption [ 1497.373060][T25468] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1497.430919][T27530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5327'. [ 1497.655209][ T5917] vhci_hcd: vhci_device speed not set [ 1499.135438][ T5917] libceph: connect (1)[c::]:6789 error -101 [ 1499.141543][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 1499.153411][T27559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1499.162034][T27555] ceph: No mds server is up or the cluster is laggy [ 1499.535096][T27565] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5338'. [ 1500.787632][ T30] audit: type=1326 audit(1756105626.149:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27586 comm="syz.0.5345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1af58ebe9 code=0x0 [ 1501.194540][ T5917] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1501.450553][ T5917] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1501.469835][ T5917] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1501.503664][ T5917] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1501.551019][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.712587][T27589] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1501.747554][ T5917] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1502.254750][T27606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1502.704647][T27606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1502.827401][T27589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1502.836282][T27589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1502.848776][T27589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1502.867127][T27589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1502.891627][ T5917] usb 3-1: USB disconnect, device number 99 [ 1509.423564][ T24] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1509.678869][ T24] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1509.781016][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.805016][ T24] usb 3-1: config 0 has no interface number 0 [ 1510.062697][ T24] usb 3-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1510.185380][ T24] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1510.247609][ T24] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1510.283140][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 1510.291223][ T24] usb 3-1: SerialNumber: syz [ 1510.325106][ T24] usb 3-1: config 0 descriptor?? [ 1510.786332][ T24] usb 3-1: USB disconnect, device number 100 [ 1510.836856][T27676] bridge0: port 2(batadv1) entered blocking state [ 1510.926765][T27676] bridge0: port 2(batadv1) entered disabled state [ 1510.943463][T27676] batadv1: entered allmulticast mode [ 1510.950370][T27676] batadv1: entered promiscuous mode [ 1511.363019][ T37] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1511.372544][ T37] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1511.560784][T27693] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5373'. [ 1511.795891][ T30] audit: type=1400 audit(1756105637.159:1652): avc: denied { getopt } for pid=27691 comm="syz.0.5374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1511.841492][T27700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5375'. [ 1511.850649][T27700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5375'. [ 1516.673372][T25468] block nbd7: Receive control failed (result -107) [ 1516.704905][T27742] ------------[ cut here ]------------ [ 1516.710494][T27742] WARNING: CPU: 1 PID: 27742 at fs/buffer.c:1125 __getblk_slow+0x4cc/0x560 [ 1516.719465][T27742] Modules linked in: [ 1516.723506][T27742] CPU: 1 UID: 0 PID: 27742 Comm: syz.7.5386 Not tainted syzkaller #0 PREEMPT(full) [ 1516.732848][T27742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1516.742907][T27742] RIP: 0010:__getblk_slow+0x4cc/0x560 [ 1516.748324][T27742] Code: c0 8b 48 89 df e8 a4 cb bb ff 90 0f 0b e8 1c 1b 73 ff 48 c7 c6 e0 60 c0 8b 48 89 df e8 8d cb bb ff 90 0f 0b e8 05 1b 73 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 40 62 c0 8b 31 db e8 ad c9 51 [ 1516.768193][T27742] RSP: 0018:ffffc90003f0f7f0 EFLAGS: 00010287 [ 1516.774280][T27742] RAX: 00000000000057ac RBX: 0000000000000200 RCX: ffffc9000eea3000 [ 1516.782243][T27742] RDX: 0000000000080000 RSI: ffffffff824870fb RDI: 0000000000000005 [ 1516.790242][T27742] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 1516.798229][T27742] R10: 0000000000000200 R11: 0000000000000000 R12: ffff888148ed8b80 [ 1516.806288][T27742] R13: 0000000000000100 R14: 0000000000000200 R15: ffff888148ed8b80 [ 1516.814309][T27742] FS: 00007f5a3f72e6c0(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 1516.823540][T27742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1516.830101][T27742] CR2: 00002000001d4030 CR3: 0000000050e21000 CR4: 00000000003526f0 [ 1516.838123][T27742] Call Trace: [ 1516.841388][T27742] [ 1516.844324][T27742] ? __pfx___might_resched+0x10/0x10 [ 1516.849593][T27742] bdev_getblk+0xd4/0xe0 [ 1516.853848][T27742] __bread_gfp+0x86/0x3c0 [ 1516.858165][T27742] udf_read_tagged+0xae/0x740 [ 1516.862822][T27742] udf_check_anchor_block+0x89/0x4b0 [ 1516.868134][T27742] ? udf_get_last_block+0x1ce/0x2a0 [ 1516.873333][T27742] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 1516.879225][T27742] udf_load_vrs+0x3b8/0x1070 [ 1516.883813][T27742] ? __pfx_udf_load_vrs+0x10/0x10 [ 1516.888819][T27742] ? __pfx_udf_get_last_session+0x10/0x10 [ 1516.894524][T27742] ? lockdep_init_map_type+0x5c/0x280 [ 1516.899870][T27742] udf_fill_super+0x791/0x1df0 [ 1516.904634][T27742] ? __pfx_udf_fill_super+0x10/0x10 [ 1516.909817][T27742] ? do_raw_spin_lock+0x12c/0x2b0 [ 1516.914825][T27742] ? find_held_lock+0x2b/0x80 [ 1516.919662][T27742] ? sb_set_blocksize+0x176/0x1d0 [ 1516.924850][T27742] ? setup_bdev_super+0x369/0x730 [ 1516.929858][T27742] get_tree_bdev_flags+0x38c/0x620 [ 1516.934961][T27742] ? __pfx_udf_fill_super+0x10/0x10 [ 1516.940137][T27742] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1516.945763][T27742] ? bpf_lsm_capable+0x9/0x10 [ 1516.950420][T27742] ? security_capable+0x7e/0x260 [ 1516.955349][T27742] vfs_get_tree+0x8b/0x340 [ 1516.959745][T27742] path_mount+0x1513/0x2000 [ 1516.964249][T27742] ? __pfx_path_mount+0x10/0x10 [ 1516.969075][T27742] ? kmem_cache_free+0x2d1/0x4d0 [ 1516.974000][T27742] ? putname+0x154/0x1a0 [ 1516.978220][T27742] ? putname+0x154/0x1a0 [ 1516.982446][T27742] ? __x64_sys_mount+0x28d/0x310 [ 1516.987379][T27742] __x64_sys_mount+0x28d/0x310 [ 1516.992119][T27742] ? __pfx___x64_sys_mount+0x10/0x10 [ 1516.997408][T27742] do_syscall_64+0xcd/0x4c0 [ 1517.001886][T27742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.007770][T27742] RIP: 0033:0x7f5a3e98ebe9 [ 1517.012168][T27742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1517.032004][T27742] RSP: 002b:00007f5a3f72e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1517.040546][T27742] RAX: ffffffffffffffda RBX: 00007f5a3ebb5fa0 RCX: 00007f5a3e98ebe9 [ 1517.048525][T27742] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 1517.056487][T27742] RBP: 00007f5a3ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1517.064446][T27742] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 1517.072387][T27742] R13: 00007f5a3ebb6038 R14: 00007f5a3ebb5fa0 R15: 00007ffed5eedda8 [ 1517.080359][T27742] [ 1517.083391][T27742] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1517.090651][T27742] CPU: 1 UID: 0 PID: 27742 Comm: syz.7.5386 Not tainted syzkaller #0 PREEMPT(full) [ 1517.099987][T27742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1517.110019][T27742] Call Trace: [ 1517.113277][T27742] [ 1517.116200][T27742] dump_stack_lvl+0x3d/0x1f0 [ 1517.120767][T27742] vpanic+0x6e8/0x7a0 [ 1517.124727][T27742] ? __pfx_vpanic+0x10/0x10 [ 1517.129209][T27742] ? __getblk_slow+0x4cc/0x560 [ 1517.133951][T27742] panic+0xca/0xd0 [ 1517.137656][T27742] ? __pfx_panic+0x10/0x10 [ 1517.142077][T27742] check_panic_on_warn+0xab/0xb0 [ 1517.146998][T27742] __warn+0xf6/0x3c0 [ 1517.150865][T27742] ? __getblk_slow+0x4cc/0x560 [ 1517.155611][T27742] report_bug+0x3c3/0x580 [ 1517.159916][T27742] ? __getblk_slow+0x4cc/0x560 [ 1517.164664][T27742] handle_bug+0x184/0x210 [ 1517.168987][T27742] exc_invalid_op+0x17/0x50 [ 1517.173464][T27742] asm_exc_invalid_op+0x1a/0x20 [ 1517.178290][T27742] RIP: 0010:__getblk_slow+0x4cc/0x560 [ 1517.183646][T27742] Code: c0 8b 48 89 df e8 a4 cb bb ff 90 0f 0b e8 1c 1b 73 ff 48 c7 c6 e0 60 c0 8b 48 89 df e8 8d cb bb ff 90 0f 0b e8 05 1b 73 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 40 62 c0 8b 31 db e8 ad c9 51 [ 1517.203229][T27742] RSP: 0018:ffffc90003f0f7f0 EFLAGS: 00010287 [ 1517.209279][T27742] RAX: 00000000000057ac RBX: 0000000000000200 RCX: ffffc9000eea3000 [ 1517.217234][T27742] RDX: 0000000000080000 RSI: ffffffff824870fb RDI: 0000000000000005 [ 1517.225180][T27742] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 1517.233126][T27742] R10: 0000000000000200 R11: 0000000000000000 R12: ffff888148ed8b80 [ 1517.241081][T27742] R13: 0000000000000100 R14: 0000000000000200 R15: ffff888148ed8b80 [ 1517.249047][T27742] ? __getblk_slow+0x4cb/0x560 [ 1517.253794][T27742] ? __pfx___might_resched+0x10/0x10 [ 1517.259057][T27742] bdev_getblk+0xd4/0xe0 [ 1517.263293][T27742] __bread_gfp+0x86/0x3c0 [ 1517.267621][T27742] udf_read_tagged+0xae/0x740 [ 1517.272297][T27742] udf_check_anchor_block+0x89/0x4b0 [ 1517.277560][T27742] ? udf_get_last_block+0x1ce/0x2a0 [ 1517.282730][T27742] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 1517.288615][T27742] udf_load_vrs+0x3b8/0x1070 [ 1517.293192][T27742] ? __pfx_udf_load_vrs+0x10/0x10 [ 1517.298208][T27742] ? __pfx_udf_get_last_session+0x10/0x10 [ 1517.303900][T27742] ? lockdep_init_map_type+0x5c/0x280 [ 1517.309244][T27742] udf_fill_super+0x791/0x1df0 [ 1517.313998][T27742] ? __pfx_udf_fill_super+0x10/0x10 [ 1517.319172][T27742] ? do_raw_spin_lock+0x12c/0x2b0 [ 1517.324167][T27742] ? find_held_lock+0x2b/0x80 [ 1517.328825][T27742] ? sb_set_blocksize+0x176/0x1d0 [ 1517.333824][T27742] ? setup_bdev_super+0x369/0x730 [ 1517.338832][T27742] get_tree_bdev_flags+0x38c/0x620 [ 1517.343914][T27742] ? __pfx_udf_fill_super+0x10/0x10 [ 1517.349086][T27742] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1517.354691][T27742] ? bpf_lsm_capable+0x9/0x10 [ 1517.359341][T27742] ? security_capable+0x7e/0x260 [ 1517.364253][T27742] vfs_get_tree+0x8b/0x340 [ 1517.368646][T27742] path_mount+0x1513/0x2000 [ 1517.373134][T27742] ? __pfx_path_mount+0x10/0x10 [ 1517.377975][T27742] ? kmem_cache_free+0x2d1/0x4d0 [ 1517.382901][T27742] ? putname+0x154/0x1a0 [ 1517.387131][T27742] ? putname+0x154/0x1a0 [ 1517.391352][T27742] ? __x64_sys_mount+0x28d/0x310 [ 1517.396269][T27742] __x64_sys_mount+0x28d/0x310 [ 1517.401016][T27742] ? __pfx___x64_sys_mount+0x10/0x10 [ 1517.406282][T27742] do_syscall_64+0xcd/0x4c0 [ 1517.410759][T27742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.416625][T27742] RIP: 0033:0x7f5a3e98ebe9 [ 1517.421012][T27742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1517.440594][T27742] RSP: 002b:00007f5a3f72e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1517.448984][T27742] RAX: ffffffffffffffda RBX: 00007f5a3ebb5fa0 RCX: 00007f5a3e98ebe9 [ 1517.456930][T27742] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 1517.464875][T27742] RBP: 00007f5a3ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1517.472818][T27742] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 1517.480759][T27742] R13: 00007f5a3ebb6038 R14: 00007f5a3ebb5fa0 R15: 00007ffed5eedda8 [ 1517.488721][T27742] [ 1517.491903][T27742] Kernel Offset: disabled [ 1517.496207][T27742] Rebooting in 86400 seconds..