last executing test programs: 16.955601208s ago: executing program 1 (id=652): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0xffffffffffffffff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000040)="11a3a309", 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x7, 0x81, 0x2) r2 = gettid() r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_open(&(0x7f0000000000)='!\x00', 0x40, 0x10, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r4, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) close_range(r0, 0xffffffffffffffff, 0x0) 13.582673609s ago: executing program 3 (id=658): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0), 0x0, 0x4001c00) 13.581554364s ago: executing program 1 (id=659): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) renameat2(0xffffffffffffff9c, 0x0, r4, &(0x7f0000000000)='./file0\x00', 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0xfffffffe}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x9, &(0x7f00000001c0)={0x77359400}, 0x1, 0x1, 0x1}) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x21, {0x4, 0x1}, 0x6}, 0x1) lsm_set_self_attr(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB="690000000000000006000000000000002800000000000000080000000000000000b0c6fd4897c3b081ef75f617857335ae31f5952b198b18bd6b1eedf77a1348c598e42e47750a14ce77e77c4c4922d736d2eba2bda482ee38ec6a9d6dd1bb7fdc24877db385257ea5388958f6fb923c47efb072517d845eeb1cfee1318f0c5d4fc004d7bd6deffbb8a6b78c0e096f2c8683ad06a1fc4283b3fa5923e8c3af2376a239a8a776e0b6fb12f2e8c118018409820a9992acf611b475aefbb995c1418eb5922fbf95db0ec104f3088dc55069b6eb571567e01ef918c1265b85b62da815c75aeaaff23f87054128f5087447000000000000000000"], 0x4f, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) 12.485004898s ago: executing program 3 (id=663): openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}]) dup3(r2, r1, 0x0) 12.348121574s ago: executing program 0 (id=665): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61e3, 0x0) 11.9620612s ago: executing program 0 (id=666): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) fstat(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x58dd}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x6) 11.632440535s ago: executing program 4 (id=667): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_macvtap\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002000)=ANY=[@ANYBLOB="4001000010003306000000000400", @ANYRES32=0x0], 0x140}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r6, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4a}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x3b91b54cec0633d2) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x34004811) setsockopt$sock_attach_bpf(r4, 0x6, 0x25, &(0x7f0000000040), 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') mount$nfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x0) 11.337719561s ago: executing program 0 (id=668): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x2, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xffe0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x24004010) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001114100026bd7000fcdbdf25080003000300080008004f000400000008004f000000000008004b002800000008004b0000000000080003000400000008004a0000800000080001000100000042f6bcad46f43d8fe21c7f0deb299462bbff6413350bb98c1c3ba0fc51f75ab503fa75f5ab676c57f2191f4d016e6628d5290e49d39c5aecb4eb895041a50501b919daea37bf184877551a0e48c61e39afaf956bff82b43b050e26393541efdee34f557d8b035132476bd6979a74c950da262ebc0755f5"], 0x50}, 0x1, 0x0, 0x0, 0x40400c5}, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_open_dev$sndmidi(0x0, 0x2, 0x141581) r4 = dup(0xffffffffffffffff) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000140)={&(0x7f0000329000/0x4000)=nil}) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xfffffb07, @local, 0x680}, 0x1c) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socket(0x10, 0x3, 0x0) 11.335780471s ago: executing program 3 (id=670): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0xffffffffffffffff) socket$pppoe(0x18, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000040)="11a3a309", 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x7, 0x81, 0x2) r1 = gettid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_open(&(0x7f0000000000)='!\x00', 0x40, 0x10, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r3, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.024451899s ago: executing program 4 (id=672): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1) 9.889973934s ago: executing program 4 (id=673): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 8.340032771s ago: executing program 1 (id=674): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6bb0c8c}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r0, 0x2285, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r2, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='7', 0x1}], 0x1}}], 0x1, 0x1) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 8.332541239s ago: executing program 2 (id=675): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) fcntl$setlease(r0, 0x403, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}]) dup3(r5, r3, 0x0) 7.424684405s ago: executing program 4 (id=676): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61e3, 0x0) 7.232867829s ago: executing program 2 (id=677): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0)={0x23, 0x0, 0x8}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') memfd_create(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) socket$kcm(0x10, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xd0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) 6.693549751s ago: executing program 1 (id=678): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0)={0x23, 0x0, 0x8}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') memfd_create(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) socket$kcm(0x10, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xd0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) 6.692484251s ago: executing program 4 (id=679): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1100020, &(0x7f0000005380)={[{@gid}, {}]}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003300), 0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x4, 0x3b5f91, 0x203bac}) 5.85855429s ago: executing program 2 (id=680): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, 0xffffffffffffffff, 0x0, 0x300}, 0x38) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r5, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x900, 0x0, 0xffffff80}}) 5.41685672s ago: executing program 0 (id=681): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) renameat2(0xffffffffffffff9c, 0x0, r5, &(0x7f0000000000)='./file0\x00', 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0xfffffffe}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x9, &(0x7f00000001c0)={0x77359400}, 0x1, 0x1, 0x1}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x21, {0x4, 0x1}, 0x6}, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) lsm_set_self_attr(0x66, 0x0, 0x4f, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) 4.606089143s ago: executing program 2 (id=682): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1100020, &(0x7f0000005380)={[{@gid}, {}]}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}) recvmmsg(0xffffffffffffffff, &(0x7f0000003300), 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000006100), 0x49f, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x80) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x4, 0x3b5f91, 0x203bac}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113600000000001600000000000000950074000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 4.460781488s ago: executing program 0 (id=683): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40040830) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r3) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x20440, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x801) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = syz_io_uring_setup(0x4dfa, &(0x7f0000000580)={0x0, 0x0, 0x1, 0x0, 0x40}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x5e2, 0x4, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003100)=[{{&(0x7f0000000440)=@tipc=@name, 0x80, &(0x7f0000001cc0)=[{&(0x7f00000006c0)=""/209, 0xd1}, {&(0x7f00000008c0)=""/236, 0xec}, {&(0x7f00000009c0)=""/141, 0x8d}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/144, 0x90}, {&(0x7f0000000500)=""/117, 0x75}, {&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000001b40)=""/252, 0xfc}, {&(0x7f0000001c40)=""/103, 0x67}], 0x9}, 0x1}, {{&(0x7f0000001d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001e00)=""/197, 0xc5}, {&(0x7f0000001f00)=""/112, 0x70}, {&(0x7f0000001f80)=""/230, 0xe6}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x4, &(0x7f0000003080)=""/97, 0x61}, 0x6}], 0x2, 0x40000000, &(0x7f0000000280)={0x77359400}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1) 3.634344514s ago: executing program 1 (id=684): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) renameat2(0xffffffffffffff9c, 0x0, r4, &(0x7f0000000000)='./file0\x00', 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0xfffffffe}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x9, &(0x7f00000001c0)={0x77359400}, 0x1, 0x1, 0x1}) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x21, {0x4, 0x1}, 0x6}, 0x1) lsm_set_self_attr(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB="690000000000000006000000000000002800000000000000080000000000000000b0c6fd4897c3b081ef75f617857335ae31f5952b198b18bd6b1eedf77a1348c598e42e47750a14ce77e77c4c4922d736d2eba2bda482ee38ec6a9d6dd1bb7fdc24877db385257ea5388958f6fb923c47efb072517d845eeb1cfee1318f0c5d4fc004d7bd6deffbb8a6b78c0e096f2c8683ad06a1fc4283b3fa5923e8c3af2376a239a8a776e0b6fb12f2e8c118018409820a9992acf611b475aefbb995c1418eb5922fbf95db0ec104f3088dc55069b6eb571567e01ef918c1265b85b62da815c75aeaaff23f87054128f5087447000000000000000000"], 0x4f, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) 3.629467785s ago: executing program 4 (id=685): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8050}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'rose0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000200000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8, @ANYBLOB="0a0001000000648a63ff"], 0x48}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @rand_addr, @local}, &(0x7f0000000340)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x8, 0x8, 0x1, 0x4, {{0x6, 0x4, 0x1, 0x38, 0x18, 0x67, 0x0, 0x4, 0x29, 0x0, @private=0xa010101, @loopback, {[@end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x1, 0x80, 0x1, 0x5, {{0x15, 0x4, 0x0, 0x7, 0x54, 0x66, 0x0, 0xfd, 0x29, 0x0, @rand_addr=0x64010101, @empty, {[@timestamp_addr={0x44, 0x2c, 0xa6, 0x1, 0xb, [{@empty, 0x3}, {@remote, 0x5}, {@multicast2, 0x10}, {@empty, 0x21}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @noop, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0xc, 0x34, 0x1, 0x2, [{@loopback, 0x36feddf7}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x4, 0x42, 0x5, 0x1, 0x0, @loopback, @remote, 0x8000, 0x7800, 0x7, 0x7fffffff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x7, 0x1, 0x2, 0xfff, {{0x2a, 0x4, 0x0, 0x5, 0xa8, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x3c, 0xcc, 0x1, 0x1, [{@empty, 0x1ff}, {@multicast2, 0x7}, {@local, 0xff}, {@rand_addr=0x64010101, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@empty, 0x4}, {@multicast1, 0x22a}]}, @noop, @lsrr={0x83, 0x17, 0x2a, [@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x69, 0x3, 0x7, [{@private=0xa010102}, {@multicast1, 0x3}]}, @cipso={0x86, 0x25, 0x3, [{0x1, 0x2}, {0x1, 0xe, "ebcd849ca98e26a4b1a26d40"}, {0x1, 0x6, 'MzIA'}, {0x5, 0x4, "aea0"}, {0x6, 0x5, "1fb44e"}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="b8010000", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedbdf25060000002000018008000300020000001400020076657468305f746f5f626f6e64000000440001801400020070696d7265673100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f62726964676500080003000100000048000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000300000000001400020070696d7265673000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="6800018008000100", @ANYRES32=r8, @ANYBLOB="08000300010000001400020073797a6b616c6c6572300000000000001400020070696d3672656731000000000000000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="0800030001000000140002007465616d3000000000000000000000002000018014000200766972745f776966693000000000000008000300000000001c00018008000100", @ANYRES32=r11, @ANYBLOB="08000300d05ecf02000000080001000a083090f466c71679cd00f57d35fd38f928169c086dab8f09d736a91abe91c0eb314c7fdb50ef4fa615a6b7c550197cd30603c9d6dd72e7e8f506250861399b59ff4189df4728908298b1f0b6e77900dc1370f04fec38fdac4a5721fd077a796325d46752572857532d02296035ad3a4b489ab0e03a303044b9f33f2059bcbab6bea1c62e436eb4f4cef6454029a96a7a50e09847ea97a4970dee1525a56045000000", @ANYRES32=0x0, @ANYBLOB="340001801400020064756d6d79300000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="14000200776732000000000000000000000000000c00018008000100", @ANYRES32=r13, @ANYBLOB], 0x1b8}}, 0x0) getpriority(0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) 3.515524674s ago: executing program 3 (id=686): bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}}, 0x18) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000180)={0x5, 0x81, 0xfffffff7, {0x7, 0x1c}, 0x1, 0x3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x2) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(0x0, 0x0, 0x40000) close_range(r1, 0xffffffffffffffff, 0x0) 3.502512573s ago: executing program 2 (id=687): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) fcntl$setlease(r0, 0x403, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}]) dup3(r5, r3, 0x0) 3.001321128s ago: executing program 0 (id=688): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x111, 0x5, 0x800}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x200400) syz_open_dev$vbi(0x0, 0x0, 0x2) r3 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x2}], 0x7, 0x20000, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x39, 0x0, @thr={0x0, &(0x7f00000007c0)="8700ce0bc89e8283082ccc47363814fc9bcc0e7522b190110bc257698a1f9d0981016b437d04d98d5c0f4b5dcf4c3565673606dc2d1f6e1382cddb7d0c788767f677caeaa1f8a7a37bdb7f7dc7ef27350a1f4a3a2e9e0db56a16da4a05f80fbc4678648b84f8a1e33de36ffe1c3e68f042ed10a1f863ced625e85d7f9f4af20682290b554d83"}}, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2e) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.404715807s ago: executing program 3 (id=689): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1100020, &(0x7f0000005380)={[{@gid}, {}]}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}) recvmmsg(0xffffffffffffffff, &(0x7f0000003300), 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000006100), 0x49f, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x80) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x4, 0x3b5f91, 0x203bac}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007311360000000000160000000000000095007400"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 1.200893649s ago: executing program 3 (id=690): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40040830) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r3) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x20440, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x801) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = syz_io_uring_setup(0x4dfa, &(0x7f0000000580)={0x0, 0x0, 0x1, 0x0, 0x40}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x5e2, 0x4, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003100)=[{{&(0x7f0000000440)=@tipc=@name, 0x80, &(0x7f0000001cc0)=[{&(0x7f00000006c0)=""/209, 0xd1}, {&(0x7f00000008c0)=""/236, 0xec}, {&(0x7f00000009c0)=""/141, 0x8d}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/144, 0x90}, {&(0x7f0000000500)=""/117, 0x75}, {&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000001b40)=""/252, 0xfc}, {&(0x7f0000001c40)=""/103, 0x67}], 0x9}, 0x1}, {{&(0x7f0000001d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001e00)=""/197, 0xc5}, {&(0x7f0000001f00)=""/112, 0x70}, {&(0x7f0000001f80)=""/230, 0xe6}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x4, &(0x7f0000003080)=""/97, 0x61}, 0x6}], 0x2, 0x40000000, &(0x7f0000000280)={0x77359400}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x8000, 0x7800, 0x6eb3, 0x7, {{0x1d, 0x4, 0x2, 0x1e, 0x74, 0x68, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@timestamp={0x44, 0x14, 0x2d, 0x0, 0x9, [0x2, 0x2, 0x440, 0x648]}, @ssrr={0x89, 0x1f, 0x51, [@multicast1, @multicast2, @private=0xa010100, @remote, @multicast2, @local, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x8f, [@local, @multicast1, @loopback]}, @generic={0x86, 0xa, "b75210885cae1bd6"}, @timestamp={0x44, 0x8, 0x56, 0x0, 0x5, [0x7]}, @rr={0x7, 0x7, 0x3a, [@private=0xa010101]}]}}}}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@updpolicy={0xfc, 0x19, 0x1, 0xfffffffd, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x2e}, {0x0, 0x1, 0x1fffffffffffe, 0x0, 0x2, 0x0, 0x0, 0xb}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x8, [{{@in=@empty, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private=0x2a010104}, 0x0, 0x2}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8081}, 0x800) 1.127129332s ago: executing program 2 (id=691): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0xdc) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={@none, 0x9}) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x14, r2, 0xba960a2220112c19, 0x70bd2f, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x840) r3 = socket(0x2, 0x2, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x5) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x14, 0x0) 0s ago: executing program 1 (id=692): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, 0xffffffffffffffff, 0x0, 0x300}, 0x38) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r5, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x900, 0x0, 0xffffff80}}) kernel console output (not intermixed with test programs): 000246 R12: 0000000000000001 [ 420.322458][ T6916] R13: 0000000000000000 R14: 00007f4b24bb5fa0 R15: 00007ffcc0b3ba68 [ 420.322482][ T6916] [ 420.664721][ T5850] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 420.674534][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 421.206330][ T5850] usb 4-1: USB disconnect, device number 2 [ 421.289330][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 421.289347][ T30] audit: type=1400 audit(1754045915.155:307): avc: denied { write } for pid=6925 comm="syz.1.236" name="sg0" dev="devtmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 421.364250][ T30] audit: type=1400 audit(1754045915.195:308): avc: denied { open } for pid=6925 comm="syz.1.236" path="/dev/sg0" dev="devtmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 421.402041][ T30] audit: type=1400 audit(1754045915.215:309): avc: denied { ioctl } for pid=6925 comm="syz.1.236" path="/dev/sg0" dev="devtmpfs" ino=777 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 421.728613][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.779659][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.949921][ T30] audit: type=1400 audit(1754045915.305:310): avc: denied { create } for pid=6930 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 422.079377][ T30] audit: type=1400 audit(1754045915.305:311): avc: denied { module_request } for pid=6930 comm="syz.3.238" kmod="net-pf-2-proto-262-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 422.476987][ T30] audit: type=1400 audit(1754045915.465:312): avc: denied { prog_run } for pid=6912 comm="syz.0.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 422.830996][ T30] audit: type=1400 audit(1754045915.815:313): avc: denied { read } for pid=6930 comm="syz.3.238" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 422.940884][ T30] audit: type=1400 audit(1754045915.815:314): avc: denied { open } for pid=6930 comm="syz.3.238" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 422.964380][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.970951][ T30] audit: type=1400 audit(1754045915.815:315): avc: denied { create } for pid=6930 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 422.991658][ T30] audit: type=1400 audit(1754045915.815:316): avc: denied { getopt } for pid=6930 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 423.123736][ T6970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.179750][ T6012] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 423.472853][ T6012] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 423.481685][ T5950] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 423.499436][ T6012] usb 5-1: config 0 has no interface number 0 [ 423.506154][ T6012] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.563872][ T6012] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.835145][ T6012] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.887986][ T6012] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 423.999381][ T5950] usb 2-1: Using ep0 maxpacket: 32 [ 424.013589][ T5950] usb 2-1: config 0 interface 0 has no altsetting 0 [ 424.021640][ T6012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.036828][ T5950] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 424.038216][ T6012] usb 5-1: config 0 descriptor?? [ 424.052338][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.107159][ T5950] usb 2-1: Product: syz [ 424.128542][ T5950] usb 2-1: Manufacturer: syz [ 424.145092][ T5950] usb 2-1: SerialNumber: syz [ 424.155077][ T5950] usb 2-1: config 0 descriptor?? [ 425.050358][ T5950] gs_usb 2-1:0.0: Configuring for 127 interfaces [ 425.114547][ T5950] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 425.114567][ T5901] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 425.138590][ T5950] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 425.253923][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.409579][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.418556][ T6012] input: HID 28bd:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0001/input/input8 [ 425.457054][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.481388][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.563232][ T6012] uclogic 0003:28BD:0042.0001: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 425.604171][ T6012] usb 5-1: USB disconnect, device number 3 [ 425.899309][ T5984] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 425.954342][ T5850] usb 2-1: USB disconnect, device number 3 [ 425.966753][ T7002] fido_id[7002]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 426.082798][ T5984] usb 3-1: Using ep0 maxpacket: 16 [ 426.098621][ T5984] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.135175][ T5984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 426.252819][ T7014] wg1 speed is unknown, defaulting to 1000 [ 426.270849][ T7014] wg1 speed is unknown, defaulting to 1000 [ 426.284195][ T7014] wg1 speed is unknown, defaulting to 1000 [ 426.659255][ T5984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 426.840285][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 426.841750][ T30] audit: type=1400 audit(1754045920.635:349): avc: denied { create } for pid=7007 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 426.847879][ T5984] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 426.990214][ T30] audit: type=1400 audit(1754045920.655:350): avc: denied { write } for pid=7007 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 427.025991][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 427.067390][ T5984] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.102475][ T5984] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 427.113920][ T5984] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 427.124042][ T5984] usb 3-1: Manufacturer: syz [ 427.173848][ T5984] usb 3-1: config 0 descriptor?? [ 427.429568][ T30] audit: type=1400 audit(1754045921.185:351): avc: denied { create } for pid=7017 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 427.508934][ T30] audit: type=1400 audit(1754045921.185:352): avc: denied { connect } for pid=7017 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 427.669132][ T7023] can: request_module (can-proto-0) failed. [ 427.675352][ T30] audit: type=1400 audit(1754045921.185:353): avc: denied { map } for pid=7017 comm="syz.0.259" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 427.710178][ T6012] wg1 speed is unknown, defaulting to 1000 [ 427.716917][ T7014] infiniband syz0: set active [ 427.741315][ T7014] infiniband syz0: added wg1 [ 427.769604][ T30] audit: type=1400 audit(1754045921.185:354): avc: denied { read write } for pid=7017 comm="syz.0.259" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 427.776334][ T7014] syz0: rxe_create_cq: returned err = -12 [ 427.806140][ T30] audit: type=1400 audit(1754045921.185:355): avc: denied { write } for pid=7017 comm="syz.0.259" path="socket:[10845]" dev="sockfs" ino=10845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 427.843032][ T30] audit: type=1400 audit(1754045921.435:356): avc: denied { create } for pid=7017 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 427.907928][ T7032] C: renamed from team_slave_0 (while UP) [ 428.224050][ T30] audit: type=1400 audit(1754045921.485:357): avc: denied { create } for pid=7017 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 428.259611][ T7032] netlink: 'syz.2.255': attribute type 1 has an invalid length. [ 428.267758][ T7032] netlink: 152 bytes leftover after parsing attributes in process `syz.2.255'. [ 428.276886][ T7032] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 428.302350][ T7014] infiniband syz0: Couldn't create ib_mad CQ [ 428.318135][ T7014] infiniband syz0: Couldn't open port 1 [ 428.323865][ T30] audit: type=1400 audit(1754045921.485:358): avc: denied { setopt } for pid=7017 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 428.405810][ T7038] overlay: ./file0 is not a directory [ 428.615628][ T7014] RDS/IB: syz0: added [ 429.186182][ T7014] smc: adding ib device syz0 with port count 1 [ 429.316471][ T7014] smc: ib device syz0 port 1 has pnetid [ 429.370724][ T5890] wg1 speed is unknown, defaulting to 1000 [ 429.381125][ T7014] wg1 speed is unknown, defaulting to 1000 [ 429.483177][ T7035] syz.4.262 (7035): drop_caches: 2 [ 429.929295][ T5984] rc_core: IR keymap rc-hauppauge not found [ 429.937096][ T5984] Registered IR keymap rc-empty [ 429.959521][ T5984] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 429.989327][ T5984] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 430.010860][ T7050] FAULT_INJECTION: forcing a failure. [ 430.010860][ T7050] name failslab, interval 1, probability 0, space 0, times 0 [ 430.023728][ T7050] CPU: 1 UID: 0 PID: 7050 Comm: syz.2.266 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 430.023745][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.023751][ T7050] Call Trace: [ 430.023755][ T7050] [ 430.023759][ T7050] dump_stack_lvl+0x16c/0x1f0 [ 430.023783][ T7050] should_fail_ex+0x512/0x640 [ 430.023809][ T7050] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 430.023837][ T7050] should_failslab+0xc2/0x120 [ 430.023851][ T7050] __kmalloc_cache_noprof+0x6a/0x3e0 [ 430.023868][ T7050] ? __inet_diag_dump_start+0x8f/0x7f0 [ 430.023883][ T7050] __inet_diag_dump_start+0x8f/0x7f0 [ 430.023898][ T7050] __netlink_dump_start+0x60e/0x990 [ 430.023917][ T7050] inet_diag_rcv_msg_compat+0x275/0x2d0 [ 430.023930][ T7050] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 430.023943][ T7050] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 430.023955][ T7050] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 430.023966][ T7050] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 430.023980][ T7050] ? sock_diag_rcv_msg+0x315/0x790 [ 430.023995][ T7050] sock_diag_rcv_msg+0x34d/0x790 [ 430.024010][ T7050] netlink_rcv_skb+0x158/0x420 [ 430.024025][ T7050] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 430.024039][ T7050] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.024059][ T7050] ? netlink_deliver_tap+0x1ae/0xd30 [ 430.024076][ T7050] netlink_unicast+0x5a7/0x870 [ 430.024094][ T7050] ? __pfx_netlink_unicast+0x10/0x10 [ 430.024109][ T7050] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 430.024128][ T7050] netlink_sendmsg+0x8d1/0xdd0 [ 430.024146][ T7050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.024167][ T7050] __sys_sendto+0x4a3/0x520 [ 430.024181][ T7050] ? __pfx___sys_sendto+0x10/0x10 [ 430.024205][ T7050] ? ksys_write+0x1ac/0x250 [ 430.024215][ T7050] ? __pfx_ksys_write+0x10/0x10 [ 430.024227][ T7050] __x64_sys_sendto+0xe0/0x1c0 [ 430.024239][ T7050] ? do_syscall_64+0x91/0x4c0 [ 430.024255][ T7050] ? lockdep_hardirqs_on+0x7c/0x110 [ 430.024269][ T7050] do_syscall_64+0xcd/0x4c0 [ 430.024285][ T7050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.024296][ T7050] RIP: 0033:0x7f116b18eb69 [ 430.024305][ T7050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.024315][ T7050] RSP: 002b:00007f116bf93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 430.024326][ T7050] RAX: ffffffffffffffda RBX: 00007f116b3b5fa0 RCX: 00007f116b18eb69 [ 430.024332][ T7050] RDX: 000000000000004c RSI: 0000200000000080 RDI: 0000000000000006 [ 430.024338][ T7050] RBP: 00007f116bf93090 R08: 0000000000000000 R09: 0000000000000000 [ 430.024344][ T7050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.024350][ T7050] R13: 0000000000000000 R14: 00007f116b3b5fa0 R15: 00007ffe64036768 [ 430.024363][ T7050] [ 430.341710][ T5984] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 430.355246][ T5984] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 431.279435][ T5984] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 431.300016][ T5984] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 431.352886][ T5984] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 431.375893][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 431.396891][ T5984] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 431.404609][ T7058] fuse: Bad value for 'fd' [ 431.470259][ T5984] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 431.492793][ T7060] mmap: syz.2.268 (7060): VmData 45985792 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 431.545485][ T5984] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 431.631244][ T7014] wg1 speed is unknown, defaulting to 1000 [ 431.747862][ T5984] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 431.769294][ T5984] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 431.894333][ T7066] bridge5: entered promiscuous mode [ 431.899639][ T7066] bridge5: entered allmulticast mode [ 431.916187][ T7066] team0: Port device bridge5 added [ 432.153376][ T5961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.231916][ T5984] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.271676][ T5984] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 433.175404][ T5984] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 433.225479][ T5984] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 433.340714][ T5984] usb 3-1: USB disconnect, device number 6 [ 433.909053][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 433.909065][ T30] audit: type=1400 audit(1754045927.775:373): avc: denied { write } for pid=7077 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 433.951914][ T7078] FAULT_INJECTION: forcing a failure. [ 433.951914][ T7078] name failslab, interval 1, probability 0, space 0, times 0 [ 433.985170][ T7014] wg1 speed is unknown, defaulting to 1000 [ 434.017286][ T7078] CPU: 1 UID: 0 PID: 7078 Comm: syz.0.276 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 434.017310][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 434.017316][ T7078] Call Trace: [ 434.017320][ T7078] [ 434.017325][ T7078] dump_stack_lvl+0x16c/0x1f0 [ 434.017344][ T7078] should_fail_ex+0x512/0x640 [ 434.017361][ T7078] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 434.017379][ T7078] should_failslab+0xc2/0x120 [ 434.017392][ T7078] __kmalloc_cache_noprof+0x6a/0x3e0 [ 434.017407][ T7078] ? nft_match_select_ops+0x213/0x550 [ 434.017424][ T7078] nft_match_select_ops+0x213/0x550 [ 434.017439][ T7078] ? __pfx_nft_match_select_ops+0x10/0x10 [ 434.017452][ T7078] nf_tables_expr_parse+0x605/0x9c0 [ 434.017467][ T7078] ? __pfx_nf_tables_expr_parse+0x10/0x10 [ 434.017480][ T7078] ? nf_tables_newrule+0x8b0/0x28e0 [ 434.017496][ T7078] nf_tables_newrule+0xa3e/0x28e0 [ 434.017514][ T7078] ? __pfx_nf_tables_newrule+0x10/0x10 [ 434.017532][ T7078] ? __nla_parse+0x40/0x60 [ 434.017545][ T7078] nfnetlink_rcv_batch+0x18ed/0x2330 [ 434.017565][ T7078] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 434.017586][ T7078] ? avc_has_perm_noaudit+0x149/0x3b0 [ 434.017615][ T7078] ? __nla_parse+0x40/0x60 [ 434.017629][ T7078] nfnetlink_rcv+0x3c1/0x430 [ 434.017640][ T7078] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 434.017655][ T7078] netlink_unicast+0x5a7/0x870 [ 434.017674][ T7078] ? __pfx_netlink_unicast+0x10/0x10 [ 434.017695][ T7078] netlink_sendmsg+0x8d1/0xdd0 [ 434.017713][ T7078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.017733][ T7078] ____sys_sendmsg+0xa95/0xc70 [ 434.017745][ T7078] ? copy_msghdr_from_user+0x10a/0x160 [ 434.017759][ T7078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.017779][ T7078] ___sys_sendmsg+0x134/0x1d0 [ 434.017794][ T7078] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.017807][ T7078] ? __lock_acquire+0x622/0x1c90 [ 434.017837][ T7078] ? __mutex_unlock_slowpath+0x140/0x800 [ 434.017857][ T7078] __sys_sendmsg+0x16d/0x220 [ 434.017871][ T7078] ? __pfx___sys_sendmsg+0x10/0x10 [ 434.017895][ T7078] do_syscall_64+0xcd/0x4c0 [ 434.017916][ T7078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.017927][ T7078] RIP: 0033:0x7f0411d8eb69 [ 434.017936][ T7078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.017946][ T7078] RSP: 002b:00007f0412bbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.017957][ T7078] RAX: ffffffffffffffda RBX: 00007f0411fb5fa0 RCX: 00007f0411d8eb69 [ 434.017963][ T7078] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 434.017970][ T7078] RBP: 00007f0412bbb090 R08: 0000000000000000 R09: 0000000000000000 [ 434.017975][ T7078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.017981][ T7078] R13: 0000000000000000 R14: 00007f0411fb5fa0 R15: 00007fffce380198 [ 434.017995][ T7078] [ 434.297871][ C1] vkms_vblank_simulate: vblank timer overrun [ 434.477349][ T7014] wg1 speed is unknown, defaulting to 1000 [ 434.561606][ T7014] wg1 speed is unknown, defaulting to 1000 [ 435.934897][ T30] audit: type=1400 audit(1754045929.805:374): avc: denied { create } for pid=7069 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 436.258102][ T30] audit: type=1400 audit(1754045929.935:375): avc: denied { ioctl } for pid=7069 comm="syz.2.273" path="socket:[12458]" dev="sockfs" ino=12458 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 436.282664][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.308826][ T30] audit: type=1400 audit(1754045929.955:376): avc: denied { bind } for pid=7069 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 436.550348][ T7097] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.282'. [ 436.688729][ T30] audit: type=1400 audit(1754045930.515:377): avc: denied { read write } for pid=7096 comm="syz.0.282" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 436.759285][ T30] audit: type=1400 audit(1754045930.515:378): avc: denied { open } for pid=7096 comm="syz.0.282" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 436.848067][ T30] audit: type=1400 audit(1754045930.715:379): avc: denied { create } for pid=7101 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 437.150074][ T5961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.391792][ T30] audit: type=1400 audit(1754045930.755:380): avc: denied { ioctl } for pid=7101 comm="syz.3.284" path="socket:[12475]" dev="sockfs" ino=12475 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 437.420364][ T7110] syz.3.284: attempt to access beyond end of device [ 437.420364][ T7110] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 437.459518][ T7110] syz.3.284: attempt to access beyond end of device [ 437.459518][ T7110] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 437.483972][ T7110] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 437.499607][ T7110] syz.3.284: attempt to access beyond end of device [ 437.499607][ T7110] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 437.523230][ T7110] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 437.576526][ T7110] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 437.603773][ T7110] UDF-fs: Scanning with blocksize 512 failed [ 437.640774][ T7110] syz.3.284: attempt to access beyond end of device [ 437.640774][ T7110] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 437.706993][ T7115] fuse: Unknown parameter '0x0000000000000005' [ 437.737452][ T7106] block nbd3: shutting down sockets [ 437.760024][ T5961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.881202][ T7110] syz.3.284: attempt to access beyond end of device [ 437.881202][ T7110] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 437.914057][ T7121] QAT: failed to copy from user cfg_data. [ 438.141125][ T30] audit: type=1400 audit(1754045931.995:381): avc: denied { create } for pid=7098 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 438.832214][ T7126] syz.2.289 (7126): drop_caches: 2 [ 438.837730][ T7110] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 438.847989][ T30] audit: type=1400 audit(1754045931.995:382): avc: denied { write } for pid=7098 comm="syz.1.281" path="socket:[11011]" dev="sockfs" ino=11011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 438.879456][ T7110] syz.3.284: attempt to access beyond end of device [ 438.879456][ T7110] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 439.032387][ T7110] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 439.071233][ T7110] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 439.079953][ T30] audit: type=1400 audit(1754045932.955:383): avc: denied { bind } for pid=7124 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 439.108504][ T7110] UDF-fs: Scanning with blocksize 1024 failed [ 439.161567][ T30] audit: type=1400 audit(1754045932.965:384): avc: denied { setopt } for pid=7124 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 439.181912][ T7110] syz.3.284: attempt to access beyond end of device [ 439.181912][ T7110] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 439.195525][ T7110] syz.3.284: attempt to access beyond end of device [ 439.195525][ T7110] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 439.338419][ T7110] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 439.557346][ T30] audit: type=1400 audit(1754045933.345:385): avc: denied { setopt } for pid=7130 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 439.637883][ T7110] syz.3.284: attempt to access beyond end of device [ 439.637883][ T7110] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 439.692529][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.698984][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.779845][ T7110] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 439.793337][ T30] audit: type=1400 audit(1754045933.355:386): avc: denied { write } for pid=7130 comm="syz.0.291" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 439.809258][ T7110] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 439.826633][ T7142] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 439.833159][ T7142] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 439.883591][ T7110] UDF-fs: Scanning with blocksize 2048 failed [ 439.900985][ T7142] vhci_hcd vhci_hcd.0: Device attached [ 439.906974][ T7110] syz.3.284: attempt to access beyond end of device [ 439.906974][ T7110] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 440.022593][ T30] audit: type=1400 audit(1754045933.865:387): avc: denied { read write } for pid=7140 comm="syz.0.294" name="vbi0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 440.023488][ T7110] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 440.114886][ T5949] vhci_hcd: vhci_device speed not set [ 440.124774][ T7143] vhci_hcd: connection closed [ 440.131734][ T5901] vhci_hcd: stop threads [ 440.154923][ T5901] vhci_hcd: release socket [ 440.163505][ T30] audit: type=1400 audit(1754045933.865:388): avc: denied { open } for pid=7140 comm="syz.0.294" path="/dev/vbi0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 440.197026][ T5949] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 440.197099][ T5901] vhci_hcd: disconnect device [ 440.222429][ T30] audit: type=1400 audit(1754045933.875:389): avc: denied { ioctl } for pid=7140 comm="syz.0.294" path="/dev/vbi0" dev="devtmpfs" ino=952 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 440.303078][ T30] audit: type=1400 audit(1754045934.145:390): avc: denied { create } for pid=7137 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 440.330281][ T7110] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 440.509335][ T7110] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 440.528978][ T7110] UDF-fs: Scanning with blocksize 4096 failed [ 440.602559][ T30] audit: type=1400 audit(1754045934.415:391): avc: denied { write } for pid=7148 comm="syz.2.295" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 440.637019][ T7110] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 441.658694][ T30] audit: type=1400 audit(1754045934.465:392): avc: denied { read } for pid=7150 comm="syz.2.296" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 442.313946][ T7171] macsec0: entered promiscuous mode [ 442.320127][ T7171] macsec0: entered allmulticast mode [ 442.325438][ T7171] veth1_macvtap: entered allmulticast mode [ 442.870222][ T5901] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 442.949490][ T5890] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 443.712568][ T5901] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.755334][ T7178] bio_check_eod: 2 callbacks suppressed [ 443.755345][ T7178] syz.2.302: attempt to access beyond end of device [ 443.755345][ T7178] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 443.810238][ T7178] syz.2.302: attempt to access beyond end of device [ 443.810238][ T7178] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 443.870996][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 444.445999][ T5890] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 444.455367][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.468641][ T5890] usb 2-1: config 0 descriptor?? [ 444.509375][ T7178] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 444.523051][ T7178] syz.2.302: attempt to access beyond end of device [ 444.523051][ T7178] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 444.536316][ T7178] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 444.546635][ T7178] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 444.555882][ T7178] UDF-fs: Scanning with blocksize 512 failed [ 444.563483][ T7178] syz.2.302: attempt to access beyond end of device [ 444.563483][ T7178] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 444.579303][ T7178] syz.2.302: attempt to access beyond end of device [ 444.579303][ T7178] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 444.592414][ T7178] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 444.602645][ T7178] syz.2.302: attempt to access beyond end of device [ 444.602645][ T7178] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 444.620570][ T7178] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 444.645558][ T7178] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 444.654913][ T7178] UDF-fs: Scanning with blocksize 1024 failed [ 444.663778][ T7178] syz.2.302: attempt to access beyond end of device [ 444.663778][ T7178] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 444.677410][ T7178] syz.2.302: attempt to access beyond end of device [ 444.677410][ T7178] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 444.691047][ T7178] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 444.709647][ T7178] syz.2.302: attempt to access beyond end of device [ 444.709647][ T7178] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 444.723123][ T7178] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 444.740406][ T7178] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 444.748116][ T7178] UDF-fs: Scanning with blocksize 2048 failed [ 444.756594][ T7178] syz.2.302: attempt to access beyond end of device [ 444.756594][ T7178] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 444.791880][ T7178] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 444.833998][ T7178] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 444.849672][ T7178] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 444.862437][ T7178] UDF-fs: Scanning with blocksize 4096 failed [ 444.868795][ T7178] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 445.012004][ T7178] block nbd2: shutting down sockets [ 445.037835][ T5890] asus 0003:0B05:17E0.0002: item fetching failed at offset 2/5 [ 445.046154][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 445.046168][ T30] audit: type=1400 audit(1754045938.885:399): avc: denied { bind } for pid=7170 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 445.072826][ T5890] asus 0003:0B05:17E0.0002: Asus hid parse failed: -22 [ 445.082745][ T5890] asus 0003:0B05:17E0.0002: probe with driver asus failed with error -22 [ 445.300535][ T7172] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 445.572850][ T7188] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 445.572850][ T7188] program syz.4.306 not setting count and/or reply_len properly [ 445.667209][ T5949] vhci_hcd: vhci_device speed not set [ 445.696725][ T30] audit: type=1400 audit(1754045939.565:400): avc: denied { read } for pid=7186 comm="syz.4.306" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 445.744735][ T30] audit: type=1400 audit(1754045939.565:401): avc: denied { open } for pid=7186 comm="syz.4.306" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 445.746282][ T5890] usb 2-1: USB disconnect, device number 4 [ 445.793888][ T30] audit: type=1400 audit(1754045939.565:402): avc: denied { ioctl } for pid=7186 comm="syz.4.306" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 445.923484][ T30] audit: type=1400 audit(1754045939.665:403): avc: denied { getopt } for pid=7186 comm="syz.4.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 445.948016][ T7188] 9pnet: Could not find request transport: fE [ 445.960807][ T30] audit: type=1400 audit(1754045939.825:404): avc: denied { ioctl } for pid=7194 comm="syz.3.308" path="socket:[11105]" dev="sockfs" ino=11105 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 446.052855][ T7202] bridge3: entered promiscuous mode [ 446.058121][ T7202] bridge3: entered allmulticast mode [ 446.065909][ T7202] team0: Port device bridge3 added [ 446.557626][ T30] audit: type=1400 audit(1754045939.825:405): avc: denied { write } for pid=7194 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 446.629278][ T5886] Bluetooth: hci0: command 0x0406 tx timeout [ 446.776890][ T7209] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 446.842544][ T7209] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 446.979318][ T7208] nbd3: detected capacity change from 0 to 10 [ 446.987432][ T7209] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 446.997443][ T7209] UDF-fs: Scanning with blocksize 1024 failed [ 447.011839][ T5888] block nbd3: Send control failed (result -89) [ 447.049115][ T5888] block nbd3: Request send failed, requeueing [ 447.095343][ T5876] block nbd3: Receive control failed (result -32) [ 447.114746][ T125] block nbd3: Dead connection, failed to find a fallback [ 447.123003][ T125] block nbd3: shutting down sockets [ 447.128471][ T125] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.138617][ T125] Buffer I/O error on dev nbd3, logical block 0, async page read [ 447.156733][ T5888] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.197737][ T5888] Buffer I/O error on dev nbd3, logical block 1, async page read [ 447.224402][ T7211] random: crng reseeded on system resumption [ 447.226367][ T30] audit: type=1400 audit(1754045941.095:406): avc: denied { append } for pid=7210 comm="syz.2.312" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 447.264866][ T5888] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.322077][ T5888] Buffer I/O error on dev nbd3, logical block 2, async page read [ 447.334683][ T30] audit: type=1400 audit(1754045941.095:407): avc: denied { open } for pid=7210 comm="syz.2.312" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 447.335288][ T5888] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.374400][ T30] audit: type=1400 audit(1754045941.135:408): avc: denied { accept } for pid=7210 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 447.402413][ T5888] Buffer I/O error on dev nbd3, logical block 3, async page read [ 447.414010][ T7209] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 447.424511][ T7209] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.437991][ T5888] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.451372][ T5888] Buffer I/O error on dev nbd3, logical block 0, async page read [ 447.464172][ T5888] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.483761][ T5888] Buffer I/O error on dev nbd3, logical block 1, async page read [ 447.492944][ T7209] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 447.506627][ T5888] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.517739][ T5888] Buffer I/O error on dev nbd3, logical block 0, async page read [ 447.541222][ T5888] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.554872][ T5888] Buffer I/O error on dev nbd3, logical block 1, async page read [ 447.563948][ T7209] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.659336][ T841] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 447.687301][ T7209] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 447.998729][ T5888] Buffer I/O error on dev nbd3, logical block 0, async page read [ 448.006827][ T5888] Buffer I/O error on dev nbd3, logical block 1, async page read [ 448.010293][ T7209] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 448.015468][ T5888] ldm_validate_partition_table(): Disk read failed. [ 448.032296][ T5888] Dev nbd3: unable to read RDB block 0 [ 448.041958][ T5888] nbd3: unable to read partition table [ 448.047131][ T7209] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 448.054574][ T5888] nbd3: partition table beyond EOD, truncated [ 448.068439][ T7209] UDF-fs: Scanning with blocksize 2048 failed [ 448.081982][ T5888] ldm_validate_partition_table(): Disk read failed. [ 448.094516][ T5888] Dev nbd3: unable to read RDB block 0 [ 448.104536][ T7209] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 448.119735][ T5888] nbd3: unable to read partition table [ 448.140815][ T5888] nbd3: partition table beyond EOD, truncated [ 448.159407][ T841] usb 3-1: Using ep0 maxpacket: 8 [ 448.190039][ T841] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 448.192019][ T7209] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 448.366997][ T7209] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 448.473773][ T841] usb 3-1: can't read configurations, error -61 [ 448.489816][ T7209] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 448.498259][ T7209] UDF-fs: Scanning with blocksize 4096 failed [ 448.504481][ T7209] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 448.646968][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 448.939954][ T841] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 449.169788][ T841] usb 3-1: Using ep0 maxpacket: 8 [ 449.182112][ T841] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 449.319382][ T5961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.556695][ T7244] bio_check_eod: 5 callbacks suppressed [ 449.556713][ T7244] syz.0.319: attempt to access beyond end of device [ 449.556713][ T7244] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 449.580795][ T841] usb 3-1: can't read configurations, error -61 [ 449.600904][ T7244] syz.0.319: attempt to access beyond end of device [ 449.600904][ T7244] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 449.623599][ T841] usb usb3-port1: attempt power cycle [ 449.634349][ T7244] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 449.649682][ T7244] syz.0.319: attempt to access beyond end of device [ 449.649682][ T7244] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 449.665834][ T7244] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 449.680151][ T7244] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 449.687760][ T7244] UDF-fs: Scanning with blocksize 512 failed [ 449.700132][ T7244] syz.0.319: attempt to access beyond end of device [ 449.700132][ T7244] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 449.713488][ T7244] syz.0.319: attempt to access beyond end of device [ 449.713488][ T7244] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 449.741623][ T7244] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 449.741728][ T7244] syz.0.319: attempt to access beyond end of device [ 449.741728][ T7244] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 449.741760][ T7244] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 449.741771][ T7244] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 449.741779][ T7244] UDF-fs: Scanning with blocksize 1024 failed [ 449.742020][ T7244] syz.0.319: attempt to access beyond end of device [ 449.742020][ T7244] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 449.742107][ T7244] syz.0.319: attempt to access beyond end of device [ 449.742107][ T7244] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 449.742137][ T7244] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 449.742231][ T7244] syz.0.319: attempt to access beyond end of device [ 449.742231][ T7244] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 449.742261][ T7244] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 449.742272][ T7244] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 449.742279][ T7244] UDF-fs: Scanning with blocksize 2048 failed [ 449.742507][ T7244] syz.0.319: attempt to access beyond end of device [ 449.742507][ T7244] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 449.742606][ T7244] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 449.742672][ T7244] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 449.742684][ T7244] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 449.742692][ T7244] UDF-fs: Scanning with blocksize 4096 failed [ 449.742697][ T7244] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 449.911531][ T7236] block nbd0: shutting down sockets [ 450.093231][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 450.093243][ T30] audit: type=1400 audit(1754045943.935:416): avc: denied { write } for pid=7253 comm="syz.4.322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 450.480763][ T30] audit: type=1400 audit(1754045944.125:417): avc: denied { connect } for pid=7259 comm="syz.0.324" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 450.480824][ T30] audit: type=1400 audit(1754045944.125:418): avc: denied { write } for pid=7259 comm="syz.0.324" laddr=127.0.0.1 lport=255 faddr=127.0.0.1 fport=20064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 450.753891][ T7267] binder: BINDER_SET_CONTEXT_MGR already set [ 450.753966][ T7267] binder: 7248:7267 ioctl 4018620d 200000000040 returned -16 [ 450.756162][ T7267] binder: 7248:7267 ioctl c0306201 200000000180 returned -22 [ 450.928382][ T5949] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 451.202067][ T5949] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 451.202098][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.204205][ T5949] usb 5-1: config 0 descriptor?? [ 451.399051][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.739446][ T5949] ath6kl: Unsupported hardware version: 0x0 [ 451.783151][ T5949] ath6kl: Failed to init ath6kl core: -22 [ 451.815129][ T5949] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 452.025427][ T5950] usb 5-1: USB disconnect, device number 4 [ 452.414353][ T7286] FAULT_INJECTION: forcing a failure. [ 452.414353][ T7286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.429111][ T7286] CPU: 0 UID: 0 PID: 7286 Comm: syz.0.329 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 452.429128][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.429135][ T7286] Call Trace: [ 452.429139][ T7286] [ 452.429143][ T7286] dump_stack_lvl+0x16c/0x1f0 [ 452.429168][ T7286] should_fail_ex+0x512/0x640 [ 452.429201][ T7286] _copy_from_user+0x2e/0xd0 [ 452.429220][ T7286] __sys_bpf+0x21d/0x4de0 [ 452.429246][ T7286] ? __pfx___sys_bpf+0x10/0x10 [ 452.429267][ T7286] ? ksys_write+0x190/0x250 [ 452.429286][ T7286] ? __mutex_unlock_slowpath+0x163/0x800 [ 452.429311][ T7286] ? fput+0x70/0xf0 [ 452.429324][ T7286] ? ksys_write+0x1ac/0x250 [ 452.429334][ T7286] ? __pfx_ksys_write+0x10/0x10 [ 452.429346][ T7286] __x64_sys_bpf+0x78/0xc0 [ 452.429360][ T7286] ? lockdep_hardirqs_on+0x7c/0x110 [ 452.429374][ T7286] do_syscall_64+0xcd/0x4c0 [ 452.429390][ T7286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.429402][ T7286] RIP: 0033:0x7f0411d8eb69 [ 452.429412][ T7286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.429422][ T7286] RSP: 002b:00007f0412bbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 452.429434][ T7286] RAX: ffffffffffffffda RBX: 00007f0411fb5fa0 RCX: 00007f0411d8eb69 [ 452.429440][ T7286] RDX: 000000000000004c RSI: 0000200000000000 RDI: 000000000000000a [ 452.429447][ T7286] RBP: 00007f0412bbb090 R08: 0000000000000000 R09: 0000000000000000 [ 452.429453][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.429459][ T7286] R13: 0000000000000000 R14: 00007f0411fb5fa0 R15: 00007fffce380198 [ 452.429472][ T7286] [ 454.390726][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.031572][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.347231][ T30] audit: type=1400 audit(1754045949.215:419): avc: denied { ioctl } for pid=7314 comm="syz.4.341" path="socket:[12916]" dev="sockfs" ino=12916 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 457.875741][ T7344] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 17 [ 458.265822][ T30] audit: type=1400 audit(1754045952.135:420): avc: denied { sys_module } for pid=7346 comm="syz.2.350" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 458.574229][ T30] audit: type=1400 audit(1754045952.445:421): avc: denied { read } for pid=7360 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 458.635682][ T7362] tipc: Enabled bearer , priority 0 [ 458.845541][ T7362] syzkaller0: entered promiscuous mode [ 458.966761][ T7362] syzkaller0: entered allmulticast mode [ 458.978586][ T7377] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 459.423598][ T7359] tipc: Resetting bearer [ 459.517087][ T30] audit: type=1400 audit(1754045953.305:422): avc: denied { bind } for pid=7382 comm="syz.3.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 459.549514][ T30] audit: type=1400 audit(1754045953.305:423): avc: denied { setopt } for pid=7382 comm="syz.3.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 459.587549][ T7359] tipc: Disabling bearer [ 459.597451][ T7386] overlayfs: failed to resolve './file1': -2 [ 459.605890][ T30] audit: type=1400 audit(1754045953.465:424): avc: denied { mount } for pid=7382 comm="syz.3.358" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 459.983984][ T7389] process 'syz.4.357' launched './file1' with NULL argv: empty string added [ 460.243035][ T30] audit: type=1400 audit(1754045953.855:425): avc: denied { execute } for pid=7376 comm="syz.4.357" name="file1" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 460.388767][ T30] audit: type=1400 audit(1754045953.875:426): avc: denied { execute_no_trans } for pid=7376 comm="syz.4.357" path="/72/file1" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 460.416684][ T1100] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 460.789545][ T1100] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 460.825139][ T30] audit: type=1400 audit(1754045954.285:427): avc: denied { unmount } for pid=5869 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 460.920640][ T30] audit: type=1800 audit(1754045954.485:428): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.362" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 461.022214][ T7405] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.363'. [ 461.057273][ T7408] FAULT_INJECTION: forcing a failure. [ 461.057273][ T7408] name failslab, interval 1, probability 0, space 0, times 0 [ 461.117957][ T7408] CPU: 0 UID: 0 PID: 7408 Comm: syz.0.364 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 461.117976][ T7408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.117982][ T7408] Call Trace: [ 461.117986][ T7408] [ 461.117991][ T7408] dump_stack_lvl+0x16c/0x1f0 [ 461.118010][ T7408] should_fail_ex+0x512/0x640 [ 461.118029][ T7408] should_failslab+0xc2/0x120 [ 461.118042][ T7408] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 461.118054][ T7408] ? skb_clone+0x190/0x3f0 [ 461.118071][ T7408] skb_clone+0x190/0x3f0 [ 461.118086][ T7408] netlink_deliver_tap+0xabd/0xd30 [ 461.118108][ T7408] netlink_unicast+0x71f/0x870 [ 461.118126][ T7408] ? __pfx_netlink_unicast+0x10/0x10 [ 461.118142][ T7408] ? genl_rcv_msg+0x4bb/0x800 [ 461.118156][ T7408] netlink_ack+0x696/0xb80 [ 461.118176][ T7408] netlink_rcv_skb+0x332/0x420 [ 461.118191][ T7408] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.118202][ T7408] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.118224][ T7408] ? netlink_deliver_tap+0x1ae/0xd30 [ 461.118240][ T7408] genl_rcv+0x28/0x40 [ 461.118256][ T7408] netlink_unicast+0x5a7/0x870 [ 461.118274][ T7408] ? __pfx_netlink_unicast+0x10/0x10 [ 461.118289][ T7408] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 461.118309][ T7408] netlink_sendmsg+0x8d1/0xdd0 [ 461.118327][ T7408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.118348][ T7408] ____sys_sendmsg+0xa95/0xc70 [ 461.118359][ T7408] ? copy_msghdr_from_user+0x10a/0x160 [ 461.118374][ T7408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.118391][ T7408] ___sys_sendmsg+0x134/0x1d0 [ 461.118406][ T7408] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.118420][ T7408] ? __lock_acquire+0x622/0x1c90 [ 461.118454][ T7408] ? __mutex_unlock_slowpath+0x140/0x800 [ 461.118483][ T7408] __sys_sendmsg+0x16d/0x220 [ 461.118507][ T7408] ? __pfx___sys_sendmsg+0x10/0x10 [ 461.118537][ T7408] do_syscall_64+0xcd/0x4c0 [ 461.118554][ T7408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.118566][ T7408] RIP: 0033:0x7f0411d8eb69 [ 461.118575][ T7408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.118586][ T7408] RSP: 002b:00007f0412bbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.118597][ T7408] RAX: ffffffffffffffda RBX: 00007f0411fb5fa0 RCX: 00007f0411d8eb69 [ 461.118604][ T7408] RDX: 0000000000040000 RSI: 0000200000000880 RDI: 0000000000000003 [ 461.118611][ T7408] RBP: 00007f0412bbb090 R08: 0000000000000000 R09: 0000000000000000 [ 461.118617][ T7408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.118623][ T7408] R13: 0000000000000000 R14: 00007f0411fb5fa0 R15: 00007fffce380198 [ 461.118637][ T7408] [ 461.423356][ T5949] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 461.793238][ T5949] usb 4-1: config 65 has an invalid interface number: 95 but max is 0 [ 461.803090][ T5949] usb 4-1: config 65 has no interface number 0 [ 462.065532][ T5949] usb 4-1: string descriptor 0 read error: -22 [ 462.081952][ T5949] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 462.142119][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.389439][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 462.395542][ T5871] Bluetooth: hci3: command 0x0406 tx timeout [ 462.396943][ T5147] Bluetooth: hci1: command 0x0406 tx timeout [ 462.403369][ T5876] Bluetooth: hci0: command 0x0406 tx timeout [ 462.497251][ T5949] usbtest 4-1:65.95: Linux gadget zero [ 462.509496][ T5949] usbtest 4-1:65.95: low-speed {control in/out} tests (+alt) [ 465.140059][ T7467] netlink: 88 bytes leftover after parsing attributes in process `syz.1.372'. [ 465.149326][ T7467] netlink: 48 bytes leftover after parsing attributes in process `syz.1.372'. [ 465.266007][ T30] audit: type=1400 audit(1754045959.135:429): avc: denied { create } for pid=7466 comm="syz.1.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 465.397955][ T30] audit: type=1400 audit(1754045959.205:430): avc: denied { ioctl } for pid=7466 comm="syz.1.372" path="socket:[13464]" dev="sockfs" ino=13464 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 465.432133][ T7472] FAULT_INJECTION: forcing a failure. [ 465.432133][ T7472] name failslab, interval 1, probability 0, space 0, times 0 [ 465.450748][ T5987] usb 4-1: USB disconnect, device number 3 [ 465.479327][ T7472] CPU: 0 UID: 0 PID: 7472 Comm: syz.1.374 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 465.479353][ T7472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 465.479364][ T7472] Call Trace: [ 465.479378][ T7472] [ 465.479385][ T7472] dump_stack_lvl+0x16c/0x1f0 [ 465.479415][ T7472] should_fail_ex+0x512/0x640 [ 465.479441][ T7472] ? fs_reclaim_acquire+0xae/0x150 [ 465.479467][ T7472] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 465.479488][ T7472] should_failslab+0xc2/0x120 [ 465.479508][ T7472] __kmalloc_noprof+0xd2/0x510 [ 465.479530][ T7472] tomoyo_realpath_from_path+0xc2/0x6e0 [ 465.479553][ T7472] ? tomoyo_profile+0x47/0x60 [ 465.479579][ T7472] tomoyo_path_number_perm+0x245/0x580 [ 465.479596][ T7472] ? tomoyo_path_number_perm+0x237/0x580 [ 465.479615][ T7472] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 465.479633][ T7472] ? find_held_lock+0x2b/0x80 [ 465.479675][ T7472] ? find_held_lock+0x2b/0x80 [ 465.479694][ T7472] ? hook_file_ioctl_common+0x145/0x410 [ 465.479728][ T7472] ? __fget_files+0x20e/0x3c0 [ 465.479752][ T7472] security_file_ioctl+0x9b/0x240 [ 465.479774][ T7472] __x64_sys_ioctl+0xb7/0x210 [ 465.479801][ T7472] do_syscall_64+0xcd/0x4c0 [ 465.479827][ T7472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.479845][ T7472] RIP: 0033:0x7f4b2498eb69 [ 465.479859][ T7472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.479876][ T7472] RSP: 002b:00007f4b25886038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.479892][ T7472] RAX: ffffffffffffffda RBX: 00007f4b24bb5fa0 RCX: 00007f4b2498eb69 [ 465.479904][ T7472] RDX: 0000000000000000 RSI: 000000000000641f RDI: 0000000000000003 [ 465.479914][ T7472] RBP: 00007f4b25886090 R08: 0000000000000000 R09: 0000000000000000 [ 465.479924][ T7472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.479933][ T7472] R13: 0000000000000000 R14: 00007f4b24bb5fa0 R15: 00007ffcc0b3ba68 [ 465.479957][ T7472] [ 465.479981][ T7472] ERROR: Out of memory at tomoyo_realpath_from_path. [ 465.596860][ T30] audit: type=1400 audit(1754045959.305:431): avc: denied { read append } for pid=7471 comm="syz.1.374" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 465.865657][ T30] audit: type=1400 audit(1754045959.305:432): avc: denied { open } for pid=7471 comm="syz.1.374" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 465.893032][ T30] audit: type=1400 audit(1754045959.605:433): avc: denied { ioctl } for pid=7471 comm="syz.1.374" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x641f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 466.561258][ T7461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 466.574485][ T5961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 467.589675][ T5850] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 468.045842][ T5850] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 468.124119][ T5850] usb 1-1: config 0 has no interface number 0 [ 468.149287][ T5850] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 468.171520][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.201061][ T5850] usb 1-1: config 0 descriptor?? [ 468.221113][ T5850] usb 1-1: selecting invalid altsetting 1 [ 468.264076][ T5850] dvb_ttusb_budget: ttusb_init_controller: error [ 468.296862][ T5850] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 469.039322][ T5987] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 469.052896][ T5850] DVB: Unable to find symbol cx22700_attach() [ 469.084490][ T5850] DVB: Unable to find symbol tda10046_attach() [ 469.092334][ T5850] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 469.110773][ T5850] usb 1-1: USB disconnect, device number 3 [ 469.162651][ T7522] bio_check_eod: 2 callbacks suppressed [ 469.162684][ T7522] syz.1.387: attempt to access beyond end of device [ 469.162684][ T7522] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 469.190203][ T7522] syz.1.387: attempt to access beyond end of device [ 469.190203][ T7522] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 469.199397][ T5987] usb 4-1: Using ep0 maxpacket: 32 [ 469.218153][ T7522] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 469.228476][ T5987] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 469.245032][ T5987] usb 4-1: config 0 has no interface number 0 [ 469.261818][ T5987] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 469.272549][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.285112][ T7522] syz.1.387: attempt to access beyond end of device [ 469.285112][ T7522] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 469.300402][ T5987] usb 4-1: Product: syz [ 469.304712][ T5987] usb 4-1: Manufacturer: syz [ 469.310109][ T5987] usb 4-1: SerialNumber: syz [ 469.314774][ T7522] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 469.329004][ T5987] usb 4-1: config 0 descriptor?? [ 469.337293][ T7522] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 469.346176][ T5987] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 469.355943][ T7522] UDF-fs: Scanning with blocksize 512 failed [ 469.362630][ T7522] syz.1.387: attempt to access beyond end of device [ 469.362630][ T7522] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 469.376050][ T7522] syz.1.387: attempt to access beyond end of device [ 469.376050][ T7522] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 469.412682][ T7522] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 469.429123][ T7522] syz.1.387: attempt to access beyond end of device [ 469.429123][ T7522] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 469.442652][ T7522] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 469.452981][ T5850] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 469.461290][ T7522] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 469.762052][ T5850] usb 1-1: Using ep0 maxpacket: 8 [ 469.769622][ T5850] usb 1-1: unable to get BOS descriptor or descriptor too short [ 469.778461][ T7522] UDF-fs: Scanning with blocksize 1024 failed [ 469.779592][ T5850] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 469.799305][ T5850] usb 1-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.817017][ T5850] usb 1-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 469.839498][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.848183][ T7522] syz.1.387: attempt to access beyond end of device [ 469.848183][ T7522] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 469.871717][ T5881] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 469.880571][ T5850] usb 1-1: Product: syz [ 469.884778][ T5850] usb 1-1: Manufacturer: syz [ 469.901586][ T5850] usb 1-1: SerialNumber: syz [ 469.906699][ T7522] syz.1.387: attempt to access beyond end of device [ 469.906699][ T7522] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 469.949530][ T7522] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 469.966457][ T7522] syz.1.387: attempt to access beyond end of device [ 469.966457][ T7522] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 469.983122][ T7522] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 469.993125][ T7522] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 470.000934][ T7522] UDF-fs: Scanning with blocksize 2048 failed [ 470.008456][ T7522] syz.1.387: attempt to access beyond end of device [ 470.008456][ T7522] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 470.024247][ T7522] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 470.034381][ T7522] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 470.043872][ T7522] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 470.051585][ T7522] UDF-fs: Scanning with blocksize 4096 failed [ 470.057985][ T7522] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 470.066967][ T7522] block nbd1: shutting down sockets [ 470.073057][ T5987] usb 4-1: qt2_attach - failed to power on unit: -71 [ 470.079963][ T5987] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 470.115045][ T5987] usb 4-1: USB disconnect, device number 4 [ 470.534933][ T5850] usb 1-1: USB disconnect, device number 4 [ 471.285056][ T7540] netlink: 'syz.2.394': attribute type 3 has an invalid length. [ 471.923357][ T30] audit: type=1400 audit(1754045965.715:434): avc: denied { write } for pid=7554 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 472.309950][ T7465] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 472.322194][ T5961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 472.500383][ T30] audit: type=1400 audit(1754045965.975:435): avc: denied { create } for pid=7554 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 472.759876][ T30] audit: type=1400 audit(1754045965.995:436): avc: denied { read } for pid=7554 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 472.779044][ T30] audit: type=1400 audit(1754045966.215:437): avc: denied { connect } for pid=7560 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 472.799049][ T30] audit: type=1400 audit(1754045966.255:438): avc: denied { write } for pid=7560 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 472.818524][ T30] audit: type=1400 audit(1754045966.365:439): avc: denied { read } for pid=7560 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 472.944798][ T7571] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 472.992460][ T7571] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 473.085914][ T7571] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 473.109072][ T7571] UDF-fs: Scanning with blocksize 1024 failed [ 473.274167][ T7571] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 473.385895][ T7571] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 473.496096][ T7571] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 473.503913][ T30] audit: type=1400 audit(1754045967.365:440): avc: denied { append } for pid=7577 comm="syz.4.405" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 473.550972][ T7571] UDF-fs: Scanning with blocksize 2048 failed [ 473.677151][ T7571] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 473.701077][ T7571] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 473.760453][ T7571] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 473.844701][ T7571] UDF-fs: Scanning with blocksize 4096 failed [ 473.858006][ T7571] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 474.030251][ T7571] block nbd3: shutting down sockets [ 474.051630][ T5881] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 474.061282][ T5881] Bluetooth: hci1: Injecting HCI hardware error event [ 474.069324][ T5886] Bluetooth: hci1: hardware error 0x00 [ 475.032673][ T7578] comedi comedi0: reset error (fatal) [ 475.452834][ T7608] wg1 speed is unknown, defaulting to 1000 [ 476.114347][ T30] audit: type=1400 audit(1754045969.355:441): avc: denied { write } for pid=7603 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 476.150314][ T5850] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 476.215840][ T30] audit: type=1400 audit(1754045969.355:442): avc: denied { nlmsg_write } for pid=7603 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 476.239814][ T5886] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 477.166866][ T30] audit: type=1400 audit(1754045970.075:443): avc: denied { write } for pid=7611 comm="syz.3.415" name="tcp" dev="proc" ino=4026532954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 478.127827][ T7461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 478.128249][ T6077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 478.219826][ T5890] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 478.429278][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 478.746947][ T5890] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 478.756427][ T5890] usb 4-1: config 1 has no interface number 0 [ 478.763125][ T5890] usb 4-1: config 1 interface 105 has no altsetting 0 [ 478.778334][ T5890] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 478.807105][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.819224][ T5890] usb 4-1: Product: syz [ 478.832393][ T5890] usb 4-1: Manufacturer: syz [ 478.837199][ T5890] usb 4-1: SerialNumber: syz [ 479.279485][ T5890] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 479.314004][ T5890] usb 4-1: USB disconnect, device number 5 [ 479.522769][ T7633] FAULT_INJECTION: forcing a failure. [ 479.522769][ T7633] name failslab, interval 1, probability 0, space 0, times 0 [ 479.537747][ T7638] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.420'. [ 479.542933][ T7633] CPU: 0 UID: 0 PID: 7633 Comm: syz.0.418 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 479.542956][ T7633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 479.542966][ T7633] Call Trace: [ 479.542971][ T7633] [ 479.542977][ T7633] dump_stack_lvl+0x16c/0x1f0 [ 479.543004][ T7633] should_fail_ex+0x512/0x640 [ 479.543027][ T7633] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 479.543045][ T7633] should_failslab+0xc2/0x120 [ 479.543063][ T7633] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 479.543078][ T7633] ? alloc_inode+0x64/0x240 [ 479.543102][ T7633] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 479.543126][ T7633] alloc_inode+0x64/0x240 [ 479.543147][ T7633] new_inode+0x22/0x1c0 [ 479.543170][ T7633] __debugfs_create_file+0x11c/0x6b0 [ 479.543189][ T7633] debugfs_create_file_full+0x41/0x60 [ 479.543206][ T7633] ? __pfx_br_dev_setup+0x10/0x10 [ 479.543222][ T7633] ref_tracker_dir_debugfs+0x19d/0x290 [ 479.543247][ T7633] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 479.543287][ T7633] ? __kvmalloc_node_noprof+0x298/0x620 [ 479.543318][ T7633] ? lockdep_init_map_type+0x5c/0x280 [ 479.543346][ T7633] alloc_netdev_mqs+0x30f/0x1500 [ 479.543374][ T7633] rtnl_create_link+0xc08/0xf90 [ 479.543398][ T7633] rtnl_newlink+0xb69/0x2000 [ 479.543427][ T7633] ? __pfx_rtnl_newlink+0x10/0x10 [ 479.543447][ T7633] ? find_held_lock+0x2b/0x80 [ 479.543465][ T7633] ? avc_has_perm_noaudit+0x117/0x3b0 [ 479.543491][ T7633] ? avc_has_perm_noaudit+0x149/0x3b0 [ 479.543532][ T7633] ? find_held_lock+0x2b/0x80 [ 479.543548][ T7633] ? __pfx_rtnl_newlink+0x10/0x10 [ 479.543568][ T7633] ? __pfx_rtnl_newlink+0x10/0x10 [ 479.543587][ T7633] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 479.543610][ T7633] ? __pfx_rtnl_newlink+0x10/0x10 [ 479.543631][ T7633] rtnetlink_rcv_msg+0x95b/0xe90 [ 479.543655][ T7633] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 479.543683][ T7633] ? ref_tracker_free+0x37c/0x830 [ 479.543709][ T7633] netlink_rcv_skb+0x158/0x420 [ 479.543732][ T7633] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 479.543755][ T7633] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 479.543785][ T7633] ? netlink_deliver_tap+0x1ae/0xd30 [ 479.543810][ T7633] netlink_unicast+0x5a7/0x870 [ 479.543835][ T7633] ? __pfx_netlink_unicast+0x10/0x10 [ 479.543857][ T7633] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 479.543885][ T7633] netlink_sendmsg+0x8d1/0xdd0 [ 479.543910][ T7633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.543941][ T7633] ____sys_sendmsg+0xa95/0xc70 [ 479.543958][ T7633] ? copy_msghdr_from_user+0x10a/0x160 [ 479.543978][ T7633] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.544003][ T7633] ___sys_sendmsg+0x134/0x1d0 [ 479.544025][ T7633] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.544043][ T7633] ? __lock_acquire+0x622/0x1c90 [ 479.544085][ T7633] ? __mutex_unlock_slowpath+0x140/0x800 [ 479.544114][ T7633] __sys_sendmsg+0x16d/0x220 [ 479.544134][ T7633] ? __pfx___sys_sendmsg+0x10/0x10 [ 479.544169][ T7633] do_syscall_64+0xcd/0x4c0 [ 479.544192][ T7633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.544207][ T7633] RIP: 0033:0x7f0411d8eb69 [ 479.544221][ T7633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.544235][ T7633] RSP: 002b:00007f0412bbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.544251][ T7633] RAX: ffffffffffffffda RBX: 00007f0411fb5fa0 RCX: 00007f0411d8eb69 [ 479.544261][ T7633] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 479.544270][ T7633] RBP: 00007f0412bbb090 R08: 0000000000000000 R09: 0000000000000000 [ 479.544279][ T7633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.544288][ T7633] R13: 0000000000000000 R14: 00007f0411fb5fa0 R15: 00007fffce380198 [ 479.544314][ T7633] [ 479.544320][ T7633] debugfs: out of free dentries, can not create file 'netdev@ffff888055cc4610' [ 480.956559][ T30] audit: type=1400 audit(1754045974.825:444): avc: denied { create } for pid=7648 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 482.109004][ T7665] overlayfs: missing 'lowerdir' [ 482.375804][ T7677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.429'. [ 482.824323][ T7654] bridge0: port 3(batadv1) entered blocking state [ 482.845514][ T7654] bridge0: port 3(batadv1) entered disabled state [ 482.858333][ T7654] batadv1: entered allmulticast mode [ 482.994653][ T7654] batadv1: entered promiscuous mode [ 483.273441][ T7452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 483.286752][ T7461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 483.515810][ T5982] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 483.525434][ T5982] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 484.912194][ T30] audit: type=1400 audit(1754045978.755:445): avc: denied { connect } for pid=7716 comm="syz.4.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 485.816282][ T5950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 486.973166][ T5881] Bluetooth: hci3: command 0x0406 tx timeout [ 487.309754][ T7747] SELinux: Context system_u:object is not valid (left unmapped). [ 487.389677][ T30] audit: type=1400 audit(1754045981.175:446): avc: denied { mac_admin } for pid=7699 comm="syz.0.436" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 487.428391][ T30] audit: type=1400 audit(1754045981.185:447): avc: denied { relabelto } for pid=7699 comm="syz.0.436" name="cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 487.547805][ T30] audit: type=1400 audit(1754045981.185:448): avc: denied { associate } for pid=7699 comm="syz.0.436" name="cgroup.procs" dev="cgroup" ino=178 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 487.760777][ T6012] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 487.957108][ T6012] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.211372][ T6012] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 488.248966][ T6012] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.286220][ T6012] usb 2-1: config 0 descriptor?? [ 488.554248][ T6012] usbhid 2-1:0.0: can't add hid device: -71 [ 488.560341][ T6012] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 488.587447][ T6012] usb 2-1: USB disconnect, device number 5 [ 488.692328][ T7769] FAULT_INJECTION: forcing a failure. [ 488.692328][ T7769] name failslab, interval 1, probability 0, space 0, times 0 [ 488.848056][ T7769] CPU: 0 UID: 0 PID: 7769 Comm: syz.3.454 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 488.848086][ T7769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 488.848096][ T7769] Call Trace: [ 488.848103][ T7769] [ 488.848109][ T7769] dump_stack_lvl+0x16c/0x1f0 [ 488.848137][ T7769] should_fail_ex+0x512/0x640 [ 488.848163][ T7769] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 488.848195][ T7769] should_failslab+0xc2/0x120 [ 488.848213][ T7769] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 488.848242][ T7769] ? __alloc_skb+0x2b2/0x380 [ 488.848268][ T7769] __alloc_skb+0x2b2/0x380 [ 488.848295][ T7769] ? __pfx___alloc_skb+0x10/0x10 [ 488.848319][ T7769] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 488.848348][ T7769] netlink_alloc_large_skb+0x69/0x130 [ 488.848374][ T7769] netlink_sendmsg+0x6a1/0xdd0 [ 488.848401][ T7769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.848433][ T7769] ____sys_sendmsg+0xa95/0xc70 [ 488.848452][ T7769] ? copy_msghdr_from_user+0x10a/0x160 [ 488.848475][ T7769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.848503][ T7769] ___sys_sendmsg+0x134/0x1d0 [ 488.848526][ T7769] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.848546][ T7769] ? __lock_acquire+0x622/0x1c90 [ 488.848593][ T7769] ? __mutex_unlock_slowpath+0x140/0x800 [ 488.848624][ T7769] __sys_sendmsg+0x16d/0x220 [ 488.848647][ T7769] ? __pfx___sys_sendmsg+0x10/0x10 [ 488.848684][ T7769] do_syscall_64+0xcd/0x4c0 [ 488.848710][ T7769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.848727][ T7769] RIP: 0033:0x7f0c3c38eb69 [ 488.848742][ T7769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.848759][ T7769] RSP: 002b:00007f0c3a1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.848776][ T7769] RAX: ffffffffffffffda RBX: 00007f0c3c5b5fa0 RCX: 00007f0c3c38eb69 [ 488.848788][ T7769] RDX: 0000000000044040 RSI: 0000200000000580 RDI: 0000000000000004 [ 488.848798][ T7769] RBP: 00007f0c3a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 488.848808][ T7769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.848817][ T7769] R13: 0000000000000000 R14: 00007f0c3c5b5fa0 R15: 00007ffd58287928 [ 488.848840][ T7769] [ 489.116449][ T7772] bridge4: entered promiscuous mode [ 489.121720][ T7772] bridge4: entered allmulticast mode [ 489.129947][ T7772] team0: Port device bridge4 added [ 489.233912][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 489.244784][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 489.349721][ T6012] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 489.920453][ T7784] FAULT_INJECTION: forcing a failure. [ 489.920453][ T7784] name failslab, interval 1, probability 0, space 0, times 0 [ 489.958606][ T7784] CPU: 0 UID: 0 PID: 7784 Comm: syz.2.459 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 489.958623][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 489.958630][ T7784] Call Trace: [ 489.958634][ T7784] [ 489.958638][ T7784] dump_stack_lvl+0x16c/0x1f0 [ 489.958658][ T7784] should_fail_ex+0x512/0x640 [ 489.958675][ T7784] ? __kmalloc_noprof+0xbf/0x510 [ 489.958687][ T7784] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 489.958707][ T7784] should_failslab+0xc2/0x120 [ 489.958719][ T7784] __kmalloc_noprof+0xd2/0x510 [ 489.958732][ T7784] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 489.958753][ T7784] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 489.958772][ T7784] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 489.958794][ T7784] ? bpf_lsm_capable+0x9/0x10 [ 489.958809][ T7784] ? security_capable+0x7e/0x260 [ 489.958828][ T7784] ? ns_capable+0xd7/0x110 [ 489.958842][ T7784] genl_rcv_msg+0x55c/0x800 [ 489.958854][ T7784] ? __pfx_genl_rcv_msg+0x10/0x10 [ 489.958864][ T7784] ? __pfx_l2tp_nl_cmd_tunnel_modify+0x10/0x10 [ 489.958884][ T7784] netlink_rcv_skb+0x158/0x420 [ 489.958900][ T7784] ? __pfx_genl_rcv_msg+0x10/0x10 [ 489.958910][ T7784] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 489.958932][ T7784] ? netlink_deliver_tap+0x1ae/0xd30 [ 489.958948][ T7784] genl_rcv+0x28/0x40 [ 489.958964][ T7784] netlink_unicast+0x5a7/0x870 [ 489.958981][ T7784] ? __pfx_netlink_unicast+0x10/0x10 [ 489.958997][ T7784] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 489.959016][ T7784] netlink_sendmsg+0x8d1/0xdd0 [ 489.959034][ T7784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.959055][ T7784] ____sys_sendmsg+0xa95/0xc70 [ 489.959066][ T7784] ? copy_msghdr_from_user+0x10a/0x160 [ 489.959081][ T7784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.959098][ T7784] ___sys_sendmsg+0x134/0x1d0 [ 489.959113][ T7784] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.959126][ T7784] ? __lock_acquire+0x622/0x1c90 [ 489.959155][ T7784] ? __mutex_unlock_slowpath+0x140/0x800 [ 489.959187][ T7784] __sys_sendmsg+0x16d/0x220 [ 489.959209][ T7784] ? __pfx___sys_sendmsg+0x10/0x10 [ 489.959246][ T7784] do_syscall_64+0xcd/0x4c0 [ 489.959272][ T7784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.959289][ T7784] RIP: 0033:0x7f116b18eb69 [ 489.959304][ T7784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.959320][ T7784] RSP: 002b:00007f116bf93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.959337][ T7784] RAX: ffffffffffffffda RBX: 00007f116b3b5fa0 RCX: 00007f116b18eb69 [ 489.959348][ T7784] RDX: 0000000004048806 RSI: 0000200000000240 RDI: 0000000000000003 [ 489.959359][ T7784] RBP: 00007f116bf93090 R08: 0000000000000000 R09: 0000000000000000 [ 489.959369][ T7784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.959379][ T7784] R13: 0000000000000000 R14: 00007f116b3b5fa0 R15: 00007ffe64036768 [ 489.959402][ T7784] [ 489.995280][ T6012] usb 2-1: Using ep0 maxpacket: 16 [ 490.493431][ T7792] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.461'. [ 490.499562][ T7793] bridge5: entered promiscuous mode [ 490.507854][ T7793] bridge5: entered allmulticast mode [ 490.514949][ T7793] team0: Port device bridge5 added [ 490.709625][ T7795] bridge5: entered promiscuous mode [ 490.714885][ T7795] bridge5: entered allmulticast mode [ 490.730236][ T7795] team0: Port device bridge5 added [ 491.532028][ T6012] usb 2-1: device descriptor read/all, error -71 [ 492.637638][ T7820] syz.4.467 (7820): drop_caches: 2 [ 492.671002][ T7820] syz.4.467 (7820): drop_caches: 2 [ 493.195854][ T7825] bridge6: entered promiscuous mode [ 493.201232][ T7825] bridge6: entered allmulticast mode [ 493.208916][ T7825] team0: Port device bridge6 added [ 493.995645][ T7832] fuse: Bad value for 'fd' [ 494.714005][ T7465] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.736091][ T7452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 495.231838][ T7845] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.474'. [ 495.481279][ T7849] bio_check_eod: 11 callbacks suppressed [ 495.481296][ T7849] syz.2.475: attempt to access beyond end of device [ 495.481296][ T7849] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 495.583847][ T7849] syz.2.475: attempt to access beyond end of device [ 495.583847][ T7849] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 495.597528][ T7849] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 496.219797][ T7849] syz.2.475: attempt to access beyond end of device [ 496.219797][ T7849] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 496.339413][ T7849] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 496.388038][ T7849] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 496.709091][ T7849] UDF-fs: Scanning with blocksize 512 failed [ 496.719854][ T7849] syz.2.475: attempt to access beyond end of device [ 496.719854][ T7849] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 496.732941][ T7849] syz.2.475: attempt to access beyond end of device [ 496.732941][ T7849] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 496.748369][ T7849] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 496.759017][ T7849] syz.2.475: attempt to access beyond end of device [ 496.759017][ T7849] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 496.774978][ T7849] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 496.785423][ T7849] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 496.793702][ T7849] UDF-fs: Scanning with blocksize 1024 failed [ 496.825661][ T7849] syz.2.475: attempt to access beyond end of device [ 496.825661][ T7849] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 497.092904][ T7849] syz.2.475: attempt to access beyond end of device [ 497.092904][ T7849] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 497.164243][ T7849] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 497.467242][ T7849] syz.2.475: attempt to access beyond end of device [ 497.467242][ T7849] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 497.562332][ T7849] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 497.590834][ T7849] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 497.599786][ T7849] UDF-fs: Scanning with blocksize 2048 failed [ 497.608884][ T7849] syz.2.475: attempt to access beyond end of device [ 497.608884][ T7849] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 497.622094][ T7849] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 497.631797][ T7849] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 497.641419][ T7849] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 497.656332][ T7849] UDF-fs: Scanning with blocksize 4096 failed [ 497.748761][ T7849] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 498.473532][ T7882] fuse: Bad value for 'fd' [ 500.276429][ T5850] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 500.479876][ T5977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 500.490837][ T5850] usb 4-1: Using ep0 maxpacket: 32 [ 500.490983][ T7465] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 500.548830][ T7910] syz.0.492 (7910): drop_caches: 2 [ 500.563654][ T7910] syz.0.492 (7910): drop_caches: 2 [ 500.614703][ T5850] usb 4-1: config 0 has an invalid interface number: 28 but max is 0 [ 500.661424][ T5850] usb 4-1: config 0 has an invalid descriptor of length 224, skipping remainder of the config [ 500.688769][ T5850] usb 4-1: config 0 has no interface number 0 [ 500.706474][ T5850] usb 4-1: too many endpoints for config 0 interface 28 altsetting 25: 38, using maximum allowed: 30 [ 500.964979][ T5850] usb 4-1: config 0 interface 28 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 38 [ 500.979083][ T5850] usb 4-1: config 0 interface 28 has no altsetting 0 [ 501.011863][ T5850] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 501.042669][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.059440][ T5850] usb 4-1: Product: syz [ 501.072143][ T5850] usb 4-1: Manufacturer: syz [ 501.085808][ T5850] usb 4-1: SerialNumber: syz [ 501.101595][ T5850] usb 4-1: config 0 descriptor?? [ 501.125741][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.132158][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.957399][ T30] audit: type=1400 audit(1754045995.615:449): avc: denied { read write } for pid=7920 comm="syz.1.495" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 502.021694][ T5850] quatech2 4-1:0.28: Quatech 2nd gen USB to Serial Driver converter detected [ 502.035600][ T5850] usb 4-1: qt2_attach - failed to power on unit: -71 [ 502.046406][ T30] audit: type=1400 audit(1754045995.615:450): avc: denied { open } for pid=7920 comm="syz.1.495" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 502.076845][ T5850] quatech2 4-1:0.28: probe with driver quatech2 failed with error -71 [ 502.121293][ T5850] usb 4-1: USB disconnect, device number 6 [ 502.156314][ T30] audit: type=1400 audit(1754045995.615:451): avc: denied { ioctl } for pid=7920 comm="syz.1.495" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xae6a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 502.376595][ T7928] fuse: Unknown parameter '0x0000000000000007' [ 504.053202][ T7945] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.503'. [ 505.128458][ T7952] QAT: failed to copy from user cfg_data. [ 505.439362][ T5984] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 505.650037][ T5984] usb 5-1: Using ep0 maxpacket: 32 [ 505.743919][ T5984] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.830133][ T5984] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 505.848329][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.876271][ T5984] usb 5-1: Product: syz [ 505.893634][ T5984] usb 5-1: Manufacturer: syz [ 506.054773][ T5984] usb 5-1: SerialNumber: syz [ 506.063431][ T5984] usb 5-1: config 0 descriptor?? [ 506.074230][ T5984] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 506.085361][ T7969] fuse: Unknown parameter '0x0000000000000007' [ 506.248823][ T7452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 506.268121][ T5961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 506.358666][ T5984] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 506.365674][ T5984] quatech2 5-1:0.0: probe with driver quatech2 failed with error -8 [ 506.485010][ T7955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.511167][ T7955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.534298][ T5984] usb 5-1: USB disconnect, device number 5 [ 507.098036][ T7984] bridge2: entered promiscuous mode [ 507.103364][ T7984] bridge2: entered allmulticast mode [ 507.120049][ T7984] team0: Port device bridge2 added [ 509.306226][ T30] audit: type=1400 audit(1754046002.655:452): avc: denied { create } for pid=8001 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 509.363190][ T30] audit: type=1400 audit(1754046002.655:453): avc: denied { bind } for pid=8001 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 509.385129][ T30] audit: type=1400 audit(1754046002.655:454): avc: denied { listen } for pid=8001 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 509.408324][ T30] audit: type=1400 audit(1754046002.655:455): avc: denied { mount } for pid=8001 comm="syz.2.519" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 509.458771][ T8009] fuse: Unknown parameter '0x0000000000000007' [ 509.734781][ T30] audit: type=1400 audit(1754046002.655:456): avc: denied { connect } for pid=8001 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 510.883043][ T30] audit: type=1400 audit(1754046004.755:457): avc: denied { unmount } for pid=5868 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 511.276161][ T8032] bridge5: entered promiscuous mode [ 511.316099][ T8032] bridge5: entered allmulticast mode [ 511.354964][ T8032] team0: Port device bridge5 added [ 511.390821][ T8038] syz.3.525 (8038): drop_caches: 2 [ 511.400644][ T8038] syz.3.525 (8038): drop_caches: 2 [ 511.919375][ T30] audit: type=1400 audit(1754046005.735:458): avc: denied { shutdown } for pid=8040 comm="syz.2.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 512.123854][ T5982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 512.129780][ T5977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 512.984204][ T8053] fuse: Unknown parameter '0x0000000000000007' [ 513.861071][ T8069] tmpfs: Unknown parameter 'usrquota0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 513.861071][ T8069] 0 [ 514.126579][ T30] audit: type=1400 audit(1754046007.725:459): avc: denied { mount } for pid=8064 comm="syz.4.537" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 514.138352][ T8071] netlink: 40 bytes leftover after parsing attributes in process `syz.1.538'. [ 514.235861][ T30] audit: type=1400 audit(1754046008.005:460): avc: denied { create } for pid=8070 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 514.673389][ T30] audit: type=1400 audit(1754046008.005:461): avc: denied { bind } for pid=8070 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 514.721198][ T30] audit: type=1400 audit(1754046008.005:462): avc: denied { name_bind } for pid=8070 comm="syz.1.538" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 514.855750][ T30] audit: type=1400 audit(1754046008.005:463): avc: denied { node_bind } for pid=8070 comm="syz.1.538" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 515.551241][ T30] audit: type=1400 audit(1754046008.005:464): avc: denied { read } for pid=8070 comm="syz.1.538" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 515.746247][ T30] audit: type=1400 audit(1754046008.005:465): avc: denied { ioctl } for pid=8070 comm="syz.1.538" path="socket:[15360]" dev="sockfs" ino=15360 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 515.834942][ T30] audit: type=1400 audit(1754046008.095:466): avc: denied { name_bind } for pid=8070 comm="syz.1.538" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 515.905456][ T30] audit: type=1400 audit(1754046008.095:467): avc: denied { read append } for pid=8064 comm="syz.4.537" name="sg0" dev="devtmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 515.979456][ T30] audit: type=1400 audit(1754046008.105:468): avc: denied { setopt } for pid=8064 comm="syz.4.537" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 516.403391][ T8094] bridge6: entered promiscuous mode [ 516.408590][ T8094] bridge6: entered allmulticast mode [ 516.415505][ T8094] team0: Port device bridge6 added [ 516.430127][ T8097] fuse: Unknown parameter '0x0000000000000007' [ 517.833454][ T7465] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 517.895535][ T7452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 519.638190][ T8129] wg1 speed is unknown, defaulting to 1000 [ 520.477909][ T8142] bio_check_eod: 2 callbacks suppressed [ 520.477924][ T8142] syz.0.557: attempt to access beyond end of device [ 520.477924][ T8142] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 520.499483][ T8141] nbd0: detected capacity change from 0 to 10 [ 520.531808][ T8143] fuse: Unknown parameter '0x0000000000000007' [ 520.559656][ T8142] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 520.601589][ T8142] block nbd0: Send control failed (result -89) [ 520.669581][ T8142] block nbd0: Request send failed, requeueing [ 520.701966][ T55] block nbd0: Dead connection, failed to find a fallback [ 520.709734][ T55] block nbd0: shutting down sockets [ 520.714938][ T55] blk_print_req_error: 57 callbacks suppressed [ 520.714953][ T55] I/O error, dev nbd0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 520.730397][ T8142] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=4, location=4 [ 520.745140][ T6027] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 520.765150][ T6027] buffer_io_error: 54 callbacks suppressed [ 520.765165][ T6027] Buffer I/O error on dev nbd0, logical block 0, async page read [ 520.782408][ T6027] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 520.794097][ T6027] Buffer I/O error on dev nbd0, logical block 1, async page read [ 520.804446][ T6027] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 520.814881][ T8145] FAULT_INJECTION: forcing a failure. [ 520.814881][ T8145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.838223][ T30] audit: type=1400 audit(1754046014.685:469): avc: denied { getopt } for pid=8144 comm="syz.4.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 520.858084][ T8145] CPU: 0 UID: 0 PID: 8145 Comm: syz.4.559 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 520.858108][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 520.858118][ T8145] Call Trace: [ 520.858123][ T8145] [ 520.858130][ T8145] dump_stack_lvl+0x16c/0x1f0 [ 520.858160][ T8145] should_fail_ex+0x512/0x640 [ 520.858187][ T8145] _copy_to_user+0x32/0xd0 [ 520.858205][ T8145] copy_to_sockptr_offset+0x15c/0x1b0 [ 520.858225][ T8145] ? __pfx_copy_to_sockptr_offset+0x10/0x10 [ 520.858242][ T8145] ? __pfx_qrtr_getname+0x10/0x10 [ 520.858267][ T8145] ? avc_denied+0x14a/0x190 [ 520.858292][ T8145] sk_getsockopt+0xbed/0x2eb0 [ 520.858315][ T8145] ? avc_has_perm_noaudit+0x306/0x3b0 [ 520.858343][ T8145] ? __pfx_sk_getsockopt+0x10/0x10 [ 520.858366][ T8145] ? __pfx_avc_has_perm+0x10/0x10 [ 520.858398][ T8145] ? sock_has_perm+0x259/0x2f0 [ 520.858424][ T8145] ? __might_fault+0x13b/0x190 [ 520.858450][ T8145] do_sock_getsockopt+0x3a3/0x440 [ 520.858479][ T8145] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 520.858503][ T8145] ? __fget_files+0x204/0x3c0 [ 520.858534][ T8145] __sys_getsockopt+0x12f/0x260 [ 520.858570][ T8145] __x64_sys_getsockopt+0xbd/0x160 [ 520.858592][ T8145] ? syscall_trace_enter+0x5e/0x240 [ 520.858613][ T8145] do_syscall_64+0xcd/0x4c0 [ 520.858640][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.858658][ T8145] RIP: 0033:0x7f86dfd8eb69 [ 520.858673][ T8145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.858689][ T8145] RSP: 002b:00007f86e0c9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 520.858710][ T8145] RAX: ffffffffffffffda RBX: 00007f86dffb5fa0 RCX: 00007f86dfd8eb69 [ 520.858721][ T8145] RDX: 000000000000001c RSI: 0000000000000001 RDI: 0000000000000003 [ 520.858731][ T8145] RBP: 00007f86e0c9e090 R08: 0000200000000840 R09: 0000000000000000 [ 520.858742][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.858752][ T8145] R13: 0000000000000000 R14: 00007f86dffb5fa0 R15: 00007fff82946028 [ 520.858779][ T8145] [ 520.899248][ T6027] Buffer I/O error on dev nbd0, logical block 2, async page read [ 520.900652][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.080213][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.086925][ C0] hrtimer: interrupt took 227769694 ns [ 521.096882][ T6027] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 521.109200][ T6027] Buffer I/O error on dev nbd0, logical block 3, async page read [ 521.117135][ T6027] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 521.126214][ T6027] Buffer I/O error on dev nbd0, logical block 0, async page read [ 521.136349][ T6027] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 521.145391][ T6027] Buffer I/O error on dev nbd0, logical block 1, async page read [ 521.153239][ T6027] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 521.162617][ T6027] Buffer I/O error on dev nbd0, logical block 2, async page read [ 521.170481][ T6027] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 521.179550][ T6027] Buffer I/O error on dev nbd0, logical block 3, async page read [ 521.187409][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.203241][ T8142] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 521.203259][ T6027] Buffer I/O error on dev nbd0, logical block 0, async page read [ 521.203350][ T6027] Buffer I/O error on dev nbd0, logical block 1, async page read [ 521.518807][ T8142] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=3, location=3 [ 521.643129][ T6027] ldm_validate_partition_table(): Disk read failed. [ 521.725639][ T6027] Dev nbd0: unable to read RDB block 0 [ 521.820324][ T6027] nbd0: unable to read partition table [ 521.845304][ T8142] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2, location=2 [ 521.845747][ T6027] nbd0: partition table beyond EOD, [ 521.917815][ T8142] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 521.921172][ T6027] truncated [ 522.049406][ T8142] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 522.063616][ T8157] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.563'. [ 522.084199][ T8142] UDF-fs: Scanning with blocksize 1024 failed [ 522.096118][ T8158] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.564'. [ 522.165336][ T5888] ldm_validate_partition_table(): Disk read failed. [ 522.180163][ T8142] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 522.279783][ T5888] Dev nbd0: unable to read RDB block 0 [ 522.290599][ T5888] nbd0: unable to read partition table [ 522.297590][ T5888] nbd0: partition table beyond EOD, truncated [ 522.779177][ C0] vkms_vblank_simulate: vblank timer overrun [ 522.928185][ T8142] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1, location=1 [ 523.149382][ T8142] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0 [ 523.158661][ T8142] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 523.172203][ T5888] ldm_validate_partition_table(): Disk read failed. [ 523.205091][ T5888] Dev nbd0: unable to read RDB block 0 [ 523.234293][ T8142] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 523.311961][ T5888] nbd0: unable to read partition table [ 523.332088][ T5888] nbd0: partition table beyond EOD, truncated [ 523.530703][ T8142] UDF-fs: Scanning with blocksize 2048 failed [ 523.554114][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 523.620124][ T8142] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 523.620254][ T7465] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 523.697350][ T8142] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0 [ 523.950918][ T8142] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 524.062664][ T8142] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 524.105759][ T8142] UDF-fs: Scanning with blocksize 4096 failed [ 524.124198][ T8142] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 524.279293][ T5987] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 524.939578][ T5987] usb 5-1: Using ep0 maxpacket: 16 [ 525.076678][ T5987] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 525.089702][ T5987] usb 5-1: config 1 has no interface number 0 [ 525.969710][ T5987] usb 5-1: config 1 interface 105 has no altsetting 0 [ 525.981702][ T5987] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 525.991494][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.004793][ T5987] usb 5-1: Product: syz [ 526.071541][ T5987] usb 5-1: Manufacturer: syz [ 526.080254][ T5987] usb 5-1: SerialNumber: syz [ 527.131778][ T5987] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22 [ 527.150129][ T5987] usb 5-1: USB disconnect, device number 6 [ 527.260478][ T8202] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.576'. [ 527.950090][ T30] audit: type=1400 audit(1754046021.435:470): avc: denied { connect } for pid=8206 comm="syz.1.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 528.816912][ T5961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 528.862278][ T8208] netlink: 'syz.3.578': attribute type 1 has an invalid length. [ 528.885915][ T8208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.145837][ T30] audit: type=1400 audit(1754046023.015:471): avc: denied { load_policy } for pid=8203 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 529.657749][ T6077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 529.760379][ T8221] bridge0: port 3(batadv0) entered blocking state [ 529.809599][ T8221] bridge0: port 3(batadv0) entered disabled state [ 529.864848][ T8221] batadv0: entered allmulticast mode [ 529.982997][ T8221] batadv0: entered promiscuous mode [ 530.163186][ T8217] SELinux: failed to load policy [ 530.442729][ T48] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 530.452000][ T48] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 531.263429][ T30] audit: type=1400 audit(1754046025.095:472): avc: denied { rename } for pid=8247 comm="syz.3.585" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 531.914578][ T8268] syz.3.589: attempt to access beyond end of device [ 531.914578][ T8268] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 531.936036][ T8268] syz.3.589: attempt to access beyond end of device [ 531.936036][ T8268] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 532.013085][ T8266] nbd3: detected capacity change from 0 to 10 [ 532.044000][ T8268] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 532.098583][ T8268] block nbd3: Send control failed (result -89) [ 532.181456][ T8268] block nbd3: Request send failed, requeueing [ 532.233921][ T5886] block nbd3: Receive control failed (result -32) [ 532.367780][ T55] block nbd3: Dead connection, failed to find a fallback [ 532.374995][ T55] block nbd3: shutting down sockets [ 532.380331][ T55] blk_print_req_error: 158 callbacks suppressed [ 532.380346][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 532.399246][ T8268] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 532.408512][ T5888] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 532.892831][ T5888] buffer_io_error: 151 callbacks suppressed [ 532.892849][ T5888] Buffer I/O error on dev nbd3, logical block 0, async page read [ 532.996774][ T5888] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 533.221892][ T5888] Buffer I/O error on dev nbd3, logical block 1, async page read [ 533.391498][ T5888] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 533.416286][ T5888] Buffer I/O error on dev nbd3, logical block 2, async page read [ 533.441136][ T5888] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 533.459218][ T5888] Buffer I/O error on dev nbd3, logical block 3, async page read [ 533.488548][ T8268] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 533.506206][ T8268] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 533.532177][ T5888] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 533.622791][ T5888] Buffer I/O error on dev nbd3, logical block 0, async page read [ 533.637923][ T5888] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 533.648370][ T5888] Buffer I/O error on dev nbd3, logical block 1, async page read [ 533.756829][ T8268] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 533.758372][ T5888] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 533.795722][ T5888] Buffer I/O error on dev nbd3, logical block 2, async page read [ 533.826429][ T5888] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 533.835910][ T8268] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 533.872332][ T8268] UDF-fs: Scanning with blocksize 1024 failed [ 534.144115][ T5888] Buffer I/O error on dev nbd3, logical block 3, async page read [ 534.609360][ T5982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 534.669085][ T8268] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 534.690591][ T5888] Buffer I/O error on dev nbd3, logical block 0, async page read [ 534.741225][ T5888] Buffer I/O error on dev nbd3, logical block 1, async page read [ 534.762061][ T8268] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 534.776455][ T5888] ldm_validate_partition_table(): Disk read failed. [ 534.784365][ T8268] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 534.793803][ T6077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 534.875364][ T8268] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 535.080064][ T5888] Dev nbd3: unable to read RDB block 0 [ 535.126260][ T5888] nbd3: unable to read partition table [ 535.148829][ T8268] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 535.165090][ T5888] nbd3: partition table beyond EOD, truncated [ 535.182236][ T8268] UDF-fs: Scanning with blocksize 2048 failed [ 535.229921][ T8268] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 535.308888][ T5888] ldm_validate_partition_table(): Disk read failed. [ 535.317967][ T5888] Dev nbd3: unable to read RDB block 0 [ 535.349663][ T5888] nbd3: unable to read partition table [ 535.355406][ T5888] nbd3: partition table beyond EOD, truncated [ 535.634304][ T8268] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 535.829888][ T8268] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 535.858602][ T30] audit: type=1400 audit(1754046029.715:473): avc: denied { accept } for pid=8301 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 535.891170][ T8268] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 535.902398][ T8268] UDF-fs: Scanning with blocksize 4096 failed [ 535.908796][ T8268] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 536.309640][ T30] audit: type=1400 audit(1754046030.175:474): avc: denied { write } for pid=8301 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 536.548658][ T30] audit: type=1400 audit(1754046030.245:475): avc: denied { read } for pid=8301 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 536.678790][ T8302] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.840456][ T8342] QAT: failed to copy from user cfg_data. [ 540.152352][ T7461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 541.192186][ T5977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 541.551024][ T8357] wg1 speed is unknown, defaulting to 1000 [ 543.144642][ T30] audit: type=1400 audit(1754046036.935:476): avc: denied { unlink } for pid=8353 comm="syz.1.611" name="#3" dev="tmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 543.392859][ T30] audit: type=1400 audit(1754046036.945:477): avc: denied { mount } for pid=8353 comm="syz.1.611" name="/" dev="overlay" ino=687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 543.663402][ T30] audit: type=1400 audit(1754046037.525:478): avc: denied { unmount } for pid=5883 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 545.909770][ T7461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 546.584252][ T5961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 546.819944][ T8408] QAT: failed to copy from user cfg_data. [ 546.978990][ T8414] syz.1.625: attempt to access beyond end of device [ 546.978990][ T8414] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 546.997263][ T8414] syz.1.625: attempt to access beyond end of device [ 546.997263][ T8414] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 547.079313][ T8414] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 547.081019][ T8412] nbd1: detected capacity change from 0 to 10 [ 547.097187][ T8414] block nbd1: Send control failed (result -89) [ 547.105250][ T8414] block nbd1: Request send failed, requeueing [ 547.143996][ T5886] block nbd1: Receive control failed (result -32) [ 547.152729][ T55] block nbd1: Dead connection, failed to find a fallback [ 547.159984][ T55] block nbd1: shutting down sockets [ 547.165902][ T55] blk_print_req_error: 49 callbacks suppressed [ 547.165915][ T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.181616][ T8414] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 547.200517][ T8414] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.210757][ T8414] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 547.221614][ T8414] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 547.232039][ T8414] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 547.240728][ T8414] UDF-fs: Scanning with blocksize 1024 failed [ 547.252670][ T8414] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 547.263552][ T8414] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.276767][ T8414] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 547.286913][ T8414] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.297110][ T8414] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 547.307878][ T8414] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 547.318220][ T8414] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 547.412840][ T8414] UDF-fs: Scanning with blocksize 2048 failed [ 547.443487][ T8414] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 547.523472][ T5888] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.586574][ T5888] buffer_io_error: 44 callbacks suppressed [ 547.587643][ T5888] Buffer I/O error on dev nbd1, logical block 0, async page read [ 547.612862][ T8414] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.637434][ T5888] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.653687][ T5888] Buffer I/O error on dev nbd1, logical block 0, async page read [ 547.681304][ T5888] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.709256][ T5888] Buffer I/O error on dev nbd1, logical block 0, async page read [ 547.747267][ T8414] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 547.747460][ T5888] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.784248][ T8414] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 547.814275][ T8414] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 547.840829][ T5888] Buffer I/O error on dev nbd1, logical block 0, async page read [ 547.844079][ T8414] UDF-fs: Scanning with blocksize 4096 failed [ 547.868568][ T5888] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.887748][ T8414] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 547.906356][ T5888] Buffer I/O error on dev nbd1, logical block 0, async page read [ 547.969368][ T5888] Buffer I/O error on dev nbd1, logical block 0, async page read [ 547.999523][ T5888] Buffer I/O error on dev nbd1, logical block 0, async page read [ 548.032204][ T5888] Buffer I/O error on dev nbd1, logical block 0, async page read [ 548.049436][ T5888] ldm_validate_partition_table(): Disk read failed. [ 548.060722][ T5888] Buffer I/O error on dev nbd1, logical block 0, async page read [ 548.089504][ T5888] Buffer I/O error on dev nbd1, logical block 0, async page read [ 548.140118][ T5888] Dev nbd1: unable to read RDB block 0 [ 548.156238][ T5888] nbd1: unable to read partition table [ 548.189842][ T5888] nbd1: partition table beyond EOD, truncated [ 548.227735][ T5888] ldm_validate_partition_table(): Disk read failed. [ 548.639631][ T5888] Dev nbd1: unable to read RDB block 0 [ 548.674092][ T5888] nbd1: unable to read partition table [ 548.680816][ T30] audit: type=1400 audit(1754046042.555:479): avc: denied { write } for pid=8440 comm="syz.2.632" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 548.719595][ T5888] nbd1: partition table beyond EOD, truncated [ 548.822174][ T30] audit: type=1400 audit(1754046042.695:480): avc: denied { bind } for pid=8440 comm="syz.2.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 549.000983][ T8441] netlink: 'syz.2.632': attribute type 10 has an invalid length. [ 549.602943][ T8441] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 550.420743][ T8459] bridge6: entered promiscuous mode [ 550.425988][ T8459] bridge6: entered allmulticast mode [ 550.434611][ T8459] team0: Port device bridge6 added [ 550.718470][ T8465] bridge0: port 3(batadv1) entered blocking state [ 550.726064][ T8465] bridge0: port 3(batadv1) entered disabled state [ 550.782997][ T8465] batadv1: entered allmulticast mode [ 550.827083][ T8465] batadv1: entered promiscuous mode [ 551.056251][ T5961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 551.215872][ T5982] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 551.225406][ T5982] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 551.492171][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 551.709301][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 552.175245][ T10] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 552.309733][ T5977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 552.322609][ T10] usb 2-1: config 1 has no interface number 0 [ 552.333205][ T10] usb 2-1: config 1 interface 105 has no altsetting 0 [ 552.407141][ T10] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 552.436948][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.450486][ T10] usb 2-1: Product: syz [ 552.454720][ T10] usb 2-1: Manufacturer: syz [ 552.459422][ T10] usb 2-1: SerialNumber: syz [ 552.571685][ T8485] wg1 speed is unknown, defaulting to 1000 [ 553.921221][ T10] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 554.063634][ T10] usb 2-1: USB disconnect, device number 8 [ 554.988241][ T8509] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.645'. [ 555.344294][ T8504] bridge0: port 4(batadv1) entered blocking state [ 555.460579][ T8504] bridge0: port 4(batadv1) entered disabled state [ 555.463211][ T8504] batadv1: entered allmulticast mode [ 555.467500][ T8504] batadv1: entered promiscuous mode [ 555.780889][ T5982] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 555.790278][ T5982] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 556.687122][ T30] audit: type=1400 audit(1754046050.555:481): avc: denied { connect } for pid=8527 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 556.889969][ T5982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 557.921509][ T5982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 562.554303][ T7465] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 562.584029][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.709583][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.865692][ T5961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 564.331057][ T8611] wg1 speed is unknown, defaulting to 1000 [ 568.430484][ T5977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 569.589766][ T7461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 570.997742][ T8666] bridge0: port 3(batadv1) entered blocking state [ 571.012934][ T8666] bridge0: port 3(batadv1) entered disabled state [ 571.482716][ T8666] batadv1: entered allmulticast mode [ 571.543807][ T8666] batadv1: entered promiscuous mode [ 572.777496][ T5982] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 572.786787][ T5982] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 573.865625][ T8694] wg1 speed is unknown, defaulting to 1000 [ 573.935441][ T8689] syz.0.688 (8689): drop_caches: 2 [ 573.941857][ T8689] syz.0.688 (8689): drop_caches: 2 [ 574.012887][ T8703] syz.2.691: attempt to access beyond end of device [ 574.012887][ T8703] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 574.086147][ T5977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 574.199672][ T8703] syz.2.691: attempt to access beyond end of device [ 574.199672][ T8703] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 574.241602][ T8703] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 574.277597][ T8703] ------------[ cut here ]------------ [ 574.283387][ T8703] WARNING: CPU: 0 PID: 8703 at fs/buffer.c:1125 __getblk_slow+0x4cc/0x560 [ 574.292259][ T8703] Modules linked in: [ 574.296613][ T8703] CPU: 0 UID: 0 PID: 8703 Comm: syz.2.691 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 574.308849][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 574.319299][ T8703] RIP: 0010:__getblk_slow+0x4cc/0x560 [ 574.324878][ T8703] Code: c0 8b 48 89 df e8 24 e6 bb ff 90 0f 0b e8 dc 55 73 ff 48 c7 c6 60 59 c0 8b 48 89 df e8 0d e6 bb ff 90 0f 0b e8 c5 55 73 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 c0 5a c0 8b 31 db e8 2d 1a 52 [ 574.344885][ T8703] RSP: 0018:ffffc90004d1f7f0 EFLAGS: 00010287 [ 574.351334][ T8703] RAX: 0000000000018463 RBX: 0000000000000200 RCX: ffffc900118e6000 [ 574.359659][ T8703] RDX: 0000000000080000 RSI: ffffffff824813ab RDI: 0000000000000005 [ 574.367677][ T8703] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 574.375686][ T8703] R10: 0000000000000200 R11: 0000000000000001 R12: ffff888024325080 [ 574.383692][ T8703] R13: 0000000000000200 R14: 0000000000000200 R15: ffff888024325080 [ 574.391735][ T8703] FS: 00007f116bf306c0(0000) GS:ffff8881246fe000(0000) knlGS:0000000000000000 [ 574.400719][ T8703] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.407311][ T8703] CR2: 0000001b328edff8 CR3: 000000005cc9a000 CR4: 00000000003526f0 [ 574.415316][ T8703] Call Trace: [ 574.418597][ T8703] [ 574.421567][ T8703] ? __pfx___might_resched+0x10/0x10 [ 574.426861][ T8703] bdev_getblk+0xd4/0xe0 [ 574.431161][ T8703] __bread_gfp+0x86/0x3c0 [ 574.435509][ T8703] udf_read_tagged+0xae/0x740 [ 574.440253][ T8703] udf_check_anchor_block+0x89/0x4b0 [ 574.445561][ T8703] ? udf_get_last_block+0x1ce/0x2a0 [ 574.450826][ T8703] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 574.456756][ T8703] udf_load_vrs+0x682/0x1070 [ 574.461419][ T8703] ? __pfx_udf_load_vrs+0x10/0x10 [ 574.466461][ T8703] ? __pfx_udf_get_last_session+0x10/0x10 [ 574.472259][ T8703] ? lockdep_init_map_type+0x5c/0x280 [ 574.477669][ T8703] udf_fill_super+0x791/0x1df0 [ 574.482538][ T8703] ? __pfx_udf_fill_super+0x10/0x10 [ 574.487769][ T8703] ? do_raw_spin_lock+0x12c/0x2b0 [ 574.493033][ T8703] ? find_held_lock+0x2b/0x80 [ 574.497740][ T8703] ? sb_set_blocksize+0x176/0x1d0 [ 574.502832][ T8703] ? setup_bdev_super+0x369/0x730 [ 574.507904][ T8703] get_tree_bdev_flags+0x38c/0x620 [ 574.513089][ T8703] ? __pfx_udf_fill_super+0x10/0x10 [ 574.518303][ T8703] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 574.523979][ T8703] ? bpf_lsm_capable+0x9/0x10 [ 574.528662][ T8703] ? security_capable+0x7e/0x260 [ 574.533656][ T8703] vfs_get_tree+0x8b/0x340 [ 574.538074][ T8703] path_mount+0x1482/0x1fd0 [ 574.542608][ T8703] ? __pfx_path_mount+0x10/0x10 [ 574.547462][ T8703] ? kmem_cache_free+0x2d1/0x4d0 [ 574.552577][ T8703] ? putname+0x154/0x1a0 [ 574.556827][ T8703] ? putname+0x154/0x1a0 [ 574.561096][ T8703] ? __x64_sys_mount+0x28d/0x310 [ 574.566036][ T8703] __x64_sys_mount+0x28d/0x310 [ 574.570832][ T8703] ? __pfx___x64_sys_mount+0x10/0x10 [ 574.576122][ T8703] do_syscall_64+0xcd/0x4c0 [ 574.580664][ T8703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.586562][ T8703] RIP: 0033:0x7f116b18eb69 [ 574.590985][ T8703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.610745][ T8703] RSP: 002b:00007f116bf30038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 574.619235][ T8703] RAX: ffffffffffffffda RBX: 00007f116b3b6240 RCX: 00007f116b18eb69 [ 574.627221][ T8703] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 574.635253][ T8703] RBP: 00007f116b211df1 R08: 0000000000000000 R09: 0000000000000000 [ 574.643321][ T8703] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 574.651321][ T8703] R13: 0000000000000001 R14: 00007f116b3b6240 R15: 00007ffe64036768 [ 574.659331][ T8703] [ 574.662357][ T8703] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 574.669620][ T8703] CPU: 0 UID: 0 PID: 8703 Comm: syz.2.691 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 574.681131][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 574.691168][ T8703] Call Trace: [ 574.694441][ T8703] [ 574.697359][ T8703] dump_stack_lvl+0x3d/0x1f0 [ 574.701933][ T8703] vpanic+0x6a3/0x780 [ 574.705896][ T8703] ? __pfx_vpanic+0x10/0x10 [ 574.710380][ T8703] ? __getblk_slow+0x4cc/0x560 [ 574.715142][ T8703] panic+0xca/0xd0 [ 574.718858][ T8703] ? __pfx_panic+0x10/0x10 [ 574.723261][ T8703] check_panic_on_warn+0xab/0xb0 [ 574.728176][ T8703] __warn+0xf6/0x3c0 [ 574.732047][ T8703] ? __getblk_slow+0x4cc/0x560 [ 574.736790][ T8703] report_bug+0x3c3/0x580 [ 574.741095][ T8703] ? __getblk_slow+0x4cc/0x560 [ 574.745836][ T8703] handle_bug+0x184/0x210 [ 574.750151][ T8703] exc_invalid_op+0x17/0x50 [ 574.754637][ T8703] asm_exc_invalid_op+0x1a/0x20 [ 574.759474][ T8703] RIP: 0010:__getblk_slow+0x4cc/0x560 [ 574.764824][ T8703] Code: c0 8b 48 89 df e8 24 e6 bb ff 90 0f 0b e8 dc 55 73 ff 48 c7 c6 60 59 c0 8b 48 89 df e8 0d e6 bb ff 90 0f 0b e8 c5 55 73 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 c0 5a c0 8b 31 db e8 2d 1a 52 [ 574.784406][ T8703] RSP: 0018:ffffc90004d1f7f0 EFLAGS: 00010287 [ 574.790450][ T8703] RAX: 0000000000018463 RBX: 0000000000000200 RCX: ffffc900118e6000 [ 574.798397][ T8703] RDX: 0000000000080000 RSI: ffffffff824813ab RDI: 0000000000000005 [ 574.806342][ T8703] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 574.814286][ T8703] R10: 0000000000000200 R11: 0000000000000001 R12: ffff888024325080 [ 574.822230][ T8703] R13: 0000000000000200 R14: 0000000000000200 R15: ffff888024325080 [ 574.830182][ T8703] ? __getblk_slow+0x4cb/0x560 [ 574.834952][ T8703] ? __pfx___might_resched+0x10/0x10 [ 574.840225][ T8703] bdev_getblk+0xd4/0xe0 [ 574.844458][ T8703] __bread_gfp+0x86/0x3c0 [ 574.848773][ T8703] udf_read_tagged+0xae/0x740 [ 574.853446][ T8703] udf_check_anchor_block+0x89/0x4b0 [ 574.858712][ T8703] ? udf_get_last_block+0x1ce/0x2a0 [ 574.863890][ T8703] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 574.869761][ T8703] udf_load_vrs+0x682/0x1070 [ 574.874330][ T8703] ? __pfx_udf_load_vrs+0x10/0x10 [ 574.879328][ T8703] ? __pfx_udf_get_last_session+0x10/0x10 [ 574.885028][ T8703] ? lockdep_init_map_type+0x5c/0x280 [ 574.890401][ T8703] udf_fill_super+0x791/0x1df0 [ 574.895146][ T8703] ? __pfx_udf_fill_super+0x10/0x10 [ 574.900314][ T8703] ? do_raw_spin_lock+0x12c/0x2b0 [ 574.905313][ T8703] ? find_held_lock+0x2b/0x80 [ 574.909965][ T8703] ? sb_set_blocksize+0x176/0x1d0 [ 574.914965][ T8703] ? setup_bdev_super+0x369/0x730 [ 574.919969][ T8703] get_tree_bdev_flags+0x38c/0x620 [ 574.925053][ T8703] ? __pfx_udf_fill_super+0x10/0x10 [ 574.930234][ T8703] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 574.935841][ T8703] ? bpf_lsm_capable+0x9/0x10 [ 574.940504][ T8703] ? security_capable+0x7e/0x260 [ 574.945420][ T8703] vfs_get_tree+0x8b/0x340 [ 574.949826][ T8703] path_mount+0x1482/0x1fd0 [ 574.954308][ T8703] ? __pfx_path_mount+0x10/0x10 [ 574.959137][ T8703] ? kmem_cache_free+0x2d1/0x4d0 [ 574.964068][ T8703] ? putname+0x154/0x1a0 [ 574.968287][ T8703] ? putname+0x154/0x1a0 [ 574.972504][ T8703] ? __x64_sys_mount+0x28d/0x310 [ 574.977420][ T8703] __x64_sys_mount+0x28d/0x310 [ 574.982159][ T8703] ? __pfx___x64_sys_mount+0x10/0x10 [ 574.987419][ T8703] do_syscall_64+0xcd/0x4c0 [ 574.991901][ T8703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.997764][ T8703] RIP: 0033:0x7f116b18eb69 [ 575.002164][ T8703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.021745][ T8703] RSP: 002b:00007f116bf30038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 575.030130][ T8703] RAX: ffffffffffffffda RBX: 00007f116b3b6240 RCX: 00007f116b18eb69 [ 575.038074][ T8703] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 575.046018][ T8703] RBP: 00007f116b211df1 R08: 0000000000000000 R09: 0000000000000000 [ 575.053961][ T8703] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 575.061905][ T8703] R13: 0000000000000001 R14: 00007f116b3b6240 R15: 00007ffe64036768 [ 575.070640][ T8703] [ 575.073833][ T8703] Kernel Offset: disabled [ 575.078132][ T8703] Rebooting in 86400 seconds..