last executing test programs: 5m5.393152005s ago: executing program 2 (id=239): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x18, 0x3c, 0x2, 0xfffffffc, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x890}, 0xc000) gettid() 5m4.923673886s ago: executing program 2 (id=245): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) (async) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (async) ioctl$TCXONC(r0, 0x540a, 0x2) (async) ioctl$TCXONC(r0, 0x540a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) (async) 5m4.449496603s ago: executing program 2 (id=249): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x26011041}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1000, 0x35}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4010) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000380), 0x4) io_setup(0x100, &(0x7f00000003c0)=0x0) io_submit(r4, 0x3, &(0x7f0000000740)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x80, r3, &(0x7f0000000400)="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", 0xfa, 0x8, 0x0, 0x0, r3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0xe, 0xffffffffffffffff, &(0x7f0000000540)="70e60b633addd9f3bc655e02dae9951719689c930bfcfa04d885cb6319d481b44c0cc43e41d6cbfabcaeb7eb988edfb6da9969ba1c7bd883865e27d02bd2a86492007f4a0f4ee6fe1f15bcbf5f747f1f21c4335a8464c27b003b7066bc4c676914696a7f6b612d4a813bc2c7c6ee54057143e4f0316fc55dd2cac0c8440e1d7033c6c79a036f24d07d28098823a383fb014a08fea04e89db608cc8c23cfc66755338724405e6966e6444b8bf63ac82aef5b336a2e66369583511cc27dca2f382", 0xc0, 0x9, 0x0, 0x1, r0}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x2, r0, &(0x7f0000000640)="bd2aeecb3425f31b428ac8274bd09dd71366e4c4b2f8b95ce399c0ab7f24b61be0016f971987f9e8f1727d5cee77fbb35ef734c8ea35e53eb40e6f408caeb8e8ef4396996861585374870519f4a70719408bb469d5550933454d70f9285c279b9509a7f1a4b509f9408156ba8808385a4d23116c687e3db526e23cfdc366ca5c453dd4578fcbd37f5bafea614c98a34037860c814dcead3fd152c1b75790", 0x9e, 0x2, 0x0, 0x1}]) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000780)={{0x1, 0x1, 0x18, r3, {0x800}}, './file0\x00'}) r6 = geteuid() lstat(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001e00)='./file0/../file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getegid() r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001f40), 0x0, 0x0) r12 = openat$cgroup_freezer_state(r3, &(0x7f0000001f80), 0x2, 0x0) sendmsg$netlink(r5, &(0x7f0000002100)={&(0x7f00000007c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xc, &(0x7f0000001d00)=[{&(0x7f0000000800)={0x18, 0x19, 0x300, 0x70bd2b, 0x25dfdbff, "", [@typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@multicast2}]}, 0x18}, {&(0x7f0000000840)={0x180, 0x36, 0x200, 0x70bd28, 0x25dfdbfb, "", [@typed={0x8, 0x83, 0x0, 0x0, @uid=0xee00}, @nested={0x155, 0x111, 0x0, 0x1, [@generic="6006c8eaf2217f23c9a7271a1dcf1cd06f0d0622f6add8e6faab38b895529356b26461c364d75d44a42f0f6c338b237303822287c0f8cb332f75a7465731728c403ed8adfbe175add968628cc6d858e17b4e7a2119588d434a4ac32499a7fb7f0aad50e570533ba20ab9e64ca44b98bd96e8f9de047eede0842443b4867f5390584d9d8f7259faab1738814ed967b33e5fab704fbd4d206cb5e3624a4babe2832dad717b3663dcd1f53888809dd850", @typed={0x8, 0x56, 0x0, 0x0, @u32=0x3}, @generic="547568eaa38f2d7351c1b9d56292e221e862a6b2c289f4cb21c3f8942b32e187c1ba944332fdaa1d0884ff364ca672c9d6ee39a3edc6f4deeb686829464a1f28507551dcc8d91e24501b505343301b0f2f188189b04c6eeffdcc1a366059e4f7bbdea4fa0a13bdaaada3f11478eb5402328817de44d9cddbbdb7085424fea1d0f2fa1d3a1ef0fffb19aa8c850c3f", @typed={0x4, 0x22}, @typed={0x4, 0x2a}, @nested={0x4, 0x6}]}, @nested={0x10, 0x5b, 0x0, 0x1, [@typed={0xc, 0xec, 0x0, 0x0, @u64=0x3}]}]}, 0x180}, {&(0x7f00000009c0)={0x224, 0x41, 0x4, 0x70bd29, 0x25dfdbfe, "", [@nested={0x1b8, 0x10a, 0x0, 0x1, [@typed={0x4, 0x128}, @nested={0x4, 0xe6}, @typed={0x8, 0x117, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}, @nested={0x4, 0xd8}, @generic="ff7d70e8e82b92e281840adb59b2d8c5fcf3d9ca1672ecb71ddfbe332d408f9ba282a99c5741ba7a65b74508292c02fb89e8d32f5b3bdf7c61acf1f1795b467a966276769a6599e1f36f5b825112aea8050d47ffecbda5dc0e11b42c63952aa55460d3bb9fe896b6dfb2150fedb36d5de78bfb0acf6b0092ec2f1340deede5d8351feb35a7d0daf66d4fdf490113a31aa27a6958d0729aa5b12a0485d175f434fab2dc3aa1ce66c9b049616470386533c92d261693eb1acd5d6c1d381f77b1284ab7869b08508b6aad6118e20e958013a89c2bb9dc51cc476c9420ea8e7da6", @generic="f10959e5b438b90a3c7c9da5aaac43151f16b1810772fb95d221c3d04dff8acf3b5fc2c5fe91d97cdba3397e88ae7cd7cd7545f228690c85023792857342c361fcb2596be854a2c06eeba77e02497005158bbe3fa4602c284039d34bf0fa8fb41ab4b71df674c093a99b0f81df46b0e208e83f7154d285e03650613c7a17d14b5867283c33f7b8d6ebd251b3b17bf89791efcbce01173f8fff83ffeb80889347e4e0028b49a58cf643d0eb8b90d7ecae0b3f37da58f1d5b229ad24bfcaac6fc679"]}, @nested={0x2c, 0x5, 0x0, 0x1, [@typed={0x8, 0xf9, 0x0, 0x0, @ipv4=@multicast2}, @generic="8c841003", @typed={0x8, 0x25, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xa2}, @typed={0xc, 0xc1, 0x0, 0x0, @u64=0xfffffffffffffc00}, @nested={0x4, 0x9a}]}, @generic="bdb65dc51b02f06aff10c6815d8aa6cedf9a47020c6e1980b73d0082d940781e3648ad5a3e9b168f5a9aad51b5"]}, 0x224}, {&(0x7f0000000c00)={0x10fc, 0x3d, 0x100, 0x70bd28, 0x25dfdbfc, "", [@generic="4a3240ccc00f7492d6ef9c3d60dfc321cbf013d154d6578fbc8f023902770bab166eda14f450d7770a1913e04f53fea134e831854966cf859728b001e609706676401ce208ab517ee8bc2b310627396324a6a5d0bb4c6131357abfd367d0b9b7c665c9cea07aca94fc7e9aac9074e18dc291a69d249ba975ac5b21180feaac0f0e5cf01196cdcc1bf82f4ccc174c9e6b6054c2ef31c853cafcbf0e19d7a6ebc2e43a8ccda1f428854407952bb01ada1639c54ffe404b6484d51144e577722ca18ec0a9d12a238820298976c2eecc141042d63025b2b06e86fc8e4cbe132a766b32fb8814f4c6d2bb001dd7407da376d146bc7a7c3a6ba2d3f0e480bfb22bc5d560076d28547a82e504f9fe738715e58fcb0cf73f5d9a8b4f350f6e25ecdcb6919610e33b3a615b59c74e15767cc6d8085d6fdac26996114563b297152abf58132cf228d5e6758f0fbf6b74a0fc75bd8a1b2e5d1256c83efb19f73d0b77b60a424b6317faa3412c988196b739eb391b111feea2fcc65851b6674d314b27880c737c8e60a7b5642aa8f9ab46a2a1a33191ef11e83ab623c30febe3bbdda304fbaaab982e1be1067a7c77217fd9c5476d64cd0dfef98582c4428ac6f2b5ac6a21ccd441330af5a0e8d2f281c447068a77b9269fc48a6d33dbd97f0fc88d416ef6c00257108a289d632c81724b512f6cb7e08665f6cb12758508db3899f768b7a39a52de3315985edd43e06f2829bf2da3f39216653344576bece414bf7fd011bbb36e6554fa4bcbb30b077210f1fe2c55d4c8debe3e7ad677eab461fc662b5b033b9d26728c5b000a572078b77fc5e008affe4ed4a6c2f958c53de4f3ffb550e108bd5cfa1d21cb5a15ebb5359dea3bd7d5325f356cd0fbd0e82884d0bab1f6e43180f903964d9dd05ccf7a2e819f252a405bad13a90e85eac2d1a9ac2cab110aa8d10bf3f0e507a1accb1715c105dc671f505068ea674237b0f737f5e6a97fff33c997db9e735016c1c1247282298ef7e45e7adf57a59f16942e149ad431b399861617b05a573a4fd309ccdbe0dae0da5615c54642527c6860ec908b22f71b2f9c1b133297bf3bfac91071634a1242cddc5fa1dd7360fde3b25425559f9cebce31b43be89056cc7794755ad7ae4be522fe899e8a06aab952af995331231b749888cf50f3b2044c9278088ba27a0aa22c4af817a3acf8fdd4fa3ba0386aaa8bb568b76c77292144de5cbe3b587b159adfad15b49b58b7ac1b8f2559da227aa1cd6ee6169b70cd2c5498373dfa4c8089ff41a15bbc6d2d5fe2330e668f5940f83857338483fa1f9d95a92e464aa8a2699c25d62e1e4ab92303baa409238d780f1eb383684b0c2b94dbb947af71e01fc4911e226b93a2f7c5067e0ff3709a0b35017372be2294bcd0480f4075b73b7763448997fe51677d1b493ab7c5aa7ee4d58b85ee43e12748cdf9e0826b69516a6480fda9190cb819847e848f022710b4330fa21d92acd21348d0d634186c5b2a13a5f5d078c556c332a5f7a43ee8191d42a625559a29b3a40ee6d322e4a4618fd3541fedc61b062789556eb0a2830a31ad3c7e292b2c3b0bd541b46a64c9f8974e7e487f1c9fbc808c30c2707ebb298dd14d4e1269afe6246bb82202354ad84fd075954da4541547441709f933a426a884c59c6713e7176d38b703acc6e6553949a737a6082b45f37762d28e2146fff884715a82d14b3f151339ee6fdaa60dc950e55112b8d41b07fb7d033e176922d703f612182502e13fc721d5f83e7410bf36765d218668301aa6931ab9eda1624d820b15958aef376f1fc81552cc86af5b4cf5dcd6572d496a7f7df017775212d169984a9485b8800830453fa90285509fab186e1dfcea517229ddfeebceed9d0fc49abb0c81d21d901205afc37f1ec2f9f799bbeb9cdc7b2f0d6fd363ad079c7cbe6f6f33205edb42225365e014ec954dff899b20069e8d39ee8896d9bf0466e4667f338367acf688f821a61d482c070eafcfd7ec9d7059a0761b51763458664de75845e640565962d9bd1f959cadaec8d5cebeb30ac0e0154233f2a3e53091e0efb15fa41e314c8ad1d3210ee69c5b9ad832860e1d2a03ec30a35e474afc21af96becc68ae29a2485c93b4413964e9acd645976dd592304122fb2f3c8897b408f88da9e1a48088ceaf50c161039644cce9a7e243b3d4a85a72d96c1e765affbf7aff7844216458dd4639c4a0895872d76288bab62827af460eae55321a9c9186a11f8a2d3f91a622ba391d73a2096400534e31ba5ee85039d94dbd746dfe0298847c88feccc4244928edf13fcdff7100fcbb188940d8775fc0a7e3670724a0c95ca1a72eccd9b2d509c4bcaf461b2e79895b50ab49bd6f282eefc5e406614949b4d5257116501468874a3d361b95e839a207460c02477ee3b7486dc118a6df5c0553f8e9e046cbb556f69d576dddc7df5f37317b43dab2d8ba94449fc90f292ce82644f0bd034e6fa452a59392234bf1242c0b70bdc370e65f658de8e55f0c6d7273acab55ec0068f825a8f623ded1feb03034b20cea73ff3182dee2a7038ec93e4329b48ff2eabb93604946c5832350a5cb1231193c6c545b4a77dc09ab3075ce75a1e0b80a677767e4a793a62b5cc7fdfe40119570ab4db5d5f20a150556e60c68e3bca995586f01efa08afb1c5a4f8d6052e02b152fa4c619056991e0d0db9947509e41c1e1a8a5ff51e5ed57c34ce1cbbfa4181d4bdcb207af8a9ce32af3144568d17e674d822eddb24502c95a41e370c0c14d928021d75aaeeb3db712a7a8123b676add89a0361c2881aeaef3dee6a173fe886d7fba3eecd05d5bd4c22d5f92ba98283963aaf961b28ccbd11ed9fcbf13e16017a4c58bf6c9daebf870334a6a134cc716254aa47ffa29969428e13c3026b76b3501429cebc98d26b4bec0af0fd452e3597445d35291c47f039d67fbc55247de93df1a5ef2a89342e632ba0e7134c05bbb85c9e80f8bb040f35807bb65e27673e94b8a729720302b5b335554a7e0e5911d3f5b9d7636f5a05ad1408eefac969151f0ca496e0d16e4fadcd44e06a5734484f375dd8bb98ec203b7326453fd78c6f007ef57fa326b817ede646b6bf8fe35bf400615d07b529400e47e4145ffc6bacea127cfeb5220430561dfbd6b6e8c8671dba80fc9997beaafb80f63c19b7b40e13c4a4819842fa64e7750808dcf40d83a43897efa9b16798a4e4b89af3d045698629199bf45b8ed151ad3ae2130293275802b10c92ce470d432133a9176159446fadd92114113d075f02d35341907fd37ea58393942376bee941ef7e18b182c96322fd917f15bd4a82f868d40b5104b2d03836d04853ab78ed857e71ae2f184cba2e42e75f8710f4d60ca7a68113763735243b01b8d430efc59e4858859edcf051d70dd7c59ddf82f241084b8a33c897b0c842b92b4d39a084a819f6038bfb0b1d84ebf5567c23af27986a80634b6822d686ed3ff8ed996de45db63ac7d8e6fe10df5dc07da9057ebe7f1e72501a85b123ea31670764d3c9d54ef40104b9aa2b516a1c115332b5bba8b5156b360dd3c218ae14999ff7187699a581b3f31e85e2417f5912e8537faa37d6290f181bb6ba41a906f4c0448814856fe436fe37dbbb2975786beb46a9b827bdb2575f8e1f21de730f9ba93efc1c354d6cfa933a2747df1284509979d0b2e1bf3b1b27ab35190402b908ca4bd2cf3822b45a1221628eff28e7936de713328c123c2fa66aa08aa154663299f8e06382e9dfaa11f7c6d65b6ee2e79a9b3f7cdbd09f45adb3c47444af0c36e41d8e1969620d5d7ff82d068956b76d326f7baccc259f2d321937b357ac05e4b05a8b592fa34ec8a7da79fcdb8da06f42fb934ca339a8244910facae3caa6c12fd7beb292b76e093bb92f94bdd871124865b481872a3f5e584901e952bf42d7ba4f52f13edf0a5532b26ce4411e1db7c0481f065ce06c4143e67a79e2a2cc60c801938de22bfa790b73c8a0ccbea7cc16c474ee3271469b2fc6aef965ba7211f399f195392de9dc1f139c22e672f4a7ee9393d3914d4649ee90bddb7067023e02010285979a5a3efb6d04cb321daead64492d346c6304d76ca558ca81b0258a61a4e45653bfcb4390ffbf00287a858a43d6f03f66564d214a81db457bdef2871b114a18cecb4ea807207d279732408b5c91681101d24608be84bafd3ec0370fb0ede859224a974d4c5a55f1d1aa93656bd15f5165d749dfdc2e01af11068f693373eb68eafb823dc316114c91f1a27c6f0f5aa0f39b02f84d0450e06cf081ac6f72063939a12032ea43442f7e4ea49953ddfe8a89995f6d909ad5436b2e5e06a559b5f354132b241a2ad49b4930634a09dd70520cf09e4a938134fc8afe25af20fa9e5a3d26824b54c9e1f06381dbc544b9559a5a4e992fd9f2e5a4c10b1c84aef71a3d8912f139687472ff4ad979ea8181ab4a5bb0a9624aa217466449126ef1ec5da29450aa031f486072300a1c10c10b5d1c1406172ad1a0118d7338162ec94ff3357cd340d05b61c9aa58002f9bf0ebc43bd7f9d676434c39813a503b0ad72f509043c63c583a2103aa26265394f6c410647b6e7a3db7fcd4f74647ed3d6e4c34d24b45716bc7a2f45d0df3fe19f472f0c7498a413fe1879a55fbae288689fd18c412f0f872f06a0ada37246dc41bdb2ed26ec8ce524c11f6abdb842364e3df372e2dd85207380a97b0c11b9d90f238a6692d0c47644504e5c865f0019311c88003096af9da03c315e2c50c006e04d57c25846c84da8466b344afa669860497aa847954a3cbe246d726c2dec2ecdcbe0d672de564452fe2ee55a2073a41fc251f8d665639a4e61352e4051c05392376da8023eaebc9c9be41d63ca21c1faab290963a0dd2363e6dd3080077eff4c25d138472b32d3f71193d4a115a4e31ad03616bc62228c1d358077baed90daf53f453cd0358ad990d82eb956a5ba0c549eb2a741436a20b3d66fcfd61cbd231045e7b9b388866cbed92e8703c007b093b4e9bbf82983248506ebf21984c297527e20e2aa66909a6f7ab67499a7e241ea1f434412cf6061abca203d8566ef98f364330acf577a83e3549b9a8c75074c114eda19154bf3a0a8a565187ca086c60927c6983ae1c6346de54a382e356a87fe01b0ea5c6a4af6f2dd8963183543fbd640322342dc8c23466b78a425510e5683682b1518a49198e60047e37961541441f6c771c8df490cd361b0fede22abb3623c1d107b6a6364093abaea568087760c8f05cfae4c32dbc292402a4032cfc8eebdc9aaca773fc85a3e41878138b44cfc3484dcd1c7f947373fa9e7bc4b147ff9bb1a6f81dad5bbce16e051baf766c71c0a6f73e8a2b5183bb4ef4702577fa9b710793f87e7968c22db74d30806bac7bf4ff7a73b9590e758499eff971c35700a4887251e0d2b133c80b559d7ffe131ae2c258afbf9733ce0781995a2033ac57db6b157be276d37fd139a6c7acb57a694415a4eb1b95ff2b9214bc5d25e29ef65dbb308c84968f53b0e92eeaa7411ac44b0eed7d7e9506fb71248461b5b6c9239c9b21501c8fd00a3f0e785b6de2b1e7a0ecfbee6dc1ad5e9355cce437a7b8530caf7f808787dea4905c0dd4e9f298c01b9fe755643b80cab746f05e4bc19e8c087384c64f889f0ff3004ac582c609c93cf943b8921bb92c689249ca8f5dcd30f4d2d5b42356247a86c6eea387d9fa7b666641dad30977156b233431cdbb861734613d314c6c519fe18e56f4e8056cccf8949c06bb9bb8d9db5", @generic="acead497f665b30a5d22ae1dd9c158ed27f72aaf5084575aa9e7bbeb6b3a0bfe920b35cf61d367cd651a26125047f0b25f274a0b657064e045932c112b9a9e2c827cea5a7efd537734dee4f8a513644995f67c6d86bd5d6e58e4d86ff1832c958cb6fbcb88f500a7384afb39d850ceac0af35ff66cd4816c7b4be0543e8b73fabd2b3c6c5427e40ada7cc37b4e4dd86eca4185acf76232d9ceacebcf933dee12b926288db2a45bdfa139abe934d7883b28b8ef28f2aa7a29f11bd05c78d529fe6683e405bee5acdf1ab9a2920e6d9efefc0a1ecad7bff53b8c4235a8596a4c0de33002e3d376df8810"]}, 0x10fc}], 0x4, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, r10}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r3, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r0, r3, r3, r11, r12, r0]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x2c, 0x1, 0x1, [r3, r3, r3, 0xffffffffffffffff, r3, r3, r0]}}], 0x128, 0x48001}, 0x80) r13 = syz_genetlink_get_family_id$team(&(0x7f0000002180), r5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000002240)={'erspan0\x00', &(0x7f00000021c0)={'erspan0\x00', 0x0, 0x20, 0x80, 0x80000001, 0x51, {{0xe, 0x4, 0x3, 0x33, 0x38, 0x66, 0x0, 0x0, 0x29, 0x0, @loopback, @empty, {[@lsrr={0x83, 0x7, 0x75, [@rand_addr=0x64010100]}, @lsrr={0x83, 0x1b, 0xc, [@multicast1, @remote, @empty, @rand_addr=0x64010100, @broadcast, @rand_addr=0x64010102]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002280)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000022c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002380)={'syztnl1\x00', &(0x7f0000002300)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x6, 0x8, 0x70, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x20, 0x66d6, 0x6}}) getsockopt$PNPIPE_IFINDEX(r11, 0x113, 0x2, &(0x7f00000023c0)=0x0, &(0x7f0000002400)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000002440)={'team0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000002480)={0x11, 0x0, 0x0}, &(0x7f00000024c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000002500)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000002580)={'gretap0\x00', &(0x7f0000002540)={'syztnl2\x00', 0x0, 0x8707, 0x40, 0x5, 0x4, {{0x7, 0x4, 0x0, 0x9, 0x1c, 0x68, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010101, @private=0xa010100, {[@noop, @rr={0x7, 0x7, 0x87, [@broadcast]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000002640)={'gretap0\x00', &(0x7f00000025c0)={'syztnl2\x00', 0x0, 0x700, 0x80, 0x9, 0xd67c, {{0x12, 0x4, 0x2, 0x2, 0x48, 0x66, 0x0, 0x81, 0x29, 0x0, @loopback, @broadcast, {[@lsrr={0x83, 0x27, 0xa7, [@multicast1, @dev={0xac, 0x14, 0x14, 0x44}, @broadcast, @loopback, @rand_addr=0x9, @broadcast, @private=0xa010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x2f}]}, @generic={0x86, 0xd, "616f025024d0f46047adb8"}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000003840)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003800)={&(0x7f0000002ec0)={0x91c, r13, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r14}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0xc, 0xa, 0x10000}, {0x400, 0x3, 0x8, 0x159272f0}]}}}]}}, {{0x8, 0x1, r15}, {0x1a0, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xd, 0x6, 0x6, 0x3}, {0x4, 0x3, 0x4, 0x7}, {0x5, 0xb9, 0x5, 0x101}, {0xf5, 0x5, 0x2c, 0x9}, {0x3, 0xc}, {0xfff, 0x4, 0x1, 0xa}, {0x5, 0x5, 0x4, 0xffff67aa}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1920}}, {0x8, 0x6, r23}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5a77}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xec}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdecf}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x76a4b579}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0x2, 0xa, 0x10}, {0x1, 0x2, 0x5, 0xa}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5d}}}]}}]}, 0x91c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44081) 5m2.69741665s ago: executing program 2 (id=254): syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000080), 0x10) listen(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102481, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@updpolicy={0xb8, 0x1d, 0xfd3649826d894c67, 0x70bd25, 0x0, {{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x8000000000000001, 0x200}, {}, 0x1, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom(r7, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)={'nat\x00', 0x0, 0x0, 0x0, [0x5, 0xfffffffffffffe00, 0x0, 0x2, 0x100000001, 0xd]}, &(0x7f0000000440)=0x78) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r8, 0x4068aea3, &(0x7f0000000280)={0xd5, 0x0, 0x10}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000500)) sendmsg$kcm(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1}, 0x20000084) add_key$user(&(0x7f00000001c0), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x890}, 0x0) 5m1.577210219s ago: executing program 2 (id=257): r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB]}, 0x78) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') setns(r1, 0x4000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair(0x2a, 0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 5m0.011136855s ago: executing program 2 (id=261): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001800010327bd7000000000000a800000ff030006"], 0x30}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x2, 0x3d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x19, 0x79, 0x2e, 0x20, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0xbd, 0x0, 0x2, 0x34, 0x67, 0xc3, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}, {{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008040) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_vhci(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32], 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) fspick(0xffffffffffffffff, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4m44.222074422s ago: executing program 32 (id=261): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001800010327bd7000000000000a800000ff030006"], 0x30}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x2, 0x3d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x19, 0x79, 0x2e, 0x20, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0xbd, 0x0, 0x2, 0x34, 0x67, 0xc3, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}, {{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008040) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_vhci(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32], 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) fspick(0xffffffffffffffff, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 17.113128825s ago: executing program 4 (id=1084): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) (fail_nth: 4) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) 15.255321058s ago: executing program 4 (id=1088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, &(0x7f0000000180)) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x10000003f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00'}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008004) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r7 = getpid() sched_setaffinity(r7, 0x8, &(0x7f0000000180)=0x7fffffff) sendmmsg$sock(r6, &(0x7f0000003bc0)=[{{0x0, 0xfe3d, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000000000002ca, 0x4040014) 13.700144022s ago: executing program 0 (id=1094): socketpair(0x18, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x0, 0x1000, 0xe7, &(0x7f0000000040)="1a056e881f37929c15f82cd335fa905d4960a2a143fb6ca654d84a761a25aae48922e4776d5188fa548a8000154c02e0d605703f324a5cdcf157bdd5743c80f78faca8f42155160f050f227de3846f7fbf43edb3478d876d43deefb603234dbf48cd322eaa0b2dbd355fe859494d2f83d1b199e18ec17ddb5abb35c1afb08380e7ddd2c1ffe7d3fe9b73e943c005eca385b9dbbea4ccfc8fd1e2cb67a7c1e20e64d0df7b3faf772415c4c0891c09ced28d4e84351175a088997f9796882cff60d1a83f4dd8bbd78ca0c03c14854f5793d6fc57b106686dc8810102dd845c4d318de734209dbfaf", 0x8b, 0x0, &(0x7f0000000140)="17b411608313fa47660a69a27c29b020051a43a7173c18a53ac02f28d4277bb1b9f577a0afccf9aa19f41fef2f0b65b0bfe9349d16e81e911d5d4e6c9f648fb95b5ddf046db21a9ed568f61dee1da62ade4742710d7b3f041c305f1a0460d3a6aa45a9719979b2f68cf6541a901e956350e42d9978b08eda163e153abc43021f5553a0737e1515cb63ae24"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001080)={0x1, &(0x7f0000000040)=[{0x200, 0xbe, 0x3, 0xa9}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r6, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0xfdf, 0x20000) r7 = syz_io_uring_setup(0x82e, &(0x7f00000005c0)={0x0, 0x20000020, 0x10100, 0x1, 0xfffffffd}, &(0x7f0000000100), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 11.224058202s ago: executing program 0 (id=1097): openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume_offset', 0x8a00, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r3 = socket(0x2, 0x2, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x6) r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000180)={r6}, 0x1) futex(&(0x7f00000000c0), 0xd, 0x0, &(0x7f0000000100), 0x0, 0x2) ioctl$NBD_CLEAR_SOCK(r2, 0x125f) r8 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x2}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38012, r8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 11.096986s ago: executing program 5 (id=1098): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000010c0)={0x3fff8, 0x5, {0x0}, {0xee00}, 0xffffffff, 0x5}) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x2, 0x5004) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x444201, 0x0) ioctl$RTC_PIE_ON(r5, 0x7005) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="980300001200210100000000000000", @ANYRES32=0x0, @ANYBLOB], 0x398}}, 0x0) readv(r9, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="680000001000370400"/20, @ANYRES32=r8, @ANYBLOB="8304050001000000480012800b000100697036746e6c000038000280060011004e230000060012004e24000008000100", @ANYBLOB="14000200fe80000000000000000000000000003b060011004e220000a6c973864a010f7f4ad0fd1474af33bba0337c84f9b766c39d0386a0dad673"], 0x68}}, 0x0) 10.921511629s ago: executing program 3 (id=1099): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x102) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r0, 0x8044610a, 0x0) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xd4\xc6\x90j\xac\xf9\xa4\xf9\xa5\x0f\x89\xdc\x80O\";\xae\xebA;X\x14\x97\xab\x86\xd1/\x84\x8a\x91$GY\xeb\x8f\xec\xb4\xf9\x1f\xb7\x04\xc2\xc0\xc6\x03\x00\x00\x00\x00\x00\x00\x00\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xdeY\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v2*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xb3\xbd\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\xc95\xcc\xb6\xf6\xe8o\xfd\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82]S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60k2\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x80\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Lo\x12\x00\xa2\xa5$9\x05O\xfe\x0e\xd2N\x98\x84\x10\x01\x89\xaa)\x118\xcd\xf8>\xab\xd9\xbd\xcfH\xa5\x8e\x14\x12\xb0OF\x80\xbb\xb6B\x80Q \x85\'w\xc8D\xf9\xfa\fq\x9e\x83I\xe5\n\xae8\xb7\f\xab#\x85Y\xeeH\x98\x84\x8cRv\xdcZ<\x80\xbd\x8d~\n\x88-\xa1\x97\xaf2e\xa6\'\x8aQ\x85}\xf1\rJF\f\x8c_\x01\xbe\'\v1\xccL\x0e\x05\xbdIa\x85\xb8\x14\xe0;}\xb7\x11\xb5\xfa\xeb\x13\xd3\x92\x8a\xe47\xf9\x12\xd9\xd5\x99\xf4\t\xdf\x058\xc4]\xf7\x16J\xf9\xce\xf0zG\xe6i\xf1~\xaaL\xa5\xd5\xe5L\xban?\'\x11B', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$inet6_udp(0xa, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x2f, {}, {}, @raw32}, {0x0, 0x2, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x38) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@remote, 0x0, 0x3c}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33b}, {}, {0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) madvise(&(0x7f0000078000/0x4000)=nil, 0x4000, 0x17) syz_pidfd_open(0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='nfsd\x00', 0x840d, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 9.661440455s ago: executing program 5 (id=1100): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf25010000000000000008410000004c00180000040173797a3100"/98], 0x68}, 0x1, 0x0, 0x0, 0x94}, 0x4040080) r5 = syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x480) r6 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f00000003c0)=@fd={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f06e4b56"}, 0x0, 0x4, {}, 0x5c000000}) ioctl$BLKPG(r5, 0x1269, &(0x7f00000003c0)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x400, 0x20080000000, 0x5}}) write$sndseq(r2, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x10000000, {}, {}, @raw32={[0x0, 0xff]}}, {0xb, 0x0, 0x0, 0x0, @tick=0x5, {0x0, 0x4}, {}, @quote={{}, 0x4}}], 0x38) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r7 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xd3f, 0x18002, 0x0, 0x24a, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r10 = socket(0xa, 0x800, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000001400)={0x1d, r11, 0x100000000001, {0x0, 0xa6474896c5e16536, 0x1}, 0xff}, 0x18) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 8.988188873s ago: executing program 3 (id=1101): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000300)={0x0, @win={{0x68a4, 0x1d5, 0xb6e3, 0x4}, 0x8, 0x65, &(0x7f0000000500)={{0x4, 0x817, 0x7fff, 0x7}}, 0x3, &(0x7f0000000540)="055834a7f7165f0d0a4a522683f61d10b671425281337f7fca33b69ada80d69a1ba6af3ec0809552e8e9cf937c2205e154efc1d54df04ef787dad9118134aa6afc788ba32ccb04ea96e4ef25e58906772c24ac33ed96af4d6fb2293c3c9b08902cda734ca010ae3ded7f3a24999b0bc08c36ae78f68d71743b9d0ac4ccef712cb2c91d58808818ce6afd83cb6aea62561a0f336806f1f6ccf1", 0x72}}) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 8.688607097s ago: executing program 4 (id=1103): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e22, @private=0xa010101}], 0x10) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="8d706f6c3d696e7465726c656176653d72656c61746976652c00"]) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x14) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r2, &(0x7f00000002c0)='9', &(0x7f0000000040)=""/99}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) bind(r0, &(0x7f0000000200)=@nfc={0x27, r3, 0x1, 0x3}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000400012800b00010067656e657665000030000280140007000000000000000000000000000000000105000d0002000000c2cb443e1c0c4a35060005004e21000021afd94d6fd71890979c0b55a6d93c74bbdd8c5d268ec911b848679fc53d018dfa863dc527544c341e3d6ea4c077bf28df369d86e5b9e5884cfe4d56bed99340f9a0cfbcf7beb1e249599956f8da4190dfd0d8693b913697406fc308ac2a81e74b75efc9d4a464f27bd253915af8e485c95d45afd35db6a14faa159c8cde79fcdbfc864f5d863439db05ca0d768c4ac86fa4d78b17ae9c5bac00d69e1a35d8817dd78036e4"], 0x60}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x6, 0x0) socket$isdn(0x22, 0x2, 0x26) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, 0x0, 0x0, &(0x7f00000003c0)={0xfd, 0x0, 0x9, 0x5, 0x40000, 0x20000000, 0x0, 0x1, 0x4040c405}) 8.083154617s ago: executing program 0 (id=1104): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) (fail_nth: 3) 7.768860082s ago: executing program 4 (id=1106): socketpair(0x18, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x0, 0x1000, 0xe7, &(0x7f0000000040)="1a056e881f37929c15f82cd335fa905d4960a2a143fb6ca654d84a761a25aae48922e4776d5188fa548a8000154c02e0d605703f324a5cdcf157bdd5743c80f78faca8f42155160f050f227de3846f7fbf43edb3478d876d43deefb603234dbf48cd322eaa0b2dbd355fe859494d2f83d1b199e18ec17ddb5abb35c1afb08380e7ddd2c1ffe7d3fe9b73e943c005eca385b9dbbea4ccfc8fd1e2cb67a7c1e20e64d0df7b3faf772415c4c0891c09ced28d4e84351175a088997f9796882cff60d1a83f4dd8bbd78ca0c03c14854f5793d6fc57b106686dc8810102dd845c4d318de734209dbfaf", 0x8b, 0x0, &(0x7f0000000140)="17b411608313fa47660a69a27c29b020051a43a7173c18a53ac02f28d4277bb1b9f577a0afccf9aa19f41fef2f0b65b0bfe9349d16e81e911d5d4e6c9f648fb95b5ddf046db21a9ed568f61dee1da62ade4742710d7b3f041c305f1a0460d3a6aa45a9719979b2f68cf6541a901e956350e42d9978b08eda163e153abc43021f5553a0737e1515cb63ae24"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001080)={0x1, &(0x7f0000000040)=[{0x200, 0xbe, 0x3, 0xa9}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r6, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0xfdf, 0x20000) r7 = syz_io_uring_setup(0x82e, &(0x7f00000005c0)={0x0, 0x20000020, 0x10100, 0x1, 0xfffffffd}, &(0x7f0000000100), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.712305038s ago: executing program 1 (id=1107): socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) eventfd(0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='ext2\x00', 0x8080, &(0x7f00000001c0)='discard') connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)=@generic={0x1, 0xfffffffffffffff7}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000300)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000480)=""/90, 0x5a}, {&(0x7f0000000240)=""/62, 0x3e}, {&(0x7f0000000500)=""/151, 0x97}], 0x3, &(0x7f00000005c0)}, 0x9}], 0x1, 0x22, &(0x7f0000000680)={0x77359400}) sendfile(r5, r6, 0x0, 0x23894) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x100000b}, 0x1}) 7.535184656s ago: executing program 0 (id=1108): prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000040)={0x1ff, [0x49b0, 0x0, 0x100, 0x101, 0x3, 0x9, 0x3ff, 0x1000, 0x0, 0x8, 0x3, 0x5f, 0xd, 0xcd, 0x9, 0xbb, 0x5c22, 0xa4, 0x6, 0xfb, 0xe200, 0x1a25, 0x7, 0x4, 0x100, 0x0, 0x7, 0x7f, 0x2, 0x36, 0x5, 0x0, 0xebc, 0x7, 0x3, 0x3, 0x3, 0x0, 0x7, 0x101, 0x5, 0x6, 0x7, 0xe5, 0x18, 0x100, 0x9, 0xc], 0xc}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f00000001c0)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f022200018283010902240001010000000904000002030102"], 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@deltfilter={0x34, 0x2d, 0x1, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffe0}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 6.121015314s ago: executing program 5 (id=1109): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x84, r0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0xa}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "40aacd52cd8203eece0eee2e09a67585"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e3af95ab0df8016554c76b0e226e5a77"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e6e1af0a4dc6cc178b87051e51cc6b7a"}, @NL80211_ATTR_PMK={0x14, 0xfe, "ab7987b92e4b80d3590cd3815cb9ba9d"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cd3f7444095b768d6d5d831e78ee82fe"}]}, 0x84}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/4, 0x4}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000300)=""/238, 0xee}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f0000000040)=""/8, 0x8}], 0x5, &(0x7f00000004c0)=""/150, 0x96}, 0x3}, {{&(0x7f0000000640)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000006c0)=""/76, 0x4c}, {&(0x7f0000000740)=""/126, 0x7e}, {&(0x7f0000000100)=""/49, 0x31}, {&(0x7f00000007c0)=""/249, 0xf9}], 0x4}, 0x4}, {{&(0x7f00000008c0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/217, 0xd9}, {&(0x7f0000000a40)=""/113, 0x71}, {&(0x7f0000000ac0)=""/90, 0x5a}], 0x3, &(0x7f0000000b80)=""/233, 0xe9}, 0x1dd7}], 0x3, 0x40, &(0x7f0000000d40)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r6 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) splice(r5, 0x0, r6, 0x0, 0x114, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000d80)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r6, 0x3b84, &(0x7f0000000e00)={0x20, r7, 0x3, 0x0, &(0x7f0000000dc0)=[{}, {}, {}]}) bind$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) 5.968228343s ago: executing program 1 (id=1110): socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0xfffffdfe, 0x1, 0x0, 0x5f}) mq_notify(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f00000004c0)={0x0, 0x0, 0x7ffffffffffd, 0x3}) fcntl$lock(r6, 0x24, &(0x7f0000000100)={0x2, 0x0, 0x800000000000, 0xfffffffffffffff9}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_dccp(0xa, 0x6, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r7, 0x40044145, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000a57000/0x4000)=nil, 0x4000, 0x2000000, 0x50, 0xffffffffffffffff, 0x58684000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001a00010000000000000000001c0000000000000000000000080001000f0001"], 0x24}}, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 5.890427851s ago: executing program 4 (id=1111): syz_open_dev$video4linux(&(0x7f0000000040), 0x10001, 0x800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 5.097318039s ago: executing program 5 (id=1112): memfd_create(&(0x7f0000000040)='rootmode', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000003c0)=ANY=[]) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xfffc, @private}, 0x4}}, 0x26) socket(0x10, 0x3, 0x0) 5.094559709s ago: executing program 3 (id=1113): memfd_create(&(0x7f0000000040)='rootmode', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000003c0)=ANY=[]) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xfffc, @private}, 0x4}}, 0x26) socket(0x10, 0x3, 0x0) 4.385567209s ago: executing program 1 (id=1114): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000100)=[{{&(0x7f0000000180)=@can, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1}}}, 0x80, 0x0}}], 0x2, 0x0) 3.040467405s ago: executing program 0 (id=1115): openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume_offset', 0x8a00, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r3 = socket(0x2, 0x2, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x6) r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000180)={r6}, 0x1) futex(&(0x7f00000000c0), 0xd, 0x0, &(0x7f0000000100), 0x0, 0x2) ioctl$NBD_CLEAR_SOCK(r2, 0x125f) r8 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x2}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38012, r8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.039915015s ago: executing program 1 (id=1116): timer_create(0x3, 0x0, &(0x7f0000044000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mq_notify(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xe, 0x0, @thr={0x0, 0x0}}) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x80a00, 0x0) mmap(&(0x7f0000a9d000/0x3000)=nil, 0x3000, 0x1000002, 0x4020150, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000001c0)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x2102026, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x6, {0x0, 0x4, 0x6, 0x6}}) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\,:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c93012000e00050014f80a00050006bab8a1e8", @ANYRESDEC=0x0, @ANYRES8=r2], 0x17) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000002c0)='\xd8\xcaWub-\xe1\x80\x00\x00', &(0x7f00000004c0)='c:::\x00+\x1f\x1a,\xd8\xab\xa5\xdf\xf7!\x0f\xe6&\xc7g\x1b\xcfk\xfc\xa9E\"e\x9a\xab\xa1\x8b5\xb0\xcf\xc8]\xa3\x17\xd4\xbf>a\xb1\xae~lB[\xb9\x01WS\x856\xb9\xc5qe\xc6,s\b\by\xba\xaf\x10v\xee\xbf\xae\xadZ\xb4\x14\xb2\xb7\xfa\xac\xe7sK\x8a\xce\xee2\x95({\xd9o\xa8\xd5\xd2s\xc8\x19\xfc\x04\xd2\xedWl/\tl\xa7\xd6$\x050\xce\n\x9fr\x1e68U,q\xc5\xff\xe2\xd5\n\xbf\xa2=J\xfb\xfdy\xa0\x93\xdb\xac9D\xc3cH\f\xce\xeb\xcb\x19E\xed`\r\x06\xd6\xb6X\xe8\x9a\x00\xa6_\xfd\xdd\xa7\xae\xa7\x90\xff\x90\x00\xe4\xe1', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB='#a'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=@deltclass={0x0, 0x29, 0x300, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x10}, {0x0, 0x4}, {0x3, 0x6}}, [@tclass_kind_options=@c_tbf, @tclass_kind_options=@c_prio, @TCA_RATE={0x0, 0x5, {0x3, 0x8}}, @tclass_kind_options=@c_netem]}, 0x34}, 0x1, 0x0, 0x0, 0x2005}, 0x10) 3.001231648s ago: executing program 5 (id=1117): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmmsg(r1, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/254, 0xfe}], 0x1}, 0xe}], 0x1, 0x40002132, 0x0) sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4004800) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000009c40)=@newtaction={0x100, 0x30, 0x400, 0x70bd26, 0x25dfdbff, {}, [{0xec, 0x1, [@m_ipt={0xe8, 0x17, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2d, 0x6, {0x0, 'nat\x00', 0x7, 0x400, "63b676"}}]}, {0x8d, 0x6, "80672230aec0ef88dd441da4d810702e7254de3dd2386a44281b18682dba2dd8d06ccbeca05ece7456dbf746f6c22ab4152cdb8f4af18d721ff28341ee61b417954a6e373a32c364ab4790eacf3030b92405c7e216d3ede7be5cfaa273f7140df0d7e0078483a1d9915888e22c9604e8b2783abc78b0ddad39ea2cb524ed18f5e0de294fbaeb0be354"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x240044d1}, 0xc800) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200002010203010902120008000000000904"], 0x0) 2.966352681s ago: executing program 3 (id=1118): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 4) 1.832924181s ago: executing program 1 (id=1119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) io_setup(0x6, &(0x7f0000001380)=0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000}) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0xfffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)=0x4000}}) ioctl$TIOCGPGRP(r3, 0x5437, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000400)=0xfffffffffffffffa) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x34, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x3}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0xc, 0x15, 0x0, 0x1, [@typed={0x8, 0x7a, 0x0, 0x0, @uid=r7}]}]}]}, 0x34}}, 0x0) io_submit(r2, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)=0x100) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYRES32=r5, @ANYRES8=r9, @ANYRES32=r11, @ANYRES32, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="20000000092800000800040005000000140014007866726d30000000000000000000000024000e000200000000000000ffffffffffffff7f0500000000000000020028070000000024000e00f922dc53000000000010000000000000080000000000000001040b0e0000000050001280080001006774700044000280080004000000000008000100", @ANYRES32, @ANYBLOB="08000100b3d13d7b8e5f3110e58c9c0a8eb314bcf05ffba91c5c0da58188aa7e3f5b624b196c17c348b888320f4d0e44269bec959e5f213a5da9a98c81215990a2f189b18214bdf75aee88fefd0d4f3d47a3b034fde96f748cfdf39b81167340a0799db3032472dbef079bab69abb519ef39e41b8daebe7e5e04615e63ee7dedac1c4bd2c034d9b9179d64ddee5a54bbee07e09e58d171a50857d54730fd4f6316301cafac69c347fd9ec61510b0456534b3700f5eddaad0e85693a9c526841c3990808f7d0dc9ab72c1491238809c50a1", @ANYRES32, @ANYBLOB="05000600080100", @ANYBLOB="08000100", @ANYBLOB="d400ca56059b0808936233bd14602ff800bd70a6cc11e68edbdf11000000e0fbf600000000", @ANYRES16=r1, @ANYRES32], 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x7) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000140)={"04f16c91", 0x0, 0x0, 0x0, 0x0, 0x0, "6f99e65664cdfb5f24cf398a3f7a92", '\x00', "246a8a96", "12caa207", ['\x00', "9d09b43157145fa9a5c56bcf", "2b4af2886e6d02546f0ad9b4", "000000010100"]}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) 1.832291214s ago: executing program 3 (id=1120): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x84}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000b9e000/0x2000)=nil, &(0x7f0000db2000/0x1000)=nil, 0x2000, 0x1}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$caif_seqpacket(0x25, 0x5, 0x3) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20500) r2 = socket$alg(0x26, 0x5, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000480)={0x50, 0x0, r5, {0x7, 0x1f, 0xd, 0x8, 0x3, 0xab25, 0xfff, 0x0, 0x0, 0x0, 0x2, 0x4}}, 0x50) r6 = socket$packet(0x11, 0x3, 0x300) sendto(r6, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.089319079s ago: executing program 4 (id=1121): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000004c0)={0x0, &(0x7f00000017c0)}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x40, 0x4e92fb9a, 0xb1, {{0x17, 0x4, 0x0, 0x3e, 0x5c, 0x66, 0x0, 0x7, 0x2f, 0x0, @empty, @broadcast, {[@noop, @ssrr={0x89, 0x7, 0xa5, [@broadcast]}, @cipso={0x86, 0x3e, 0x2, [{0x5, 0x7, "6d52a1e014"}, {0x6, 0x8, "a3095428106c"}, {0x3, 0xd, "fb4e124c366e517896d70a"}, {0x6, 0xe, "fabb33cb94aac62ff4398019"}, {0x5, 0xb, "a29c90b3689c726646"}, {0x6, 0x3, "d5"}]}, @noop]}}}}}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@loopback, @local, r1}, 0xc) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}}], 0x1, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x100000000) 581.017311ms ago: executing program 3 (id=1122): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x400080) read$qrtrtun(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000040000001200000000bde0383f000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRESHEX, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000800)={r1, &(0x7f00000006c0), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES64=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) shmget(0x1, 0x1000, 0x1000, &(0x7f00005f0000/0x1000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000087e050e200000000000010902240001000000000904000305030000000921040000012205000905810300"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000000000006ffffffffdd0000a22106258c12cf15f252097d53b433e8fa37d23be0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x100, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/27, 0x1b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='contention_end\x00'}, 0x18) accept$packet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000dc0)="2018e810c9213c5f907960933dbfab57fb35cdd271", 0x15}, {&(0x7f0000000f40)='~', 0x1}], 0x2, 0x0, 0x0, 0x40}}], 0x1, 0x40811) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x18, &(0x7f0000000180)={0x40, 0x4, 0x5, {0x5, 0x5, '\b\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 398.55291ms ago: executing program 1 (id=1123): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff000) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000300)=""/171) utimes(&(0x7f0000000180)='./file0\x00', 0x0) (fail_nth: 4) 310.346468ms ago: executing program 5 (id=1124): socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) eventfd(0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='ext2\x00', 0x8080, &(0x7f00000001c0)='discard') connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) r4 = socket$netlink(0x10, 0x3, 0xf4d4b9af29776607) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000000c0)=@generic={0x1, 0xfffffffffffffff7}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000300)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000480)=""/90, 0x5a}, {&(0x7f0000000240)=""/62, 0x3e}, {&(0x7f0000000500)=""/151, 0x97}], 0x3, &(0x7f00000005c0)}, 0x9}], 0x1, 0x22, &(0x7f0000000680)={0x77359400}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x100000b}, 0x1}) 0s ago: executing program 0 (id=1125): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000180)=0x2, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)='W', 0x1}, {&(0x7f00000002c0)="592eb75b3ad6fbbf04a8cdb64a61fce6", 0x10}, {&(0x7f0000000340)="14", 0x7fffefef}], 0x3}, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/44}, {&(0x7f00000004c0)=""/96}, {&(0x7f0000000400)=""/86}], 0x100000000000007b, 0x0, 0x1003) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) msgget(0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030109025c0002010030000904000001020d0000052406000105240000000d240f01fdfffffffdff08000006241a0000080905810397030000000904010000020d00000904010102020d0000090582031000004800090503"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) kernel console output (not intermixed with test programs): d RDB block 0 [ 353.633595][ T6298] nbd4: unable to read partition table [ 353.663871][ T6298] nbd4: partition table beyond EOD, truncated [ 353.706473][ T6298] ldm_validate_partition_table(): Disk read failed. [ 353.729854][ T6298] Dev nbd4: unable to read RDB block 0 [ 353.751865][ T6298] nbd4: unable to read partition table [ 353.763781][ T6298] nbd4: partition table beyond EOD, truncated [ 353.884117][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.861'. [ 353.909914][ T29] audit: type=1400 audit(1736888123.346:896): avc: denied { write } for pid=9405 comm="syz.3.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 356.742311][ T47] libceph: connect (1)[c::]:6789 error -101 [ 356.753579][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 356.897336][ T47] libceph: connect (1)[c::]:6789 error -101 [ 356.909584][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 356.967902][ T9436] netlink: 'syz.1.867': attribute type 3 has an invalid length. [ 356.976231][ T9436] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.867'. [ 357.297105][ T47] libceph: connect (1)[c::]:6789 error -101 [ 357.305224][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 357.325306][ T9423] ceph: No mds server is up or the cluster is laggy [ 357.881142][ T971] libceph: connect (1)[c::]:6789 error -101 [ 358.187555][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 358.694045][ T9450] nbd3: detected capacity change from 0 to 12 [ 358.712692][ T6298] block nbd3: Send control failed (result -89) [ 358.727129][ T6298] block nbd3: Request send failed, requeueing [ 358.762946][ T10] block nbd3: Dead connection, failed to find a fallback [ 358.770591][ T10] block nbd3: shutting down sockets [ 358.776104][ T10] blk_print_req_error: 40 callbacks suppressed [ 358.776118][ T10] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 358.791980][ T10] buffer_io_error: 40 callbacks suppressed [ 358.791995][ T10] Buffer I/O error on dev nbd3, logical block 0, async page read [ 358.810785][ T6298] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 358.850397][ T8] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 358.852116][ T6298] Buffer I/O error on dev nbd3, logical block 0, async page read [ 359.004483][ T6298] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.016552][ T6298] Buffer I/O error on dev nbd3, logical block 0, async page read [ 359.026141][ T6298] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.037958][ T6298] Buffer I/O error on dev nbd3, logical block 0, async page read [ 359.048738][ T6298] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.228444][ T9456] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 359.236820][ T9456] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 359.357667][ T6298] Buffer I/O error on dev nbd3, logical block 0, async page read [ 359.375341][ T6298] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.574081][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 359.588034][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 359.602259][ T6298] Buffer I/O error on dev nbd3, logical block 0, async page read [ 359.631312][ T6298] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.789980][ T6298] Buffer I/O error on dev nbd3, logical block 0, async page read [ 359.798273][ T6298] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.807399][ T6298] Buffer I/O error on dev nbd3, logical block 0, async page read [ 359.815778][ T6298] ldm_validate_partition_table(): Disk read failed. [ 359.823222][ T6298] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.832362][ T6298] Buffer I/O error on dev nbd3, logical block 0, async page read [ 359.840273][ T6298] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 359.849765][ T6298] Buffer I/O error on dev nbd3, logical block 0, async page read [ 359.857980][ T6298] Dev nbd3: unable to read RDB block 0 [ 359.863702][ T6298] nbd3: unable to read partition table [ 359.869473][ T6298] nbd3: partition table beyond EOD, truncated [ 359.881822][ T6298] ldm_validate_partition_table(): Disk read failed. [ 359.888918][ T6298] Dev nbd3: unable to read RDB block 0 [ 359.894651][ T6298] nbd3: unable to read partition table [ 359.900510][ T6298] nbd3: partition table beyond EOD, truncated [ 359.947020][ T8] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 359.956216][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.962232][ T9450] ldm_validate_partition_table(): Disk read failed. [ 359.964391][ T8] usb 1-1: Product: syz [ 359.975340][ T8] usb 1-1: Manufacturer: syz [ 359.979954][ T8] usb 1-1: SerialNumber: syz [ 359.993232][ T8] usb 1-1: config 0 descriptor?? [ 360.003501][ T9449] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 360.011263][ T9449] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 360.059752][ T9450] Dev nbd3: unable to read RDB block 0 [ 360.110374][ T9450] nbd3: unable to read partition table [ 360.149392][ T9450] nbd3: partition table beyond EOD, truncated [ 360.176188][ T47] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 360.288383][ T9449] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 360.304231][ T971] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 360.310500][ T9449] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 360.705003][ T9466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.777083][ T9468] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 360.796004][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 360.801906][ T47] usb 5-1: too many configurations: 118, using maximum allowed: 8 [ 360.813434][ T47] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 360.824002][ T47] usb 5-1: can't read configurations, error -61 [ 360.935028][ T971] usb 2-1: Using ep0 maxpacket: 8 [ 361.244957][ T47] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 361.283284][ T971] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.333737][ T971] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.365716][ T971] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 361.393439][ T971] usb 2-1: config 0 interface 0 has no altsetting 0 [ 361.405309][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 361.411026][ T47] usb 5-1: too many configurations: 118, using maximum allowed: 8 [ 361.424405][ T971] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 361.435308][ T47] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 361.462091][ T47] usb 5-1: can't read configurations, error -61 [ 361.469586][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.523145][ T47] usb usb5-port1: attempt power cycle [ 361.914419][ T971] usb 2-1: config 0 descriptor?? [ 361.949146][ T8] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 362.021353][ T8] usb 1-1: USB disconnect, device number 30 [ 362.250006][ T47] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 362.271889][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 362.277402][ T9477] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 362.278817][ T47] usb 5-1: too many configurations: 118, using maximum allowed: 8 [ 362.354651][ T9487] netlink: 'syz.5.879': attribute type 1 has an invalid length. [ 362.818831][ T47] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 362.826970][ T971] nintendo 0003:057E:200E.000B: unknown main item tag 0x0 [ 362.834260][ T47] usb 5-1: can't read configurations, error -61 [ 362.841127][ T971] nintendo 0003:057E:200E.000B: unknown main item tag 0x0 [ 362.849705][ T971] nintendo 0003:057E:200E.000B: hidraw0: USB HID v80.04 Device [HID 057e:200e] on usb-dummy_hcd.1-1/input0 [ 362.923453][ T971] nintendo 0003:057E:200E.000B: Failed charging grip handshake [ 362.931059][ T971] nintendo 0003:057E:200E.000B: Failed to initialize controller; ret=-110 [ 362.956064][ T971] nintendo 0003:057E:200E.000B: probe - fail = -110 [ 362.976870][ T47] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 362.995512][ T971] nintendo 0003:057E:200E.000B: probe with driver nintendo failed with error -110 [ 363.033954][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 363.056606][ T971] usb 2-1: USB disconnect, device number 21 [ 363.077311][ T47] usb 5-1: too many configurations: 118, using maximum allowed: 8 [ 363.089913][ T47] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 363.110031][ T47] usb 5-1: can't read configurations, error -61 [ 363.137829][ T47] usb usb5-port1: unable to enumerate USB device [ 364.176363][ T9503] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 364.176363][ T9503] program syz.5.883 not setting count and/or reply_len properly [ 364.505322][ T29] audit: type=1400 audit(1736888132.999:897): avc: denied { mount } for pid=9498 comm="syz.5.883" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 364.710679][ T9505] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 364.923704][ T9515] lo speed is unknown, defaulting to 1000 [ 364.930329][ T9515] virt_wifi0 speed is unknown, defaulting to 1000 [ 365.144234][ T9519] syz.4.886: attempt to access beyond end of device [ 365.144234][ T9519] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 365.157269][ T9519] EXT4-fs (nbd4): unable to read superblock [ 365.487990][ T29] audit: type=1400 audit(1736888134.178:898): avc: denied { unmount } for pid=7073 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 366.272528][ T9532] overlayfs: failed to resolve './file0': -2 [ 366.836211][ T9545] nbd0: detected capacity change from 0 to 12 [ 366.855382][ T6298] block nbd0: Send control failed (result -89) [ 367.046231][ T6298] block nbd0: Request send failed, requeueing [ 367.080545][ T5830] block nbd0: Receive control failed (result -32) [ 367.080968][ T10] block nbd0: Dead connection, failed to find a fallback [ 367.096081][ T10] block nbd0: shutting down sockets [ 367.101408][ T10] blk_print_req_error: 40 callbacks suppressed [ 367.101422][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 367.116952][ T10] buffer_io_error: 40 callbacks suppressed [ 367.116967][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 367.132393][ T6298] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 367.215365][ T6298] Buffer I/O error on dev nbd0, logical block 0, async page read [ 367.250039][ T6298] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 367.312463][ T6298] Buffer I/O error on dev nbd0, logical block 0, async page read [ 367.369381][ T6298] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 367.413539][ T6298] Buffer I/O error on dev nbd0, logical block 0, async page read [ 367.438222][ T6298] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 367.478678][ T6298] Buffer I/O error on dev nbd0, logical block 0, async page read [ 367.513203][ T6298] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 367.557587][ T6298] Buffer I/O error on dev nbd0, logical block 0, async page read [ 367.595247][ T6298] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 367.622004][ T6298] Buffer I/O error on dev nbd0, logical block 0, async page read [ 367.652018][ T6298] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 367.688724][ T6298] Buffer I/O error on dev nbd0, logical block 0, async page read [ 367.725541][ T6298] ldm_validate_partition_table(): Disk read failed. [ 367.732588][ T6298] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 367.797790][ T6298] Buffer I/O error on dev nbd0, logical block 0, async page read [ 367.841480][ T6298] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 367.885759][ T6298] Buffer I/O error on dev nbd0, logical block 0, async page read [ 367.926125][ T6298] Dev nbd0: unable to read RDB block 0 [ 367.954802][ T6298] nbd0: unable to read partition table [ 367.976016][ T6298] nbd0: partition table beyond EOD, truncated [ 367.992900][ T6298] ldm_validate_partition_table(): Disk read failed. [ 367.999835][ T6298] Dev nbd0: unable to read RDB block 0 [ 368.027582][ T6298] nbd0: unable to read partition table [ 368.071761][ T6298] nbd0: partition table beyond EOD, truncated [ 368.198017][ T9545] ldm_validate_partition_table(): Disk read failed. [ 368.258510][ T9545] Dev nbd0: unable to read RDB block 0 [ 368.264169][ T9545] nbd0: unable to read partition table [ 368.297663][ T9551] PKCS8: Unsupported PKCS#8 version [ 368.572244][ T9545] nbd0: partition table beyond EOD, truncated [ 369.194888][ T9559] netlink: 32 bytes leftover after parsing attributes in process `syz.1.893'. [ 369.776818][ T9570] netlink: 'syz.0.895': attribute type 3 has an invalid length. [ 369.784697][ T9570] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.895'. [ 370.318616][ T9576] FAULT_INJECTION: forcing a failure. [ 370.318616][ T9576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.378134][ T9576] CPU: 0 UID: 0 PID: 9576 Comm: syz.5.897 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 370.388769][ T9576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 370.398825][ T9576] Call Trace: [ 370.402096][ T9576] [ 370.405019][ T9576] dump_stack_lvl+0x16c/0x1f0 [ 370.409697][ T9576] should_fail_ex+0x497/0x5b0 [ 370.414384][ T9576] _copy_from_user+0x2e/0xd0 [ 370.418969][ T9576] do_fb_ioctl+0x1a0/0x7d0 [ 370.423382][ T9576] ? __pfx_do_fb_ioctl+0x10/0x10 [ 370.428317][ T9576] ? do_vfs_ioctl+0x513/0x1990 [ 370.433099][ T9576] ? selinux_file_ioctl+0x180/0x270 [ 370.438292][ T9576] fb_ioctl+0xe5/0x150 [ 370.442353][ T9576] ? __pfx_fb_ioctl+0x10/0x10 [ 370.447022][ T9576] __x64_sys_ioctl+0x190/0x200 [ 370.451783][ T9576] do_syscall_64+0xcd/0x250 [ 370.456282][ T9576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.462168][ T9576] RIP: 0033:0x7fb8c0985d29 [ 370.466570][ T9576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.486171][ T9576] RSP: 002b:00007fb8c183d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.494577][ T9576] RAX: ffffffffffffffda RBX: 00007fb8c0b75fa0 RCX: 00007fb8c0985d29 [ 370.502537][ T9576] RDX: 0000000020000000 RSI: 0000000000004605 RDI: 0000000000000003 [ 370.510513][ T9576] RBP: 00007fb8c183d090 R08: 0000000000000000 R09: 0000000000000000 [ 370.518494][ T9576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.526463][ T9576] R13: 0000000000000000 R14: 00007fb8c0b75fa0 R15: 00007ffcaa3e2c08 [ 370.534453][ T9576] [ 370.599226][ T47] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 370.687270][ T9583] overlayfs: failed to resolve './file0': -2 [ 370.769100][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 371.019161][ T47] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.081565][ T47] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.094910][ T47] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 371.116503][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 371.127533][ T47] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 371.138687][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.169450][ T47] usb 4-1: config 0 descriptor?? [ 371.622250][ T47] nintendo 0003:057E:200E.000C: unknown main item tag 0x0 [ 371.636290][ T47] nintendo 0003:057E:200E.000C: unknown main item tag 0x0 [ 371.654596][ T47] nintendo 0003:057E:200E.000C: hidraw0: USB HID v80.04 Device [HID 057e:200e] on usb-dummy_hcd.3-1/input0 [ 371.757105][ T47] nintendo 0003:057E:200E.000C: Failed charging grip handshake [ 371.781908][ T47] nintendo 0003:057E:200E.000C: Failed to initialize controller; ret=-110 [ 371.876274][ T9597] netlink: 'syz.5.902': attribute type 3 has an invalid length. [ 371.884266][ T9597] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.902'. [ 372.010778][ T47] nintendo 0003:057E:200E.000C: probe - fail = -110 [ 372.017510][ T47] nintendo 0003:057E:200E.000C: probe with driver nintendo failed with error -110 [ 372.743300][ T47] usb 4-1: USB disconnect, device number 24 [ 372.984395][ T9604] netlink: 48 bytes leftover after parsing attributes in process `syz.0.903'. [ 373.453716][ T29] audit: type=1400 audit(1736888141.624:899): avc: denied { ioctl } for pid=9620 comm="syz.1.909" path="socket:[24228]" dev="sockfs" ino=24228 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 373.669127][ T9625] FAULT_INJECTION: forcing a failure. [ 373.669127][ T9625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.774446][ T9625] CPU: 1 UID: 0 PID: 9625 Comm: syz.0.910 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 373.785113][ T9625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 373.795262][ T9625] Call Trace: [ 373.798547][ T9625] [ 373.801481][ T9625] dump_stack_lvl+0x16c/0x1f0 [ 373.806175][ T9625] should_fail_ex+0x497/0x5b0 [ 373.810870][ T9625] _copy_from_iter+0x2a1/0x1560 [ 373.815744][ T9625] ? trace_lock_acquire+0x14e/0x1f0 [ 373.820959][ T9625] ? __alloc_skb+0x1fe/0x380 [ 373.825566][ T9625] ? __pfx__copy_from_iter+0x10/0x10 [ 373.830866][ T9625] ? __virt_addr_valid+0x1a4/0x590 [ 373.835993][ T9625] ? __virt_addr_valid+0x5e/0x590 [ 373.841039][ T9625] ? __phys_addr_symbol+0x30/0x80 [ 373.846079][ T9625] ? __check_object_size+0x488/0x710 [ 373.851382][ T9625] netlink_sendmsg+0x813/0xd70 [ 373.856163][ T9625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.861470][ T9625] ____sys_sendmsg+0xaaf/0xc90 [ 373.866247][ T9625] ? copy_msghdr_from_user+0x10b/0x160 [ 373.871716][ T9625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.877024][ T9625] ___sys_sendmsg+0x135/0x1e0 [ 373.881713][ T9625] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.886933][ T9625] ? __pfx_lock_release+0x10/0x10 [ 373.891967][ T9625] ? trace_lock_acquire+0x14e/0x1f0 [ 373.897182][ T9625] ? __fget_files+0x206/0x3a0 [ 373.901846][ T9625] __sys_sendmsg+0x16e/0x220 [ 373.906420][ T9625] ? __pfx___sys_sendmsg+0x10/0x10 [ 373.911523][ T9625] do_syscall_64+0xcd/0x250 [ 373.916107][ T9625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.921996][ T9625] RIP: 0033:0x7fb3b5b85d29 [ 373.926406][ T9625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.946011][ T9625] RSP: 002b:00007fb3b69b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.954441][ T9625] RAX: ffffffffffffffda RBX: 00007fb3b5d75fa0 RCX: 00007fb3b5b85d29 [ 373.962415][ T9625] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 373.970378][ T9625] RBP: 00007fb3b69b6090 R08: 0000000000000000 R09: 0000000000000000 [ 373.978341][ T9625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.986298][ T9625] R13: 0000000000000000 R14: 00007fb3b5d75fa0 R15: 00007ffeacad21c8 [ 373.994282][ T9625] [ 374.031047][ T5867] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 374.807907][ T5867] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 374.821174][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.830780][ T5867] usb 2-1: Product: syz [ 374.840223][ T5867] usb 2-1: Manufacturer: syz [ 374.844954][ T5867] usb 2-1: SerialNumber: syz [ 374.852105][ T5867] usb 2-1: config 0 descriptor?? [ 374.956761][ T29] audit: type=1400 audit(1736888143.036:900): avc: denied { read write } for pid=9639 comm="syz.5.915" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 374.983963][ T9640] FAULT_INJECTION: forcing a failure. [ 374.983963][ T9640] name failslab, interval 1, probability 0, space 0, times 0 [ 374.997276][ T9640] CPU: 0 UID: 0 PID: 9640 Comm: syz.5.915 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 375.007871][ T9640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 375.017936][ T9640] Call Trace: [ 375.021204][ T9640] [ 375.024133][ T9640] dump_stack_lvl+0x16c/0x1f0 [ 375.028814][ T9640] should_fail_ex+0x497/0x5b0 [ 375.033526][ T9640] should_failslab+0xc2/0x120 [ 375.038217][ T9640] __kmalloc_noprof+0xcb/0x510 [ 375.042990][ T9640] io_cqring_event_overflow+0xcb/0x6f0 [ 375.048466][ T9640] io_req_cqe_overflow+0x101/0x1e0 [ 375.053592][ T9640] __io_submit_flush_completions+0x8d9/0x1c00 [ 375.059679][ T9640] io_submit_sqes+0xa1c/0x25c0 [ 375.064461][ T9640] __do_sys_io_uring_enter+0xd43/0x1620 [ 375.070009][ T9640] ? __fget_files+0x206/0x3a0 [ 375.074691][ T9640] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 375.080673][ T9640] ? fput+0x67/0x440 [ 375.084569][ T9640] ? ksys_write+0x1ba/0x250 [ 375.089064][ T9640] ? __pfx_ksys_write+0x10/0x10 [ 375.093925][ T9640] do_syscall_64+0xcd/0x250 [ 375.098429][ T9640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.104320][ T9640] RIP: 0033:0x7fb8c0985d29 [ 375.108729][ T9640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.128344][ T9640] RSP: 002b:00007fb8c183d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 375.136757][ T9640] RAX: ffffffffffffffda RBX: 00007fb8c0b75fa0 RCX: 00007fb8c0985d29 [ 375.144725][ T9640] RDX: 0000000000000000 RSI: 00000000000048e9 RDI: 0000000000000004 [ 375.152698][ T9640] RBP: 00007fb8c183d090 R08: 0000000000000000 R09: 0000000000000000 [ 375.160664][ T9640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.168631][ T9640] R13: 0000000000000000 R14: 00007fb8c0b75fa0 R15: 00007ffcaa3e2c08 [ 375.176611][ T9640] [ 375.202981][ T5867] usb 2-1: Firmware version (0.0) predates our first public release. [ 375.208139][ T29] audit: type=1400 audit(1736888143.036:901): avc: denied { open } for pid=9639 comm="syz.5.915" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 375.215839][ T5867] usb 2-1: Please update to version 0.2 or newer [ 375.527673][ T29] audit: type=1400 audit(1736888143.569:902): avc: denied { setopt } for pid=9646 comm="syz.5.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 375.658727][ T9653] FAULT_INJECTION: forcing a failure. [ 375.658727][ T9653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.728806][ T9653] CPU: 1 UID: 0 PID: 9653 Comm: syz.4.918 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 375.739420][ T9653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 375.749496][ T9653] Call Trace: [ 375.752759][ T9653] [ 375.755675][ T9653] dump_stack_lvl+0x16c/0x1f0 [ 375.760339][ T9653] should_fail_ex+0x497/0x5b0 [ 375.765015][ T9653] _copy_from_iter+0x2a1/0x1560 [ 375.769853][ T9653] ? trace_lock_acquire+0x14e/0x1f0 [ 375.775040][ T9653] ? __alloc_skb+0x1fe/0x380 [ 375.779638][ T9653] ? __pfx__copy_from_iter+0x10/0x10 [ 375.784914][ T9653] ? __virt_addr_valid+0x1a4/0x590 [ 375.790021][ T9653] ? __virt_addr_valid+0x5e/0x590 [ 375.795042][ T9653] ? __phys_addr_symbol+0x30/0x80 [ 375.800050][ T9653] ? __check_object_size+0x488/0x710 [ 375.805321][ T9653] netlink_sendmsg+0x813/0xd70 [ 375.810096][ T9653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.815369][ T9653] ____sys_sendmsg+0xaaf/0xc90 [ 375.820122][ T9653] ? copy_msghdr_from_user+0x10b/0x160 [ 375.825579][ T9653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.830857][ T9653] ___sys_sendmsg+0x135/0x1e0 [ 375.835516][ T9653] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.840700][ T9653] ? __pfx_lock_release+0x10/0x10 [ 375.845729][ T9653] ? trace_lock_acquire+0x14e/0x1f0 [ 375.850923][ T9653] ? __fget_files+0x206/0x3a0 [ 375.855594][ T9653] __sys_sendmsg+0x16e/0x220 [ 375.860184][ T9653] ? __pfx___sys_sendmsg+0x10/0x10 [ 375.865299][ T9653] do_syscall_64+0xcd/0x250 [ 375.869793][ T9653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.875671][ T9653] RIP: 0033:0x7fc386585d29 [ 375.880077][ T9653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.899685][ T9653] RSP: 002b:00007fc387404038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.908118][ T9653] RAX: ffffffffffffffda RBX: 00007fc386775fa0 RCX: 00007fc386585d29 [ 375.916110][ T9653] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000003 [ 375.924080][ T9653] RBP: 00007fc387404090 R08: 0000000000000000 R09: 0000000000000000 [ 375.932041][ T9653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.940018][ T9653] R13: 0000000000000000 R14: 00007fc386775fa0 R15: 00007ffec6f5a1c8 [ 375.948008][ T9653] [ 376.018216][ T5867] usb 2-1: USB disconnect, device number 22 [ 376.208150][ T901] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 376.309104][ T971] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 376.521978][ T971] usb 6-1: Using ep0 maxpacket: 32 [ 376.534792][ T971] usb 6-1: config 10 has an invalid interface number: 80 but max is 3 [ 376.950285][ T901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.961311][ T901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.971467][ T901] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 376.984969][ T971] usb 6-1: config 10 has an invalid interface number: 4 but max is 3 [ 377.003061][ T971] usb 6-1: config 10 has an invalid interface number: 205 but max is 3 [ 377.024499][ T971] usb 6-1: config 10 has an invalid interface number: 74 but max is 3 [ 377.034959][ T901] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 377.055421][ T901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.086961][ T901] usb 4-1: config 0 descriptor?? [ 377.153308][ T971] usb 6-1: config 10 has an invalid descriptor of length 198, skipping remainder of the config [ 377.163804][ T971] usb 6-1: config 10 has no interface number 0 [ 377.169991][ T971] usb 6-1: config 10 has no interface number 1 [ 377.176419][ T971] usb 6-1: config 10 has no interface number 2 [ 377.182590][ T971] usb 6-1: config 10 has no interface number 3 [ 377.188924][ T971] usb 6-1: config 10 interface 80 altsetting 5 bulk endpoint 0xE has invalid maxpacket 967 [ 377.199387][ T971] usb 6-1: config 10 interface 80 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 377.210734][ T971] usb 6-1: config 10 interface 80 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 377.220814][ T971] usb 6-1: config 10 interface 80 altsetting 5 bulk endpoint 0x9 has invalid maxpacket 0 [ 377.230974][ T971] usb 6-1: config 10 interface 4 altsetting 113 has a duplicate endpoint with address 0x1, skipping [ 377.241959][ T971] usb 6-1: config 10 interface 4 altsetting 113 has a duplicate endpoint with address 0x5, skipping [ 377.253017][ T971] usb 6-1: config 10 interface 4 altsetting 113 has an invalid descriptor for endpoint zero, skipping [ 377.264171][ T971] usb 6-1: config 10 interface 205 altsetting 12 has a duplicate endpoint with address 0x1, skipping [ 377.275228][ T971] usb 6-1: config 10 interface 205 altsetting 12 has a duplicate endpoint with address 0x9, skipping [ 377.286326][ T971] usb 6-1: config 10 interface 74 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 377.299459][ T971] usb 6-1: config 10 interface 80 has no altsetting 0 [ 377.306360][ T971] usb 6-1: config 10 interface 4 has no altsetting 0 [ 377.313095][ T971] usb 6-1: config 10 interface 205 has no altsetting 0 [ 377.321059][ T971] usb 6-1: config 10 interface 74 has no altsetting 0 [ 377.963239][ T9674] syz.3.913: attempt to access beyond end of device [ 377.963239][ T9674] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 377.982031][ T9674] syz.3.913: attempt to access beyond end of device [ 377.982031][ T9674] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 377.995785][ T9674] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 378.011491][ T9674] syz.3.913: attempt to access beyond end of device [ 378.011491][ T9674] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 378.025047][ T9674] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 378.034818][ T9674] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 378.042860][ T9674] UDF-fs: Scanning with blocksize 1024 failed [ 378.055930][ T9674] syz.3.913: attempt to access beyond end of device [ 378.055930][ T9674] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 378.090104][ T9674] syz.3.913: attempt to access beyond end of device [ 378.090104][ T9674] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 378.104369][ T9674] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 378.118426][ T9674] syz.3.913: attempt to access beyond end of device [ 378.118426][ T9674] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 378.131855][ T9674] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 378.141758][ T9674] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 378.149914][ T9674] UDF-fs: Scanning with blocksize 2048 failed [ 378.158626][ T9674] syz.3.913: attempt to access beyond end of device [ 378.158626][ T9674] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 378.173670][ T9674] syz.3.913: attempt to access beyond end of device [ 378.173670][ T9674] nbd3: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 378.189760][ T9674] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 378.201882][ T9674] syz.3.913: attempt to access beyond end of device [ 378.201882][ T9674] nbd3: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 378.215934][ T9674] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 378.227234][ T9674] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 378.235442][ T9674] UDF-fs: Scanning with blocksize 4096 failed [ 378.241805][ T9674] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 378.360409][ T901] usbhid 4-1:0.0: can't add hid device: -71 [ 378.366709][ T901] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 378.387334][ T901] usb 4-1: USB disconnect, device number 25 [ 378.424916][ T9680] FAULT_INJECTION: forcing a failure. [ 378.424916][ T9680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.439176][ T9680] CPU: 0 UID: 0 PID: 9680 Comm: syz.4.927 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 378.449816][ T9680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 378.459866][ T9680] Call Trace: [ 378.463181][ T9680] [ 378.466100][ T9680] dump_stack_lvl+0x16c/0x1f0 [ 378.470782][ T9680] should_fail_ex+0x497/0x5b0 [ 378.475457][ T9680] _copy_to_user+0x32/0xd0 [ 378.479863][ T9680] simple_read_from_buffer+0xd0/0x160 [ 378.485235][ T9680] proc_fail_nth_read+0x198/0x270 [ 378.490257][ T9680] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.495808][ T9680] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.501348][ T9680] vfs_read+0x1df/0xbe0 [ 378.505496][ T9680] ? __fget_files+0x1fc/0x3a0 [ 378.510169][ T9680] ? __pfx___mutex_lock+0x10/0x10 [ 378.515199][ T9680] ? __pfx_vfs_read+0x10/0x10 [ 378.519890][ T9680] ? __fget_files+0x206/0x3a0 [ 378.524574][ T9680] ksys_read+0x12b/0x250 [ 378.528809][ T9680] ? __pfx_ksys_read+0x10/0x10 [ 378.533568][ T9680] do_syscall_64+0xcd/0x250 [ 378.538079][ T9680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.543987][ T9680] RIP: 0033:0x7fc38658473c [ 378.548417][ T9680] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 378.568032][ T9680] RSP: 002b:00007fc387404030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 378.576442][ T9680] RAX: ffffffffffffffda RBX: 00007fc386775fa0 RCX: 00007fc38658473c [ 378.584429][ T9680] RDX: 000000000000000f RSI: 00007fc3874040a0 RDI: 0000000000000004 [ 378.592394][ T9680] RBP: 00007fc387404090 R08: 0000000000000000 R09: 0000000000000000 [ 378.600355][ T9680] R10: 000000000000002a R11: 0000000000000246 R12: 0000000000000001 [ 378.608333][ T9680] R13: 0000000000000000 R14: 00007fc386775fa0 R15: 00007ffec6f5a1c8 [ 378.616329][ T9680] [ 378.619418][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.703392][ T9682] nbd1: detected capacity change from 0 to 12 [ 378.710698][ T5820] block nbd1: Send control failed (result -89) [ 378.720482][ T5820] block nbd1: Request send failed, requeueing [ 378.748362][ T10] block nbd1: Dead connection, failed to find a fallback [ 378.756687][ T10] block nbd1: shutting down sockets [ 378.761958][ T10] blk_print_req_error: 40 callbacks suppressed [ 378.761970][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 378.778130][ T10] buffer_io_error: 40 callbacks suppressed [ 378.778144][ T10] Buffer I/O error on dev nbd1, logical block 0, async page read [ 378.805716][ T5820] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 378.850625][ T5820] Buffer I/O error on dev nbd1, logical block 0, async page read [ 378.858698][ T5820] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 378.881390][ T5820] Buffer I/O error on dev nbd1, logical block 0, async page read [ 378.892245][ T5820] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 378.904669][ T5820] Buffer I/O error on dev nbd1, logical block 0, async page read [ 378.921044][ T5820] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 378.935629][ T5820] Buffer I/O error on dev nbd1, logical block 0, async page read [ 379.688604][ T5820] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.709692][ T971] usb 6-1: string descriptor 0 read error: -71 [ 379.715981][ T971] usb 6-1: New USB device found, idVendor=1a8d, idProduct=1006, bcdDevice=eb.3b [ 379.733324][ T971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.742953][ T5820] Buffer I/O error on dev nbd1, logical block 0, async page read [ 379.750971][ T5820] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.760511][ T5820] Buffer I/O error on dev nbd1, logical block 0, async page read [ 379.768803][ T5820] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.778575][ T5820] Buffer I/O error on dev nbd1, logical block 0, async page read [ 379.787010][ T5820] ldm_validate_partition_table(): Disk read failed. [ 379.793926][ T5820] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.803196][ T5820] Buffer I/O error on dev nbd1, logical block 0, async page read [ 379.811197][ T5820] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.820606][ T5820] Buffer I/O error on dev nbd1, logical block 0, async page read [ 379.825009][ T971] usb 6-1: can't set config #10, error -71 [ 379.828841][ T5820] Dev nbd1: unable to read RDB block 0 [ 379.840146][ T5820] nbd1: unable to read partition table [ 379.845912][ T5820] nbd1: partition table beyond EOD, truncated [ 379.882487][ T971] usb 6-1: USB disconnect, device number 19 [ 379.944144][ T5820] ldm_validate_partition_table(): Disk read failed. [ 379.953214][ T5820] Dev nbd1: unable to read RDB block 0 [ 379.963612][ T5820] nbd1: unable to read partition table [ 380.052468][ T5820] nbd1: partition table beyond EOD, truncated [ 380.100228][ T901] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 380.750530][ T9685] ldm_validate_partition_table(): Disk read failed. [ 380.757797][ T9685] Dev nbd1: unable to read RDB block 0 [ 380.763654][ T9685] nbd1: unable to read partition table [ 380.769924][ T9685] nbd1: partition table beyond EOD, truncated [ 380.972473][ T901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 380.984559][ T901] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 380.994191][ T901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.015781][ T901] usb 5-1: Product: syz [ 381.020010][ T901] usb 5-1: Manufacturer: syz [ 381.037421][ T901] usb 5-1: SerialNumber: syz [ 381.049287][ T901] usb 5-1: config 0 descriptor?? [ 381.075719][ T29] audit: type=1400 audit(1736888148.751:903): avc: denied { read } for pid=9700 comm="syz.5.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 381.129531][ T47] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 381.141123][ T29] audit: type=1400 audit(1736888148.826:904): avc: denied { shutdown } for pid=9700 comm="syz.5.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 381.398710][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.409608][ T47] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 381.418620][ T47] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 381.427727][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.437419][ T47] usb 4-1: config 0 descriptor?? [ 381.538441][ T9688] bond1: entered promiscuous mode [ 381.546146][ T9688] bond1: entered allmulticast mode [ 381.551847][ T9688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.752176][ T9688] bond1 (unregistering): Released all slaves [ 381.859766][ T901] usb 5-1: USB disconnect, device number 26 [ 381.972484][ T47] usb 4-1: Direct firmware load for ar3k/AthrBT_0xd78d735d.dfu failed with error -2 [ 381.985799][ T47] usb 4-1: Falling back to sysfs fallback for: ar3k/AthrBT_0xd78d735d.dfu [ 382.182329][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 382.438215][ T9697] macsec0: entered promiscuous mode [ 383.277817][ T9733] FAULT_INJECTION: forcing a failure. [ 383.277817][ T9733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.294732][ T9733] CPU: 0 UID: 0 PID: 9733 Comm: syz.1.941 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 383.305364][ T9733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 383.315427][ T9733] Call Trace: [ 383.318684][ T9733] [ 383.321617][ T9733] dump_stack_lvl+0x16c/0x1f0 [ 383.326302][ T9733] should_fail_ex+0x497/0x5b0 [ 383.330967][ T9733] _copy_from_iter+0x2a1/0x1560 [ 383.335821][ T9733] ? trace_lock_acquire+0x14e/0x1f0 [ 383.341051][ T9733] ? __alloc_skb+0x1fe/0x380 [ 383.345682][ T9733] ? __pfx__copy_from_iter+0x10/0x10 [ 383.350987][ T9733] ? __virt_addr_valid+0x1a4/0x590 [ 383.356122][ T9733] ? __virt_addr_valid+0x5e/0x590 [ 383.361171][ T9733] ? __phys_addr_symbol+0x30/0x80 [ 383.366197][ T9733] ? __check_object_size+0x488/0x710 [ 383.371479][ T9733] netlink_sendmsg+0x813/0xd70 [ 383.376250][ T9733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.381545][ T9733] ____sys_sendmsg+0xaaf/0xc90 [ 383.386307][ T9733] ? copy_msghdr_from_user+0x10b/0x160 [ 383.391765][ T9733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.397056][ T9733] ___sys_sendmsg+0x135/0x1e0 [ 383.401739][ T9733] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.406941][ T9733] ? __pfx_lock_release+0x10/0x10 [ 383.411976][ T9733] ? trace_lock_acquire+0x14e/0x1f0 [ 383.417195][ T9733] ? __fget_files+0x206/0x3a0 [ 383.421876][ T9733] __sys_sendmsg+0x16e/0x220 [ 383.426452][ T9733] ? __pfx___sys_sendmsg+0x10/0x10 [ 383.431558][ T9733] do_syscall_64+0xcd/0x250 [ 383.436054][ T9733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.441952][ T9733] RIP: 0033:0x7f4287785d29 [ 383.446377][ T9733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.465976][ T9733] RSP: 002b:00007f42885a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.474403][ T9733] RAX: ffffffffffffffda RBX: 00007f4287975fa0 RCX: 00007f4287785d29 [ 383.482390][ T9733] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 383.490362][ T9733] RBP: 00007f42885a7090 R08: 0000000000000000 R09: 0000000000000000 [ 383.498319][ T9733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.506285][ T9733] R13: 0000000000000000 R14: 00007f4287975fa0 R15: 00007ffc872d2638 [ 383.514281][ T9733] [ 383.652518][ T901] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 383.812903][ T901] usb 5-1: Using ep0 maxpacket: 32 [ 383.820071][ T901] usb 5-1: config 10 has an invalid interface number: 80 but max is 3 [ 383.829552][ T901] usb 5-1: config 10 has an invalid interface number: 4 but max is 3 [ 383.839270][ T901] usb 5-1: config 10 has an invalid interface number: 205 but max is 3 [ 383.848077][ T901] usb 5-1: config 10 has an invalid interface number: 74 but max is 3 [ 383.932505][ T9746] syz.1.945: attempt to access beyond end of device [ 383.932505][ T9746] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 383.945694][ T9746] EXT4-fs (nbd1): unable to read superblock [ 383.957450][ T9744] nbd5: detected capacity change from 0 to 12 [ 384.377015][ T5820] block nbd5: Send control failed (result -89) [ 384.450198][ T901] usb 5-1: config 10 has an invalid descriptor of length 198, skipping remainder of the config [ 384.460937][ T901] usb 5-1: config 10 has no interface number 0 [ 384.467513][ T901] usb 5-1: config 10 has no interface number 1 [ 384.474026][ T901] usb 5-1: config 10 has no interface number 2 [ 384.480566][ T901] usb 5-1: config 10 has no interface number 3 [ 384.487204][ T901] usb 5-1: config 10 interface 80 altsetting 5 bulk endpoint 0xE has invalid maxpacket 967 [ 384.497554][ T901] usb 5-1: config 10 interface 80 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 384.507912][ T5820] block nbd5: Request send failed, requeueing [ 384.508991][ T901] usb 5-1: config 10 interface 80 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 384.525215][ T901] usb 5-1: config 10 interface 80 altsetting 5 bulk endpoint 0x9 has invalid maxpacket 0 [ 384.568952][ T901] usb 5-1: config 10 interface 4 altsetting 113 has a duplicate endpoint with address 0x1, skipping [ 384.580108][ T901] usb 5-1: config 10 interface 4 altsetting 113 has a duplicate endpoint with address 0x5, skipping [ 384.590944][ T901] usb 5-1: config 10 interface 4 altsetting 113 has an invalid descriptor for endpoint zero, skipping [ 384.602048][ T901] usb 5-1: config 10 interface 205 altsetting 12 has a duplicate endpoint with address 0x1, skipping [ 384.613018][ T901] usb 5-1: config 10 interface 205 altsetting 12 has a duplicate endpoint with address 0x9, skipping [ 384.624072][ T901] usb 5-1: config 10 interface 74 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 384.637181][ T901] usb 5-1: config 10 interface 80 has no altsetting 0 [ 384.643969][ T901] usb 5-1: config 10 interface 4 has no altsetting 0 [ 384.650720][ T901] usb 5-1: config 10 interface 205 has no altsetting 0 [ 384.657635][ T901] usb 5-1: config 10 interface 74 has no altsetting 0 [ 384.865606][ T9751] FAULT_INJECTION: forcing a failure. [ 384.865606][ T9751] name fail_futex, interval 1, probability 0, space 0, times 1 [ 384.878523][ T9751] CPU: 1 UID: 0 PID: 9751 Comm: syz.0.946 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 384.889119][ T9751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 384.899195][ T9751] Call Trace: [ 384.902475][ T9751] [ 384.905409][ T9751] dump_stack_lvl+0x16c/0x1f0 [ 384.910103][ T9751] should_fail_ex+0x497/0x5b0 [ 384.914790][ T9751] ? __lock_acquire+0x15a9/0x3c40 [ 384.919820][ T9751] get_futex_key+0x4a3/0x1000 [ 384.924514][ T9751] ? __pfx_get_futex_key+0x10/0x10 [ 384.929644][ T9751] futex_wake+0xe8/0x4e0 [ 384.933897][ T9751] ? __pfx_futex_wake+0x10/0x10 [ 384.938759][ T9751] ? find_held_lock+0x2d/0x110 [ 384.943539][ T9751] do_futex+0x1e5/0x350 [ 384.947702][ T9751] ? __pfx_do_futex+0x10/0x10 [ 384.952386][ T9751] ? __might_fault+0xe3/0x190 [ 384.957070][ T9751] ? __might_fault+0xe3/0x190 [ 384.961758][ T9751] mm_release+0x24e/0x300 [ 384.966094][ T9751] do_exit+0x886/0x2d70 [ 384.970272][ T9751] ? get_signal+0x8f7/0x26c0 [ 384.974874][ T9751] ? __pfx_do_exit+0x10/0x10 [ 384.979472][ T9751] ? do_raw_spin_lock+0x12d/0x2c0 [ 384.984517][ T9751] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 384.989936][ T9751] do_group_exit+0xd3/0x2a0 [ 384.994557][ T9751] get_signal+0x24ed/0x26c0 [ 384.999079][ T9751] ? vfs_write+0x306/0x1150 [ 385.003630][ T9751] ? __pfx_get_signal+0x10/0x10 [ 385.008585][ T9751] arch_do_signal_or_restart+0x90/0x7e0 [ 385.014153][ T9751] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 385.020326][ T9751] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 385.025885][ T9751] syscall_exit_to_user_mode+0x150/0x2a0 [ 385.031533][ T9751] do_syscall_64+0xda/0x250 [ 385.036055][ T9751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.041961][ T9751] RIP: 0033:0x7fb3b5b85d29 [ 385.046383][ T9751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.066006][ T9751] RSP: 002b:00007fb3b6974038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 385.074436][ T9751] RAX: fffffffffffffe00 RBX: 00007fb3b5d76160 RCX: 00007fb3b5b85d29 [ 385.082409][ T9751] RDX: 0000000000000001 RSI: 0000000020007d00 RDI: 0000000000000005 [ 385.090409][ T9751] RBP: 00007fb3b6974090 R08: 0000000000000000 R09: 0000000000000000 [ 385.098382][ T9751] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.106355][ T9751] R13: 0000000000000000 R14: 00007fb3b5d76160 R15: 00007ffeacad21c8 [ 385.114355][ T9751] [ 385.147983][ T5830] block nbd5: Receive control failed (result -32) [ 385.218530][ T10] block nbd5: Dead connection, failed to find a fallback [ 385.225768][ T10] block nbd5: shutting down sockets [ 385.231014][ T10] blk_print_req_error: 40 callbacks suppressed [ 385.231028][ T10] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 385.246720][ T10] buffer_io_error: 40 callbacks suppressed [ 385.246732][ T10] Buffer I/O error on dev nbd5, logical block 0, async page read [ 385.267475][ T5820] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 385.279632][ T5820] Buffer I/O error on dev nbd5, logical block 0, async page read [ 385.287583][ T5820] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 385.296782][ T5820] Buffer I/O error on dev nbd5, logical block 0, async page read [ 385.303225][ T29] audit: type=1400 audit(1736888152.718:905): avc: denied { read } for pid=9753 comm="syz.1.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 385.304739][ T5820] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 385.335126][ T5820] Buffer I/O error on dev nbd5, logical block 0, async page read [ 385.343110][ T5820] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 385.352229][ T5820] Buffer I/O error on dev nbd5, logical block 0, async page read [ 385.360208][ T5820] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 385.369334][ T5820] Buffer I/O error on dev nbd5, logical block 0, async page read [ 385.377321][ T5820] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 385.386449][ T5820] Buffer I/O error on dev nbd5, logical block 0, async page read [ 385.394434][ T5820] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 385.403603][ T5820] Buffer I/O error on dev nbd5, logical block 0, async page read [ 385.411869][ T5820] ldm_validate_partition_table(): Disk read failed. [ 385.418663][ T5820] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 385.428266][ T5820] Buffer I/O error on dev nbd5, logical block 0, async page read [ 385.436193][ T5820] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 385.445329][ T5820] Buffer I/O error on dev nbd5, logical block 0, async page read [ 385.453563][ T5820] Dev nbd5: unable to read RDB block 0 [ 385.459488][ T5820] nbd5: unable to read partition table [ 385.465490][ T5820] nbd5: partition table beyond EOD, truncated [ 385.474479][ T5820] ldm_validate_partition_table(): Disk read failed. [ 385.481561][ T5820] Dev nbd5: unable to read RDB block 0 [ 385.487398][ T5820] nbd5: unable to read partition table [ 385.493205][ T5820] nbd5: partition table beyond EOD, truncated [ 385.572044][ T29] audit: type=1326 audit(1736888152.951:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9759 comm="syz.1.950" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4287785d29 code=0x0 [ 385.651374][ T9765] FAULT_INJECTION: forcing a failure. [ 385.651374][ T9765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.671421][ T9765] CPU: 1 UID: 0 PID: 9765 Comm: syz.5.952 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 385.682047][ T9765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 385.692116][ T9765] Call Trace: [ 385.695400][ T9765] [ 385.698335][ T9765] dump_stack_lvl+0x16c/0x1f0 [ 385.703034][ T9765] should_fail_ex+0x497/0x5b0 [ 385.707736][ T9765] _copy_from_iter+0x2a1/0x1560 [ 385.712603][ T9765] ? trace_lock_acquire+0x14e/0x1f0 [ 385.717826][ T9765] ? __alloc_skb+0x1fe/0x380 [ 385.722435][ T9765] ? __pfx__copy_from_iter+0x10/0x10 [ 385.727740][ T9765] ? __virt_addr_valid+0x1a4/0x590 [ 385.732967][ T9765] ? __virt_addr_valid+0x5e/0x590 [ 385.738011][ T9765] ? __phys_addr_symbol+0x30/0x80 [ 385.743056][ T9765] ? __check_object_size+0x488/0x710 [ 385.748357][ T9765] netlink_sendmsg+0x813/0xd70 [ 385.753145][ T9765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.758439][ T9765] ____sys_sendmsg+0xaaf/0xc90 [ 385.763204][ T9765] ? copy_msghdr_from_user+0x10b/0x160 [ 385.768653][ T9765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.773936][ T9765] ___sys_sendmsg+0x135/0x1e0 [ 385.778606][ T9765] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.783816][ T9765] ? __pfx_lock_release+0x10/0x10 [ 385.788922][ T9765] ? trace_lock_acquire+0x14e/0x1f0 [ 385.794126][ T9765] ? __fget_files+0x206/0x3a0 [ 385.798817][ T9765] __sys_sendmsg+0x16e/0x220 [ 385.803409][ T9765] ? __pfx___sys_sendmsg+0x10/0x10 [ 385.808547][ T9765] do_syscall_64+0xcd/0x250 [ 385.813049][ T9765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.818943][ T9765] RIP: 0033:0x7fb8c0985d29 [ 385.823348][ T9765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.842952][ T9765] RSP: 002b:00007fb8c183d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.851361][ T9765] RAX: ffffffffffffffda RBX: 00007fb8c0b75fa0 RCX: 00007fb8c0985d29 [ 385.859334][ T9765] RDX: 0000000024000004 RSI: 00000000200000c0 RDI: 0000000000000003 [ 385.867302][ T9765] RBP: 00007fb8c183d090 R08: 0000000000000000 R09: 0000000000000000 [ 385.875263][ T9765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.883227][ T9765] R13: 0000000000000000 R14: 00007fb8c0b75fa0 R15: 00007ffcaa3e2c08 [ 385.891199][ T9765] [ 385.897600][ T9768] FAULT_INJECTION: forcing a failure. [ 385.897600][ T9768] name failslab, interval 1, probability 0, space 0, times 0 [ 385.911823][ T9768] CPU: 1 UID: 0 PID: 9768 Comm: syz.1.950 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 385.922439][ T9768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 385.932511][ T9768] Call Trace: [ 385.935802][ T9768] [ 385.938743][ T9768] dump_stack_lvl+0x16c/0x1f0 [ 385.943447][ T9768] should_fail_ex+0x497/0x5b0 [ 385.948141][ T9768] ? fs_reclaim_acquire+0xae/0x150 [ 385.953264][ T9768] should_failslab+0xc2/0x120 [ 385.957957][ T9768] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 385.963344][ T9768] ? security_file_alloc+0x34/0x2b0 [ 385.968563][ T9768] security_file_alloc+0x34/0x2b0 [ 385.973607][ T9768] init_file+0x93/0x480 [ 385.977793][ T9768] alloc_empty_file+0x91/0x1e0 [ 385.982582][ T9768] path_openat+0xe1/0x2d60 [ 385.987016][ T9768] ? hlock_class+0x4e/0x130 [ 385.991524][ T9768] ? __lock_acquire+0x15a9/0x3c40 [ 385.996564][ T9768] ? __pfx_path_openat+0x10/0x10 [ 386.001541][ T9768] ? __pfx___lock_acquire+0x10/0x10 [ 386.006738][ T9768] ? lock_acquire.part.0+0x11b/0x380 [ 386.012036][ T9768] ? find_held_lock+0x2d/0x110 [ 386.016809][ T9768] do_filp_open+0x20c/0x470 [ 386.021310][ T9768] ? __pfx_do_filp_open+0x10/0x10 [ 386.026326][ T9768] ? find_held_lock+0x2d/0x110 [ 386.031103][ T9768] ? alloc_fd+0x41f/0x760 [ 386.035431][ T9768] do_sys_openat2+0x17a/0x1e0 [ 386.040105][ T9768] ? __pfx_do_sys_openat2+0x10/0x10 [ 386.045302][ T9768] ? __fget_files+0x206/0x3a0 [ 386.049981][ T9768] __x64_sys_openat+0x175/0x210 [ 386.054830][ T9768] ? __pfx___x64_sys_openat+0x10/0x10 [ 386.060196][ T9768] ? ksys_write+0x1ba/0x250 [ 386.064696][ T9768] do_syscall_64+0xcd/0x250 [ 386.069197][ T9768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.075172][ T9768] RIP: 0033:0x7f4287784690 [ 386.079582][ T9768] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 386.099186][ T9768] RSP: 002b:00007f428856cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 386.107592][ T9768] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007f4287784690 [ 386.115558][ T9768] RDX: 0000000000101301 RSI: 00007f428856cc10 RDI: 00000000ffffff9c [ 386.123523][ T9768] RBP: 00007f428856cc10 R08: 0000000000000000 R09: 0000000000000000 [ 386.131480][ T9768] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 386.139457][ T9768] R13: 0000000000000001 R14: 00007f4287976080 R15: 00007ffc872d2638 [ 386.147445][ T9768] [ 387.156854][ T901] usb 5-1: string descriptor 0 read error: -71 [ 387.176305][ T901] usb 5-1: New USB device found, idVendor=1a8d, idProduct=1006, bcdDevice=eb.3b [ 387.202939][ T901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.249997][ T901] usb 5-1: can't set config #10, error -71 [ 387.272099][ T901] usb 5-1: USB disconnect, device number 27 [ 387.312528][ T9779] syzkaller1: entered promiscuous mode [ 387.318091][ T9779] syzkaller1: entered allmulticast mode [ 387.323234][ T9780] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 387.756487][ T5921] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 388.677600][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 388.918726][ T5921] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 388.927210][ T5921] usb 2-1: config 179 has no interface number 0 [ 388.939938][ T5921] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 389.005810][ T5921] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 389.096554][ T5921] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 389.297140][ T5921] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 389.315180][ T5921] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 389.340155][ T5921] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 389.349230][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.360517][ T9778] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 391.819593][ T9816] FAULT_INJECTION: forcing a failure. [ 391.819593][ T9816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.833045][ T9816] CPU: 0 UID: 0 PID: 9816 Comm: syz.0.965 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 391.843677][ T9816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 391.853747][ T9816] Call Trace: [ 391.857041][ T9816] [ 391.859976][ T9816] dump_stack_lvl+0x16c/0x1f0 [ 391.864684][ T9816] should_fail_ex+0x497/0x5b0 [ 391.869395][ T9816] _copy_from_iter+0x2a1/0x1560 [ 391.869476][ T971] usb 2-1: USB disconnect, device number 23 [ 391.874256][ T9816] ? trace_lock_acquire+0x14e/0x1f0 [ 391.874288][ T9816] ? __alloc_skb+0x1fe/0x380 [ 391.874314][ T9816] ? __pfx__copy_from_iter+0x10/0x10 [ 391.874338][ T9816] ? __virt_addr_valid+0x1a4/0x590 [ 391.874367][ T9816] ? __virt_addr_valid+0x5e/0x590 [ 391.874388][ T9816] ? __phys_addr_symbol+0x30/0x80 [ 391.874412][ T9816] ? __check_object_size+0x488/0x710 [ 391.874441][ T9816] netlink_sendmsg+0x813/0xd70 [ 391.874474][ T9816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.874517][ T9816] ____sys_sendmsg+0xaaf/0xc90 [ 391.874540][ T9816] ? copy_msghdr_from_user+0x10b/0x160 [ 391.936045][ T9816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.941340][ T9816] ___sys_sendmsg+0x135/0x1e0 [ 391.946011][ T9816] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.951208][ T9816] ? __pfx_lock_release+0x10/0x10 [ 391.956224][ T9816] ? trace_lock_acquire+0x14e/0x1f0 [ 391.961426][ T9816] ? __fget_files+0x206/0x3a0 [ 391.966100][ T9816] __sys_sendmsg+0x16e/0x220 [ 391.970684][ T9816] ? __pfx___sys_sendmsg+0x10/0x10 [ 391.975797][ T9816] do_syscall_64+0xcd/0x250 [ 391.980755][ T9816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.986643][ T9816] RIP: 0033:0x7fb3b5b85d29 [ 391.991048][ T9816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.010658][ T9816] RSP: 002b:00007fb3b69b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.019072][ T9816] RAX: ffffffffffffffda RBX: 00007fb3b5d75fa0 RCX: 00007fb3b5b85d29 [ 392.027046][ T9816] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 392.035016][ T9816] RBP: 00007fb3b69b6090 R08: 0000000000000000 R09: 0000000000000000 [ 392.042995][ T9816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.050965][ T9816] R13: 0000000000000000 R14: 00007fb3b5d75fa0 R15: 00007ffeacad21c8 [ 392.058945][ T9816] [ 392.062317][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 392.127165][ T9818] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 392.151498][ T9818] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 392.472352][ T5921] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 392.519242][ T9831] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 392.568442][ T971] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 392.643411][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 392.660098][ T5921] usb 5-1: config 10 has an invalid interface number: 80 but max is 3 [ 392.673017][ T5921] usb 5-1: config 10 has an invalid interface number: 4 but max is 3 [ 392.685593][ T5921] usb 5-1: config 10 has an invalid interface number: 205 but max is 3 [ 392.696426][ T5921] usb 5-1: config 10 has an invalid interface number: 74 but max is 3 [ 392.709646][ T5921] usb 5-1: config 10 has an invalid descriptor of length 198, skipping remainder of the config [ 392.724655][ T5921] usb 5-1: config 10 has no interface number 0 [ 392.733736][ T5921] usb 5-1: config 10 has no interface number 1 [ 392.745385][ T5921] usb 5-1: config 10 has no interface number 2 [ 392.754306][ T5921] usb 5-1: config 10 has no interface number 3 [ 392.768042][ T5921] usb 5-1: config 10 interface 80 altsetting 5 bulk endpoint 0xE has invalid maxpacket 967 [ 392.781262][ T5921] usb 5-1: config 10 interface 80 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 392.806646][ T5921] usb 5-1: config 10 interface 80 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 392.818463][ T5921] usb 5-1: config 10 interface 80 altsetting 5 bulk endpoint 0x9 has invalid maxpacket 0 [ 392.830350][ T5921] usb 5-1: config 10 interface 4 altsetting 113 has a duplicate endpoint with address 0x1, skipping [ 392.843021][ T5921] usb 5-1: config 10 interface 4 altsetting 113 has a duplicate endpoint with address 0x5, skipping [ 392.855691][ T5921] usb 5-1: config 10 interface 4 altsetting 113 has an invalid descriptor for endpoint zero, skipping [ 392.889509][ T971] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.902978][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 392.917142][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 393.041330][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.050410][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.129769][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 393.381165][ T5921] usb 5-1: config 10 interface 205 altsetting 12 has a duplicate endpoint with address 0x1, skipping [ 393.392166][ T5921] usb 5-1: config 10 interface 205 altsetting 12 has a duplicate endpoint with address 0x9, skipping [ 393.403190][ T5921] usb 5-1: config 10 interface 74 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 393.416532][ T5921] usb 5-1: config 10 interface 80 has no altsetting 0 [ 393.421287][ T971] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.423371][ T5921] usb 5-1: config 10 interface 4 has no altsetting 0 [ 393.436262][ T971] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 393.442957][ T5921] usb 5-1: config 10 interface 205 has no altsetting 0 [ 393.451996][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.458909][ T5921] usb 5-1: config 10 interface 74 has no altsetting 0 [ 393.484724][ T971] usb 1-1: config 0 descriptor?? [ 393.527919][ T9828] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 393.696795][ T9842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.975'. [ 393.744033][ T9844] netlink: 44 bytes leftover after parsing attributes in process `syz.1.974'. [ 393.760650][ T29] audit: type=1400 audit(1736888160.622:907): avc: denied { setopt } for pid=9841 comm="syz.3.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 393.781105][ T29] audit: type=1400 audit(1736888160.622:908): avc: denied { getopt } for pid=9843 comm="syz.1.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 393.844544][ T971] usb 1-1: USB disconnect, device number 31 [ 394.037638][ T9850] netlink: 'syz.5.976': attribute type 3 has an invalid length. [ 394.045786][ T9850] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.976'. [ 394.430944][ T9853] netlink: 'syz.3.977': attribute type 3 has an invalid length. [ 394.438974][ T9853] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.977'. [ 394.943491][ T29] audit: type=1400 audit(1736888161.716:909): avc: denied { ioctl } for pid=9863 comm="syz.0.980" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 395.116645][ T9861] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 395.490968][ T5921] usb 5-1: string descriptor 0 read error: -71 [ 395.497714][ T5921] usb 5-1: New USB device found, idVendor=1a8d, idProduct=1006, bcdDevice=eb.3b [ 395.506774][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.519258][ T5921] usb 5-1: can't set config #10, error -71 [ 395.529293][ T5921] usb 5-1: USB disconnect, device number 28 [ 395.610975][ T9877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.983'. [ 395.666342][ T9878] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 395.764981][ T5920] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 395.978408][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 396.010067][ T5920] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 396.047280][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 50206, setting to 64 [ 396.111701][ T5920] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 396.142859][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.687774][ T5920] usb 6-1: config 0 descriptor?? [ 396.699758][ T5920] hdpvr 6-1:0.0: Could not find bulk-in endpoint [ 396.706258][ T5920] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 396.931980][ T5920] usb 6-1: USB disconnect, device number 20 [ 396.984256][ T29] audit: type=1400 audit(1736888163.643:910): avc: denied { name_bind 0x1000000 } for pid=9901 comm="syz.0.988" path="socket:[25158]" dev="sockfs" ino=25158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 397.216610][ T29] audit: type=1400 audit(1736888163.858:911): avc: denied { getopt } for pid=9910 comm="syz.1.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 398.191740][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 398.389523][ T29] audit: type=1400 audit(1736888164.822:912): avc: denied { connect } for pid=9913 comm="syz.1.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 398.758439][ T5920] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 398.890399][ T29] audit: type=1400 audit(1736888165.420:913): avc: denied { bind } for pid=9934 comm="syz.1.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 398.940151][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 398.946815][ T5920] usb 1-1: config 10 has an invalid interface number: 80 but max is 3 [ 398.955649][ T5920] usb 1-1: config 10 has an invalid interface number: 4 but max is 3 [ 398.967239][ T5920] usb 1-1: config 10 has an invalid interface number: 205 but max is 3 [ 399.714176][ T5920] usb 1-1: config 10 has an invalid interface number: 74 but max is 3 [ 399.722452][ T5920] usb 1-1: config 10 has an invalid descriptor of length 198, skipping remainder of the config [ 399.732919][ T5920] usb 1-1: config 10 has no interface number 0 [ 399.739094][ T5920] usb 1-1: config 10 has no interface number 1 [ 399.745396][ T5920] usb 1-1: config 10 has no interface number 2 [ 399.751563][ T5920] usb 1-1: config 10 has no interface number 3 [ 399.757831][ T5920] usb 1-1: config 10 interface 80 altsetting 5 bulk endpoint 0xE has invalid maxpacket 967 [ 399.767864][ T5920] usb 1-1: config 10 interface 80 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 399.778912][ T5920] usb 1-1: config 10 interface 80 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 399.788777][ T5920] usb 1-1: config 10 interface 80 altsetting 5 bulk endpoint 0x9 has invalid maxpacket 0 [ 399.798706][ T5920] usb 1-1: config 10 interface 4 altsetting 113 has a duplicate endpoint with address 0x1, skipping [ 399.809568][ T5920] usb 1-1: config 10 interface 4 altsetting 113 has a duplicate endpoint with address 0x5, skipping [ 399.820474][ T5920] usb 1-1: config 10 interface 4 altsetting 113 has an invalid descriptor for endpoint zero, skipping [ 399.831547][ T5920] usb 1-1: config 10 interface 205 altsetting 12 has a duplicate endpoint with address 0x1, skipping [ 399.842527][ T5920] usb 1-1: config 10 interface 205 altsetting 12 has a duplicate endpoint with address 0x9, skipping [ 399.853439][ T5920] usb 1-1: config 10 interface 74 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 399.866560][ T5920] usb 1-1: config 10 interface 80 has no altsetting 0 [ 399.873687][ T5920] usb 1-1: config 10 interface 4 has no altsetting 0 [ 399.880815][ T5920] usb 1-1: config 10 interface 205 has no altsetting 0 [ 399.887695][ T5920] usb 1-1: config 10 interface 74 has no altsetting 0 [ 399.902227][ T29] audit: type=1400 audit(1736888165.458:914): avc: denied { listen } for pid=9934 comm="syz.1.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 400.990001][ T9956] tipc: Started in network mode [ 400.995513][ T9956] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 401.007763][ T9956] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0000 [ 401.017867][ T9956] tipc: Enabled bearer , priority 10 [ 401.834526][ T5920] usb 1-1: string descriptor 0 read error: -71 [ 401.841088][ T5920] usb 1-1: New USB device found, idVendor=1a8d, idProduct=1006, bcdDevice=eb.3b [ 401.851639][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.897840][ T5920] usb 1-1: can't set config #10, error -71 [ 401.906476][ T5920] usb 1-1: USB disconnect, device number 32 [ 402.375509][ T5920] tipc: Node number set to 1 [ 404.669324][T10001] syz.4.1014: attempt to access beyond end of device [ 404.669324][T10001] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 404.682977][T10001] EXT4-fs (nbd4): unable to read superblock [ 405.643215][ T5867] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 406.351261][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 406.364050][ T5867] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.381233][ T5867] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.455511][ T5867] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 406.625457][ T5867] usb 2-1: config 0 interface 0 has no altsetting 0 [ 406.632604][ T5867] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 406.641925][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.651966][ T5867] usb 2-1: config 0 descriptor?? [ 407.128953][ C1] hrtimer: interrupt took 29311 ns [ 407.790023][T10031] netlink: 'syz.5.1022': attribute type 4 has an invalid length. [ 408.893587][ T5867] nintendo 0003:057E:200E.000D: unknown main item tag 0x0 [ 409.404998][ T5867] nintendo 0003:057E:200E.000D: unknown main item tag 0x0 [ 409.445431][ T5867] nintendo 0003:057E:200E.000D: hidraw0: USB HID v80.04 Device [HID 057e:200e] on usb-dummy_hcd.1-1/input0 [ 409.495984][T10045] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 409.662690][ T5867] nintendo 0003:057E:200E.000D: Failed charging grip handshake [ 409.670664][ T5867] nintendo 0003:057E:200E.000D: Failed to initialize controller; ret=-110 [ 409.681417][ T5867] nintendo 0003:057E:200E.000D: probe - fail = -110 [ 409.688199][ T5867] nintendo 0003:057E:200E.000D: probe with driver nintendo failed with error -110 [ 409.708070][ T5867] usb 2-1: USB disconnect, device number 24 [ 409.785282][T10053] FAULT_INJECTION: forcing a failure. [ 409.785282][T10053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.798494][T10053] CPU: 1 UID: 0 PID: 10053 Comm: syz.0.1026 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 409.809351][T10053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 409.819406][T10053] Call Trace: [ 409.822686][T10053] [ 409.825618][T10053] dump_stack_lvl+0x16c/0x1f0 [ 409.830313][T10053] should_fail_ex+0x497/0x5b0 [ 409.835012][T10053] _copy_from_user+0x2e/0xd0 [ 409.839606][T10053] copy_msghdr_from_user+0x99/0x160 [ 409.844810][T10053] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 409.850621][T10053] ? __lock_acquire+0xcc5/0x3c40 [ 409.855581][T10053] ___sys_sendmsg+0xff/0x1e0 [ 409.860177][T10053] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.865410][T10053] ? trace_lock_acquire+0x14e/0x1f0 [ 409.870638][T10053] __sys_sendmmsg+0x201/0x420 [ 409.875322][T10053] ? __pfx___sys_sendmmsg+0x10/0x10 [ 409.880548][T10053] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 409.886548][T10053] ? fput+0x67/0x440 [ 409.890450][T10053] ? ksys_write+0x1ba/0x250 [ 409.894964][T10053] __x64_sys_sendmmsg+0x9c/0x100 [ 409.899922][T10053] ? lockdep_hardirqs_on+0x7c/0x110 [ 409.905128][T10053] do_syscall_64+0xcd/0x250 [ 409.909643][T10053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.915548][T10053] RIP: 0033:0x7fb3b5b85d29 [ 409.919963][T10053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.939576][T10053] RSP: 002b:00007fb3b6974038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 409.947997][T10053] RAX: ffffffffffffffda RBX: 00007fb3b5d76160 RCX: 00007fb3b5b85d29 [ 409.955987][T10053] RDX: 000000000800001d RSI: 0000000020007fc0 RDI: 0000000000000006 [ 409.963977][T10053] RBP: 00007fb3b6974090 R08: 0000000000000000 R09: 0000000000000000 [ 409.971956][T10053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.979935][T10053] R13: 0000000000000000 R14: 00007fb3b5d76160 R15: 00007ffeacad21c8 [ 409.987933][T10053] [ 410.058318][ T29] audit: type=1400 audit(1736888175.859:915): avc: denied { nlmsg_read } for pid=10051 comm="syz.3.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 410.109764][ T29] audit: type=1326 audit(1736888175.915:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.4.1030" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc386585d29 code=0x0 [ 410.155122][ T29] audit: type=1400 audit(1736888175.944:917): avc: denied { bind } for pid=10048 comm="syz.5.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 410.609249][T10071] syz.5.1031: attempt to access beyond end of device [ 410.609249][T10071] nbd5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 410.622562][T10071] EXT4-fs (nbd5): unable to read superblock [ 411.487274][T10070] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 411.495385][T10070] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 411.504468][T10070] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 411.512372][T10070] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 411.522488][ T29] audit: type=1400 audit(1736888177.206:918): avc: denied { create } for pid=10064 comm="syz.3.1033" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 411.646806][ T29] audit: type=1400 audit(1736888177.328:919): avc: denied { read } for pid=10059 comm="syz.5.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 412.055382][ T29] audit: type=1400 audit(1736888177.739:920): avc: denied { ioctl } for pid=10077 comm="syz.5.1035" path="socket:[25576]" dev="sockfs" ino=25576 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 412.097726][ T29] audit: type=1400 audit(1736888177.768:921): avc: denied { unlink } for pid=5814 comm="syz-executor" name="file0" dev="tmpfs" ino=1165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 413.329575][ T5921] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 413.632858][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1036'. [ 413.646122][T10085] FAULT_INJECTION: forcing a failure. [ 413.646122][T10085] name failslab, interval 1, probability 0, space 0, times 0 [ 413.658878][T10085] CPU: 1 UID: 0 PID: 10085 Comm: syz.3.1036 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 413.669649][T10085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 413.679707][T10085] Call Trace: [ 413.682990][T10085] [ 413.685925][T10085] dump_stack_lvl+0x16c/0x1f0 [ 413.690614][T10085] should_fail_ex+0x497/0x5b0 [ 413.695306][T10085] ? fs_reclaim_acquire+0xae/0x150 [ 413.700426][T10085] should_failslab+0xc2/0x120 [ 413.705112][T10085] __kmalloc_node_noprof+0xd1/0x510 [ 413.710316][T10085] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 413.715789][T10085] __kvmalloc_node_noprof+0xad/0x1a0 [ 413.721085][T10085] xt_alloc_entry_offsets+0x3a/0x60 [ 413.726302][T10085] translate_table+0x22e/0x1710 [ 413.731166][T10085] ? _copy_from_user+0x59/0xd0 [ 413.735935][T10085] ? __pfx_translate_table+0x10/0x10 [ 413.741229][T10085] ? __might_fault+0xe3/0x190 [ 413.745923][T10085] do_ipt_set_ctl+0x917/0xbe0 [ 413.750611][T10085] ? trace_contention_end+0xee/0x140 [ 413.755906][T10085] ? __mutex_lock+0x1cc/0xa60 [ 413.760593][T10085] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 413.765804][T10085] ? __mutex_unlock_slowpath+0x164/0x690 [ 413.771450][T10085] ? sockopt_release_sock+0x52/0x60 [ 413.776654][T10085] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 413.782658][T10085] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 413.788656][T10085] nf_setsockopt+0x8a/0xf0 [ 413.793170][T10085] ip_setsockopt+0xcb/0xf0 [ 413.797602][T10085] tcp_setsockopt+0xa4/0x100 [ 413.802197][T10085] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 413.808098][T10085] do_sock_setsockopt+0x222/0x480 [ 413.813128][T10085] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 413.818686][T10085] ? lock_acquire+0x2f/0xb0 [ 413.823206][T10085] __sys_setsockopt+0x1a0/0x230 [ 413.828066][T10085] __x64_sys_setsockopt+0xbd/0x160 [ 413.833188][T10085] ? do_syscall_64+0x91/0x250 [ 413.837878][T10085] ? lockdep_hardirqs_on+0x7c/0x110 [ 413.843091][T10085] do_syscall_64+0xcd/0x250 [ 413.847609][T10085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.853516][T10085] RIP: 0033:0x7f4e04185d29 [ 413.857932][T10085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.877548][T10085] RSP: 002b:00007f4e01ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 413.885981][T10085] RAX: ffffffffffffffda RBX: 00007f4e04376160 RCX: 00007f4e04185d29 [ 413.893972][T10085] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 413.901956][T10085] RBP: 00007f4e01ff6090 R08: 00000000000003c8 R09: 0000000000000000 [ 413.909922][T10085] R10: 0000000020000cc0 R11: 0000000000000246 R12: 0000000000000001 [ 413.917886][T10085] R13: 0000000000000000 R14: 00007f4e04376160 R15: 00007ffcaab80ba8 [ 413.925864][T10085] [ 413.934593][ T29] audit: type=1400 audit(1736888179.498:922): avc: denied { mount } for pid=10080 comm="syz.3.1036" name="/" dev="ramfs" ino=26236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 413.959423][ T5921] usb 6-1: unable to get BOS descriptor or descriptor too short [ 413.974690][ T5921] usb 6-1: string descriptor 0 read error: -22 [ 413.981087][ T5921] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 413.996698][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.023684][ T5921] usb 6-1: found format II with max.bitrate = 136, frame size=61499 [ 414.032825][ T5921] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 414.196813][T10087] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1037'. [ 414.213293][ T29] audit: type=1400 audit(1736888179.760:923): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 414.244348][T10087] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1037'. [ 414.306223][ T5921] usb 6-1: USB disconnect, device number 21 [ 414.520917][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.609782][T10098] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 414.954740][ T5867] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 415.098548][T10111] FAULT_INJECTION: forcing a failure. [ 415.098548][T10111] name failslab, interval 1, probability 0, space 0, times 0 [ 415.111264][T10111] CPU: 0 UID: 0 PID: 10111 Comm: syz.5.1045 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 415.122041][T10111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 415.126056][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 415.132089][T10111] Call Trace: [ 415.132101][T10111] [ 415.132109][T10111] dump_stack_lvl+0x16c/0x1f0 [ 415.147967][T10111] should_fail_ex+0x497/0x5b0 [ 415.152644][T10111] ? fs_reclaim_acquire+0xae/0x150 [ 415.157751][T10111] should_failslab+0xc2/0x120 [ 415.162421][T10111] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 415.167795][T10111] ? create_new_namespaces+0x30/0xad0 [ 415.173185][T10111] ? __mutex_unlock_slowpath+0x164/0x690 [ 415.178816][T10111] create_new_namespaces+0x30/0xad0 [ 415.184007][T10111] ? bpf_lsm_capable+0x9/0x10 [ 415.188672][T10111] ? security_capable+0x7e/0x260 [ 415.193626][T10111] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 415.199255][T10111] ksys_unshare+0x45d/0xa40 [ 415.203760][T10111] ? __pfx_ksys_unshare+0x10/0x10 [ 415.208780][T10111] ? ksys_write+0x1ba/0x250 [ 415.213280][T10111] __x64_sys_unshare+0x31/0x40 [ 415.218036][T10111] do_syscall_64+0xcd/0x250 [ 415.222537][T10111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.228424][T10111] RIP: 0033:0x7fb8c0985d29 [ 415.232828][T10111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.252425][T10111] RSP: 002b:00007fb8c181c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 415.260836][T10111] RAX: ffffffffffffffda RBX: 00007fb8c0b76080 RCX: 00007fb8c0985d29 [ 415.268796][T10111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c040000 [ 415.276754][T10111] RBP: 00007fb8c181c090 R08: 0000000000000000 R09: 0000000000000000 [ 415.284711][T10111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.292677][T10111] R13: 0000000000000000 R14: 00007fb8c0b76080 R15: 00007ffcaa3e2c08 [ 415.300654][T10111] [ 415.398259][ T5867] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.409441][ T5867] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.419328][ T5867] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 415.445610][ T5867] usb 1-1: config 0 interface 0 has no altsetting 0 [ 415.454588][ T5867] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 415.463776][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.474714][ T5867] usb 1-1: config 0 descriptor?? [ 415.868771][ T29] audit: type=1400 audit(1736888181.294:924): avc: denied { map } for pid=10112 comm="syz.3.1046" path="socket:[26368]" dev="sockfs" ino=26368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 415.932612][ T5867] nintendo 0003:057E:200E.000E: unknown main item tag 0x0 [ 415.944071][ T5867] nintendo 0003:057E:200E.000E: unknown main item tag 0x0 [ 415.953128][ T5867] nintendo 0003:057E:200E.000E: hidraw0: USB HID v80.04 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 416.105367][ T5867] nintendo 0003:057E:200E.000E: Failed charging grip handshake [ 416.117511][ T5867] nintendo 0003:057E:200E.000E: Failed to initialize controller; ret=-110 [ 416.149789][ T5867] nintendo 0003:057E:200E.000E: probe - fail = -110 [ 416.162940][ T5867] nintendo 0003:057E:200E.000E: probe with driver nintendo failed with error -110 [ 416.871264][ T5867] usb 1-1: USB disconnect, device number 33 [ 417.798396][ T5920] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 418.477389][T10140] netlink: 'syz.1.1053': attribute type 10 has an invalid length. [ 418.501249][ T5920] usb 5-1: config 0 has an invalid interface number: 166 but max is 0 [ 418.514605][ T5920] usb 5-1: config 0 has no interface number 0 [ 418.564973][T10143] overlayfs: failed to resolve './file0': -2 [ 418.573114][ T5920] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice=7f.06 [ 418.582562][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.590749][ T5920] usb 5-1: Product: syz [ 418.594943][ T5920] usb 5-1: Manufacturer: syz [ 418.599520][ T5920] usb 5-1: SerialNumber: syz [ 418.901460][ T5920] usb 5-1: config 0 descriptor?? [ 419.385944][ T5920] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.166/input/input14 [ 419.472815][T10146] netlink: 'syz.1.1055': attribute type 16 has an invalid length. [ 419.502604][T10146] netlink: 'syz.1.1055': attribute type 3 has an invalid length. [ 419.559294][T10146] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.1055'. [ 419.628138][ T5174] bcm5974 5-1:0.166: could not read from device [ 419.638105][ T5174] bcm5974 5-1:0.166: could not read from device [ 419.640554][ T5920] usb 5-1: USB disconnect, device number 29 [ 419.654407][ T5958] bcm5974 5-1:0.166: could not read from device [ 420.329686][ T29] audit: type=1400 audit(1736888185.475:925): avc: denied { create } for pid=10157 comm="syz.1.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 420.539900][T10160] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.547478][T10160] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.721006][T10160] batadv_slave_0: left promiscuous mode [ 420.734556][T10160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.776576][T10160] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.785504][T10160] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.794393][T10160] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.803269][T10160] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.855075][T10161] FAULT_INJECTION: forcing a failure. [ 420.855075][T10161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.870041][T10161] CPU: 1 UID: 0 PID: 10161 Comm: syz.4.1059 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 420.880825][T10161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 420.890864][T10161] Call Trace: [ 420.894127][T10161] [ 420.897043][T10161] dump_stack_lvl+0x16c/0x1f0 [ 420.901712][T10161] should_fail_ex+0x497/0x5b0 [ 420.906382][T10161] _copy_from_iter+0x2a1/0x1560 [ 420.911227][T10161] ? trace_lock_acquire+0x14e/0x1f0 [ 420.916412][T10161] ? __alloc_skb+0x1fe/0x380 [ 420.920986][T10161] ? __pfx__copy_from_iter+0x10/0x10 [ 420.926283][T10161] ? __virt_addr_valid+0x1a4/0x590 [ 420.931578][T10161] ? __virt_addr_valid+0x5e/0x590 [ 420.936592][T10161] ? __phys_addr_symbol+0x30/0x80 [ 420.941600][T10161] ? __check_object_size+0x488/0x710 [ 420.946871][T10161] netlink_sendmsg+0x813/0xd70 [ 420.951635][T10161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.956920][T10161] ____sys_sendmsg+0xaaf/0xc90 [ 420.961682][T10161] ? copy_msghdr_from_user+0x10b/0x160 [ 420.967130][T10161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.972421][T10161] ___sys_sendmsg+0x135/0x1e0 [ 420.977103][T10161] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.982391][T10161] ? __pfx_lock_release+0x10/0x10 [ 420.987401][T10161] ? trace_lock_acquire+0x14e/0x1f0 [ 420.992608][T10161] ? __fget_files+0x206/0x3a0 [ 420.997273][T10161] __sys_sendmsg+0x16e/0x220 [ 421.001849][T10161] ? __pfx___sys_sendmsg+0x10/0x10 [ 421.006970][T10161] do_syscall_64+0xcd/0x250 [ 421.011464][T10161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.017354][T10161] RIP: 0033:0x7fc386585d29 [ 421.021773][T10161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.041383][T10161] RSP: 002b:00007fc387404038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.049791][T10161] RAX: ffffffffffffffda RBX: 00007fc386775fa0 RCX: 00007fc386585d29 [ 421.057745][T10161] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000000c [ 421.065713][T10161] RBP: 00007fc387404090 R08: 0000000000000000 R09: 0000000000000000 [ 421.073672][T10161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.081635][T10161] R13: 0000000000000000 R14: 00007fc386775fa0 R15: 00007ffec6f5a1c8 [ 421.089613][T10161] [ 421.182354][T10160] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 421.352809][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1061'. [ 422.079000][T10170] FAULT_INJECTION: forcing a failure. [ 422.079000][T10170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.135745][T10170] CPU: 0 UID: 0 PID: 10170 Comm: syz.0.1062 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 422.146553][T10170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 422.156622][T10170] Call Trace: [ 422.159904][T10170] [ 422.162835][T10170] dump_stack_lvl+0x16c/0x1f0 [ 422.167536][T10170] should_fail_ex+0x497/0x5b0 [ 422.172236][T10170] _copy_from_iter+0x2a1/0x1560 [ 422.177107][T10170] ? trace_lock_acquire+0x14e/0x1f0 [ 422.182354][T10170] ? __pfx__copy_from_iter+0x10/0x10 [ 422.187624][T10170] ? __virt_addr_valid+0x1a4/0x590 [ 422.192720][T10170] ? __virt_addr_valid+0x5e/0x590 [ 422.197729][T10170] ? __phys_addr_symbol+0x30/0x80 [ 422.202741][T10170] ? __check_object_size+0x488/0x710 [ 422.208025][T10170] kernfs_fop_write_iter+0x19d/0x500 [ 422.213303][T10170] vfs_write+0x5ae/0x1150 [ 422.217615][T10170] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 422.223409][T10170] ? __pfx___mutex_lock+0x10/0x10 [ 422.228421][T10170] ? __pfx_vfs_write+0x10/0x10 [ 422.233196][T10170] ksys_write+0x12b/0x250 [ 422.237505][T10170] ? __pfx_ksys_write+0x10/0x10 [ 422.242339][T10170] do_syscall_64+0xcd/0x250 [ 422.246826][T10170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.252700][T10170] RIP: 0033:0x7fb3b5b85d29 [ 422.257092][T10170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.276677][T10170] RSP: 002b:00007fb3b6995038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 422.285066][T10170] RAX: ffffffffffffffda RBX: 00007fb3b5d76080 RCX: 00007fb3b5b85d29 [ 422.293032][T10170] RDX: 0000000000000012 RSI: 0000000020000000 RDI: 0000000000000007 [ 422.300983][T10170] RBP: 00007fb3b6995090 R08: 0000000000000000 R09: 0000000000000000 [ 422.308947][T10170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.316905][T10170] R13: 0000000000000000 R14: 00007fb3b5d76080 R15: 00007ffeacad21c8 [ 422.324879][T10170] [ 422.459990][T10169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1062'. [ 423.523264][T10183] syz.1.1064: attempt to access beyond end of device [ 423.523264][T10183] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 423.536551][T10183] EXT4-fs (nbd1): unable to read superblock [ 424.204261][T10193] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 425.878120][T10228] omfs: Invalid superblock (0) [ 425.978436][T10229] tmpfs: Bad value for 'mpol' [ 426.748985][T10233] netlink: 'syz.0.1076': attribute type 1 has an invalid length. [ 427.011217][T10242] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1077'. [ 427.081753][ T29] audit: type=1400 audit(1736888191.799:926): avc: denied { shutdown } for pid=10234 comm="syz.5.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 427.295686][T10241] PKCS8: Unsupported PKCS#8 version [ 427.972069][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1081'. [ 428.059753][ T29] audit: type=1400 audit(1736888192.706:927): avc: denied { read } for pid=10256 comm="syz.4.1082" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 428.062646][T10257] syz.4.1082: attempt to access beyond end of device [ 428.062646][T10257] nbd4: rw=0, sector=8, nr_sectors = 8 limit=0 [ 428.089650][ T29] audit: type=1400 audit(1736888192.706:928): avc: denied { open } for pid=10256 comm="syz.4.1082" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 428.096282][T10257] qnx4: unable to read the superblock [ 428.127634][ T29] audit: type=1400 audit(1736888192.771:929): avc: denied { ioctl } for pid=10256 comm="syz.4.1082" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 428.160277][T10249] nbd0: detected capacity change from 0 to 12 [ 428.184881][ T5820] block nbd0: Send control failed (result -89) [ 428.191160][ T5820] block nbd0: Request send failed, requeueing [ 428.198885][T10255] nbd: nbd0 already in use [ 428.200398][ T5828] block nbd0: Receive control failed (result -32) [ 428.203867][ T58] block nbd0: Dead connection, failed to find a fallback [ 428.217054][ T58] block nbd0: shutting down sockets [ 428.222331][ T58] blk_print_req_error: 25 callbacks suppressed [ 428.222344][ T58] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.237697][ T58] buffer_io_error: 25 callbacks suppressed [ 428.237710][ T58] Buffer I/O error on dev nbd0, logical block 0, async page read [ 428.251537][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.260831][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 428.268843][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.277986][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 428.286156][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.295202][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 428.303176][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.312333][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 428.320328][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.329519][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 428.337561][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.346701][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 428.354645][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.363868][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 428.371746][ T5820] ldm_validate_partition_table(): Disk read failed. [ 428.378410][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.387519][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 428.395463][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.404614][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 428.412573][ T5820] Dev nbd0: unable to read RDB block 0 [ 428.418521][ T5820] nbd0: unable to read partition table [ 428.424220][ T5820] nbd0: partition table beyond EOD, truncated [ 428.433604][ T5820] ldm_validate_partition_table(): Disk read failed. [ 428.440870][ T5820] Dev nbd0: unable to read RDB block 0 [ 428.457108][ T5820] nbd0: unable to read partition table [ 428.472485][ T5820] nbd0: partition table beyond EOD, truncated [ 428.761196][T10266] FAULT_INJECTION: forcing a failure. [ 428.761196][T10266] name failslab, interval 1, probability 0, space 0, times 0 [ 428.773972][T10266] CPU: 1 UID: 0 PID: 10266 Comm: syz.4.1084 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 428.784744][T10266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 428.794802][T10266] Call Trace: [ 428.798083][T10266] [ 428.801016][T10266] dump_stack_lvl+0x16c/0x1f0 [ 428.805706][T10266] should_fail_ex+0x497/0x5b0 [ 428.810439][T10266] ? fs_reclaim_acquire+0xae/0x150 [ 428.815556][T10266] should_failslab+0xc2/0x120 [ 428.820241][T10266] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 428.825620][T10266] ? security_file_alloc+0x34/0x2b0 [ 428.830829][T10266] security_file_alloc+0x34/0x2b0 [ 428.835861][T10266] init_file+0x93/0x480 [ 428.840024][T10266] alloc_empty_file+0x91/0x1e0 [ 428.844798][T10266] path_openat+0xe1/0x2d60 [ 428.849214][T10266] ? hlock_class+0x4e/0x130 [ 428.853729][T10266] ? __lock_acquire+0x15a9/0x3c40 [ 428.858770][T10266] ? __pfx_path_openat+0x10/0x10 [ 428.863718][T10266] ? __pfx___lock_acquire+0x10/0x10 [ 428.868920][T10266] ? find_held_lock+0x2d/0x110 [ 428.873697][T10266] do_filp_open+0x20c/0x470 [ 428.878212][T10266] ? __pfx_do_filp_open+0x10/0x10 [ 428.883239][T10266] ? find_held_lock+0x2d/0x110 [ 428.888029][T10266] ? alloc_fd+0x41f/0x760 [ 428.892368][T10266] ? do_sys_openat2+0x128/0x1e0 [ 428.897233][T10266] do_sys_openat2+0x17a/0x1e0 [ 428.901917][T10266] ? __pfx_do_sys_openat2+0x10/0x10 [ 428.907295][T10266] ? lockdep_hardirqs_on+0x7c/0x110 [ 428.912507][T10266] __x64_sys_openat+0x175/0x210 [ 428.917365][T10266] ? __pfx___x64_sys_openat+0x10/0x10 [ 428.922749][T10266] ? do_user_addr_fault+0x83d/0x13f0 [ 428.928043][T10266] do_syscall_64+0xcd/0x250 [ 428.932556][T10266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.938458][T10266] RIP: 0033:0x7fc386584690 [ 428.942874][T10266] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 428.962486][T10266] RSP: 002b:00007fc3873c1b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 428.970903][T10266] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007fc386584690 [ 428.978873][T10266] RDX: 0000000000101301 RSI: 00007fc3873c1c10 RDI: 00000000ffffff9c [ 428.986844][T10266] RBP: 00007fc3873c1c10 R08: 0000000000000000 R09: 0000000000000000 [ 428.994816][T10266] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 429.002801][T10266] R13: 0000000000000000 R14: 00007fc386776160 R15: 00007ffec6f5a1c8 [ 429.010795][T10266] [ 429.056097][T10260] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 429.718804][T10276] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 429.718804][T10276] program syz.1.1085 not setting count and/or reply_len properly [ 430.465250][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1089'. [ 431.402316][T10294] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1092'. [ 431.842911][ T971] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 433.056238][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.071241][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.293477][ T971] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 433.302614][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.316923][ T971] usb 2-1: config 0 descriptor?? [ 433.978817][T10311] FAULT_INJECTION: forcing a failure. [ 433.978817][T10311] name failslab, interval 1, probability 0, space 0, times 0 [ 433.990879][ T29] audit: type=1400 audit(1736888198.243:930): avc: denied { create } for pid=10310 comm="syz.5.1096" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 433.992943][T10311] CPU: 1 UID: 0 PID: 10311 Comm: syz.5.1096 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 434.022837][T10311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 434.032910][T10311] Call Trace: [ 434.036194][T10311] [ 434.039126][T10311] dump_stack_lvl+0x16c/0x1f0 [ 434.043823][T10311] should_fail_ex+0x497/0x5b0 [ 434.048525][T10311] ? fs_reclaim_acquire+0xae/0x150 [ 434.053649][T10311] should_failslab+0xc2/0x120 [ 434.058339][T10311] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 434.063781][T10311] ? security_file_alloc+0x34/0x2b0 [ 434.069001][T10311] security_file_alloc+0x34/0x2b0 [ 434.074037][T10311] init_file+0x93/0x480 [ 434.078207][T10311] alloc_empty_file+0x91/0x1e0 [ 434.082982][T10311] path_openat+0xe1/0x2d60 [ 434.087415][T10311] ? hlock_class+0x4e/0x130 [ 434.091937][T10311] ? __lock_acquire+0x15a9/0x3c40 [ 434.096986][T10311] ? __pfx_path_openat+0x10/0x10 [ 434.101937][T10311] ? __pfx___lock_acquire+0x10/0x10 [ 434.103815][ T29] audit: type=1400 audit(1736888198.243:931): avc: denied { setattr } for pid=10310 comm="syz.5.1096" name="file0" dev="tmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 434.107131][T10311] ? lock_acquire.part.0+0x11b/0x380 [ 434.134877][T10311] ? find_held_lock+0x2d/0x110 [ 434.139645][T10311] do_filp_open+0x20c/0x470 [ 434.144145][T10311] ? __pfx_do_filp_open+0x10/0x10 [ 434.149162][T10311] ? find_held_lock+0x2d/0x110 [ 434.153935][T10311] ? alloc_fd+0x41f/0x760 [ 434.158268][T10311] do_sys_openat2+0x17a/0x1e0 [ 434.162937][T10311] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.168132][T10311] ? __fget_files+0x206/0x3a0 [ 434.172805][T10311] __x64_sys_openat+0x175/0x210 [ 434.177653][T10311] ? __pfx___x64_sys_openat+0x10/0x10 [ 434.183020][T10311] ? ksys_write+0x1ba/0x250 [ 434.187519][T10311] do_syscall_64+0xcd/0x250 [ 434.192020][T10311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.197910][T10311] RIP: 0033:0x7fb8c0985d29 [ 434.202331][T10311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.221931][T10311] RSP: 002b:00007fb8c183d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 434.230336][T10311] RAX: ffffffffffffffda RBX: 00007fb8c0b75fa0 RCX: 00007fb8c0985d29 [ 434.238299][T10311] RDX: 0000000000000040 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 434.246270][T10311] RBP: 00007fb8c183d090 R08: 0000000000000000 R09: 0000000000000000 [ 434.254229][T10311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.262196][T10311] R13: 0000000000000000 R14: 00007fb8c0b75fa0 R15: 00007ffcaa3e2c08 [ 434.270176][T10311] [ 434.313563][T10312] netlink: 'syz.3.1095': attribute type 2 has an invalid length. [ 434.348030][ T971] hid-steam 0003:28DE:1142.000F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 434.355794][T10312] netlink: 85376 bytes leftover after parsing attributes in process `syz.3.1095'. [ 434.422166][ T971] hid-steam 0003:28DE:1142.000F: Steam wireless receiver connected [ 434.454560][ T971] hid-steam 0003:28DE:1142.0010: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 434.727561][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'. [ 435.318066][T10326] netlink: 888 bytes leftover after parsing attributes in process `syz.5.1098'. [ 435.339167][T10326] netlink: 888 bytes leftover after parsing attributes in process `syz.5.1098'. [ 435.358996][T10326] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1098'. [ 435.765201][T10321] nbd0: detected capacity change from 0 to 12 [ 435.821715][ T5820] block nbd0: Send control failed (result -89) [ 435.828053][ T5820] block nbd0: Request send failed, requeueing [ 435.835802][ T5828] block nbd0: Receive control failed (result -32) [ 435.842636][ T58] block nbd0: Dead connection, failed to find a fallback [ 435.882419][ T58] block nbd0: shutting down sockets [ 435.888904][ T58] blk_print_req_error: 25 callbacks suppressed [ 435.888918][ T58] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 435.905003][ T58] buffer_io_error: 25 callbacks suppressed [ 435.905017][ T58] Buffer I/O error on dev nbd0, logical block 0, async page read [ 435.924506][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 436.002689][T10332] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 436.002689][T10332] program syz.3.1099 not setting count and/or reply_len properly [ 436.113411][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 436.128503][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 436.486671][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 436.516556][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 436.540336][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 436.548214][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 436.592400][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 436.600287][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 436.609638][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 436.617563][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 436.626659][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 436.634933][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 436.644127][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 436.652012][ T5820] ldm_validate_partition_table(): Disk read failed. [ 436.659006][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 436.668106][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 436.675959][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 436.685054][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 436.693140][ T5820] Dev nbd0: unable to read RDB block 0 [ 436.698857][ T5820] nbd0: unable to read partition table [ 436.704688][ T5820] nbd0: partition table beyond EOD, truncated [ 436.860670][ T5820] ldm_validate_partition_table(): Disk read failed. [ 436.868135][ T5820] Dev nbd0: unable to read RDB block 0 [ 436.874207][ T5820] nbd0: unable to read partition table [ 436.879902][ T5820] nbd0: partition table beyond EOD, truncated [ 436.902343][ T9957] usb 2-1: USB disconnect, device number 25 [ 436.955867][ T9957] hid-steam 0003:28DE:1142.000F: Steam wireless receiver disconnected [ 437.380072][ T25] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 437.410755][T10338] tmpfs: Unknown parameter '¨pol' [ 437.417024][T10338] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1103'. [ 437.544701][ T29] audit: type=1400 audit(1736888201.573:932): avc: denied { link } for pid=10342 comm="syz.1.1105" name="#43" dev="tmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 437.572313][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.604854][ T25] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 437.636362][ T29] audit: type=1400 audit(1736888201.639:933): avc: denied { rename } for pid=10342 comm="syz.1.1105" name="#44" dev="tmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 437.667383][T10338] delete_channel: no stack [ 437.677651][T10346] input: syz0 as /devices/virtual/input/input16 [ 437.685879][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.707907][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 437.722183][T10346] FAULT_INJECTION: forcing a failure. [ 437.722183][T10346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.736754][ T25] usb 6-1: config 0 descriptor?? [ 437.757690][T10346] CPU: 1 UID: 0 PID: 10346 Comm: syz.0.1104 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 437.768495][T10346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 437.778557][T10346] Call Trace: [ 437.781840][T10346] [ 437.784776][T10346] dump_stack_lvl+0x16c/0x1f0 [ 437.789457][T10346] should_fail_ex+0x497/0x5b0 [ 437.794143][T10346] _copy_from_user+0x2e/0xd0 [ 437.798716][T10346] input_event_from_user+0x134/0x3b0 [ 437.803983][T10346] ? __pfx_input_event_from_user+0x10/0x10 [ 437.809770][T10346] ? __pfx___might_resched+0x10/0x10 [ 437.815052][T10346] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 437.820885][T10346] ? input_event+0x8e/0xa0 [ 437.825331][T10346] uinput_write+0xbb6/0x12b0 [ 437.829945][T10346] ? __pfx_uinput_write+0x10/0x10 [ 437.834999][T10346] ? bpf_lsm_file_permission+0x9/0x10 [ 437.840384][T10346] ? security_file_permission+0x71/0x210 [ 437.846043][T10346] ? __pfx_uinput_write+0x10/0x10 [ 437.851081][T10346] vfs_write+0x24c/0x1150 [ 437.855435][T10346] ? __fget_files+0x1fc/0x3a0 [ 437.860114][T10346] ? __pfx_lock_release+0x10/0x10 [ 437.865125][T10346] ? __pfx_vfs_write+0x10/0x10 [ 437.869870][T10346] ? lock_acquire+0x2f/0xb0 [ 437.874358][T10346] ? __fget_files+0x40/0x3a0 [ 437.878945][T10346] ? __fget_files+0x206/0x3a0 [ 437.883646][T10346] ksys_write+0x207/0x250 [ 437.887994][T10346] ? __pfx_ksys_write+0x10/0x10 [ 437.892868][T10346] do_syscall_64+0xcd/0x250 [ 437.897394][T10346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.903303][T10346] RIP: 0033:0x7fb3b5b85d29 [ 437.907725][T10346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.927348][T10346] RSP: 002b:00007fb3b69b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 437.935805][T10346] RAX: ffffffffffffffda RBX: 00007fb3b5d75fa0 RCX: 00007fb3b5b85d29 [ 437.943810][T10346] RDX: 00000000200005d8 RSI: 00000000200005c0 RDI: 0000000000000003 [ 437.951789][T10346] RBP: 00007fb3b69b6090 R08: 0000000000000000 R09: 0000000000000000 [ 437.959769][T10346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.967745][T10346] R13: 0000000000000000 R14: 00007fb3b5d75fa0 R15: 00007ffeacad21c8 [ 437.975736][T10346] [ 437.978889][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.995622][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 438.923126][T10358] syz.1.1107: attempt to access beyond end of device [ 438.923126][T10358] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 438.936547][T10358] EXT4-fs (nbd1): unable to read superblock [ 439.424523][ T25] pwc: send_video_command error -71 [ 439.430448][ T25] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 439.522744][ T25] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 439.533595][ T29] audit: type=1400 audit(1736888203.369:934): avc: denied { read } for pid=10362 comm="syz.5.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 439.634446][ T25] usb 6-1: USB disconnect, device number 22 [ 441.067914][ T5864] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 441.120346][T10372] PKCS8: Unsupported PKCS#8 version [ 441.253673][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 441.262494][ T5864] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.304301][ T5864] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 441.669275][ T5864] usb 1-1: string descriptor 0 read error: -71 [ 441.685758][ T5864] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 441.704664][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 441.776249][ T5864] usb 1-1: can't set config #1, error -71 [ 442.132171][ T5864] usb 1-1: USB disconnect, device number 34 [ 442.622702][ T29] audit: type=1400 audit(1736888206.335:935): avc: denied { read write } for pid=10388 comm="syz.1.1116" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 442.631011][T10392] FAULT_INJECTION: forcing a failure. [ 442.631011][T10392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.648000][ T29] audit: type=1400 audit(1736888206.335:936): avc: denied { open } for pid=10388 comm="syz.1.1116" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 442.700317][T10392] CPU: 0 UID: 0 PID: 10392 Comm: syz.3.1118 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 442.711124][T10392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 442.721195][T10392] Call Trace: [ 442.724482][T10392] [ 442.727397][T10392] dump_stack_lvl+0x16c/0x1f0 [ 442.728814][ T29] audit: type=1400 audit(1736888206.363:937): avc: denied { map } for pid=10388 comm="syz.1.1116" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 442.732060][T10392] should_fail_ex+0x497/0x5b0 [ 442.757468][ T29] audit: type=1400 audit(1736888206.400:938): avc: denied { ioctl } for pid=10388 comm="syz.1.1116" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x54d7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 442.760720][T10392] _copy_from_iter+0x2a1/0x1560 [ 442.760753][T10392] ? trace_lock_acquire+0x14e/0x1f0 [ 442.760780][T10392] ? __alloc_skb+0x1fe/0x380 [ 442.760808][T10392] ? __pfx__copy_from_iter+0x10/0x10 [ 442.760831][T10392] ? __virt_addr_valid+0x1a4/0x590 [ 442.786406][ C1] vkms_vblank_simulate: vblank timer overrun [ 442.791229][T10392] ? __virt_addr_valid+0x5e/0x590 [ 442.822298][T10392] ? __phys_addr_symbol+0x30/0x80 [ 442.827336][T10392] ? __check_object_size+0x488/0x710 [ 442.832616][T10392] netlink_sendmsg+0x813/0xd70 [ 442.837386][T10392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.842694][T10392] ____sys_sendmsg+0xaaf/0xc90 [ 442.847447][T10392] ? copy_msghdr_from_user+0x10b/0x160 [ 442.852888][T10392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.858165][T10392] ___sys_sendmsg+0x135/0x1e0 [ 442.862824][T10392] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.868009][T10392] ? __pfx_lock_release+0x10/0x10 [ 442.873033][T10392] ? trace_lock_acquire+0x14e/0x1f0 [ 442.878252][T10392] ? __fget_files+0x206/0x3a0 [ 442.882919][T10392] __sys_sendmsg+0x16e/0x220 [ 442.887508][T10392] ? __pfx___sys_sendmsg+0x10/0x10 [ 442.892608][T10392] do_syscall_64+0xcd/0x250 [ 442.897113][T10392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.902991][T10392] RIP: 0033:0x7f4e04185d29 [ 442.907385][T10392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.927324][T10392] RSP: 002b:00007f4e04efd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.935718][T10392] RAX: ffffffffffffffda RBX: 00007f4e04375fa0 RCX: 00007f4e04185d29 [ 442.942668][ T25] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 442.943673][T10392] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 442.959159][T10392] RBP: 00007f4e04efd090 R08: 0000000000000000 R09: 0000000000000000 [ 442.967136][T10392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.975091][T10392] R13: 0000000000000000 R14: 00007f4e04375fa0 R15: 00007ffcaab80ba8 [ 442.983061][T10392] [ 443.074686][T10399] kAFS: No cell specified [ 443.723176][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 443.730374][ T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 443.741557][ T25] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 443.755095][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.773978][ T25] usb 6-1: Product: syz [ 443.781458][ T25] usb 6-1: Manufacturer: syz [ 443.791583][ T25] usb 6-1: SerialNumber: syz [ 443.806297][ T25] usb 6-1: config 0 descriptor?? [ 443.809081][T10394] nbd0: detected capacity change from 0 to 12 [ 443.814691][ T25] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 443.826058][ T25] usb 6-1: Detected FT232A [ 443.831746][ T25] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 443.843756][T10394] block nbd0: Send control failed (result -89) [ 443.852743][T10394] block nbd0: Request send failed, requeueing [ 443.862342][ T5828] block nbd0: Receive control failed (result -32) [ 443.869207][ T10] block nbd0: Dead connection, failed to find a fallback [ 443.876546][ T10] block nbd0: shutting down sockets [ 443.881856][ T10] blk_print_req_error: 25 callbacks suppressed [ 443.881865][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 443.897225][ T10] buffer_io_error: 25 callbacks suppressed [ 443.897234][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 443.922849][T10394] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 443.943382][T10394] Buffer I/O error on dev nbd0, logical block 0, async page read [ 443.951481][T10394] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 443.960716][T10394] Buffer I/O error on dev nbd0, logical block 0, async page read [ 444.061786][T10394] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 444.132839][T10394] Buffer I/O error on dev nbd0, logical block 0, async page read [ 444.138786][ T5867] usb 6-1: USB disconnect, device number 23 [ 444.144847][T10406] fuse: Unknown parameter '000000000000000000070x000000000000000a' [ 444.177681][ T29] audit: type=1400 audit(1736888207.756:939): avc: denied { append } for pid=10401 comm="syz.3.1120" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 444.306157][T10394] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 444.388751][ T5867] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 444.407954][ T5867] ftdi_sio 6-1:0.0: device disconnected [ 444.449261][T10402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1119'. [ 444.480113][T10402] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 444.505560][T10394] Buffer I/O error on dev nbd0, logical block 0, async page read [ 444.941570][T10394] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 444.950982][T10394] Buffer I/O error on dev nbd0, logical block 0, async page read [ 444.962287][T10394] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 444.971403][T10394] Buffer I/O error on dev nbd0, logical block 0, async page read [ 444.979440][T10394] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 445.008236][T10394] Buffer I/O error on dev nbd0, logical block 0, async page read [ 445.016109][T10394] ldm_validate_partition_table(): Disk read failed. [ 445.036750][T10394] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 445.064528][T10394] Buffer I/O error on dev nbd0, logical block 0, async page read [ 445.082950][T10394] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 445.092347][T10394] Buffer I/O error on dev nbd0, logical block 0, async page read [ 445.100548][T10394] Dev nbd0: unable to read RDB block 0 [ 445.106434][T10394] nbd0: unable to read partition table [ 445.112291][T10394] nbd0: partition table beyond EOD, truncated [ 445.122120][ T5958] ldm_validate_partition_table(): Disk read failed. [ 445.134431][ T5958] Dev nbd0: unable to read RDB block 0 [ 445.140094][ T5958] nbd0: unable to read partition table [ 445.166766][ T5958] nbd0: partition table beyond EOD, truncated [ 445.195160][ T5958] ldm_validate_partition_table(): Disk read failed. [ 445.202875][ T29] audit: type=1400 audit(1736888208.739:940): avc: denied { setattr } for pid=10415 comm="syz.1.1123" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 445.249201][ T5958] Dev nbd0: unable to read RDB block 0 [ 445.266385][ T5958] nbd0: unable to read partition table [ 445.283464][ T5958] nbd0: partition table beyond EOD, truncated [ 445.466986][T10419] FAULT_INJECTION: forcing a failure. [ 445.466986][T10419] name failslab, interval 1, probability 0, space 0, times 0 [ 445.487253][T10419] CPU: 1 UID: 0 PID: 10419 Comm: syz.1.1123 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 445.498051][T10419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 445.508115][T10419] Call Trace: [ 445.511406][T10419] [ 445.514337][T10419] dump_stack_lvl+0x16c/0x1f0 [ 445.519032][T10419] should_fail_ex+0x497/0x5b0 [ 445.523731][T10419] ? fs_reclaim_acquire+0xae/0x150 [ 445.528843][T10419] should_failslab+0xc2/0x120 [ 445.533507][T10419] __kmalloc_cache_noprof+0x68/0x410 [ 445.538772][T10419] ? __pfx___folio_start_writeback+0x10/0x10 [ 445.544734][T10419] ? do_raw_spin_lock+0x12d/0x2c0 [ 445.549742][T10419] netfs_buffer_make_space+0x432/0x6b0 [ 445.555201][T10419] netfs_buffer_append_folio+0x298/0x360 [ 445.560859][T10419] netfs_write_folio+0x540/0x1930 [ 445.565926][T10419] netfs_writepages+0x29a/0x8f0 [ 445.570795][T10419] ? __pfx_netfs_writepages+0x10/0x10 [ 445.571728][T10421] syz.5.1124: attempt to access beyond end of device [ 445.571728][T10421] nbd5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 445.576167][T10419] ? __pfx___lock_acquire+0x10/0x10 [ 445.576224][T10419] ? hlock_class+0x4e/0x130 [ 445.589179][T10421] EXT4-fs (nbd5): unable to read superblock [ 445.594287][T10419] ? __pfx_netfs_writepages+0x10/0x10 [ 445.594311][T10419] do_writepages+0x1b3/0x820 [ 445.594343][T10419] ? __pfx_do_writepages+0x10/0x10 [ 445.619755][T10419] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 445.625736][T10419] ? __pfx_lock_release+0x10/0x10 [ 445.630755][T10419] ? do_raw_spin_lock+0x12d/0x2c0 [ 445.635773][T10419] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 445.641136][T10419] ? lock_acquire+0x2f/0xb0 [ 445.645641][T10419] ? wbc_attach_fdatawrite_inode+0x24/0x190 [ 445.651533][T10419] ? do_raw_spin_unlock+0x172/0x230 [ 445.656731][T10419] filemap_fdatawrite_wbc+0x104/0x160 [ 445.662109][T10419] __filemap_fdatawrite_range+0xb3/0xf0 [ 445.667649][T10419] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 445.673916][T10419] ? v9fs_fid_lookup+0xe9/0xec0 [ 445.678767][T10419] v9fs_vfs_setattr+0x93a/0xab0 [ 445.683617][T10419] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 445.688985][T10419] ? selinux_inode_setattr+0x246/0x400 [ 445.694444][T10419] ? evm_inode_setattr+0x65/0x680 [ 445.699465][T10419] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 445.704829][T10419] notify_change+0x6a6/0x1230 [ 445.709507][T10419] vfs_utimes+0x41d/0x850 [ 445.713835][T10419] ? __pfx_vfs_utimes+0x10/0x10 [ 445.718686][T10419] ? putname+0x13c/0x180 [ 445.722935][T10419] do_utimes+0x124/0x2a0 [ 445.727167][T10419] ? __pfx_do_utimes+0x10/0x10 [ 445.731924][T10419] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 445.737910][T10419] do_futimesat+0x18f/0x200 [ 445.742405][T10419] ? __pfx_do_futimesat+0x10/0x10 [ 445.747422][T10419] ? ksys_write+0x1ba/0x250 [ 445.751927][T10419] do_syscall_64+0xcd/0x250 [ 445.756428][T10419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.762313][T10419] RIP: 0033:0x7f4287785d29 [ 445.766719][T10419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.786315][T10419] RSP: 002b:00007f4288586038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 445.794718][T10419] RAX: ffffffffffffffda RBX: 00007f4287976080 RCX: 00007f4287785d29 [ 445.802676][T10419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 445.810634][T10419] RBP: 00007f4288586090 R08: 0000000000000000 R09: 0000000000000000 [ 445.818596][T10419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.826557][T10419] R13: 0000000000000000 R14: 00007f4287976080 R15: 00007ffc872d2638 [ 445.834530][T10419] [ 445.837613][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.852160][T10419] ------------[ cut here ]------------ [ 445.857661][T10419] WARNING: CPU: 0 PID: 10419 at lib/iov_iter.c:255 _copy_from_iter+0x39c/0x1560 [ 445.866819][T10419] Modules linked in: [ 445.870872][T10419] CPU: 0 UID: 0 PID: 10419 Comm: syz.1.1123 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 445.881734][T10419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 445.891893][T10419] RIP: 0010:_copy_from_iter+0x39c/0x1560 [ 445.897587][T10419] Code: 5e fd 0f 01 cb 48 89 d9 4c 89 f7 48 89 ee e8 db c8 8a 06 48 89 cd 0f 01 ca 49 89 df 49 29 cf e9 22 ff ff ff e8 a5 f6 fb fc 90 <0f> 0b 90 e9 b2 fd ff ff e8 97 f6 fb fc 89 ee bf 01 00 00 00 e8 2b [ 445.917516][T10419] RSP: 0018:ffffc90004b4ee50 EFLAGS: 00010293 [ 445.923600][T10419] RAX: 0000000000000000 RBX: 0000000000007fec RCX: ffffffff849e2b18 [ 445.931814][T10419] RDX: ffff888012f2a440 RSI: ffffffff849e2dfb RDI: 0000000000000001 [ 445.939897][T10419] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 445.947911][T10419] R10: 0000000000000000 R11: 0000000000000003 R12: ffff8880131012e0 [ 445.955872][T10419] R13: ffffc90004b4f240 R14: ffff8880131012e0 R15: dffffc0000000000 [ 445.964014][T10419] FS: 00007f42885866c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 445.972997][T10419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.979720][T10419] CR2: 00007fb9a355b946 CR3: 000000006bf62000 CR4: 00000000003526f0 [ 445.987726][T10419] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 445.995736][T10419] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 446.003752][T10419] Call Trace: [ 446.007046][T10419] [ 446.009977][T10419] ? __warn+0xea/0x3c0 [ 446.014102][T10419] ? _copy_from_iter+0x39c/0x1560 [ 446.019132][T10419] ? report_bug+0x3c0/0x580 [ 446.023733][T10419] ? handle_bug+0x54/0xa0 [ 446.028077][T10419] ? exc_invalid_op+0x17/0x50 [ 446.032899][T10419] ? asm_exc_invalid_op+0x1a/0x20 [ 446.037942][T10419] ? _copy_from_iter+0xb8/0x1560 [ 446.042949][T10419] ? _copy_from_iter+0x39b/0x1560 [ 446.048007][T10419] ? _copy_from_iter+0x39c/0x1560 [ 446.053052][T10419] ? __pfx_lock_release+0x10/0x10 [ 446.058119][T10419] ? trace_lock_acquire+0x14e/0x1f0 [ 446.063323][T10419] ? __pfx__copy_from_iter+0x10/0x10 [ 446.068638][T10419] ? __virt_addr_valid+0x1a4/0x590 [ 446.073754][T10419] ? __virt_addr_valid+0x5e/0x590 [ 446.078847][T10419] ? __phys_addr+0xc6/0x150 [ 446.083386][T10419] ? __phys_addr_symbol+0x30/0x80 [ 446.088637][T10419] ? __check_object_size+0x488/0x710 [ 446.093942][T10419] p9pdu_vwritef+0x2d0/0x1cf0 [ 446.098664][T10419] ? p9pdu_writef+0xc4/0x100 [ 446.103284][T10419] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 446.108485][T10419] ? __pfx_p9_tag_alloc+0x10/0x10 [ 446.113523][T10419] ? hlock_class+0x4e/0x130 [ 446.118076][T10419] ? hlock_class+0x4e/0x130 [ 446.122599][T10419] ? mark_lock+0xb5/0xc60 [ 446.126931][T10419] p9_client_prepare_req+0x244/0x4d0 [ 446.132313][T10419] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 446.138127][T10419] ? stack_depot_save_flags+0x38f/0x9c0 [ 446.143708][T10419] p9_client_rpc+0x1c3/0xc10 [ 446.148307][T10419] ? __lock_acquire+0xcc5/0x3c40 [ 446.153265][T10419] ? __pfx_p9_client_rpc+0x10/0x10 [ 446.158384][T10419] ? hlock_class+0x4e/0x130 [ 446.162960][T10419] ? mark_lock+0xb5/0xc60 [ 446.167314][T10419] p9_client_write+0x31f/0x680 [ 446.172227][T10419] ? __pfx_p9_client_write+0x10/0x10 [ 446.177525][T10419] ? mark_held_locks+0x9f/0xe0 [ 446.182350][T10419] v9fs_issue_write+0xe4/0x1b0 [ 446.187153][T10419] ? __pfx_v9fs_issue_write+0x10/0x10 [ 446.192571][T10419] ? rcu_is_watching+0x12/0xc0 [ 446.197351][T10419] netfs_do_issue_write+0x92/0x110 [ 446.202469][T10419] netfs_advance_write+0x384/0xc80 [ 446.207614][T10419] ? netfs_buffer_append_folio+0x276/0x360 [ 446.213428][T10419] netfs_write_folio+0xc19/0x1930 [ 446.218481][T10419] netfs_writepages+0x29a/0x8f0 [ 446.223335][T10419] ? __pfx_netfs_writepages+0x10/0x10 [ 446.228725][T10419] ? __pfx___lock_acquire+0x10/0x10 [ 446.233908][T10419] ? hlock_class+0x4e/0x130 [ 446.238429][T10419] ? __pfx_netfs_writepages+0x10/0x10 [ 446.243783][T10419] do_writepages+0x1b3/0x820 [ 446.248407][T10419] ? __pfx_do_writepages+0x10/0x10 [ 446.253524][T10419] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 446.259542][T10419] ? __pfx_lock_release+0x10/0x10 [ 446.264556][T10419] ? do_raw_spin_lock+0x12d/0x2c0 [ 446.269620][T10419] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 446.274979][T10419] ? lock_acquire+0x2f/0xb0 [ 446.279516][T10419] ? wbc_attach_fdatawrite_inode+0x24/0x190 [ 446.285403][T10419] ? do_raw_spin_unlock+0x172/0x230 [ 446.290625][T10419] filemap_fdatawrite_wbc+0x104/0x160 [ 446.296002][T10419] __filemap_fdatawrite_range+0xb3/0xf0 [ 446.301615][T10419] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 446.307862][T10419] ? v9fs_fid_lookup+0xe9/0xec0 [ 446.312726][T10419] v9fs_vfs_setattr+0x93a/0xab0 [ 446.317571][T10419] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 446.322965][T10419] ? selinux_inode_setattr+0x246/0x400 [ 446.328419][T10419] ? evm_inode_setattr+0x65/0x680 [ 446.333474][T10419] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 446.338833][T10419] notify_change+0x6a6/0x1230 [ 446.343585][T10419] vfs_utimes+0x41d/0x850 [ 446.347901][T10419] ? __pfx_vfs_utimes+0x10/0x10 [ 446.352746][T10419] ? putname+0x13c/0x180 [ 446.357026][T10419] do_utimes+0x124/0x2a0 [ 446.361252][T10419] ? __pfx_do_utimes+0x10/0x10 [ 446.366050][T10419] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 446.372016][T10419] do_futimesat+0x18f/0x200 [ 446.376539][T10419] ? __pfx_do_futimesat+0x10/0x10 [ 446.381554][T10419] ? ksys_write+0x1ba/0x250 [ 446.386067][T10419] do_syscall_64+0xcd/0x250 [ 446.390558][T10419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.396494][T10419] RIP: 0033:0x7f4287785d29 [ 446.400891][T10419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.420556][T10419] RSP: 002b:00007f4288586038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 446.429071][T10419] RAX: ffffffffffffffda RBX: 00007f4287976080 RCX: 00007f4287785d29 [ 446.437024][T10419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 446.445002][T10419] RBP: 00007f4288586090 R08: 0000000000000000 R09: 0000000000000000 [ 446.453008][T10419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.461010][T10419] R13: 0000000000000000 R14: 00007f4287976080 R15: 00007ffc872d2638 [ 446.468973][T10419] [ 446.471998][T10419] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 446.479252][T10419] CPU: 0 UID: 0 PID: 10419 Comm: syz.1.1123 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 446.489986][T10419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 446.500018][T10419] Call Trace: [ 446.503278][T10419] [ 446.506191][T10419] dump_stack_lvl+0x3d/0x1f0 [ 446.510773][T10419] panic+0x71d/0x800 [ 446.514648][T10419] ? __pfx_panic+0x10/0x10 [ 446.519049][T10419] ? show_trace_log_lvl+0x29d/0x3d0 [ 446.524233][T10419] ? check_panic_on_warn+0x1f/0xb0 [ 446.529323][T10419] ? _copy_from_iter+0x39c/0x1560 [ 446.534338][T10419] check_panic_on_warn+0xab/0xb0 [ 446.539268][T10419] __warn+0xf6/0x3c0 [ 446.543139][T10419] ? _copy_from_iter+0x39c/0x1560 [ 446.548165][T10419] report_bug+0x3c0/0x580 [ 446.552484][T10419] handle_bug+0x54/0xa0 [ 446.556629][T10419] exc_invalid_op+0x17/0x50 [ 446.561114][T10419] asm_exc_invalid_op+0x1a/0x20 [ 446.565951][T10419] RIP: 0010:_copy_from_iter+0x39c/0x1560 [ 446.571575][T10419] Code: 5e fd 0f 01 cb 48 89 d9 4c 89 f7 48 89 ee e8 db c8 8a 06 48 89 cd 0f 01 ca 49 89 df 49 29 cf e9 22 ff ff ff e8 a5 f6 fb fc 90 <0f> 0b 90 e9 b2 fd ff ff e8 97 f6 fb fc 89 ee bf 01 00 00 00 e8 2b [ 446.591164][T10419] RSP: 0018:ffffc90004b4ee50 EFLAGS: 00010293 [ 446.597208][T10419] RAX: 0000000000000000 RBX: 0000000000007fec RCX: ffffffff849e2b18 [ 446.605160][T10419] RDX: ffff888012f2a440 RSI: ffffffff849e2dfb RDI: 0000000000000001 [ 446.613118][T10419] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 446.621067][T10419] R10: 0000000000000000 R11: 0000000000000003 R12: ffff8880131012e0 [ 446.629030][T10419] R13: ffffc90004b4f240 R14: ffff8880131012e0 R15: dffffc0000000000 [ 446.636990][T10419] ? _copy_from_iter+0xb8/0x1560 [ 446.641916][T10419] ? _copy_from_iter+0x39b/0x1560 [ 446.646929][T10419] ? __pfx_lock_release+0x10/0x10 [ 446.651932][T10419] ? trace_lock_acquire+0x14e/0x1f0 [ 446.657119][T10419] ? __pfx__copy_from_iter+0x10/0x10 [ 446.662414][T10419] ? __virt_addr_valid+0x1a4/0x590 [ 446.667513][T10419] ? __virt_addr_valid+0x5e/0x590 [ 446.672520][T10419] ? __phys_addr+0xc6/0x150 [ 446.677010][T10419] ? __phys_addr_symbol+0x30/0x80 [ 446.682014][T10419] ? __check_object_size+0x488/0x710 [ 446.687283][T10419] p9pdu_vwritef+0x2d0/0x1cf0 [ 446.691950][T10419] ? p9pdu_writef+0xc4/0x100 [ 446.696526][T10419] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 446.701639][T10419] ? __pfx_p9_tag_alloc+0x10/0x10 [ 446.706646][T10419] ? hlock_class+0x4e/0x130 [ 446.711137][T10419] ? hlock_class+0x4e/0x130 [ 446.715621][T10419] ? mark_lock+0xb5/0xc60 [ 446.719931][T10419] p9_client_prepare_req+0x244/0x4d0 [ 446.725203][T10419] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 446.731000][T10419] ? stack_depot_save_flags+0x38f/0x9c0 [ 446.736553][T10419] p9_client_rpc+0x1c3/0xc10 [ 446.741128][T10419] ? __lock_acquire+0xcc5/0x3c40 [ 446.746053][T10419] ? __pfx_p9_client_rpc+0x10/0x10 [ 446.751169][T10419] ? hlock_class+0x4e/0x130 [ 446.755653][T10419] ? mark_lock+0xb5/0xc60 [ 446.759966][T10419] p9_client_write+0x31f/0x680 [ 446.764718][T10419] ? __pfx_p9_client_write+0x10/0x10 [ 446.769990][T10419] ? mark_held_locks+0x9f/0xe0 [ 446.774735][T10419] v9fs_issue_write+0xe4/0x1b0 [ 446.779493][T10419] ? __pfx_v9fs_issue_write+0x10/0x10 [ 446.784849][T10419] ? rcu_is_watching+0x12/0xc0 [ 446.789597][T10419] netfs_do_issue_write+0x92/0x110 [ 446.794688][T10419] netfs_advance_write+0x384/0xc80 [ 446.799782][T10419] ? netfs_buffer_append_folio+0x276/0x360 [ 446.805576][T10419] netfs_write_folio+0xc19/0x1930 [ 446.810589][T10419] netfs_writepages+0x29a/0x8f0 [ 446.815446][T10419] ? __pfx_netfs_writepages+0x10/0x10 [ 446.820803][T10419] ? __pfx___lock_acquire+0x10/0x10 [ 446.826003][T10419] ? hlock_class+0x4e/0x130 [ 446.830496][T10419] ? __pfx_netfs_writepages+0x10/0x10 [ 446.835866][T10419] do_writepages+0x1b3/0x820 [ 446.840443][T10419] ? __pfx_do_writepages+0x10/0x10 [ 446.845550][T10419] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 446.851536][T10419] ? __pfx_lock_release+0x10/0x10 [ 446.856552][T10419] ? do_raw_spin_lock+0x12d/0x2c0 [ 446.861561][T10419] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 446.866916][T10419] ? lock_acquire+0x2f/0xb0 [ 446.871420][T10419] ? wbc_attach_fdatawrite_inode+0x24/0x190 [ 446.877312][T10419] ? do_raw_spin_unlock+0x172/0x230 [ 446.882496][T10419] filemap_fdatawrite_wbc+0x104/0x160 [ 446.887861][T10419] __filemap_fdatawrite_range+0xb3/0xf0 [ 446.893394][T10419] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 446.899631][T10419] ? v9fs_fid_lookup+0xe9/0xec0 [ 446.904481][T10419] v9fs_vfs_setattr+0x93a/0xab0 [ 446.909323][T10419] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 446.914681][T10419] ? selinux_inode_setattr+0x246/0x400 [ 446.920126][T10419] ? evm_inode_setattr+0x65/0x680 [ 446.925134][T10419] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 446.930505][T10419] notify_change+0x6a6/0x1230 [ 446.935174][T10419] vfs_utimes+0x41d/0x850 [ 446.939502][T10419] ? __pfx_vfs_utimes+0x10/0x10 [ 446.944343][T10419] ? putname+0x13c/0x180 [ 446.948571][T10419] do_utimes+0x124/0x2a0 [ 446.952796][T10419] ? __pfx_do_utimes+0x10/0x10 [ 446.957544][T10419] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 446.963531][T10419] do_futimesat+0x18f/0x200 [ 446.968032][T10419] ? __pfx_do_futimesat+0x10/0x10 [ 446.973041][T10419] ? ksys_write+0x1ba/0x250 [ 446.977539][T10419] do_syscall_64+0xcd/0x250 [ 446.982029][T10419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.987906][T10419] RIP: 0033:0x7f4287785d29 [ 446.992316][T10419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.011921][T10419] RSP: 002b:00007f4288586038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 447.020317][T10419] RAX: ffffffffffffffda RBX: 00007f4287976080 RCX: 00007f4287785d29 [ 447.028268][T10419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 447.036217][T10419] RBP: 00007f4288586090 R08: 0000000000000000 R09: 0000000000000000 [ 447.044187][T10419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.052156][T10419] R13: 0000000000000000 R14: 00007f4287976080 R15: 00007ffc872d2638 [ 447.060116][T10419] [ 447.063357][T10419] Kernel Offset: disabled [ 447.067756][T10419] Rebooting in 86400 seconds..