last executing test programs: 11.615466393s ago: executing program 0 (id=1): utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2461, &(0x7f0000000380)={0x0, 0xddec, 0x10100, 0x3}, &(0x7f0000002080)=0x0, &(0x7f0000002100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) splice(r5, 0x0, r7, 0x0, 0x2000, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f00000020c0)=0x400) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0xdc) r8 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r9 = socket(0x2, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r8, 0xab00, r9) ioctl$NBD_SET_SIZE_BLOCKS(r8, 0xab07, 0x5) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x14, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 10.93764661s ago: executing program 1 (id=6): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0xc0044dff, &(0x7f0000004000)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0xc040) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x26, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400"], 0x30}, 0x1, 0x0, 0x0, 0xc001}, 0x2b0187ad7de13586) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x8800) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x4000) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0xd, 0x5, 0xffff8000) 10.338481038s ago: executing program 3 (id=4): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x52) getpriority(0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020000400900020073797a32000000000900010073797a30000000005000048018000180080001006f7366000c000280080001400000000424000180090001006d657461000000001400028008000240000000130800034000000098"], 0xa4}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/131], 0x119) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x2000c000}, 0x80000) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffdfe, 0x0, r0}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/warn_count', 0x0, 0xb5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x700, 0x8000, 0x320b, 0x10000, {{0x9, 0x4, 0x3, 0xb, 0x24, 0x66, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @remote, {[@rr={0x7, 0xf, 0x3d, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}]}}}}}) syz_io_uring_setup(0x7511, &(0x7f00000000c0)={0x0, 0x88ce, 0x80, 0x0, 0x1a5, 0x0, r5}, &(0x7f0000000300), &(0x7f0000000200)) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD) io_uring_enter(r5, 0x47f4, 0x0, 0x0, 0x0, 0x0) 9.461655178s ago: executing program 1 (id=7): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x181101, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x100, {}, {}, @quote={{0xfb, 0x1}}}, {0x0, 0xfe, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {}, @addr={0x2a, 0x5}}], 0x38) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) 9.327029565s ago: executing program 3 (id=8): utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2461, &(0x7f0000000380)={0x0, 0xddec, 0x10100, 0x3}, &(0x7f0000002080)=0x0, &(0x7f0000002100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) splice(r5, 0x0, r7, 0x0, 0x2000, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f00000020c0)=0x400) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0xdc) r8 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r9 = socket(0x2, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r8, 0xab00, r9) ioctl$NBD_SET_SIZE_BLOCKS(r8, 0xab07, 0x5) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x14, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 9.275656878s ago: executing program 2 (id=3): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000040)='dax\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r5, 0x20, &(0x7f0000000300)={&(0x7f0000000580)=""/167, 0xa7, 0x0, &(0x7f0000000240)=""/113, 0x71}}, 0x10) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r7, 0x0, 0x0, 0x5) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0xfeff, @broadcast}}, 0x24) listen(r8, 0x0) readv(r8, &(0x7f00000001c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 8.382265673s ago: executing program 1 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, ' \x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x3, 0x0, 0x3}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000203850000000000000000140000000f0800010001000000"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0x0, 0x2}}}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) sched_getattr(r4, &(0x7f0000000280)={0x38}, 0x38, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000240)={0x1, "0f"}, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6d1cb49ada2c127b, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000900)=0x15) writev(r7, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 7.572696375s ago: executing program 2 (id=10): utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2461, &(0x7f0000000380)={0x0, 0xddec, 0x10100, 0x3}, &(0x7f0000002080)=0x0, &(0x7f0000002100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) splice(r5, 0x0, r7, 0x0, 0x2000, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f00000020c0)=0x400) r8 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r9 = socket(0x2, 0x2, 0x0) r10 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r8, 0xab00, r9) ioctl$NBD_DO_IT(r10, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r8, 0xab07, 0x5) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x14, 0x0) 7.486223134s ago: executing program 4 (id=5): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="10000000", @ANYRES16=r1, @ANYBLOB="00012bbd7000fedbdf251a00000018002e8005000500000000000c0004000202aaaaaaaaaaaa"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x41) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010129bd7000fddbdf25310000000500360000000000050033000b0000000a0001007770616e31000000050035"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x84) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r7, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r8, &(0x7f00000000c0)={0x27, r7, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000001200)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001040)={0x14c, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_SE_APDU={0xd1, 0x19, "384d943c288bbf1e959d579ccf9d602b8c2f8b71ade0d9dd2ebd575b7a8fd28d4737ae6dcabe0b7415cf4d526fd20285b013fef3dad580f3faf14f461495baecc4b26d81fc7dc9f99c2a9280babfb8a759dac80bd014afa1ef00b33e3932ab72c19050a2354068af59602792a41538e9d83bd81da0273f80912bea0ff349f92c53bb19585f5c63df52db865a4fe5a5c8052efc4a6ef8e07ce37bdafadc3ae4636e0c168f243aaa0f18aa92465033e6d009f9e258602555a6743c6e4e8d618f74650c5828411e0b3dddb7cd17b4"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xdc3883a2b2d57591}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_APDU={0x4b, 0x19, "a60e2a825ff24571cc85a1a3a9e3980319dc26acbc56d0f03e8b2caa555f34e3ca7a735528a1b804a9e3f71a23864ecd3effd85e80fb78bd390133e5e0f7dd05976510f4adf61a"}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8811) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x4008004) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0) socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r9, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0xc38, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r9]) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="290858bcaebdfedbdf251e0000080a0004007770616e33000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4) 7.218980511s ago: executing program 0 (id=11): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x181101, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x100, {}, {}, @quote={{0xfb, 0x1}}}, {0x0, 0xfe, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {}, @addr={0x2a, 0x5}}], 0x38) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) 6.095758786s ago: executing program 0 (id=12): prlimit64(0x0, 0x8, &(0x7f0000000040)={0xb, 0x5}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0xfffc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0xb, {r0}, {0xffffffffffffffff}, 0x7, 0x2109804b}) setuid(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "020037e0"}, 0x0, 0x2, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000280)=@fd={0x5, 0x1, 0x4, 0x2000, 0x2, {}, {0x4, 0x0, 0x5, 0x2, 0x7, 0x2, "3852ccbf"}, 0x4, 0x4, {}, 0x9, 0x0, r5}) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f0000000180), 0x117d, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x7, 0x2, 0xfffffffe, 0x1}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000003c0), 0x0) gettid() sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0xffe0) 5.221525637s ago: executing program 3 (id=13): syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, 0x0, 0x0) syz_usbip_server_init(0x3) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) 4.726255466s ago: executing program 2 (id=14): prlimit64(0x0, 0x8, &(0x7f0000000040)={0xb, 0x5}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0xfffc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0xb, {r0}, {0xffffffffffffffff}, 0x7, 0x2109804b}) setuid(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "020037e0"}, 0x0, 0x2, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000280)=@fd={0x5, 0x1, 0x4, 0x2000, 0x2, {}, {0x4, 0x0, 0x5, 0x2, 0x7, 0x2, "3852ccbf"}, 0x4, 0x4, {}, 0x9, 0x0, r5}) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000180), 0x117d, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x7, 0x2, 0xfffffffe, 0x1}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000003c0), 0x0) gettid() sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0xffe0) 4.226441513s ago: executing program 1 (id=15): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, &(0x7f0000000380)={0x40, 0x5, 0xe3, {0xe3, 0x9, "7639ced33dcd31646df5fbb4fd06c36e4d8036de6e68f8554493a6cdbe9711395fcc381dde9961e3ecc57e049173675d502c9881de578ca8d897a66c14db7760b5c3038f700c5175bcc277a93d7a8732926b164604d25d41d69d28f2bcf3236c5c88bfd6d1e8298a68dc2c5294c279ee3b6726f97e8c6b99074d4e42f508d30fb4a6758d20f696dc360a4a2f018b97331034dff85683fe01bf84566e6fa67267ebce247cb3c100eb16a54325525384e6af7fac99c560d106143cddba0f143b6f9db9acfcbd229b85b141253a0ed21fd089e95d9f1195fe0d6ac151d62526e0de11"}}, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x20, 0x0, 0x83, "451098142227e7f710ee0897c18be6f88196e33843d6af8816723ba6e3d767324496eb30774b3809173fde62ab02736c963d811c3f51072526f6d5657528fd6093aa0e64cbd9c64282613fbd91a52ea46382bfe6ca3eaaa6f22485edfd28485435d7573346b5ecefdb462bc342172e384f6ed74a0b5d9834f9793e15362519b28ab6fc"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xff}, 0x0, &(0x7f0000000240)={0x20, 0x3, 0x1, 0xff}}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) userfaultfd(0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xd) read(r2, 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x33) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000150003"], 0xf0}}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x88, 0xfffffffffffffeda, &(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x3d) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) socket$unix(0x1, 0x1, 0x0) 4.154377174s ago: executing program 3 (id=16): utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2461, &(0x7f0000000380)={0x0, 0xddec, 0x10100, 0x3}, &(0x7f0000002080)=0x0, &(0x7f0000002100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) splice(r5, 0x0, r7, 0x0, 0x2000, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f00000020c0)=0x400) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0xdc) r8 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r9 = socket(0x2, 0x2, 0x0) r10 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r8, 0xab00, r9) ioctl$NBD_DO_IT(r10, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r8, 0xab07, 0x5) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x14, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.979040058s ago: executing program 0 (id=17): prlimit64(0x0, 0x8, &(0x7f0000000040)={0xb, 0x5}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0xfffc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0xb, {r0}, {0xffffffffffffffff}, 0x7, 0x2109804b}) setuid(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "020037e0"}, 0x0, 0x2, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000280)=@fd={0x5, 0x1, 0x4, 0x2000, 0x2, {}, {0x4, 0x0, 0x5, 0x2, 0x7, 0x2, "3852ccbf"}, 0x4, 0x4, {}, 0x9, 0x0, r5}) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000180), 0x117d, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x7, 0x2, 0xfffffffe, 0x1}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000003c0), 0x0) gettid() sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0xffe0) 3.164789076s ago: executing program 2 (id=18): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYBLOB="f9d3f7d8311808426ea18c01505b5e9cad7203b954f4bb75ffe47a8bf60fd5", @ANYRES8, @ANYRESDEC=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = socket(0x2, 0x80805, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000001080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 2.86041933s ago: executing program 4 (id=19): gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000001440)=ANY=[], 0xffffff6a) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000000)={0x2}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x2}, 'port1\x00', 0xe3, 0x1b1c07}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000000)={0x80, 0x8, 0x2, 0xe05, 0xe7, 0x4}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60300, 0x0) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5100) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 1.019757622s ago: executing program 1 (id=20): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)={0x2c, r6, 0x5, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf5}]]}, 0x2c}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8000, 0x0, 0x8, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r8, 0x400, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000002b000701fefffffffbdbdf25017c00000c000180"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) open$dir(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file1\x00', 0x40, 0x140) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r10) 982.891057ms ago: executing program 4 (id=21): prlimit64(0x0, 0x8, &(0x7f0000000040)={0xb, 0x5}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0xfffc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0xb, {r0}, {0xffffffffffffffff}, 0x7, 0x2109804b}) setuid(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "020037e0"}, 0x0, 0x2, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000280)=@fd={0x5, 0x1, 0x4, 0x2000, 0x2, {}, {0x4, 0x0, 0x5, 0x2, 0x7, 0x2, "3852ccbf"}, 0x4, 0x4, {}, 0x9, 0x0, r5}) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000180), 0x117d, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x7, 0x2, 0xfffffffe, 0x1}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000003c0), 0x0) gettid() sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0xffe0) 981.148678ms ago: executing program 3 (id=22): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e80)={'wlan0\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x92, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0xa2, 0x50, 0x3b, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x2}, [@mixer_unit={0x5, 0x24, 0x4, 0x1, 0x65}, @mixer_unit={0x7, 0x24, 0x4, 0x6, 0x3, 'Xd'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0xd, 0x10}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0xdf, 0x2, {0x7, 0x25, 0x1, 0x80, 0xf4, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3, 0xd9f, 0x6a, "64915d75"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x8, 0x4, {0x7, 0x25, 0x1, 0x0, 0xc8, 0xff80}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xd1, 0x8, 0xa, 0x20, 0x91}, 0x13, &(0x7f0000000100)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x32, 0x2, 0x5, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x6, 0x1}]}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, &(0x7f00000001c0), 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0xa, 0x9}}, 0x0) 761.28631ms ago: executing program 2 (id=23): utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2461, &(0x7f0000000380)={0x0, 0xddec, 0x10100, 0x3}, &(0x7f0000002080)=0x0, &(0x7f0000002100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) splice(r5, 0x0, r7, 0x0, 0x2000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0xdc) r8 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r9 = socket(0x2, 0x2, 0x0) r10 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r8, 0xab00, r9) ioctl$NBD_DO_IT(r10, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r8, 0xab07, 0x5) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x14, 0x0) 607.229421ms ago: executing program 0 (id=24): utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2461, &(0x7f0000000380)={0x0, 0xddec, 0x10100, 0x3}, &(0x7f0000002080)=0x0, &(0x7f0000002100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) splice(r5, 0x0, r7, 0x0, 0x2000, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f00000020c0)=0x400) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0xdc) r8 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r9 = socket(0x2, 0x2, 0x0) r10 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r8, 0xab00, r9) ioctl$NBD_DO_IT(r10, 0xab03) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x14, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 1 (id=25): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x7, &(0x7f00000001c0)={0x3, 0x4}) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000100000000000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000040)='dax\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x35) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r6, 0x20, &(0x7f0000000300)={&(0x7f0000000580)=""/167, 0xa7, 0x0, &(0x7f0000000240)=""/113, 0x71}}, 0x10) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x200500, 0x0) pread64(r8, 0x0, 0x0, 0x5) r9 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r9, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r9, 0x0) readv(r9, &(0x7f00000001c0), 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000000000", @ANYRESOCT=r10], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.186' (ED25519) to the list of known hosts. [ 57.444362][ T30] audit: type=1400 audit(1754302093.126:62): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.448202][ T5830] cgroup: Unknown subsys name 'net' [ 57.467162][ T30] audit: type=1400 audit(1754302093.126:63): avc: denied { mount } for pid=5830 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.494481][ T30] audit: type=1400 audit(1754302093.156:64): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.629847][ T5830] cgroup: Unknown subsys name 'cpuset' [ 57.637661][ T5830] cgroup: Unknown subsys name 'rlimit' [ 57.743840][ T30] audit: type=1400 audit(1754302093.426:65): avc: denied { setattr } for pid=5830 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.767939][ T30] audit: type=1400 audit(1754302093.426:66): avc: denied { create } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.803691][ T30] audit: type=1400 audit(1754302093.426:67): avc: denied { write } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.824555][ T30] audit: type=1400 audit(1754302093.426:68): avc: denied { read } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.844919][ T30] audit: type=1400 audit(1754302093.456:69): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.869757][ T30] audit: type=1400 audit(1754302093.456:70): avc: denied { mount } for pid=5830 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 57.872722][ T5832] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 57.893050][ T30] audit: type=1400 audit(1754302093.476:71): avc: denied { read } for pid=5512 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.784759][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.112118][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.123888][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.131824][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.139583][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.148689][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.172145][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.177868][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.179556][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.187004][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.194172][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.201662][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.216944][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.224283][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.227872][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.232854][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.246899][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.248840][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.255833][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.268677][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.276549][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.286534][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.293998][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.305192][ T5862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.317509][ T5168] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.331822][ T5168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.647541][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 61.719348][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 61.853366][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 61.921942][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.930484][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.938757][ T5841] bridge_slave_0: entered allmulticast mode [ 61.945470][ T5841] bridge_slave_0: entered promiscuous mode [ 61.972714][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.981766][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.989280][ T5841] bridge_slave_1: entered allmulticast mode [ 61.996260][ T5841] bridge_slave_1: entered promiscuous mode [ 62.003946][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.011157][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.020273][ T5840] bridge_slave_0: entered allmulticast mode [ 62.028618][ T5840] bridge_slave_0: entered promiscuous mode [ 62.057376][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.064481][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.071658][ T5840] bridge_slave_1: entered allmulticast mode [ 62.078328][ T5840] bridge_slave_1: entered promiscuous mode [ 62.084724][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 62.120993][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 62.145148][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.189547][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.210248][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.238539][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.246147][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.253457][ T5850] bridge_slave_0: entered allmulticast mode [ 62.260871][ T5850] bridge_slave_0: entered promiscuous mode [ 62.276916][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.303155][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.310894][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.318099][ T5850] bridge_slave_1: entered allmulticast mode [ 62.324790][ T5850] bridge_slave_1: entered promiscuous mode [ 62.332484][ T5841] team0: Port device team_slave_0 added [ 62.365957][ T5841] team0: Port device team_slave_1 added [ 62.378056][ T5840] team0: Port device team_slave_0 added [ 62.422879][ T5840] team0: Port device team_slave_1 added [ 62.438710][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.445847][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.453356][ T5844] bridge_slave_0: entered allmulticast mode [ 62.460207][ T5844] bridge_slave_0: entered promiscuous mode [ 62.469934][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.480007][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.486946][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.513487][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.540050][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.547756][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.554892][ T5844] bridge_slave_1: entered allmulticast mode [ 62.561751][ T5844] bridge_slave_1: entered promiscuous mode [ 62.569483][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.588652][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.595593][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.621610][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.632449][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.639758][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.646860][ T5842] bridge_slave_0: entered allmulticast mode [ 62.653618][ T5842] bridge_slave_0: entered promiscuous mode [ 62.660944][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.667962][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.693924][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.706626][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.713576][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.739810][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.783485][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.790644][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.798245][ T5842] bridge_slave_1: entered allmulticast mode [ 62.804850][ T5842] bridge_slave_1: entered promiscuous mode [ 62.835527][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.845766][ T5850] team0: Port device team_slave_0 added [ 62.853670][ T5850] team0: Port device team_slave_1 added [ 62.873085][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.883920][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.918300][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.925231][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.951630][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.974627][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.999815][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.007612][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.033850][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.053082][ T5841] hsr_slave_0: entered promiscuous mode [ 63.059357][ T5841] hsr_slave_1: entered promiscuous mode [ 63.074138][ T5844] team0: Port device team_slave_0 added [ 63.092072][ T5840] hsr_slave_0: entered promiscuous mode [ 63.098160][ T5840] hsr_slave_1: entered promiscuous mode [ 63.104012][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 63.110234][ T5840] Cannot create hsr debugfs directory [ 63.136128][ T5844] team0: Port device team_slave_1 added [ 63.152909][ T5842] team0: Port device team_slave_0 added [ 63.185153][ T5850] hsr_slave_0: entered promiscuous mode [ 63.191834][ T5850] hsr_slave_1: entered promiscuous mode [ 63.198003][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 63.203726][ T5850] Cannot create hsr debugfs directory [ 63.212966][ T5842] team0: Port device team_slave_1 added [ 63.252255][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.259383][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.285669][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.297883][ T5856] Bluetooth: hci1: command tx timeout [ 63.328149][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.335130][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.361316][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.367259][ T5856] Bluetooth: hci2: command tx timeout [ 63.372487][ T5168] Bluetooth: hci0: command tx timeout [ 63.379941][ T5856] Bluetooth: hci3: command tx timeout [ 63.382800][ T5857] Bluetooth: hci4: command tx timeout [ 63.409738][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.416713][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.443659][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.457531][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.464474][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.491247][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.584589][ T5844] hsr_slave_0: entered promiscuous mode [ 63.590676][ T5844] hsr_slave_1: entered promiscuous mode [ 63.596520][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 63.602284][ T5844] Cannot create hsr debugfs directory [ 63.656844][ T5842] hsr_slave_0: entered promiscuous mode [ 63.663409][ T5842] hsr_slave_1: entered promiscuous mode [ 63.669968][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 63.675679][ T5842] Cannot create hsr debugfs directory [ 63.887413][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.912066][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.937595][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.947047][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.984451][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.000227][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.016003][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.025943][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.100847][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.116071][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.126774][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.136597][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.201828][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.224545][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.243873][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.253017][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.262363][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.301685][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.311858][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.345244][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.359939][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.367088][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.380780][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.387915][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.401546][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.412300][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.433190][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.442229][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.483190][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.490290][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.502840][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.509951][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.658411][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.671396][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.679881][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 64.679895][ T30] audit: type=1400 audit(1754302100.366:86): avc: denied { sys_module } for pid=5850 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.685039][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.725850][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.753298][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.768583][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.775698][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.803749][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.810896][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.822523][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.830019][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.854160][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.875513][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.882686][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.946684][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.953829][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.964557][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.971710][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.015065][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.073120][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.097036][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.224465][ T5850] veth0_vlan: entered promiscuous mode [ 65.263057][ T5841] veth0_vlan: entered promiscuous mode [ 65.280997][ T5850] veth1_vlan: entered promiscuous mode [ 65.299024][ T5841] veth1_vlan: entered promiscuous mode [ 65.369805][ T5168] Bluetooth: hci1: command tx timeout [ 65.401367][ T5841] veth0_macvtap: entered promiscuous mode [ 65.422244][ T5850] veth0_macvtap: entered promiscuous mode [ 65.431913][ T5841] veth1_macvtap: entered promiscuous mode [ 65.447805][ T5168] Bluetooth: hci3: command tx timeout [ 65.453279][ T5857] Bluetooth: hci2: command tx timeout [ 65.453309][ T5857] Bluetooth: hci0: command tx timeout [ 65.453333][ T5857] Bluetooth: hci4: command tx timeout [ 65.454310][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.481187][ T5850] veth1_macvtap: entered promiscuous mode [ 65.498857][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.533201][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.556374][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.578643][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.592606][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.635656][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.646058][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.661110][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.689972][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.744521][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.761463][ T5842] veth0_vlan: entered promiscuous mode [ 65.776357][ T5840] veth0_vlan: entered promiscuous mode [ 65.800645][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.813931][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.830180][ T5842] veth1_vlan: entered promiscuous mode [ 65.842859][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.853075][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.896143][ T5840] veth1_vlan: entered promiscuous mode [ 65.936007][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.944595][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.955079][ T5844] veth0_vlan: entered promiscuous mode [ 65.984935][ T5842] veth0_macvtap: entered promiscuous mode [ 66.004440][ T5844] veth1_vlan: entered promiscuous mode [ 66.019194][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.020287][ T5840] veth0_macvtap: entered promiscuous mode [ 66.027018][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.036022][ T5840] veth1_macvtap: entered promiscuous mode [ 66.050152][ T5842] veth1_macvtap: entered promiscuous mode [ 66.088197][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.096042][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.124429][ T30] audit: type=1400 audit(1754302101.806:87): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/root/syzkaller.OUOuaN/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.138761][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.160515][ T30] audit: type=1400 audit(1754302101.836:88): avc: denied { mount } for pid=5841 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.186510][ T30] audit: type=1400 audit(1754302101.836:89): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/root/syzkaller.OUOuaN/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.210731][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.218978][ T30] audit: type=1400 audit(1754302101.836:90): avc: denied { mount } for pid=5841 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.242060][ T30] audit: type=1400 audit(1754302101.836:91): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/root/syzkaller.OUOuaN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.272269][ T30] audit: type=1400 audit(1754302101.846:92): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/root/syzkaller.OUOuaN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.305094][ T5844] veth0_macvtap: entered promiscuous mode [ 66.312880][ T30] audit: type=1400 audit(1754302101.846:93): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.317001][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.340305][ T30] audit: type=1400 audit(1754302101.876:94): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.348942][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.367027][ T30] audit: type=1400 audit(1754302101.876:95): avc: denied { mount } for pid=5841 comm="syz-executor" name="/" dev="gadgetfs" ino=6044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.408379][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.415680][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.423531][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.436241][ T5844] veth1_macvtap: entered promiscuous mode [ 66.446943][ T1086] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.456244][ T1086] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.508614][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.519406][ T1086] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.616640][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.636607][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.696245][ T1086] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.705369][ T1086] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.225305][ T1086] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.249587][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.268580][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.282362][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.315423][ T1086] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.328692][ T1086] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.457416][ T5856] Bluetooth: hci1: command tx timeout [ 67.479760][ T1086] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.500082][ T5962] syz.0.1: attempt to access beyond end of device [ 67.500082][ T5962] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 67.522405][ T1086] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.535327][ T5856] Bluetooth: hci4: command tx timeout [ 67.542119][ T5168] Bluetooth: hci0: command tx timeout [ 67.542161][ T5857] Bluetooth: hci2: command tx timeout [ 67.547648][ T5862] Bluetooth: hci3: command tx timeout [ 67.571443][ T5962] syz.0.1: attempt to access beyond end of device [ 67.571443][ T5962] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 67.585053][ T5962] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 67.597808][ T5962] syz.0.1: attempt to access beyond end of device [ 67.597808][ T5962] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 67.724868][ T5969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6'. [ 67.749548][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.858618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 67.858637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.891350][ T5962] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 67.900981][ T5962] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 67.901216][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.910809][ T1086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.940417][ T5962] UDF-fs: Scanning with blocksize 512 failed [ 67.940647][ T1086] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.964168][ T5962] syz.0.1: attempt to access beyond end of device [ 67.964168][ T5962] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 68.079096][ T5962] syz.0.1: attempt to access beyond end of device [ 68.079096][ T5962] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 68.091910][ T5962] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 68.250662][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.267446][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.272427][ T5962] syz.0.1: attempt to access beyond end of device [ 68.272427][ T5962] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 68.784464][ T5962] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 68.795783][ T5962] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 68.804771][ T5962] UDF-fs: Scanning with blocksize 1024 failed [ 68.812807][ T5962] syz.0.1: attempt to access beyond end of device [ 68.812807][ T5962] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 68.899789][ T5962] syz.0.1: attempt to access beyond end of device [ 68.899789][ T5962] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 68.926772][ T5962] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 68.979060][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.025739][ T5962] syz.0.1: attempt to access beyond end of device [ 69.025739][ T5962] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 69.038560][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.100664][ T5962] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 69.117396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.130983][ T5962] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 69.138808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.207774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 69.216435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.225032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.233711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.243849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.275380][ T5962] UDF-fs: Scanning with blocksize 2048 failed [ 69.310288][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.319066][ T5962] syz.0.1: attempt to access beyond end of device [ 69.319066][ T5962] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 69.384960][ T5988] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 69.384960][ T5988] program syz.1.7 not setting count and/or reply_len properly [ 69.900246][ T5862] Bluetooth: hci1: command tx timeout [ 69.905702][ T5862] Bluetooth: hci3: command tx timeout [ 69.912339][ T5856] Bluetooth: hci4: command tx timeout [ 69.917802][ T5168] Bluetooth: hci0: command tx timeout [ 69.923187][ T5168] Bluetooth: hci2: command tx timeout [ 69.946514][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.089883][ T5962] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 70.333599][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 70.333635][ T30] audit: type=1400 audit(1754302105.926:197): avc: denied { create } for pid=5986 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 70.577808][ T30] audit: type=1400 audit(1754302105.936:198): avc: denied { bind } for pid=5986 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 70.617581][ T30] audit: type=1400 audit(1754302106.016:199): avc: denied { listen } for pid=5986 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 70.624057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.638753][ T30] audit: type=1400 audit(1754302106.096:200): avc: denied { create } for pid=5986 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 70.677452][ T5962] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 70.692048][ T6005] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 70.779073][ T6005] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 70.787184][ T5962] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 70.808901][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 70.830370][ T5962] UDF-fs: Scanning with blocksize 4096 failed [ 70.859758][ T5962] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 70.881810][ T6005] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 70.940346][ T6005] UDF-fs: Scanning with blocksize 512 failed [ 70.945244][ T5962] block nbd0: shutting down sockets [ 70.979122][ T30] audit: type=1400 audit(1754302106.646:201): avc: denied { create } for pid=6003 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.979249][ T6005] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 71.009710][ T30] audit: type=1400 audit(1754302106.656:202): avc: denied { setopt } for pid=6003 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.052071][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.067962][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.099712][ T6005] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 71.268251][ T30] audit: type=1400 audit(1754302106.846:203): avc: denied { create } for pid=6015 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.315683][ T6013] [U] [ 71.317905][ T6016] overlayfs: failed to resolve './file0': -2 [ 71.318495][ T6013] [U] [ 71.327116][ T6013] [U] [ 71.329788][ T6013] [U] [ 71.421459][ T6025] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 71.421459][ T6025] program syz.0.11 not setting count and/or reply_len properly [ 71.614556][ T30] audit: type=1400 audit(1754302106.866:204): avc: denied { read write } for pid=6015 comm="syz.4.5" name="virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.987740][ T6005] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 72.077396][ T30] audit: type=1400 audit(1754302106.866:205): avc: denied { open } for pid=6015 comm="syz.4.5" path="/dev/virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.087629][ T5913] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.109691][ T6013] [U] [ 72.112415][ T6013] [U] [ 72.115094][ T6013] [U] [ 72.117772][ T6013] [U] [ 72.121537][ T6013] [U] [ 72.124236][ T6013] [U] [ 72.126920][ T6013] [U] [ 72.129599][ T6013] [U] [ 72.134862][ T6013] [U] [ 72.137569][ T6013] [U] [ 72.140262][ T6013] [U] [ 72.142945][ T6013] [U] [ 72.142961][ T6005] UDF-fs: Scanning with blocksize 1024 failed [ 72.152536][ T6013] [U] [ 72.155238][ T6013] [U] [ 72.157950][ T6013] [U] [ 72.160646][ T6013] [U] [ 72.162179][ T6028] nbd2: detected capacity change from 0 to 10 [ 72.166203][ T6013] [U] [ 72.172238][ T6013] [U] [ 72.174931][ T6013] [U] [ 72.177626][ T6013] [U] [ 72.184680][ T5852] block nbd2: Send control failed (result -89) [ 72.248065][ T5852] block nbd2: Request send failed, requeueing [ 72.256135][ T55] block nbd2: Dead connection, failed to find a fallback [ 72.264731][ T55] block nbd2: shutting down sockets [ 72.270328][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.280134][ T55] Buffer I/O error on dev nbd2, logical block 0, async page read [ 72.288564][ T5852] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.295483][ T6005] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 72.315112][ T6013] [U] [ 72.317823][ T6013] [U] [ 72.320512][ T6013] [U] [ 72.323194][ T6013] [U] [ 72.326266][ T5852] Buffer I/O error on dev nbd2, logical block 0, async page read [ 72.337688][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 72.342871][ T30] audit: type=1400 audit(1754302106.956:206): avc: denied { bind } for pid=6015 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 72.362145][ T6013] [U] [ 72.364871][ T6013] [U] [ 72.367575][ T6013] [U] [ 72.368400][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.370270][ T6013] [U] [ 72.387958][ T6005] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 72.399714][ T6005] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 72.408014][ T6005] UDF-fs: Scanning with blocksize 2048 failed [ 72.414689][ T6005] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 72.429167][ T6005] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 72.453857][ T6005] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 72.468055][ T5852] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.482995][ T5852] Buffer I/O error on dev nbd2, logical block 0, async page read [ 72.492136][ T6013] [U] [ 72.494854][ T6013] [U] [ 72.497552][ T6013] [U] [ 72.500243][ T6013] [U] [ 72.511325][ T5852] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.527508][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.538637][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 72.546712][ T6005] UDF-fs: Scanning with blocksize 4096 failed [ 72.555124][ T5913] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 72.568307][ T6005] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 72.590810][ T6005] block nbd3: shutting down sockets [ 72.620784][ T5852] Buffer I/O error on dev nbd2, logical block 0, async page read [ 72.637382][ T5852] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.691726][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.697315][ T5852] Buffer I/O error on dev nbd2, logical block 0, async page read [ 72.747271][ T6013] [U] [ 72.749969][ T6013] [U] [ 72.752627][ T6013] [U] [ 72.755286][ T6013] [U] [ 72.758318][ T6013] [U] [ 72.760988][ T6013] [U] [ 72.763649][ T6013] [U] [ 72.766306][ T6013] [U] [ 72.769028][ T6013] [U] [ 72.771699][ T6013] [U] [ 72.774371][ T6013] [U] [ 72.777045][ T6013] [U] [ 72.781620][ T6013] [U] [ 72.784292][ T6013] [U] [ 72.786947][ T6013] [U] [ 72.789605][ T6013] [U] [ 72.792424][ T6013] [U] [ 72.795094][ T6013] [U] [ 72.797750][ T6013] [U] [ 72.800411][ T6013] [U] [ 72.803284][ T6013] [U] [ 72.805953][ T6013] [U] [ 72.808610][ T6013] [U] [ 72.811265][ T6013] [U] [ 72.814211][ T6013] [U] [ 72.816884][ T6013] [U] [ 72.819539][ T6013] [U] [ 72.822194][ T6013] [U] [ 72.825653][ T6013] [U] [ 72.828339][ T6013] [U] [ 72.831024][ T6013] [U] [ 72.831977][ T5852] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.833696][ T6013] [U] [ 72.842799][ T5852] Buffer I/O error on dev nbd2, logical block 0, async page read [ 72.917581][ T5913] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 72.939648][ T5913] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 72.947772][ T5913] usb 5-1: Manufacturer: syz [ 72.966883][ T5852] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.976432][ T5852] Buffer I/O error on dev nbd2, logical block 0, async page read [ 72.985091][ T5852] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.994196][ T5852] Buffer I/O error on dev nbd2, logical block 0, async page read [ 73.002091][ T5852] ldm_validate_partition_table(): Disk read failed. [ 73.009104][ T5852] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.018572][ T5852] Buffer I/O error on dev nbd2, logical block 0, async page read [ 73.026744][ T5852] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.043232][ T5852] Buffer I/O error on dev nbd2, logical block 0, async page read [ 73.069403][ T5913] usb 5-1: config 0 descriptor?? [ 73.121445][ T5852] Dev nbd2: unable to read RDB block 0 [ 73.186870][ T6013] [U] [ 73.190046][ T6013] [U] [ 73.192746][ T6013] [U] [ 73.195447][ T6013] [U] [ 73.237436][ T6013] [U] [ 73.240176][ T6013] [U] [ 73.242878][ T6013] [U] [ 73.245575][ T6013] [U] [ 73.249916][ T6013] [U] [ 73.252621][ T6013] [U] [ 73.255313][ T6013] [U] [ 73.258005][ T6013] [U] [ 73.263116][ T6013] [U] [ 73.265823][ T6013] [U] [ 73.268519][ T6013] [U] [ 73.271212][ T6013] [U] [ 73.276089][ T6013] [U] [ 73.278792][ T6013] [U] [ 73.281485][ T6013] [U] [ 73.284178][ T6013] [U] [ 73.288268][ T6013] [U] [ 73.290975][ T6013] [U] [ 73.293666][ T6013] [U] [ 73.296355][ T6013] [U] [ 73.325842][ T6013] [U] [ 73.362124][ T6036] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 73.368703][ T6036] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 73.382996][ T6036] vhci_hcd vhci_hcd.0: Device attached [ 73.478088][ T6039] vhci_hcd: connection closed [ 73.479195][ T1108] vhci_hcd: stop threads [ 73.489672][ T5852] nbd2: unable to read partition table [ 73.500459][ T5852] nbd2: partition table beyond EOD, truncated [ 73.550930][ T5852] ldm_validate_partition_table(): Disk read failed. [ 73.565135][ T1108] vhci_hcd: release socket [ 73.600197][ T1108] vhci_hcd: disconnect device [ 73.602518][ T5852] Dev nbd2: unable to read RDB block 0 [ 73.617261][ T5914] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 73.685546][ T5852] nbd2: unable to read partition table [ 73.714395][ T5852] nbd2: partition table beyond EOD, truncated [ 73.747428][ T5913] rc_core: IR keymap rc-hauppauge not found [ 73.771230][ T5913] Registered IR keymap rc-empty [ 73.868287][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 73.908243][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 73.981022][ T5913] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 74.033076][ T5913] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 74.049608][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 74.060304][ T6022] netlink: 'syz.4.5': attribute type 4 has an invalid length. [ 74.087508][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 74.137509][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 74.177865][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 74.228752][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 74.277327][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 74.307960][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 74.339299][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 74.368844][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 74.687907][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 74.729822][ T5913] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 74.752151][ T5913] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 74.872079][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15'. [ 74.930996][ T5913] usb 5-1: USB disconnect, device number 2 [ 75.073513][ T6063] bio_check_eod: 14 callbacks suppressed [ 75.073525][ T6063] syz.3.16: attempt to access beyond end of device [ 75.073525][ T6063] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 75.104494][ T6056] nbd3: detected capacity change from 0 to 10 [ 75.105384][ T6063] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 75.128268][ T6063] block nbd3: Send control failed (result -89) [ 75.141034][ T6063] block nbd3: Request send failed, requeueing [ 75.203069][ T5168] block nbd3: Receive control failed (result -32) [ 75.211297][ T1070] block nbd3: Dead connection, failed to find a fallback [ 75.218382][ T1070] block nbd3: shutting down sockets [ 75.224254][ T6063] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 75.283813][ T6063] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 75.297630][ T6063] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 75.307351][ T6063] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 75.314974][ T6063] UDF-fs: Scanning with blocksize 1024 failed [ 75.322795][ T6063] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 75.335122][ T6063] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 75.344721][ T6063] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 75.354187][ T6063] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 75.364226][ T6063] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 75.371911][ T6063] UDF-fs: Scanning with blocksize 2048 failed [ 75.380053][ T6063] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 75.391939][ T6063] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 75.401246][ T6063] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 75.410792][ T6063] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 75.418375][ T6063] UDF-fs: Scanning with blocksize 4096 failed [ 75.424464][ T6063] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 75.462669][ T5858] ldm_validate_partition_table(): Disk read failed. [ 75.487692][ T5858] Dev nbd3: unable to read RDB block 0 [ 75.511182][ T5858] nbd3: unable to read partition table [ 75.547414][ T5858] nbd3: partition table beyond EOD, truncated [ 75.597967][ T5858] ldm_validate_partition_table(): Disk read failed. [ 75.617166][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 75.617183][ T30] audit: type=1400 audit(1754302111.296:224): avc: denied { create } for pid=6066 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.646012][ T5858] Dev nbd3: unable to read RDB block 0 [ 77.073222][ T30] audit: type=1400 audit(1754302111.326:225): avc: denied { bind } for pid=6066 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.147716][ T30] audit: type=1400 audit(1754302111.326:226): avc: denied { accept } for pid=6066 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.247635][ T5858] nbd3: unable to read partition table [ 77.253415][ T5858] nbd3: partition table beyond EOD, truncated [ 77.265955][ T30] audit: type=1400 audit(1754302111.326:227): avc: denied { setopt } for pid=6066 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.285606][ T5858] blk_print_req_error: 88 callbacks suppressed [ 77.285625][ T5858] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 77.377378][ T30] audit: type=1400 audit(1754302111.576:228): avc: denied { create } for pid=6066 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.442101][ T30] audit: type=1400 audit(1754302113.056:229): avc: denied { ioctl } for pid=6074 comm="syz.3.22" path="socket:[8669]" dev="sockfs" ino=8669 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.892019][ T6084] netlink: 'syz.1.20': attribute type 1 has an invalid length. [ 77.900810][ T6084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'. [ 78.137366][ T5921] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.146257][ T30] audit: type=1400 audit(1754302113.506:230): avc: denied { ioctl } for pid=6078 comm="syz.1.20" path="socket:[7766]" dev="sockfs" ino=7766 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.389192][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 78.447453][ T5921] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 78.522355][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.530810][ T5921] usb 4-1: Product: syz [ 78.534976][ T5921] usb 4-1: Manufacturer: syz [ 78.539897][ T5921] usb 4-1: SerialNumber: syz [ 78.557865][ T5921] usb 4-1: config 0 descriptor?? [ 78.726925][ T5914] vhci_hcd: vhci_device speed not set [ 79.102650][ T6097] syz.0.24: attempt to access beyond end of device [ 79.102650][ T6097] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 79.158797][ T6104] syz.2.23: attempt to access beyond end of device [ 79.158797][ T6104] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 79.174013][ T6097] ------------[ cut here ]------------ [ 79.179634][ T5921] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 79.179619][ T6097] WARNING: CPU: 1 PID: 6097 at fs/buffer.c:1125 __getblk_slow+0x4cc/0x560 [ 79.194416][ T6097] Modules linked in: [ 79.198499][ T6097] CPU: 1 UID: 0 PID: 6097 Comm: syz.0.24 Not tainted 6.16.0-syzkaller-11364-g3c4a063b1f8a #0 PREEMPT(full) [ 79.210207][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.220295][ T6097] RIP: 0010:__getblk_slow+0x4cc/0x560 [ 79.226232][ T6097] Code: c0 8b 48 89 df e8 f4 e3 bb ff 90 0f 0b e8 4c 3c 73 ff 48 c7 c6 20 5b c0 8b 48 89 df e8 dd e3 bb ff 90 0f 0b e8 35 3c 73 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 80 5c c0 8b 31 db e8 7d ee 51 [ 79.246395][ T6097] RSP: 0018:ffffc9000b9377f0 EFLAGS: 00010287 [ 79.252603][ T6097] RAX: 00000000000078d7 RBX: 0000000000000200 RCX: ffffc9000fff1000 [ 79.260692][ T6097] RDX: 0000000000080000 RSI: ffffffff82484c5b RDI: 0000000000000005 [ 79.268732][ T6097] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 79.276699][ T6097] R10: 0000000000000200 R11: 0000000000000000 R12: ffff888148d0ae00 [ 79.284737][ T6097] R13: 0000000000000100 R14: 0000000000000200 R15: ffff888148d0ae00 [ 79.292726][ T6097] FS: 00007f0df5f136c0(0000) GS:ffff8881247c8000(0000) knlGS:0000000000000000 [ 79.301708][ T6097] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.308335][ T6097] CR2: 000020000024b000 CR3: 000000005799e000 CR4: 00000000003526f0 [ 79.316315][ T6097] Call Trace: [ 79.319620][ T6097] [ 79.322541][ T6097] ? __pfx___might_resched+0x10/0x10 [ 79.328355][ T6097] bdev_getblk+0xd4/0xe0 [ 79.332587][ T6097] __bread_gfp+0x86/0x3c0 [ 79.336993][ T6097] udf_read_tagged+0xae/0x740 [ 79.342108][ T6097] udf_check_anchor_block+0x89/0x4b0 [ 79.347410][ T6097] ? udf_get_last_block+0x1ce/0x2a0 [ 79.352607][ T6097] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 79.358541][ T6097] udf_load_vrs+0x3b8/0x1070 [ 79.363124][ T6097] ? __pfx_udf_load_vrs+0x10/0x10 [ 79.369932][ T6097] ? __pfx_udf_get_last_session+0x10/0x10 [ 79.375768][ T6097] ? lockdep_init_map_type+0x5c/0x280 [ 79.381830][ T6097] udf_fill_super+0x791/0x1df0 [ 79.386615][ T6097] ? __pfx_udf_fill_super+0x10/0x10 [ 79.391869][ T6097] ? do_raw_spin_lock+0x12c/0x2b0 [ 79.396904][ T6097] ? find_held_lock+0x2b/0x80 [ 79.401631][ T6097] ? sb_set_blocksize+0x176/0x1d0 [ 79.406655][ T6097] ? setup_bdev_super+0x369/0x730 [ 79.411720][ T6097] get_tree_bdev_flags+0x389/0x620 [ 79.416818][ T6097] ? __pfx_udf_fill_super+0x10/0x10 [ 79.422070][ T6097] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 79.427729][ T6097] ? bpf_lsm_capable+0x9/0x10 [ 79.433020][ T6097] ? security_capable+0x7e/0x260 [ 79.438508][ T6097] vfs_get_tree+0x8e/0x340 [ 79.442932][ T6097] path_mount+0x1482/0x1fd0 [ 79.447474][ T6097] ? __pfx_path_mount+0x10/0x10 [ 79.452326][ T6097] ? kmem_cache_free+0x2d1/0x4d0 [ 79.457294][ T6097] ? putname+0x154/0x1a0 [ 79.461536][ T6097] ? putname+0x154/0x1a0 [ 79.465771][ T6097] ? __x64_sys_mount+0x28d/0x310 [ 79.470727][ T6097] __x64_sys_mount+0x28d/0x310 [ 79.475472][ T6097] ? __pfx___x64_sys_mount+0x10/0x10 [ 79.480795][ T6097] do_syscall_64+0xcd/0x4c0 [ 79.485285][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.491224][ T6097] RIP: 0033:0x7f0df518eb69 [ 79.495630][ T6097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.515288][ T6097] RSP: 002b:00007f0df5f13038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.523699][ T6097] RAX: ffffffffffffffda RBX: 00007f0df53b6160 RCX: 00007f0df518eb69 [ 79.531718][ T6097] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 79.540182][ T6097] RBP: 00007f0df5211df1 R08: 0000000000000000 R09: 0000000000000000 [ 79.548657][ T6097] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 79.556625][ T6097] R13: 0000000000000000 R14: 00007f0df53b6160 R15: 00007fffd55a21f8 [ 79.564629][ T6097] [ 79.567684][ T6097] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 79.574954][ T6097] CPU: 1 UID: 0 PID: 6097 Comm: syz.0.24 Not tainted 6.16.0-syzkaller-11364-g3c4a063b1f8a #0 PREEMPT(full) [ 79.586395][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.596491][ T6097] Call Trace: [ 79.599751][ T6097] [ 79.602766][ T6097] dump_stack_lvl+0x3d/0x1f0 [ 79.607340][ T6097] vpanic+0x6a3/0x780 [ 79.611307][ T6097] ? __pfx_vpanic+0x10/0x10 [ 79.615804][ T6097] ? __getblk_slow+0x4cc/0x560 [ 79.620543][ T6097] panic+0xca/0xd0 [ 79.624254][ T6097] ? __pfx_panic+0x10/0x10 [ 79.628841][ T6097] check_panic_on_warn+0xab/0xb0 [ 79.633751][ T6097] __warn+0xf6/0x3c0 [ 79.637617][ T6097] ? __getblk_slow+0x4cc/0x560 [ 79.642358][ T6097] report_bug+0x3c3/0x580 [ 79.646692][ T6097] ? __getblk_slow+0x4cc/0x560 [ 79.651445][ T6097] handle_bug+0x184/0x210 [ 79.655747][ T6097] exc_invalid_op+0x17/0x50 [ 79.660229][ T6097] asm_exc_invalid_op+0x1a/0x20 [ 79.665068][ T6097] RIP: 0010:__getblk_slow+0x4cc/0x560 [ 79.670425][ T6097] Code: c0 8b 48 89 df e8 f4 e3 bb ff 90 0f 0b e8 4c 3c 73 ff 48 c7 c6 20 5b c0 8b 48 89 df e8 dd e3 bb ff 90 0f 0b e8 35 3c 73 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 80 5c c0 8b 31 db e8 7d ee 51 [ 79.690039][ T6097] RSP: 0018:ffffc9000b9377f0 EFLAGS: 00010287 [ 79.696089][ T6097] RAX: 00000000000078d7 RBX: 0000000000000200 RCX: ffffc9000fff1000 [ 79.704050][ T6097] RDX: 0000000000080000 RSI: ffffffff82484c5b RDI: 0000000000000005 [ 79.711994][ T6097] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 79.719937][ T6097] R10: 0000000000000200 R11: 0000000000000000 R12: ffff888148d0ae00 [ 79.727880][ T6097] R13: 0000000000000100 R14: 0000000000000200 R15: ffff888148d0ae00 [ 79.735838][ T6097] ? __getblk_slow+0x4cb/0x560 [ 79.740609][ T6097] ? __pfx___might_resched+0x10/0x10 [ 79.745893][ T6097] bdev_getblk+0xd4/0xe0 [ 79.750120][ T6097] __bread_gfp+0x86/0x3c0 [ 79.754435][ T6097] udf_read_tagged+0xae/0x740 [ 79.759091][ T6097] udf_check_anchor_block+0x89/0x4b0 [ 79.764351][ T6097] ? udf_get_last_block+0x1ce/0x2a0 [ 79.769536][ T6097] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 79.775426][ T6097] udf_load_vrs+0x3b8/0x1070 [ 79.780006][ T6097] ? __pfx_udf_load_vrs+0x10/0x10 [ 79.785023][ T6097] ? __pfx_udf_get_last_session+0x10/0x10 [ 79.790735][ T6097] ? lockdep_init_map_type+0x5c/0x280 [ 79.796099][ T6097] udf_fill_super+0x791/0x1df0 [ 79.800862][ T6097] ? __pfx_udf_fill_super+0x10/0x10 [ 79.806032][ T6097] ? do_raw_spin_lock+0x12c/0x2b0 [ 79.811044][ T6097] ? find_held_lock+0x2b/0x80 [ 79.815715][ T6097] ? sb_set_blocksize+0x176/0x1d0 [ 79.820733][ T6097] ? setup_bdev_super+0x369/0x730 [ 79.825745][ T6097] get_tree_bdev_flags+0x389/0x620 [ 79.830830][ T6097] ? __pfx_udf_fill_super+0x10/0x10 [ 79.836016][ T6097] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 79.841658][ T6097] ? bpf_lsm_capable+0x9/0x10 [ 79.846350][ T6097] ? security_capable+0x7e/0x260 [ 79.851289][ T6097] vfs_get_tree+0x8e/0x340 [ 79.855702][ T6097] path_mount+0x1482/0x1fd0 [ 79.860208][ T6097] ? __pfx_path_mount+0x10/0x10 [ 79.865039][ T6097] ? kmem_cache_free+0x2d1/0x4d0 [ 79.869966][ T6097] ? putname+0x154/0x1a0 [ 79.874201][ T6097] ? putname+0x154/0x1a0 [ 79.878425][ T6097] ? __x64_sys_mount+0x28d/0x310 [ 79.883336][ T6097] __x64_sys_mount+0x28d/0x310 [ 79.888084][ T6097] ? __pfx___x64_sys_mount+0x10/0x10 [ 79.893379][ T6097] do_syscall_64+0xcd/0x4c0 [ 79.897892][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.903759][ T6097] RIP: 0033:0x7f0df518eb69 [ 79.908151][ T6097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.927742][ T6097] RSP: 002b:00007f0df5f13038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.936128][ T6097] RAX: ffffffffffffffda RBX: 00007f0df53b6160 RCX: 00007f0df518eb69 [ 79.944086][ T6097] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 79.952041][ T6097] RBP: 00007f0df5211df1 R08: 0000000000000000 R09: 0000000000000000 [ 79.959993][ T6097] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 79.967942][ T6097] R13: 0000000000000000 R14: 00007f0df53b6160 R15: 00007fffd55a21f8 [ 79.975904][ T6097] [ 79.979137][ T6097] Kernel Offset: disabled [ 79.983441][ T6097] Rebooting in 86400 seconds..