last executing test programs: 17m39.626279835s ago: executing program 0 (id=1089): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$cgroup_netprio_ifpriomap(r2, 0x0, 0x52) 17m39.367173949s ago: executing program 0 (id=1092): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 17m36.369300821s ago: executing program 0 (id=1099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x80) 17m36.266929301s ago: executing program 0 (id=1101): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) move_mount(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x100) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x100, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private2, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) sendto$inet6(r2, &(0x7f0000000040)=':', 0x1, 0x4004845, &(0x7f0000000140)={0xa, 0x4e20, 0x3, @private0, 0x3}, 0x1c) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x84, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f01c, 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000100)=r0}, 0x20) 17m35.921012646s ago: executing program 0 (id=1105): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x200, 0xb64, 0x4, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x2, &(0x7f00000002c0)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000440)=""/185, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='f2fs_filemap_fault\x00', r0, 0x0, 0x3e3f}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000180)="1000000000000000010000000c000000", 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000000200000002"], 0x0, 0x1a, 0x0, 0x6, 0x5}, 0x28) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r5, &(0x7f0000000000)=""/42, 0x2a) getdents64(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') renameat2(r7, &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r7, &(0x7f0000000040)='./file1\x00', 0x5) lseek(r7, 0x2004, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r8}) 17m35.235171406s ago: executing program 0 (id=1107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000180)=@isdn, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)=""/148, 0x94}, {&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000500)=""/152, 0x98}, {&(0x7f0000000380)=""/53, 0x35}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000003400)=""/4096, 0x1000}], 0x6, &(0x7f00000005c0)=""/109, 0x6d}}], 0x1, 0x0, &(0x7f0000000680)) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x133d, 0x0, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) preadv(r7, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r7, 0xf517, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='\r'}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x2c}}, 0x0) 17m34.584835555s ago: executing program 32 (id=1107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000180)=@isdn, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)=""/148, 0x94}, {&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000500)=""/152, 0x98}, {&(0x7f0000000380)=""/53, 0x35}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000003400)=""/4096, 0x1000}], 0x6, &(0x7f00000005c0)=""/109, 0x6d}}], 0x1, 0x0, &(0x7f0000000680)) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x133d, 0x0, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) preadv(r7, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r7, 0xf517, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='\r'}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x2c}}, 0x0) 13m56.324999722s ago: executing program 4 (id=1891): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x7fff, 0x953, 0x1, 0x4, 0x8, 0x0, 0x2, 0x4, 0x2, 0x5]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 13m55.009145353s ago: executing program 4 (id=1894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmsg(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/30, 0x1e}], 0x1}, 0x10101) 13m53.707641632s ago: executing program 4 (id=1899): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x3, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7c, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x80000000, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x9, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x7, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x5, 0x7, 0x7fff, 0x5a80, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x8, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc46, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x8, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x2, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2e9, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x738, 0x1, 0x6c1b, 0x80, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 13m45.317073017s ago: executing program 4 (id=1928): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 13m43.920729546s ago: executing program 4 (id=1932): getpid() syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_open_dev$sg(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x1, 0x100) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7820fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae", 0x3e, 0x11, 0x0, 0x0) 13m42.252747309s ago: executing program 4 (id=1937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0}, 0x4) 13m40.928619989s ago: executing program 33 (id=1937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0}, 0x4) 12.129037578s ago: executing program 6 (id=4486): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002940)=0x14) sendmmsg$inet6(r2, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="4eeafd26f406b192ae6395b1b7f8cf5dfeaac58ba7cf273efc494ee8126d849bc68ea83cb8ee55d8b42d72881f2887", 0x2f}, {&(0x7f0000000300)="4fa8d9ec1d97320123ca6bacf455c17ccfe6a074cc95473280ff0e57dd5fbf5ff28a4eaadb7de6078693a74c94957d7aac4e1f95c776a2015686b17b6bf7648ae666537e344622e97dcdb9dff237430c546d5ac3fb1de9c5cf85ace3acbe6aca46953e1a0a6867460139b116180269b7d8a22c3c374de8366ae66b6fadfcb64a6c0975b86c1eeb0506add3cb252a9cb7dbd3b353b2ce0f40d92554193e91a285f1409d8683334bb328d794996ee33e27cc2b09d6b30b57031813ee07f37f8d03730e0697c56dcd57f2fd4dff0a561e", 0xcf}, {&(0x7f00000000c0)="021a6017cae8938e020462e64ed4a1d06866883c47e200a00453c52019ce74bc528c1f017a8f", 0x26}], 0x3}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x53d, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2bea}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000400)="a9e8d3b734b0158776265c4666dd4cf22bc7002c2f305e430a6deaec51da7107fad75879f351999892dcfa0e6b2805a7d579bdb0abf5cd37188b9302fa4ebe5fa1d17efb18458e655c8f306c8a78619d169e7989a43221981d5f9221a25d3d4501579d57031ee010b6e42e156eb156461c847dad0b400979855763998e9ba0f8ef31833821e7f390dc64330aab3e69802bfb18e946", 0x95}, {&(0x7f00000004c0)="5b6f1181c224339e0002aab9a52060c788d9dd2d682981d3b872c0030b42b952e765089bba8fe8da5a0ae3d8319acb00190f866c77436c997399459947eddac27dc6abca4d1699712775edc0b7e0148e43a4fde58a5ffad90c5f17c19c95286e530cda430495e783e79a23e4fd0f6e7ff32e0f0d3a19608c89af9a66669846c63e6ff6b94510a2d79afaef3f29787e475677f286b2e083aec0e82c312d20c322b8bb6390e63a78ae80", 0xa9}, {&(0x7f0000000240)="e2ac1898a3c480e8c4761da500159d14434bc68e73b36d902be96bebebc179f76fabb9b43f6af4289f1d0a8c65961e14f9057466c1314f2579f998bc9a9bb9c3cff4bdd73364499bdd9af00e52b22ca122e6b6793d", 0x55}, {&(0x7f0000000580)="747585ffbe450581508d50b75a728714ea79fdd6cb3d3af8a2dc8a4633f787d9e4b2958a4970dfdeee10486726b38b3338726abb8eadbcb2e87273f055324d170efd35ad36f91d78e5fb15b15617348e0875e3c47bfe29f918bbf9287c4a987c728dd308dfa324858ff48826bb5316306108680d8502fa3aafe6a2fd81f890f65b0eba31f4ef38d6ae4898e6cb923416d213855e2a2619f0b9b8a1459fbe173f7ade73a784551e736a267e625dab3fa9443a63e4289fa20db3845674b581b0ae4b290bc78ed4cdd2c458d33db4cff9d36d78db96b3eceea927cdefc3222a56450211250463be101265939e0743bc40bb4e7f", 0xf2}, {&(0x7f0000000680)="584b64b99d2bd662c66643e99bfa91dfd0ae45e7b14c12086d2c9b6ad6129c9e38cfaab472256e17ed942a7127bfff2e68953d1682ec", 0x36}], 0x5}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000000740)="83d484", 0x3}, {&(0x7f0000000780)="46ed0e954437a73cb36ec719faaa1b6058da7f393dc54a4b6b3400885264bca45a7fe1d89779cde275ac1ca3112b371b04271cadb62f6aa802d61da26cc5eda99017a9419f9f0f3cf7965bac6a3a4bb398a4c8975b3c1bfe3729b27d80a312700e6aea087f01200daa3ecf832ffd13799d6391697e7ca105969484c4c3e585919b04bfe354df8e34d15106d86c95645f2bdc40d877c1aa96fe0d1d263d0df001f3b661faace267f1207c72f3196f8ab64530c180e79903ca3b07db698240955baa0c7a14fe36ec73342a41e25e86ee7289588da397602c867274c08a1745dafb78e974f0f2e8cf324993da706e1c74fd4e4fa0f76031", 0xf6}], 0x4, &(0x7f0000002980)=[@rthdr={{0x78, 0x29, 0x39, {0x3c, 0xc, 0x1, 0x2, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xb}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x2, 0xc, '\x00', [@ra={0x5, 0x2, 0xc}, @calipso={0x7, 0x48, {0x0, 0x10, 0x5, 0x0, [0x8001, 0xe, 0x401, 0x400, 0x7, 0x7, 0x2, 0x1]}}, @pad1, @generic={0x7, 0x8, "e9843a5d2dc8ffd8"}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00', r3}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}], 0x138}}, {{&(0x7f0000002ac0)={0xa, 0x4e20, 0x9, @empty, 0x1ff}, 0x1c, &(0x7f0000002e40)=[{&(0x7f0000002b00)="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", 0xfd}, {&(0x7f0000002c00)="266993077b834dc5b39c63ed5fcd6e6851cc78a7e076de8211d3cc2877dda4a1432a418c242bd702da0a8467d2cb5963a86fbe3b473c4dd39ef129004e336cb77fc629ee0e281ac14ae2271588427461bf096e75cb3a7a0a9a9b7001230dea55b72103dd5c6fce98d89de9dfddf5516c08d5d37ffbf72d9284797240868750b90650bb25b5bc9de9cdea635858930c663d2454d382111e07fcb41747bc1371b32582d23fd3ffbc9cc13f16f6301d75c7052d24ead9a9cef86bb3e76392bb", 0xbe}, {&(0x7f0000002cc0)="12cc1efd138d461c733e1637b22b37102bb3e07a80d75247b14ce4496950737e822deda9aab22e80da2c1f7e9e156a7651818e6029310bbbd953ac058ab3cf1b0b04340949766fd1323d3b0b39ff8f6a401ac1051e3207cd9d219e4b8c956d40ac2284bc1028fb401a6b345f3ddcebd2e67759b46d1c78520fc6d0c206a8d396cb71bd7a81e7e3547412ee66a3db59a981ab19b70f18d19ea6a6f0c40c3f614a3217944d75dfb87263e67065ebd952ebad472197380bca2c3e7cfed746f0ddc352fc935adb7cae31", 0xc8}, {&(0x7f0000002dc0)="ecbd1e7ddf2a23db640c833f7b86c79852a554dfe83fbc640caa4c33888a4ecca36e3332897c6ccd4de0c014aca5a421d3ab3263cc52e0883cfac02bf6aeeb1e1254610d4b5180291e8e08eeefe5545ec3906a8a18215422aeb5232e2c713d60c00e53921636da71638322bb963ff85910c0475a9c", 0x75}], 0x4, &(0x7f0000002e80)=[@hopopts_2292={{0x30, 0x29, 0x36, {0x2b, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x80}, @calipso={0x7, 0x10, {0x1, 0x2, 0x0, 0x0, [0x0]}}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x87, 0x2, '\x00', [@hao={0xc9, 0x10, @empty}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x32, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x5}]}}}, @dstopts_2292={{0x1090, 0x29, 0x4, {0x4, 0x20e, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @generic={0x8, 0x1d, "fb883fc076e9c4d1165d6202c33c88279c05d4cc6d019405bd3274912e"}, @ra={0x5, 0x2, 0xfffb}, @generic={0x7, 0x1000, "8d1c7c2d396b4d6f3ae6d4b0a54fc930a9984c828e44d0a8af1aa05bcfd1a858759d43081831037fcdcd21a39b4fdac60613e956b4889e86b5e6cef88c71d98ec3ea538d5ac93c1c7998b19585821624183b389fd1db806a8c45a469ee71a5620d675e067635e6bb78d5d8523dadf1cff6a7af6cf5d634ccbc1fe343b9fa7432c17814e976ad702020e3fbad35287786884d88c1c36e96d318c22788cf78786558ea5a9ee59a164e45a6343a34dfa0341a72b70b617c4e9e74aaffd3a77b9f41c6797f3a15ec1ad95a6e1f7e69553a58c91188efade926cd99ef660f62bb1b39d75d11531d056771f710f3b425d00b15edcc42defe8e45cf0ca1698ea0df9152a0b53d504897083427370bf673eb9b2af55f03f486eed969e88df59b81685572033f63be3f08c6b78b048fb249367583b21e1fee21d0411c506b73c793605c1a28514600eb02fd7e3e284ab569f15cb2e1af989baef20248e6a6d62e945cc80702db8d35332cb7fc19be1427deda2fc4e0ec9282e2da4169faf35ca0eb905345afdee76bd0018180ff45a9310f5c68a7654bf581b6c38e3034cc89a0ce09d4a9e9549f684a006956fe0f7012a7e1ccd973a43bdbc803291e3d358b8898f76f0abe33940b2e0f3171cca01c3c336789f2d4dcaf5aab786f3c95f1ae18d87a1582b266ea1ddbb2097d413a5b4bccd8023c81aa24ae56de04f031f32e9aa12eb36da1454d44abc5b0a81e93649ac491338c4facdc80c06fc3f6797a81e192b64a3660637d8bf0227c0df7a442ab2c0771987752295edb3a90057801ee54845f93d786765ba715bed515e8be6d08cc5092d1ab561421f8f72ef46eca66d613b7fbe9ce5ddcd206fc613c2ebb577c7e5d8c729f4f5d1b7a04d46716b919e3f98633a46223f4abb4e55a0e361c97f8efc6565a5998359bf36f883767ce3e36a2e9eb2c92b9d84f4af2e007c8e6620e22e52dece521f37044ca6af59ba2785f844d44d941d1aab210aebfa1f41688c9368ac766b26d9f89e262dbee90b0e4d536a89a4b6ae8c625071c989020919ee4414f009dcf3a27ae8b7185223f68c22ac4443e5b26dc480a496c2d4a96652d63794263cedf5950aec0fa6324521d660b1564d3f905cfe7f26ddb491e6599f9eb37cc0e1347e8522a7517ef15fc5db4a566474049f589a6476443ab87166bb613248f7580a3c85459365b8de2b6524d0de75ea33386e9a65db8002b562c7ac1dac2afe1f149d25263c0e0664aca2456d8e5d3cf8fb1030d9d2340bb606ba56b63196e0ae6c38111167bf501aa7aaae42a584ce07eaba099219ef0eec75fb284a727ff9bccdc2b5487414c3ac6ae9f15f66aeaec30c87257279cfcc683b4afca563ab31124c6d4548c8c5118b99550b673598ad0764599d9708b63e3db333ae1f4329f50ff975f697ce9954ccd5ca9316ded16f9eaf16ea371aff4c88332af7b690c901eb1ff62b7110e738b6b8022eec65ae94d210173657fbdf26b2fc46f5a9a739f56a7d5b529926bdd17df1013b1d1654c4ec07932052ddc7e94304f57a9807d6884c2f31a38fc256933dd7b45055741d8fc16c6f00d001ee603ab761bec129f1beaf2e0636a67cd7cf7a5d1ae5b54900ce64254c65d43863ced5dee0dcf83df566b47e2db62e9d8b446346159faf0c3ad46905d1e2927d4510ae969e8b2b17beb1d8cd4c0c29118cde55c92c688985f23e96a2ab9fd5b83a3896982051c9354f65c8c7f258ed12b7163dc3dce93c4dd6d577448bb7f0872e6604fd62c48a639b0e42a0f7a35cce0149a4baa717083dd1dcce3b86fafb46fc99d15b4beb754531b02de0ce5dfe73b1aea6326aa0fffb6516a5f83aa14c7c0cd147f8108ec2551214fff8fa1fc47e299e1fce0a94491420debc0909cdb30af046d3770aff7f22166ea1dfba0e0919f62a1d49912826dc5bcc3ab9e3c24826953b3ca42a9a87f99a4a6dc70179fcefa810a56c9dc2602767214f0c2c755d742169a5c3eca9993209e1f2e2aa6f1d25a7551e9baa3b236cb209f61d08822c62c833c5d9f176c1e80382ee959b1775f836234c13cb7f69a0f1e1ea3767b1e7a92432311d754a04a474015323c7c1cbd3be9ee538dd9dd026624860e8f8cc3b212e7d1ce82a931ad33e7541af55ad1fbfd7491dbf9ba57a1f21a2f90caa99bd3bccedbfafd2e19988279eaa90e0df7f100aa904bb5c9b4213e3f4bcb51630c7ce3029e9e13f10149b2c8763033d837a119d887a9cf377b46af21989499681288abc5751536c19e7631920d8320fa18c4c6fcd2c9e0a11ce4081b51db8c9e128f8567e5d384147b8efde36ec30d554d33f5f5be34ed30700368e6c6a84fd5965dc166b1cfc524769aa2cc19eaa5eb5ac0b459f5ab70f09bffdf6f5f986030d4ce51eea6a0406323309e50e2927c0885482f6061b7a3a56faef77d4ef4da67b29646860eaadc28c995b5f911fe06e0e2ebf789e9f4bf32a830572d8369f89abfa2f92846dd605d5cbd58d26b69eaf2769b66591b33287d99f45b7978b1391f81a64c085efbc3ac6bd28c10a604508d3ab3a1a12b6ec085c678bc6ce414620b687a958a131351d25c09189bcccaf1e03538ed46dfdb6ca7b5deb60a3cbeebb3e0a98879275dd618deb5f7934ba80fcf34f29c46101f87a7457c94fe76c5f2d0ae888e6411868798f56fff0bfa5dc16b864ea970ca0c7d931332df6843f16d221c0e000974403cda55c124b8e656494c1c78f7a262917909b5b9a78e8daa86801c09c52191655a67e2bd66c98d5b3940c17330f2c240b2c2d0e9ec62fb81cfa18bee9ce32aa3604b2409539e59bf0c7a35ac1850ddd887032b4008c9ead3c65cb8250191e627bf59c5c9cf765cad10ea6d19184b110180139328ddf8343cf10cb8a21fa2b6bb4b959c192c8963d263b17f050881c99ab2b9477af0aab31d7f6e07cdf7c4b302c260d00eb9d19e21917fc9a36483dda0ec2ed4c32d9faa5c57b492481fbe1562849e54e8c60b253218bdaede1d1a5421172db9d0cf26231651aaa3f1c177400e4ea040c8f57ea784d3eac1af321fb0c7503cb934af4bd64bc1cde76a50480fdefd7fdcc6fb569877c9a4c336e687b34477b72005e3bd4c80bf5bd4c83e6cb799531780e64cb411aea49f45e30597eb7207764cebd9b7a519fa4cd046da16c546542e51cecc5a2609d61cd480e35b1718d4d04e8def1946a894a2d7f612c920a3fcfd9dce0d21b48fbf211d6d7ff73d56175a58a5382f0fbcdde4b8be08bfec5264a3433178c08bb0457655e80280595a60ba4393967b7e3d391547c58b172ba6c37c4ffc7401a9bafd625afe56e1b973356a91273c3c3b97bb5121c2ccab603efe49eb2c969808944ecd4ff8a13af13edf1d92af613fbc5e519a63fbe67c1518cd83ff45e0762a74a38b5e4493ece500941519fc34da93098f3b65573945320199ac45d2d07b15c82bf605d4b130237c85b25e93d03714842aaa4e4bb00ee48a5d566d18982f655b4ff44e700e4f8c3e40989314e4c27a047e5227d448171d730afde64cf7d3156684809a7ab7a52243da68613136104c932cf32ad48a589b53f22a927345d67090f4b01bce99745b99adb2b7455d9acb3a10dc2be28e105d97befa18be6fc58a49fd9e57e8b1cb009e15358c309474415a51d065f1cb2c23baa585c49631f03a8ab86fc25f1669efb2aaefbc57c65fd57016b6875b903d0878ccfb33619e98ea4b81296b3a0eddace0519171c925cbd5faa1076f6e9b58f63dd37b37bf39c412200fd09f6c7cb016c7d114fef0f09494aae3ab59560947efa8606423d3cdd3fb248858dfc9da17e61e2f6d7072717bd76c7cbe3f2593c692a71ada9a259ef6692d41d9886c65052ffcb716263d3ebc45b606f2e50fe84e5ddadf806089928c464eee400259f3f8df6dafc4329597ce1fd6346ceaebc2c6831fc2b62e5c87cf881638ef29115b3e9c130b132f753091562febc9795a3b510eaeb02d9904fa6e4870d956c031797a82640e0ae6f17514df8595cde532ff761254cd6604598bba7e18772650484ce345f88bf412b4b07898ce2d8f66d529360cecb047bdc9787aee959133230653ce9320d324a06c90ad54c8303ae873fafa30118495c3ea8ab17c1a70f6ef71eef5b256f8170ece3ab7024b3557962b84a857da43201172f19a4e920c3daaaf37c2ba2412f28c5f10086ab775aa1bab743b55e4671b9a070b7a0f263accb6e060850571c5ac89fc645b55bbc7a5d46fe87b1dfd7fb75c07b46931e942653679fcce4ef1eff97c95632695d68953973b9f26f9781af5960211ad964bcd3a419b1be54209d1204aff949c53b3c1863bd92040c8f969792bc8a496eda523393a87a9c88f4e4744417dc67573c7c3002a084897ed8d62f457ddc48b7a640630489dd721baecbd2f973a6ad74eaa0ba2fadba1e83737221d68588a20088d7f495eff4a84d0b99e688d1b6444b5ff71bc15b217b065511bece310321bf651668823993ffa99454611c5575ecc0ccdebd6e8bb9e12af58dbbcad40be7542babbf8b6ac94735b01c90078d8d2c70a644894993bed403b862046532af8fa53ece1e0e52989211ca776d9e5c0d2e174b12da93a523956c2d9ecfc6bc3c0767b658c67125120ff43ef127da74c9c481314959bbc3fc0eb76af5613cc4a685f4a1e2f681d7252854429e68b68087de91a13090c5fd462ae8d5ce36c46e8f6fec9958c49f2a1df503c801090b66984ea4cf498084922d607a26fcfa8cdd40a0dc36107c5591e0028059d51948aeface361aed0f11c0a635b407ca3eb8b1e0af2ee869a35b356193efb434a529299eae04ff456f8a39a50583381e6376c8789adb48f5531ed8f2c9a15735c01de592411a08b1f4cba2210514f66ab4a6b5012dde483f43b1e359ee30a3a4dee705eb957436f4a21cde0e3a15f0c4987c9f153c05c9c976b9aed0980610fabc1b2e4d74dc28426c954e024b932a03c39c36f714efbe5a81c1b2947ebacbaf0fbcaa67bc3c2b1bc229296fa77d9871024f099e7eada2052404bf4027a1089a2e273dc52d316c0c94a1492ada86aac44819374828d0f54dfc0edbf59681f52096d68aa444bb9903b61b9db1dfc4dbc376c976bd3b5d38f59ce8245f125f992684c3d30fa9fe44cb59f00f844f9a12092e8979b9c422e2fe8118d37f0a564129dedeb20ba5ea5af0dd60fd396e13764bc751a362fd786722e90804d62e0a77bc528b533fcfc74778f803a362619277767b4dfa2e49f76a6bc68e99143ca3e0c954385d5286187ef25ee16c01dd61b2d58b546fa7ec2e4c3b8a9211764b45bfe74d7a22d3508c0ce58ad1db19d6fd27cfc8ed1e4ffce9e290c496293dabdff78b20291223c7d1ce6bb90d8ba3bf74388769e3c891bbd7e7da973cf270a5679a28788fcc261f14f22b4ec7c38343e0130d0f50c6bd7a6bff7a1ae749eb3c94fe0862a416555f73f3dfe191226151c410c4e75302921c0b045f74eb3d9da60ec6039dfb933b4e6ca692b160d423067d44fa63496a68f45be13b5d311527e892387acfbf11584b655383b48e6f0e57d02477ee4d6e11e84f332f9ff78ee23d36148f473df9e207ccc1e7b77b35654054f762393fdbf41bf5e7c3de99f3a5f2cb7790cf1a38b86454e4698d8734ded8447e1f8216190c817e72225d9452ffe1819657fea4e31dbceb63bbc5c44716f98354235e15e2bdaea971500463c4a4bb3e22e7ddae7f5f6a05abe76c66c73e52a24aac31d53a4ff20011022dac5779e46329077e7fcf6e05f2dc9"}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x9}}, @calipso={0x7, 0x30, {0x1, 0xa, 0x6, 0x3ff, [0x2c105e52, 0x10, 0x2, 0x3, 0xe]}}, @jumbo={0xc2, 0x4, 0x10}]}}}], 0x1110}}, {{&(0x7f0000003fc0)={0xa, 0x4e22, 0x8, @loopback, 0x8}, 0x1c, &(0x7f0000004040)=[{&(0x7f0000004000)="1911e979a606875eca65befae93567093f7073a2940b34f82807405805cf0bb4e78e1a2cd7142f93b3db95eb718f99b48c", 0x31}], 0x1, &(0x7f0000004080)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8001}}, @dontfrag={{0x14, 0x29, 0x3e, 0x800}}], 0x48}}], 0x5, 0x20008000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000004280)={0x0, @llc={0x1a, 0x305, 0x4, 0xd, 0x7f, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @phonet={0x23, 0x0, 0x3, 0x3}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0x549, 0x0, 0x0, 0x0, 0x3, &(0x7f0000004240)='wg2\x00', 0xc7d, 0x7f, 0x6}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) 10.907182623s ago: executing program 2 (id=4489): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0)={0x23, 0x0, 0x8}, 0x10) socket$packet(0x11, 0x2, 0x300) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') memfd_create(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) 10.437427455s ago: executing program 6 (id=4490): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec85"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) recvmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f00000004c0), 0x80, &(0x7f0000000a80)=[{&(0x7f0000000540)=""/129, 0x81}, {&(0x7f0000000600)=""/234, 0xea}, {&(0x7f0000000700)=""/21, 0x15}, {&(0x7f00000009c0)=""/181, 0xb5}], 0x4, &(0x7f0000000ac0)=""/99, 0x63}, 0x2110) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x1f, 0x4001, @local}, 0x10, 0x0}, 0x30004001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r7, r2, 0x0, 0x7ffffffd) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x248, 0xe000}, 0x5}], 0x1, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r9, 0x8917, &(0x7f0000000480)={'ip6_vti0\x00', {0x2, 0x0, @multicast2}}) 9.416657838s ago: executing program 2 (id=4494): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 9.414219774s ago: executing program 6 (id=4495): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0xffffffffffffffff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x8, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x7, 0x81, 0x2) r3 = gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_open(&(0x7f0000000000)='!\x00', 0x40, 0x10, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r5, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) close_range(r0, 0xffffffffffffffff, 0x0) 9.167709665s ago: executing program 1 (id=4497): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0)={0x23, 0x0, 0x8}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') memfd_create(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1, 0xfffffa16}, 0x28) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) 8.085103828s ago: executing program 5 (id=4500): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0xffffffffffffffff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x8, &(0x7f0000000040)="11a3a309", 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x7, 0x81, 0x2) r3 = gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_open(&(0x7f0000000000)='!\x00', 0x40, 0x10, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r5, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) close_range(r0, 0xffffffffffffffff, 0x0) 7.838668693s ago: executing program 1 (id=4501): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0xdc) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={@none, 0x9}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r3 = socket(0x2, 0x2, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x5) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x14, 0x0) 6.699453531s ago: executing program 6 (id=4503): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) fstat(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='ext2\x00', 0x0, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x6) 6.654977081s ago: executing program 1 (id=4504): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0)={0x23, 0x0, 0x8}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') memfd_create(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) r4 = socket$kcm(0x10, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1, 0xfffffa16}, 0x28) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f0000000680)=ANY=[@ANYBLOB="8fd117c2283cb3aa4b432fb70290af37adffa9b76c18c779960e134ef1efc1c19ad39acd141869137da8c71023d0470ef7a71e5e6128959050cbdfd2fd8c8557bbe7cbd3ca681f54d4e83bcb181f67d919e2050e3db4f848e3450b9d550745b3a6d824039fee4e8ea20183ec6c0cf4bd27ba163795fcf1da46b4dbb110d774e8cf54e5c3b8bc068bc59cd63f946d1692bf88d5552018c51ea1e8469b3038bebe5bb51ff58731d56569fb82515c46e33c4a5bcd3f9fe42e4e5ab757c33e762a77c1ab8f97ad37ebc84683d0c87443", @ANYRES8=r3, @ANYRES8=r5, @ANYBLOB="ad746cd315684fb8a4bf8d2ee6b38413ce519eedb9963c108c64cf3811eb7d215c6a5734c7fa4fc83744ef4fa329e669304506969114325c27dc0d22b0eba94e36e5267b62f1f09689390811f06cc2bf94f472c71bea8d73f54607da8599b123cb38bf8571990387467029b26c8df5aab4375359cccc7daafc2ce3c0ab3eba903107decbcd5bd4dfd99ab93714f291f7cb71933d69ab3387839fcae062bcd4ebaafd280cad8994f6d4053c5e21488995f2e739e3f2c1dbd477487bff19ddfd0de5d18054cb", @ANYRES16=r4, @ANYRES32=r6, @ANYBLOB="d3ad35ae690cb6d25580ab04f9c8fba2e9d0aedbbb7013b39203c4ccea7466e74120a886afc46ba18cf65fa71cc220ce4fb3a67bacf7d1ba2f6ba1945d50c29160c1c2e5995f1d77c0eb2c49b6ef409964327e2c9a97c1458599cb9d93a4f5f814e66a6fce7f928c9126f70bdb157487feaf6b4bd9edeef83af990d8f189b6bed8cc9550b698b7b99da2d4cd97cc4afe", @ANYRESHEX=r3], 0xff2e) 5.977319104s ago: executing program 3 (id=4505): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0)={0x23, 0x0, 0x8}, 0x10) socket$packet(0x11, 0x2, 0x300) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') memfd_create(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) 5.953417975s ago: executing program 5 (id=4506): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1100020, &(0x7f0000005380)={[{@gid}, {}]}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}) recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}, 0x489}], 0x1, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x4, 0x3b5f91, 0x203bac}) 4.975643684s ago: executing program 1 (id=4507): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.97422362s ago: executing program 5 (id=4508): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.797089997s ago: executing program 6 (id=4509): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40040830) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r3) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x20440, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x801) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = syz_io_uring_setup(0x4dfa, &(0x7f0000000580)={0x0, 0x0, 0x1, 0x0, 0x40}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x5e2, 0x4, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003100)=[{{&(0x7f0000000440)=@tipc=@name, 0x80, &(0x7f0000001cc0)=[{&(0x7f00000006c0)=""/209, 0xd1}, {&(0x7f00000008c0)=""/236, 0xec}, {&(0x7f00000009c0)=""/141, 0x8d}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/144, 0x90}, {&(0x7f0000000500)=""/117, 0x75}, {&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000001b40)=""/252, 0xfc}, {&(0x7f0000001c40)=""/103, 0x67}], 0x9}, 0x1}, {{&(0x7f0000001d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001e00)=""/197, 0xc5}, {&(0x7f0000001f00)=""/112, 0x70}, {&(0x7f0000001f80)=""/230, 0xe6}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x4, &(0x7f0000003080)=""/97, 0x61}, 0x6}], 0x2, 0x40000000, &(0x7f0000000280)={0x77359400}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1) 4.754753526s ago: executing program 3 (id=4510): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100"], 0x64}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20004084}, 0x8044) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f00000006c0)={0x2, 0x1, 0x1c, 0x14, 0x43, 0x0}) 3.76407995s ago: executing program 5 (id=4511): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0)={0x23, 0x0, 0x8}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') memfd_create(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) socket$kcm(0x10, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1, 0xfffffa16}, 0x28) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) 3.652121355s ago: executing program 3 (id=4512): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000002100012e864e9600000000000a00000300000000000000000c001400964e862e25ae3566"], 0x28}}, 0x20000014) 3.638254963s ago: executing program 2 (id=4513): bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}}, 0x18) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000180)={0x5, 0x81, 0xfffffff7, {0x7, 0x1c}, 0x1, 0x3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x20) fcntl$setlease(r6, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(0x0, 0x0, 0x40000) close_range(r1, 0xffffffffffffffff, 0x0) 2.433221503s ago: executing program 3 (id=4514): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0xffffffffffffffff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x8, &(0x7f0000000040), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x7, 0x81, 0x2) r3 = gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_open(&(0x7f0000000000)='!\x00', 0x40, 0x10, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r5, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) close_range(r0, 0xffffffffffffffff, 0x0) 2.400503514s ago: executing program 2 (id=4515): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_macvtap\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002000)=ANY=[@ANYBLOB="4001000010003306000000000400", @ANYRES32=0x0], 0x140}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x3b91b54cec0633d2) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) setsockopt$sock_attach_bpf(r4, 0x6, 0x25, &(0x7f0000000040), 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') mount$nfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x0) 1.462432234s ago: executing program 2 (id=4516): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setuid(0xee01) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x40, 0xb9779d2cb9789c28, 0x1f, {0x1f, 0x21, "e267900a2f99c33cefcc181cb2e5dae0820c3d7390af1ad63862705aa3"}}, &(0x7f00000005c0)={0x0, 0x3, 0x9b, @string={0x9b, 0x3, "d096f2d4eae3f006090f70d334d6ad6f25e758f0b0b6165ad5318f874d9ae9ce4bb7a88f11d307f3a8666a94a8ccfafbe76e34d8f0abe4ebe145505f0d3f0b3e66e7d162695b612d98b6c913fe1ebd2232763925e663a187cbc185bcae423a6ceb21f01955b9f0c4bf75420c9b1eb92d0d5f8958b368c1774a3d4a137f6cb4a254cdd810c5d283714a1a6637a1e77bfad8148c7a763e9d12a2"}}}, &(0x7f00000008c0)={0x34, &(0x7f00000006c0)={0x40, 0xd, 0x8d, "b7bdb3f75259ad080493db7414c750326f36eff1570de20efc48bebafa19f8e4070165e246b4354d299e2fb00fbaf13d6c4138498fe4a362ecbc7f5da64a2fa393c98ef57a51eaf5f4dbd4e773fd98d8302dfeaf9f0f9a7049fef6145d6bfd04f62a18941bd9726e11f02ae905e79ba2b40d0e7faa7b12ac0f04ce7041fd966bca78e117f1dc6b22b0468255b4"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000800)={0x20, 0x0, 0x28, {0x26, "b3569b7386aa70546800ad0ded9c94978d8a0b9d205e86596f525adf4775c63254d7a414c412"}}, &(0x7f0000000840)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000880)={0x20, 0x0, 0x1, 0xda}}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0xa0201, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x400, 0x1, 0x1}, 0x0, &(0x7f0000001540)) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103001) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000480)={{0x3, 0x3, 0x24000000, 0x3ff, '\x00', 0x6}, 0x1, [0x9, 0x11, 0xfffffffffffffff9, 0x5, 0xf, 0x1, 0x0, 0xff, 0xffffffffffffffff, 0x9, 0x1, 0x8, 0xfffffffffffffff7, 0x4, 0x3ff, 0x1, 0x36, 0x482, 0xc0010, 0x9, 0x1, 0x3ff, 0x7ff, 0x5, 0x80, 0x0, 0x4, 0x6, 0xffffffff, 0x9, 0x1, 0x71, 0xa, 0x2, 0x1ff, 0x7fffffff, 0x9, 0x4, 0x5, 0x10, 0xfffffffffffffff7, 0x16, 0x9db6, 0x7f, 0xfffffffffffffff6, 0x2, 0x5, 0x7, 0x0, 0xf, 0x3, 0x303, 0xa2, 0x8000, 0x20003, 0x400, 0x9, 0x1fd, 0x3, 0x2, 0xc9a8, 0xffffffff, 0x3, 0x8, 0xffff, 0x0, 0x10000, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x9, 0xec, 0x7f, 0xffffffffffffffff, 0x100000000, 0x9f1a, 0xffffffffffffffff, 0xffffffff, 0x8, 0x0, 0x9, 0x3, 0x9, 0x1, 0x4, 0x3, 0xa, 0x8, 0x8, 0x1, 0x2, 0x4, 0xbf, 0xe70, 0xfffffffffffffff7, 0xb, 0x8000000000000000, 0x6, 0x9, 0x5, 0x639, 0x8000000000000000, 0x4, 0x400, 0x9a06, 0x9, 0xffffffff00000000, 0x3, 0xb3, 0x200080000001, 0x5, 0xd30, 0x3, 0x4, 0x256, 0x6ff, 0x3, 0x7, 0x1ff, 0x6, 0x9, 0x0, 0x1b485fe1, 0x7, 0x7, 0xfffffffffffffff7, 0x9]}) 1.438505848s ago: executing program 5 (id=4517): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0xffffffffffffffff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x8, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x7, 0x81, 0x2) r3 = gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_open(&(0x7f0000000000)='!\x00', 0x40, 0x10, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r5, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) close_range(r0, 0xffffffffffffffff, 0x0) 1.13770383s ago: executing program 1 (id=4518): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0)={0x23, 0x0, 0x8}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') memfd_create(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) r4 = socket$kcm(0x10, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1, 0xfffffa16}, 0x28) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000680)=ANY=[@ANYBLOB="8fd117c2283cb3aa4b432fb70290af37adffa9b76c18c779960e134ef1efc1c19ad39acd141869137da8c71023d0470ef7a71e5e6128959050cbdfd2fd8c8557bbe7cbd3ca681f54d4e83bcb181f67d919e2050e3db4f848e3450b9d550745b3a6d824039fee4e8ea20183ec6c0cf4bd27ba163795fcf1da46b4dbb110d774e8cf54e5c3b8bc068bc59cd63f946d1692bf88d5552018c51ea1e8469b3038bebe5bb51ff58731d56569fb82515c46e33c4a5bcd3f9fe42e4e5ab757c33e762a77c1ab8f97ad37ebc84683d0c87443", @ANYRES8=r3, @ANYRES8, @ANYBLOB="ad746cd315684fb8a4bf8d2ee6b38413ce519eedb9963c108c64cf3811eb7d215c6a5734c7fa4fc83744ef4fa329e669304506969114325c27dc0d22b0eba94e36e5267b62f1f09689390811f06cc2bf94f472c71bea8d73f54607da8599b123cb38bf8571990387467029b26c8df5aab4375359cccc7daafc2ce3c0ab3eba903107decbcd5bd4dfd99ab93714f291f7cb71933d69ab3387839fcae062bcd4ebaafd280cad8994f6d4053c5e21488995f2e739e3f2c1dbd477487bff19ddfd0de5d18054cb", @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="d3ad35ae690cb6d25580ab04f9c8fba2e9d0aedbbb7013b39203c4ccea7466e74120a886afc46ba18cf65fa71cc220ce4fb3a67bacf7d1ba2f6ba1945d50c29160c1c2e5995f1d77c0eb2c49b6ef409964327e2c9a97c1458599cb9d93a4f5f814e66a6fce7f928c9126f70bdb157487feaf6b4bd9edeef83af990d8f189b6bed8cc9550b698b7b99da2d4cd97cc4afe", @ANYRESHEX=r3], 0xff2e) 501.831922ms ago: executing program 6 (id=4519): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, 0x0, 0x0, 0x12}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000000)={@private0}, 0x14) 333.522185ms ago: executing program 3 (id=4520): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a80), 0x0, 0x0, 0x0, 0xd0010100}, 0x20000000) 225.105492ms ago: executing program 3 (id=4521): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0xdc) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={@none, 0x9}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r3 = socket(0x2, 0x2, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x5) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x14, 0x0) 222.78917ms ago: executing program 5 (id=4522): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 179.486406ms ago: executing program 1 (id=4523): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0)={0x23, 0x0, 0x8}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') memfd_create(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) socket$kcm(0x10, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1, 0xfffffa16}, 0x28) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) 0s ago: executing program 2 (id=4524): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0xcc0}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_complete(0x0) openat2(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4000, 0x4, 0x22}, 0x18) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0x18ff8) socket(0x21, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb4}}, 0x0) r3 = io_uring_setup(0x72c9, &(0x7f0000000040)={0x0, 0x8000c89f, 0xc800, 0x2, 0x20002f7}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): x54/0x5d0 [ 1283.326810][T20390] ? security_capable+0x7e/0x260 [ 1283.326829][T20390] bpf_prog_alloc+0x3b/0x230 [ 1283.326838][T20390] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1283.326851][T20390] bpf_prog_load+0x1a04/0x2490 [ 1283.326868][T20390] ? __pfx_bpf_prog_load+0x10/0x10 [ 1283.326884][T20390] ? avc_has_perm+0x144/0x1f0 [ 1283.326906][T20390] ? selinux_bpf+0xde/0x130 [ 1283.326921][T20390] ? bpf_lsm_bpf+0x9/0x10 [ 1283.326944][T20390] __sys_bpf+0x4a3f/0x4de0 [ 1283.326960][T20390] ? __pfx___sys_bpf+0x10/0x10 [ 1283.326973][T20390] ? ksys_write+0x190/0x250 [ 1283.326987][T20390] ? __mutex_unlock_slowpath+0x163/0x800 [ 1283.327012][T20390] ? fput+0x70/0xf0 [ 1283.327025][T20390] ? ksys_write+0x1ac/0x250 [ 1283.327035][T20390] ? __pfx_ksys_write+0x10/0x10 [ 1283.327048][T20390] __x64_sys_bpf+0x78/0xc0 [ 1283.327062][T20390] ? lockdep_hardirqs_on+0x7c/0x110 [ 1283.327077][T20390] do_syscall_64+0xcd/0x4c0 [ 1283.327094][T20390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.327105][T20390] RIP: 0033:0x7f6894b8eb69 [ 1283.327116][T20390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1283.327127][T20390] RSP: 002b:00007f6895a92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1283.327138][T20390] RAX: ffffffffffffffda RBX: 00007f6894db5fa0 RCX: 00007f6894b8eb69 [ 1283.327146][T20390] RDX: 0000000000000090 RSI: 0000200000000340 RDI: 0000000000000005 [ 1283.327152][T20390] RBP: 00007f6895a92090 R08: 0000000000000000 R09: 0000000000000000 [ 1283.327159][T20390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.327165][T20390] R13: 0000000000000000 R14: 00007f6894db5fa0 R15: 00007ffc483ee028 [ 1283.327179][T20390] [ 1283.327185][T20390] syz.5.3936: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1283.634981][T20390] CPU: 1 UID: 0 PID: 20390 Comm: syz.5.3936 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1283.635000][T20390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1283.635007][T20390] Call Trace: [ 1283.635013][T20390] [ 1283.635018][T20390] dump_stack_lvl+0x16c/0x1f0 [ 1283.635038][T20390] warn_alloc+0x248/0x3a0 [ 1283.635051][T20390] ? __pfx_warn_alloc+0x10/0x10 [ 1283.635062][T20390] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 1283.635082][T20390] ? __kasan_kmalloc+0x8a/0xb0 [ 1283.635093][T20390] ? __get_vm_area_node+0x208/0x330 [ 1283.635111][T20390] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 1283.635128][T20390] ? find_held_lock+0x2b/0x80 [ 1283.635142][T20390] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1283.635159][T20390] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1283.635175][T20390] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1283.635191][T20390] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1283.635208][T20390] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1283.635218][T20390] __vmalloc_node_noprof+0xad/0xf0 [ 1283.635233][T20390] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1283.635245][T20390] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1283.635255][T20390] ? security_capable+0x7e/0x260 [ 1283.635274][T20390] bpf_prog_alloc+0x3b/0x230 [ 1283.635284][T20390] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1283.635297][T20390] bpf_prog_load+0x1a04/0x2490 [ 1283.635314][T20390] ? __pfx_bpf_prog_load+0x10/0x10 [ 1283.635329][T20390] ? avc_has_perm+0x144/0x1f0 [ 1283.635352][T20390] ? selinux_bpf+0xde/0x130 [ 1283.635366][T20390] ? bpf_lsm_bpf+0x9/0x10 [ 1283.635383][T20390] __sys_bpf+0x4a3f/0x4de0 [ 1283.635398][T20390] ? __pfx___sys_bpf+0x10/0x10 [ 1283.635412][T20390] ? ksys_write+0x190/0x250 [ 1283.635426][T20390] ? __mutex_unlock_slowpath+0x163/0x800 [ 1283.635451][T20390] ? fput+0x70/0xf0 [ 1283.635464][T20390] ? ksys_write+0x1ac/0x250 [ 1283.635474][T20390] ? __pfx_ksys_write+0x10/0x10 [ 1283.635487][T20390] __x64_sys_bpf+0x78/0xc0 [ 1283.635505][T20390] ? lockdep_hardirqs_on+0x7c/0x110 [ 1283.635520][T20390] do_syscall_64+0xcd/0x4c0 [ 1283.635537][T20390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.635549][T20390] RIP: 0033:0x7f6894b8eb69 [ 1283.635558][T20390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1283.635569][T20390] RSP: 002b:00007f6895a92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1283.635581][T20390] RAX: ffffffffffffffda RBX: 00007f6894db5fa0 RCX: 00007f6894b8eb69 [ 1283.635588][T20390] RDX: 0000000000000090 RSI: 0000200000000340 RDI: 0000000000000005 [ 1283.635598][T20390] RBP: 00007f6895a92090 R08: 0000000000000000 R09: 0000000000000000 [ 1283.635604][T20390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.635611][T20390] R13: 0000000000000000 R14: 00007f6894db5fa0 R15: 00007ffc483ee028 [ 1283.635625][T20390] [ 1283.635629][T20390] Mem-Info: [ 1283.918840][T20390] active_anon:4562 inactive_anon:0 isolated_anon:0 [ 1283.918840][T20390] active_file:12351 inactive_file:41237 isolated_file:0 [ 1283.918840][T20390] unevictable:768 dirty:260 writeback:9 [ 1283.918840][T20390] slab_reclaimable:7855 slab_unreclaimable:107254 [ 1283.918840][T20390] mapped:30790 shmem:1357 pagetables:1104 [ 1283.918840][T20390] sec_pagetables:0 bounce:0 [ 1283.918840][T20390] kernel_misc_reclaimable:0 [ 1283.918840][T20390] free:1302834 free_pcp:17857 free_cma:0 [ 1283.964624][T20390] Node 0 active_anon:18248kB inactive_anon:0kB active_file:49388kB inactive_file:164732kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123128kB dirty:1040kB writeback:36kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12148kB pagetables:4280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1283.997141][T20390] Node 1 active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1284.027131][T20390] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1284.055876][T20390] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1284.061591][T20390] Node 0 DMA32 free:1316428kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18220kB inactive_anon:0kB active_file:49388kB inactive_file:163416kB unevictable:1536kB writepending:1076kB present:3129332kB managed:2539856kB mlocked:0kB bounce:0kB free_pcp:43776kB local_pcp:25620kB free_cma:0kB [ 1284.093991][T20390] lowmem_reserve[]: 0 0 1 1 1 [ 1284.098669][T20390] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 1284.127610][T20390] lowmem_reserve[]: 0 0 0 0 0 [ 1284.132302][T20390] Node 1 Normal free:3879540kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:216kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:27616kB local_pcp:17024kB free_cma:0kB [ 1284.163612][T20390] lowmem_reserve[]: 0 0 0 0 0 [ 1284.168295][T20390] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1284.180879][T20390] Node 0 DMA32: 1427*4kB (UME) 1290*8kB (UME) 389*16kB (UME) 369*32kB (UME) 253*64kB (UME) 110*128kB (UME) 143*256kB (UME) 84*512kB (UME) 57*1024kB (UM) 24*2048kB (UM) 260*4096kB (UM) = 1316428kB [ 1284.200114][T20390] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1284.212284][T20390] Node 1 Normal: 157*4kB (UME) 52*8kB (UME) 34*16kB (UE) 180*32kB (UE) 63*64kB (UME) 14*128kB (UME) 3*256kB (ME) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 942*4096kB (M) = 3879540kB [ 1284.230219][T20390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1284.239762][T20390] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1284.249070][T20390] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1284.258637][T20390] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1284.270350][T20346] Bluetooth: hci0: command 0x0406 tx timeout [ 1284.276390][T20346] Bluetooth: hci5: command 0x0406 tx timeout [ 1284.284334][T20390] 54941 total pagecache pages [ 1284.296467][T20390] 0 pages in swap cache [ 1284.302357][T20390] Free swap = 124996kB [ 1284.307745][T20390] Total swap = 124996kB [ 1284.316352][ T6853] vhci_hcd: release socket [ 1284.321563][ T6853] vhci_hcd: disconnect device [ 1284.327464][T20390] 2097051 pages RAM [ 1284.340019][T20390] 0 pages HighMem/MovableOnly [ 1284.346369][T20390] 430109 pages reserved [ 1284.350530][T20390] 0 pages cma reserved [ 1284.383980][T17571] vhci_hcd: vhci_device speed not set [ 1285.052899][T13180] Bluetooth: hci1: command 0x0406 tx timeout [ 1286.586506][ T30] audit: type=1400 audit(2000000026.400:626): avc: denied { create } for pid=20421 comm="syz.5.3945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1289.012910][ T975] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1289.162301][T20456] bridge20: entered promiscuous mode [ 1289.167861][T20456] bridge20: entered allmulticast mode [ 1289.182836][T20456] team0: Port device bridge20 added [ 1289.292818][ T975] usb 6-1: Using ep0 maxpacket: 16 [ 1289.304376][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.483760][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1289.607173][ T975] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1289.711080][ T975] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1289.720386][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.730516][ T975] usb 6-1: config 0 descriptor?? [ 1289.782619][T20459] FAULT_INJECTION: forcing a failure. [ 1289.782619][T20459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1289.811220][T20459] CPU: 0 UID: 0 PID: 20459 Comm: syz.3.3954 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1289.811248][T20459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1289.811259][T20459] Call Trace: [ 1289.811265][T20459] [ 1289.811272][T20459] dump_stack_lvl+0x16c/0x1f0 [ 1289.811303][T20459] should_fail_ex+0x512/0x640 [ 1289.811333][T20459] _copy_to_user+0x32/0xd0 [ 1289.811354][T20459] simple_read_from_buffer+0xcb/0x170 [ 1289.811386][T20459] proc_fail_nth_read+0x197/0x240 [ 1289.811408][T20459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1289.811430][T20459] ? rw_verify_area+0xcf/0x6c0 [ 1289.811470][T20459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1289.811494][T20459] vfs_read+0x1e4/0xc60 [ 1289.811515][T20459] ? __pfx___mutex_lock+0x10/0x10 [ 1289.811541][T20459] ? __pfx_vfs_read+0x10/0x10 [ 1289.811566][T20459] ? __fget_files+0x20e/0x3c0 [ 1289.811593][T20459] ksys_read+0x12a/0x250 [ 1289.811609][T20459] ? __pfx_ksys_read+0x10/0x10 [ 1289.811626][T20459] ? fput+0x70/0xf0 [ 1289.811651][T20459] do_syscall_64+0xcd/0x4c0 [ 1289.811678][T20459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.811702][T20459] RIP: 0033:0x7f870ff8d57c [ 1289.811718][T20459] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1289.811735][T20459] RSP: 002b:00007f8710e1a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1289.811753][T20459] RAX: ffffffffffffffda RBX: 00007f87101b5fa0 RCX: 00007f870ff8d57c [ 1289.811764][T20459] RDX: 000000000000000f RSI: 00007f8710e1a0a0 RDI: 0000000000000003 [ 1289.811775][T20459] RBP: 00007f8710e1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1289.811786][T20459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1289.811796][T20459] R13: 0000000000000000 R14: 00007f87101b5fa0 R15: 00007fff5d2dedd8 [ 1289.811821][T20459] [ 1290.814449][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1290.822828][T19954] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1290.830944][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1290.838996][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1290.849755][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1290.963994][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1290.986736][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1291.015033][T19954] usb 2-1: Using ep0 maxpacket: 16 [ 1291.024907][T19954] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1291.386887][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1291.394782][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1291.401983][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1291.409662][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1291.418653][ T975] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1291.430146][T19954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.441771][T19954] usb 2-1: config 0 descriptor?? [ 1291.443075][ T975] microsoft 0003:045E:07DA.0011: no inputs found [ 1291.459179][ T975] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway [ 1291.476071][ T975] usb 6-1: USB disconnect, device number 7 [ 1292.347244][T19954] usbhid 2-1:0.0: can't add hid device: -71 [ 1292.353393][T19954] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1292.361305][T20482] fuse: Bad value for 'fd' [ 1292.378222][T19954] usb 2-1: USB disconnect, device number 38 [ 1293.048055][T20499] bridge18: entered promiscuous mode [ 1293.053490][T20499] bridge18: entered allmulticast mode [ 1293.061583][T20499] team0: Port device bridge18 added [ 1293.134602][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1293.488358][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1293.603571][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1293.625811][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.695672][T20510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3971'. [ 1293.713191][ T30] audit: type=1400 audit(2000000033.530:627): avc: denied { read open } for pid=20507 comm="syz.5.3971" path="/" dev="configfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1293.772437][ T9] usb 7-1: config 0 descriptor?? [ 1293.803272][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1294.588265][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1294.603723][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1294.807947][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1294.885036][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1294.897281][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1295.043850][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1295.128964][T20527] fuse: Bad value for 'fd' [ 1295.384712][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 1295.394497][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 1295.401168][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 1295.419841][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 1295.443331][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 1295.497224][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 1295.504330][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 1295.522852][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1295.540078][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1295.589691][ T9] pwc: Registered as video103. [ 1295.615150][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input20 [ 1295.658182][ T9] usb 7-1: USB disconnect, device number 12 [ 1295.677405][T20542] @: renamed from vlan0 (while UP) [ 1296.246218][ T30] audit: type=1400 audit(2000000036.060:628): avc: denied { write } for pid=20548 comm="syz.3.3980" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1296.604477][T20529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1297.108366][T20564] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 1297.126369][ T30] audit: type=1400 audit(2000000036.940:629): avc: denied { read } for pid=20555 comm="syz.5.3981" path="socket:[66153]" dev="sockfs" ino=66153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1297.427702][T20570] netdevsim netdevsim2: Direct firmware load for þ failed with error -2 [ 1297.533158][T20570] netdevsim netdevsim2: Falling back to sysfs fallback for: þ [ 1298.153680][ T975] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 1298.345577][ T975] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.372949][ T975] usb 4-1: config 0 has no interfaces? [ 1298.382044][T20346] Bluetooth: hci3: hardware error 0x05 [ 1298.387879][ T975] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1299.376689][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.523599][ T975] usb 4-1: config 0 descriptor?? [ 1300.068543][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.075074][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.513103][T20346] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1300.721848][ T30] audit: type=1400 audit(2000000040.530:630): avc: denied { getopt } for pid=20597 comm="syz.6.3992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1301.037195][T20600] syz.5.3991 (20600): drop_caches: 2 [ 1301.044480][T20600] syz.5.3991 (20600): drop_caches: 2 [ 1301.443006][ T975] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1301.665591][ T9] usb 4-1: USB disconnect, device number 40 [ 1301.766877][T20609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.943389][T20609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.725386][ T30] audit: type=1400 audit(2000000042.540:631): avc: denied { setopt } for pid=20615 comm="syz.6.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1305.362238][T20649] fuse: Bad value for 'fd' [ 1305.370940][ T30] audit: type=1400 audit(2000000045.180:632): avc: denied { bind } for pid=20640 comm="syz.3.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1305.397887][T20642] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1305.561869][ T30] audit: type=1400 audit(2000000045.180:633): avc: denied { name_bind } for pid=20640 comm="syz.3.4004" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1305.586636][ T30] audit: type=1400 audit(2000000045.180:634): avc: denied { node_bind } for pid=20640 comm="syz.3.4004" saddr=172.30.0.4 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1306.114876][ T30] audit: type=1400 audit(2000000045.210:635): avc: denied { ioctl } for pid=20640 comm="syz.3.4004" path="socket:[66372]" dev="sockfs" ino=66372 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1306.268085][T20656] fuse: Bad value for 'fd' [ 1309.586285][T20692] fuse: Unknown parameter '0x0000000000000003' [ 1310.331192][T20704] FAULT_INJECTION: forcing a failure. [ 1310.331192][T20704] name failslab, interval 1, probability 0, space 0, times 0 [ 1310.425138][T20704] CPU: 0 UID: 0 PID: 20704 Comm: syz.5.4022 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1310.425167][T20704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1310.425178][T20704] Call Trace: [ 1310.425184][T20704] [ 1310.425192][T20704] dump_stack_lvl+0x16c/0x1f0 [ 1310.425223][T20704] should_fail_ex+0x512/0x640 [ 1310.425250][T20704] ? __kmalloc_noprof+0xbf/0x510 [ 1310.425271][T20704] ? nft_trans_alloc_gfp+0x26/0x2e0 [ 1310.425294][T20704] should_failslab+0xc2/0x120 [ 1310.425315][T20704] __kmalloc_noprof+0xd2/0x510 [ 1310.425331][T20704] ? lockdep_init_map_type+0x5c/0x280 [ 1310.425362][T20704] ? rhashtable_init_noprof+0x55e/0x7e0 [ 1310.425392][T20704] nft_trans_alloc_gfp+0x26/0x2e0 [ 1310.425416][T20704] nf_tables_newtable+0x1387/0x1b40 [ 1310.425443][T20704] ? __pfx_nf_tables_newtable+0x10/0x10 [ 1310.425470][T20704] ? __nla_parse+0x40/0x60 [ 1310.425493][T20704] nfnetlink_rcv_batch+0x18ed/0x2330 [ 1310.425528][T20704] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 1310.425566][T20704] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1310.425620][T20704] ? __nla_parse+0x40/0x60 [ 1310.425650][T20704] nfnetlink_rcv+0x3c1/0x430 [ 1310.425670][T20704] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1310.425690][T20704] ? selinux_netlink_send+0x578/0x830 [ 1310.425708][T20704] ? is_vmalloc_addr+0x86/0xa0 [ 1310.425729][T20704] netlink_unicast+0x5a7/0x870 [ 1310.425759][T20704] ? __pfx_netlink_unicast+0x10/0x10 [ 1310.425785][T20704] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1310.425823][T20704] netlink_sendmsg+0x8d1/0xdd0 [ 1310.425854][T20704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1310.425889][T20704] ____sys_sendmsg+0xa95/0xc70 [ 1310.425909][T20704] ? copy_msghdr_from_user+0x10a/0x160 [ 1310.425933][T20704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1310.425964][T20704] ___sys_sendmsg+0x134/0x1d0 [ 1310.425990][T20704] ? __pfx____sys_sendmsg+0x10/0x10 [ 1310.426012][T20704] ? __lock_acquire+0x622/0x1c90 [ 1310.426062][T20704] ? __mutex_unlock_slowpath+0x140/0x800 [ 1310.426096][T20704] __sys_sendmsg+0x16d/0x220 [ 1310.426120][T20704] ? __pfx___sys_sendmsg+0x10/0x10 [ 1310.426163][T20704] do_syscall_64+0xcd/0x4c0 [ 1310.426191][T20704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.426209][T20704] RIP: 0033:0x7f6894b8eb69 [ 1310.426225][T20704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1310.426243][T20704] RSP: 002b:00007f6895a92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1310.426262][T20704] RAX: ffffffffffffffda RBX: 00007f6894db5fa0 RCX: 00007f6894b8eb69 [ 1310.426274][T20704] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1310.426285][T20704] RBP: 00007f6895a92090 R08: 0000000000000000 R09: 0000000000000000 [ 1310.426296][T20704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1310.426307][T20704] R13: 0000000000000000 R14: 00007f6894db5fa0 R15: 00007ffc483ee028 [ 1310.426332][T20704] [ 1312.052968][T20718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4023'. [ 1312.061965][T20718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4023'. [ 1312.384401][T20721] FAULT_INJECTION: forcing a failure. [ 1312.384401][T20721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1312.428444][T20721] CPU: 0 UID: 0 PID: 20721 Comm: syz.6.4026 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1312.428472][T20721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1312.428483][T20721] Call Trace: [ 1312.428489][T20721] [ 1312.428496][T20721] dump_stack_lvl+0x16c/0x1f0 [ 1312.428525][T20721] should_fail_ex+0x512/0x640 [ 1312.428554][T20721] _copy_from_user+0x2e/0xd0 [ 1312.428572][T20721] copy_msghdr_from_user+0x98/0x160 [ 1312.428596][T20721] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1312.428627][T20721] ___sys_sendmsg+0xfe/0x1d0 [ 1312.428653][T20721] ? __pfx____sys_sendmsg+0x10/0x10 [ 1312.428670][T20721] ? __lock_acquire+0x622/0x1c90 [ 1312.428709][T20721] ? __mutex_unlock_slowpath+0x140/0x800 [ 1312.428735][T20721] __sys_sendmsg+0x16d/0x220 [ 1312.428755][T20721] ? __pfx___sys_sendmsg+0x10/0x10 [ 1312.428786][T20721] do_syscall_64+0xcd/0x4c0 [ 1312.428808][T20721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.428823][T20721] RIP: 0033:0x7f562f78eb69 [ 1312.428835][T20721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1312.428849][T20721] RSP: 002b:00007f56306d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1312.428864][T20721] RAX: ffffffffffffffda RBX: 00007f562f9b5fa0 RCX: 00007f562f78eb69 [ 1312.428874][T20721] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1312.428882][T20721] RBP: 00007f56306d8090 R08: 0000000000000000 R09: 0000000000000000 [ 1312.428891][T20721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1312.428899][T20721] R13: 0000000000000000 R14: 00007f562f9b5fa0 R15: 00007fffd1595808 [ 1312.428918][T20721] [ 1313.386534][ T30] audit: type=1400 audit(2000000053.200:636): avc: denied { watch } for pid=20736 comm="syz.5.4032" path="/585/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=3084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1313.450154][T20737] fuse: Unknown parameter '0x0000000000000003' [ 1313.501792][T20742] FAULT_INJECTION: forcing a failure. [ 1313.501792][T20742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1313.515197][T20742] CPU: 0 UID: 0 PID: 20742 Comm: syz.5.4032 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1313.515222][T20742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1313.515229][T20742] Call Trace: [ 1313.515233][T20742] [ 1313.515238][T20742] dump_stack_lvl+0x16c/0x1f0 [ 1313.515258][T20742] should_fail_ex+0x512/0x640 [ 1313.515278][T20742] strncpy_from_user+0x3b/0x2e0 [ 1313.515296][T20742] getname_flags.part.0+0x8f/0x550 [ 1313.515314][T20742] getname_flags+0x93/0xf0 [ 1313.515325][T20742] user_path_at+0x24/0x60 [ 1313.515336][T20742] __x64_sys_mount+0x1fc/0x310 [ 1313.515351][T20742] ? __pfx___x64_sys_mount+0x10/0x10 [ 1313.515369][T20742] do_syscall_64+0xcd/0x4c0 [ 1313.515386][T20742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.515398][T20742] RIP: 0033:0x7f6894b8eb69 [ 1313.515407][T20742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1313.515418][T20742] RSP: 002b:00007f6895a71038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1313.515429][T20742] RAX: ffffffffffffffda RBX: 00007f6894db6080 RCX: 00007f6894b8eb69 [ 1313.515436][T20742] RDX: 0000200000000280 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1313.515443][T20742] RBP: 00007f6895a71090 R08: 0000200000000a00 R09: 0000000000000000 [ 1313.515449][T20742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1313.515456][T20742] R13: 0000000000000001 R14: 00007f6894db6080 R15: 00007ffc483ee028 [ 1313.515470][T20742] [ 1313.693269][ T9] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1313.892172][ T30] audit: type=1400 audit(2000000053.200:637): avc: denied { watch_sb watch_reads } for pid=20736 comm="syz.5.4032" path="/585/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=3084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1314.118309][ T30] audit: type=1400 audit(2000000053.840:638): avc: denied { execmem } for pid=20743 comm="syz.5.4034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1314.150450][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1314.167382][ T9] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1314.176532][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.611851][T19345] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1314.641957][ T9] usb 3-1: config 0 descriptor?? [ 1314.765657][T19345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1314.776114][T19345] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1314.779368][T20751] Bluetooth: MGMT ver 1.23 [ 1314.785368][T19345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.787569][T19345] usb 4-1: config 0 descriptor?? [ 1314.971501][T20754] syz.1.4035: attempt to access beyond end of device [ 1314.971501][T20754] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1314.984732][T20752] nbd1: detected capacity change from 0 to 10 [ 1314.993050][T20754] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1315.013520][T20754] block nbd1: Send control failed (result -89) [ 1315.018727][T20756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1315.021666][T20754] block nbd1: Request send failed, requeueing [ 1315.146125][ T6507] block nbd1: Dead connection, failed to find a fallback [ 1315.167100][ T6507] block nbd1: shutting down sockets [ 1315.173416][ T6507] I/O error, dev nbd1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1315.371749][T20754] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=4, location=4 [ 1315.383014][T20754] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1315.406971][T20756] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4037'. [ 1315.408291][T19345] itetech 0003:258A:6A88.0013: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.3-1/input0 [ 1315.418038][T20754] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3, location=3 [ 1315.430653][ T9] nintendo 0003:057E:200E.0012: hidraw1: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.2-1/input0 [ 1315.449451][T20754] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1315.462913][T20754] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2, location=2 [ 1315.472633][T20754] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1315.482607][T20754] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 1315.490460][T20754] UDF-fs: Scanning with blocksize 1024 failed [ 1315.499508][T20754] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1315.513026][T20754] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1315.522225][T20754] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 1315.531612][T20754] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1315.534574][ T9] nintendo 0003:057E:200E.0012: Failed charging grip handshake [ 1315.540903][T20754] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 1315.558206][T20754] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1315.567791][T20754] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 1315.572206][ T9] nintendo 0003:057E:200E.0012: Failed to initialize controller; ret=-110 [ 1315.575420][T20754] UDF-fs: Scanning with blocksize 2048 failed [ 1315.575984][T20754] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1315.600078][T20754] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1315.622843][T20754] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 1315.651118][ T9] nintendo 0003:057E:200E.0012: probe - fail = -110 [ 1315.658557][ T9] nintendo 0003:057E:200E.0012: probe with driver nintendo failed with error -110 [ 1315.673187][T20754] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1315.692830][T20754] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 1315.713773][T20754] UDF-fs: Scanning with blocksize 4096 failed [ 1315.735975][T20741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.745575][T20754] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 1315.753176][T20741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.766201][ T9] usb 4-1: USB disconnect, device number 41 [ 1316.412043][T20776] fuse: Unknown parameter '0x0000000000000003' [ 1316.462453][T20778] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4044'. [ 1317.074487][T19345] usb 3-1: USB disconnect, device number 37 [ 1317.090261][ T30] audit: type=1326 audit(2000000056.900:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20780 comm="syz.6.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562f78eb69 code=0x7ffc0000 [ 1317.098832][T20782] syz.6.4045 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1317.247836][ T30] audit: type=1326 audit(2000000056.910:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20780 comm="syz.6.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f562f78eb69 code=0x7ffc0000 [ 1317.272527][ T30] audit: type=1326 audit(2000000056.960:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20780 comm="syz.6.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562f78eb69 code=0x7ffc0000 [ 1317.361257][ T30] audit: type=1326 audit(2000000056.960:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20780 comm="syz.6.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562f78eb69 code=0x7ffc0000 [ 1317.425479][ T30] audit: type=1326 audit(2000000057.050:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20780 comm="syz.6.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f562f78d4d0 code=0x7ffc0000 [ 1317.810950][ T30] audit: type=1326 audit(2000000057.050:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20780 comm="syz.6.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562f78eb69 code=0x7ffc0000 [ 1317.857713][ T30] audit: type=1326 audit(2000000057.050:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20780 comm="syz.6.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562f78eb69 code=0x7ffc0000 [ 1318.261439][T20804] loop3: detected capacity change from 0 to 1 [ 1318.272947][T19345] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 1318.284902][T20804] Dev loop3: unable to read RDB block 1 [ 1318.290446][T20804] loop3: unable to read partition table [ 1318.297434][T20804] loop3: partition table beyond EOD, truncated [ 1318.303757][T20804] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1318.421727][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1318.421744][ T30] audit: type=1400 audit(2000000058.230:654): avc: denied { bind } for pid=20809 comm="syz.6.4053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1318.439531][T19345] usb 4-1: config 0 has an invalid interface number: 207 but max is 0 [ 1318.462283][T19345] usb 4-1: config 0 has no interface number 0 [ 1318.471435][T19345] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 1318.483125][T19345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.495766][T19345] usb 4-1: config 0 descriptor?? [ 1318.508403][T19345] usb 4-1: selecting invalid altsetting 3 [ 1318.514402][T19345] comedi comedi5: could not set alternate setting 3 in high speed [ 1318.522256][T19345] usbdux 4-1:0.207: driver 'usbdux' failed to auto-configure device. [ 1318.532850][T19345] usbdux 4-1:0.207: probe with driver usbdux failed with error -22 [ 1318.794214][T17571] usb 4-1: USB disconnect, device number 42 [ 1319.169795][ T30] audit: type=1400 audit(2000000058.980:655): avc: denied { create } for pid=20817 comm="syz.2.4056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1319.196835][T20818] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4056'. [ 1319.206236][ T30] audit: type=1400 audit(2000000059.010:656): avc: denied { write } for pid=20817 comm="syz.2.4056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1319.308189][ T30] audit: type=1400 audit(2000000059.010:657): avc: denied { nlmsg_read } for pid=20817 comm="syz.2.4056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1319.695957][T20840] syz.1.4059 (20840): drop_caches: 2 [ 1319.702406][T20840] syz.1.4059 (20840): drop_caches: 2 [ 1319.869043][ T30] audit: type=1400 audit(2000000059.680:658): avc: denied { listen } for pid=20831 comm="syz.3.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1320.680484][T20848] FAULT_INJECTION: forcing a failure. [ 1320.680484][T20848] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.693385][T20848] CPU: 0 UID: 0 PID: 20848 Comm: syz.5.4064 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1320.693409][T20848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1320.693421][T20848] Call Trace: [ 1320.693427][T20848] [ 1320.693432][T20848] dump_stack_lvl+0x16c/0x1f0 [ 1320.693453][T20848] should_fail_ex+0x512/0x640 [ 1320.693470][T20848] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1320.693490][T20848] should_failslab+0xc2/0x120 [ 1320.693503][T20848] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1320.693521][T20848] ? __pfx___might_resched+0x10/0x10 [ 1320.693535][T20848] ? alloc_vmap_area+0x645/0x29c0 [ 1320.693551][T20848] alloc_vmap_area+0x645/0x29c0 [ 1320.693571][T20848] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1320.693588][T20848] __get_vm_area_node+0x1ca/0x330 [ 1320.693607][T20848] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1320.693624][T20848] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1320.693636][T20848] ? __pfx___schedule+0x10/0x10 [ 1320.693652][T20848] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1320.693666][T20848] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1320.693682][T20848] ? irqentry_exit+0x3b/0x90 [ 1320.693696][T20848] ? lockdep_hardirqs_on+0x7c/0x110 [ 1320.693714][T20848] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1320.693726][T20848] __vmalloc_node_noprof+0xad/0xf0 [ 1320.693741][T20848] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1320.693754][T20848] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1320.693764][T20848] ? security_capable+0x7e/0x260 [ 1320.693782][T20848] bpf_prog_alloc+0x3b/0x230 [ 1320.693792][T20848] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1320.693806][T20848] bpf_prog_load+0x1a04/0x2490 [ 1320.693822][T20848] ? __pfx_bpf_prog_load+0x10/0x10 [ 1320.693838][T20848] ? avc_has_perm+0x144/0x1f0 [ 1320.693861][T20848] ? selinux_bpf+0xde/0x130 [ 1320.693876][T20848] ? bpf_lsm_bpf+0x9/0x10 [ 1320.693893][T20848] __sys_bpf+0x4a3f/0x4de0 [ 1320.693908][T20848] ? __pfx___sys_bpf+0x10/0x10 [ 1320.693922][T20848] ? ksys_write+0x190/0x250 [ 1320.693936][T20848] ? __mutex_unlock_slowpath+0x163/0x800 [ 1320.693960][T20848] ? fput+0x70/0xf0 [ 1320.693973][T20848] ? ksys_write+0x1ac/0x250 [ 1320.693983][T20848] ? __pfx_ksys_write+0x10/0x10 [ 1320.693996][T20848] __x64_sys_bpf+0x78/0xc0 [ 1320.694010][T20848] ? lockdep_hardirqs_on+0x7c/0x110 [ 1320.694024][T20848] do_syscall_64+0xcd/0x4c0 [ 1320.694040][T20848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.694052][T20848] RIP: 0033:0x7f6894b8eb69 [ 1320.694062][T20848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1320.694072][T20848] RSP: 002b:00007f6895a71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1320.694084][T20848] RAX: ffffffffffffffda RBX: 00007f6894db6080 RCX: 00007f6894b8eb69 [ 1320.694091][T20848] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 1320.694098][T20848] RBP: 00007f6895a71090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.694104][T20848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.694110][T20848] R13: 0000000000000000 R14: 00007f6894db6080 R15: 00007ffc483ee028 [ 1320.694124][T20848] [ 1320.694181][T20848] syz.5.4064: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1321.020105][T20848] CPU: 0 UID: 0 PID: 20848 Comm: syz.5.4064 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1321.020128][T20848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1321.020138][T20848] Call Trace: [ 1321.020144][T20848] [ 1321.020151][T20848] dump_stack_lvl+0x16c/0x1f0 [ 1321.020178][T20848] warn_alloc+0x248/0x3a0 [ 1321.020197][T20848] ? __pfx_warn_alloc+0x10/0x10 [ 1321.020216][T20848] ? kfree+0x2b4/0x4d0 [ 1321.020246][T20848] ? __get_vm_area_node+0x208/0x330 [ 1321.020275][T20848] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 1321.020302][T20848] ? __pfx___schedule+0x10/0x10 [ 1321.020328][T20848] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1321.020359][T20848] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1321.020384][T20848] ? irqentry_exit+0x3b/0x90 [ 1321.020407][T20848] ? lockdep_hardirqs_on+0x7c/0x110 [ 1321.020436][T20848] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1321.020453][T20848] __vmalloc_node_noprof+0xad/0xf0 [ 1321.020476][T20848] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1321.020497][T20848] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1321.020514][T20848] ? security_capable+0x7e/0x260 [ 1321.020545][T20848] bpf_prog_alloc+0x3b/0x230 [ 1321.020560][T20848] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1321.020584][T20848] bpf_prog_load+0x1a04/0x2490 [ 1321.020611][T20848] ? __pfx_bpf_prog_load+0x10/0x10 [ 1321.020636][T20848] ? avc_has_perm+0x144/0x1f0 [ 1321.020673][T20848] ? selinux_bpf+0xde/0x130 [ 1321.020696][T20848] ? bpf_lsm_bpf+0x9/0x10 [ 1321.020720][T20848] __sys_bpf+0x4a3f/0x4de0 [ 1321.020744][T20848] ? __pfx___sys_bpf+0x10/0x10 [ 1321.020766][T20848] ? ksys_write+0x190/0x250 [ 1321.020788][T20848] ? __mutex_unlock_slowpath+0x163/0x800 [ 1321.020828][T20848] ? fput+0x70/0xf0 [ 1321.020849][T20848] ? ksys_write+0x1ac/0x250 [ 1321.020866][T20848] ? __pfx_ksys_write+0x10/0x10 [ 1321.020888][T20848] __x64_sys_bpf+0x78/0xc0 [ 1321.020910][T20848] ? lockdep_hardirqs_on+0x7c/0x110 [ 1321.020933][T20848] do_syscall_64+0xcd/0x4c0 [ 1321.020959][T20848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.020978][T20848] RIP: 0033:0x7f6894b8eb69 [ 1321.020993][T20848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1321.021010][T20848] RSP: 002b:00007f6895a71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1321.021027][T20848] RAX: ffffffffffffffda RBX: 00007f6894db6080 RCX: 00007f6894b8eb69 [ 1321.021039][T20848] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 1321.021050][T20848] RBP: 00007f6895a71090 R08: 0000000000000000 R09: 0000000000000000 [ 1321.021061][T20848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1321.021072][T20848] R13: 0000000000000000 R14: 00007f6894db6080 R15: 00007ffc483ee028 [ 1321.021095][T20848] [ 1321.021165][T20848] Mem-Info: [ 1321.244729][ C0] vkms_vblank_simulate: vblank timer overrun [ 1321.306344][T20848] active_anon:7134 inactive_anon:0 isolated_anon:0 [ 1321.306344][T20848] active_file:12351 inactive_file:41253 isolated_file:0 [ 1321.306344][T20848] unevictable:768 dirty:630 writeback:0 [ 1321.306344][T20848] slab_reclaimable:7919 slab_unreclaimable:107401 [ 1321.306344][T20848] mapped:33756 shmem:3431 pagetables:1120 [ 1321.306344][T20848] sec_pagetables:0 bounce:0 [ 1321.306344][T20848] kernel_misc_reclaimable:0 [ 1321.306344][T20848] free:1298618 free_pcp:17491 free_cma:0 [ 1321.351762][ C0] vkms_vblank_simulate: vblank timer overrun [ 1321.358693][T20848] Node 0 active_anon:28536kB inactive_anon:0kB active_file:49388kB inactive_file:164768kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134964kB dirty:2520kB writeback:0kB shmem:12188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12032kB pagetables:4344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1321.390697][ C0] vkms_vblank_simulate: vblank timer overrun [ 1321.397550][T20848] Node 1 active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1321.428372][T20848] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1321.458221][T20848] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1321.465228][T20848] Node 0 DMA32 free:1298792kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28508kB inactive_anon:0kB active_file:49388kB inactive_file:163452kB unevictable:1536kB writepending:2520kB present:3129332kB managed:2539856kB mlocked:0kB bounce:0kB free_pcp:45540kB local_pcp:16588kB free_cma:0kB [ 1321.498028][ C0] vkms_vblank_simulate: vblank timer overrun [ 1321.504738][T20848] lowmem_reserve[]: 0 0 1 1 1 [ 1321.510066][T20848] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 1321.539321][ C0] vkms_vblank_simulate: vblank timer overrun [ 1321.543569][T20830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4060'. [ 1321.548982][T20848] lowmem_reserve[]: 0 0 0 0 0 [ 1321.559211][T20848] Node 1 Normal free:3880312kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:244kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:26816kB local_pcp:10400kB free_cma:0kB [ 1321.590697][ C0] vkms_vblank_simulate: vblank timer overrun [ 1321.598030][T20848] lowmem_reserve[]: 0 0 0 0 0 [ 1321.603349][T20848] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1321.617164][T20848] Node 0 DMA32: 2*4kB (ME) 37*8kB (E) 274*16kB (UM) 592*32kB (UME) 275*64kB (UME) 108*128kB (UME) 136*256kB (UME) 85*512kB (UME) 62*1024kB (UM) 18*2048kB (UM) 260*4096kB (UM) = 1298704kB [ 1321.636575][T20848] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1321.649023][T20848] Node 1 Normal: 158*4kB (UME) 54*8kB (UME) 35*16kB (UME) 189*32kB (UE) 70*64kB (UME) 14*128kB (UME) 3*256kB (ME) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 942*4096kB (M) = 3880312kB [ 1321.668748][T20848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1321.678538][T20848] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1321.688042][T20848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1321.697790][T20848] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1321.707366][T20848] 57806 total pagecache pages [ 1321.712238][T20848] 0 pages in swap cache [ 1321.716727][T20848] Free swap = 124996kB [ 1321.720997][T20848] Total swap = 124996kB [ 1321.725458][T20848] 2097051 pages RAM [ 1321.729671][T20848] 0 pages HighMem/MovableOnly [ 1321.734539][T20848] 430109 pages reserved [ 1321.738697][T20848] 0 pages cma reserved [ 1322.034900][T20849] FAULT_INJECTION: forcing a failure. [ 1322.034900][T20849] name failslab, interval 1, probability 0, space 0, times 0 [ 1322.189700][T20849] CPU: 1 UID: 0 PID: 20849 Comm: syz.2.4060 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1322.189728][T20849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1322.189739][T20849] Call Trace: [ 1322.189746][T20849] [ 1322.189753][T20849] dump_stack_lvl+0x16c/0x1f0 [ 1322.189784][T20849] should_fail_ex+0x512/0x640 [ 1322.189810][T20849] ? __kmalloc_noprof+0xbf/0x510 [ 1322.189829][T20849] ? kernfs_fop_write_iter+0x237/0x510 [ 1322.189846][T20849] should_failslab+0xc2/0x120 [ 1322.189866][T20849] __kmalloc_noprof+0xd2/0x510 [ 1322.189890][T20849] kernfs_fop_write_iter+0x237/0x510 [ 1322.189912][T20849] vfs_write+0x6c4/0x1150 [ 1322.189930][T20849] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1322.189949][T20849] ? __pfx___mutex_lock+0x10/0x10 [ 1322.189974][T20849] ? __pfx_vfs_write+0x10/0x10 [ 1322.190009][T20849] ksys_write+0x12a/0x250 [ 1322.190026][T20849] ? __pfx_ksys_write+0x10/0x10 [ 1322.190052][T20849] do_syscall_64+0xcd/0x4c0 [ 1322.190080][T20849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.190098][T20849] RIP: 0033:0x7f21c5b8eb69 [ 1322.190113][T20849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1322.190130][T20849] RSP: 002b:00007f21c69d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1322.190148][T20849] RAX: ffffffffffffffda RBX: 00007f21c5db6080 RCX: 00007f21c5b8eb69 [ 1322.190160][T20849] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 000000000000000d [ 1322.190172][T20849] RBP: 00007f21c69d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1322.190183][T20849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1322.190193][T20849] R13: 0000000000000000 R14: 00007f21c5db6080 R15: 00007ffdcadc4948 [ 1322.190217][T20849] [ 1322.631284][T20849] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 1322.637919][T20849] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1322.652389][T20856] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1322.659787][T20857] vhci_hcd: connection closed [ 1322.661353][T20849] vhci_hcd vhci_hcd.0: Device attached [ 1322.698951][ T6848] vhci_hcd: stop threads [ 1322.705362][ T6848] vhci_hcd: release socket [ 1322.762538][ T6848] vhci_hcd: disconnect device [ 1322.819621][T20863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4068'. [ 1323.078853][T20863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4068'. [ 1325.836877][T20897] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1325.843422][T20897] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1325.851374][T20897] vhci_hcd vhci_hcd.0: Device attached [ 1326.019952][T20904] syz.2.4075 (20904): drop_caches: 2 [ 1326.029085][T20904] syz.2.4075 (20904): drop_caches: 2 [ 1326.073970][T20900] vhci_hcd: connection closed [ 1326.112857][ T975] vhci_hcd: vhci_device speed not set [ 1326.136062][T12533] vhci_hcd: stop threads [ 1326.140324][T12533] vhci_hcd: release socket [ 1326.161916][T12533] vhci_hcd: disconnect device [ 1326.198945][ T975] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 1326.249989][ T975] usb 39-1: enqueue for inactive port 0 [ 1326.362837][ T975] vhci_hcd: vhci_device speed not set [ 1326.368429][ T30] audit: type=1400 audit(2000000066.170:659): avc: denied { getopt } for pid=20909 comm="syz.1.4078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1327.385979][ T30] audit: type=1400 audit(2000000067.200:660): avc: denied { ioctl } for pid=20917 comm="syz.2.4081" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1327.564842][T20922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.572249][T20922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.581464][T20922] bridge0: entered allmulticast mode [ 1327.595812][T20922] bridge_slave_1: left allmulticast mode [ 1327.602197][T20922] bridge_slave_1: left promiscuous mode [ 1327.610140][T20922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.624377][T20922] bridge_slave_0: left allmulticast mode [ 1327.630869][T20922] bridge_slave_0: left promiscuous mode [ 1327.706819][T20922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.367479][T20938] FAULT_INJECTION: forcing a failure. [ 1329.367479][T20938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1329.380744][T20938] CPU: 1 UID: 0 PID: 20938 Comm: syz.3.4086 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1329.380770][T20938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1329.380781][T20938] Call Trace: [ 1329.380787][T20938] [ 1329.380795][T20938] dump_stack_lvl+0x16c/0x1f0 [ 1329.380824][T20938] should_fail_ex+0x512/0x640 [ 1329.380855][T20938] _copy_from_user+0x2e/0xd0 [ 1329.380875][T20938] get_timespec64+0x8b/0x240 [ 1329.380901][T20938] ? __pfx_get_timespec64+0x10/0x10 [ 1329.380927][T20938] ? __pfx___schedule+0x10/0x10 [ 1329.380948][T20938] ? ksys_write+0x1a2/0x250 [ 1329.380965][T20938] ? ksys_write+0x20e/0x250 [ 1329.380985][T20938] __x64_sys_recvmmsg+0x166/0x280 [ 1329.381013][T20938] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1329.381045][T20938] do_syscall_64+0xcd/0x4c0 [ 1329.381071][T20938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.381089][T20938] RIP: 0033:0x7f870ff8eb69 [ 1329.381104][T20938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1329.381121][T20938] RSP: 002b:00007f8710dd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1329.381139][T20938] RAX: ffffffffffffffda RBX: 00007f87101b6160 RCX: 00007f870ff8eb69 [ 1329.381152][T20938] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1329.381163][T20938] RBP: 00007f8710dd8090 R08: 0000200000003700 R09: 0000000000000000 [ 1329.381175][T20938] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 1329.381186][T20938] R13: 0000000000000000 R14: 00007f87101b6160 R15: 00007fff5d2dedd8 [ 1329.381210][T20938] [ 1331.173178][ T30] audit: type=1326 audit(2000000070.000:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20946 comm="syz.2.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c5b8eb69 code=0x7ffc0000 [ 1331.300837][ T30] audit: type=1326 audit(2000000070.000:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20946 comm="syz.2.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c5b8eb69 code=0x7ffc0000 [ 1334.131745][T20990] devpts: Unknown parameter '01777777777777777777777' [ 1334.754119][T20997] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1334.760648][T20997] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1334.817295][T20997] vhci_hcd vhci_hcd.0: Device attached [ 1334.992872][ T9] vhci_hcd: vhci_device speed not set [ 1335.065281][ T9] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 1335.702908][T20999] vhci_hcd: connection reset by peer [ 1335.713301][T12533] vhci_hcd: stop threads [ 1335.717565][T12533] vhci_hcd: release socket [ 1335.745488][T12533] vhci_hcd: disconnect device [ 1335.934348][T13180] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1335.943905][T13180] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1336.002319][T13180] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1336.010731][T13180] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1336.018115][T13180] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1336.244725][T21008] lo speed is unknown, defaulting to 1000 [ 1336.576363][T21015] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.4107'. [ 1337.188241][ T30] audit: type=1400 audit(2000000076.990:663): avc: denied { append } for pid=21021 comm="syz.3.4109" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1337.211566][ C0] vkms_vblank_simulate: vblank timer overrun [ 1337.591930][T21027] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4110'. [ 1337.909787][T21030] syz.1.4108 (21030): drop_caches: 2 [ 1338.178603][T21030] syz.1.4108 (21030): drop_caches: 2 [ 1338.184043][T13180] Bluetooth: hci3: command tx timeout [ 1338.876616][T21039] bridge21: entered promiscuous mode [ 1338.881921][T21039] bridge21: entered allmulticast mode [ 1338.889325][T21039] team0: Port device bridge21 added [ 1338.900455][T21033] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1338.996020][T21029] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1338.997726][ T975] IPVS: starting estimator thread 0... [ 1339.032217][ T6853] dummy0: left allmulticast mode [ 1339.039547][ T6853] bridge0: port 1(dummy0) entered disabled state [ 1339.166804][T21041] IPVS: using max 40 ests per chain, 96000 per kthread [ 1340.223061][T13180] Bluetooth: hci3: command tx timeout [ 1340.292826][ T9] vhci_hcd: vhci_device speed not set [ 1340.463817][T13180] Bluetooth: hci0: command 0x0406 tx timeout [ 1341.045331][ T30] audit: type=1400 audit(2000000080.860:664): avc: denied { read } for pid=21058 comm="syz.3.4116" name="file1" dev="tmpfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1341.191058][T21063] /dev/loop6: Can't open blockdev [ 1341.448401][ T6853] team0: Port device bridge10 removed [ 1341.544501][ T6853] team0: Port device bridge12 removed [ 1341.613119][ T6853] team0: Port device bridge13 removed [ 1341.716148][T21071] syz.2.4118 (21071): drop_caches: 2 [ 1341.729615][T21071] syz.2.4118 (21071): drop_caches: 2 [ 1342.198158][ T6853] bond0 (unregistering): Released all slaves [ 1342.421690][T13180] Bluetooth: hci3: command tx timeout [ 1342.593013][T21080] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1342.620264][T21080] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 1342.635407][T21080] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1342.649055][T21008] chnl_net:caif_netlink_parms(): no params data found [ 1342.674584][ T6853] tipc: Left network mode [ 1342.838344][T21080] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 1343.901504][T21008] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.915655][T21008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.927593][T21008] bridge_slave_0: entered allmulticast mode [ 1343.935186][T21008] bridge_slave_0: entered promiscuous mode [ 1343.945457][T21008] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.952617][T21008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.960011][T21008] bridge_slave_1: entered allmulticast mode [ 1343.968052][T21008] bridge_slave_1: entered promiscuous mode [ 1343.968113][ T30] audit: type=1400 audit(2000000083.750:665): avc: denied { map } for pid=21076 comm="syz.6.4121" path="/435/file0" dev="tmpfs" ino=2320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1344.010535][ T975] IPVS: starting estimator thread 0... [ 1344.772086][T13180] Bluetooth: hci3: command tx timeout [ 1344.943832][T21102] IPVS: using max 72 ests per chain, 172800 per kthread [ 1344.965894][ T975] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1345.037316][T21080] bridge0: entered promiscuous mode [ 1345.044600][T21080] macsec1: entered promiscuous mode [ 1345.058657][T21080] bridge0: port 3(macsec1) entered blocking state [ 1345.067843][T21080] bridge0: port 3(macsec1) entered disabled state [ 1345.081896][T21080] macsec1: entered allmulticast mode [ 1345.088061][T21080] bridge0: entered allmulticast mode [ 1345.098371][T21080] macsec1: left allmulticast mode [ 1345.105563][T21080] bridge0: left allmulticast mode [ 1345.111427][T21080] bridge0: left promiscuous mode [ 1345.151930][ T975] usb 2-1: Using ep0 maxpacket: 8 [ 1345.163201][ T975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.179636][ T975] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1345.188913][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.202462][T21110] netlink: 'syz.2.4128': attribute type 2 has an invalid length. [ 1346.124177][ T975] usb 2-1: config 0 descriptor?? [ 1346.131891][ T975] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1346.206884][T21008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1346.228419][T21008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1346.236111][ T30] audit: type=1400 audit(2000000086.040:666): avc: denied { load_policy } for pid=21112 comm="syz.2.4129" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1346.265074][T21113] SELinux: failed to load policy [ 1346.328316][T21113] netlink: 'syz.2.4129': attribute type 21 has an invalid length. [ 1346.346885][T21113] IPv6: NLM_F_CREATE should be specified when creating new route [ 1346.378175][ T975] gspca_vc032x: reg_r err -71 [ 1346.381461][T21008] team0: Port device team_slave_0 added [ 1346.383867][ T975] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 1346.408404][ T975] usb 2-1: USB disconnect, device number 39 [ 1346.452148][T21008] team0: Port device team_slave_1 added [ 1346.510639][T21008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1346.519351][T21008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.551479][T21008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1346.574223][T21008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1346.581220][T21008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.608902][T21008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1347.321724][T21123] bridge22: entered promiscuous mode [ 1347.327211][T21123] bridge22: entered allmulticast mode [ 1347.343922][T21123] team0: Port device bridge22 added [ 1347.406998][T21008] hsr_slave_0: entered promiscuous mode [ 1347.417908][T21008] hsr_slave_1: entered promiscuous mode [ 1347.459098][T21008] debugfs: 'hsr0' already exists in 'hsr' [ 1347.469951][T21008] Cannot create hsr debugfs directory [ 1348.025281][ T6853] hsr_slave_0: left promiscuous mode [ 1348.051560][ T6853] hsr_slave_1: left promiscuous mode [ 1350.897161][T21180] syz.2.4146 (21180): drop_caches: 2 [ 1350.927998][T21180] syz.2.4146 (21180): drop_caches: 2 [ 1351.467460][T21184] netlink: 'syz.3.4149': attribute type 2 has an invalid length. [ 1353.057123][T21194] fuse: Unknown parameter 'user_i00000000000000000000' [ 1354.211913][T21210] syz.3.4155 (21210): drop_caches: 2 [ 1354.240589][T21210] syz.3.4155 (21210): drop_caches: 2 [ 1354.299762][ T975] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1354.501541][ T975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.560052][ T975] usb 3-1: config 0 has no interfaces? [ 1354.572195][ T975] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1354.612987][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.631444][ T975] usb 3-1: config 0 descriptor?? [ 1354.863300][T21008] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1354.888520][T21008] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1354.903690][T13180] Bluetooth: hci5: unexpected event for opcode 0x080e [ 1354.915312][T21008] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1354.925684][T21008] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1355.655759][T21008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1355.695692][T21008] 8021q: adding VLAN 0 to HW filter on device team0 [ 1355.710653][ T6853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.717780][ T6853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.740732][T21008] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1355.752336][T21008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1355.766199][ T6853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.773320][ T6853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.958624][T21203] delete_channel: no stack [ 1355.963675][T17571] usb 3-1: USB disconnect, device number 38 [ 1357.584944][T21245] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4162'. [ 1357.954472][ T30] audit: type=1400 audit(2000000097.760:667): avc: denied { bind } for pid=21247 comm="syz.6.4163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1357.977267][T21251] mkiss: ax0: crc mode is auto. [ 1357.986774][T21251] cgroup2: Unknown parameter 'contextsysae_u' [ 1357.994905][T21008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1358.426936][T21255] netlink: 'syz.3.4164': attribute type 20 has an invalid length. [ 1358.450582][T21255] dvmrp17: entered allmulticast mode [ 1358.476026][T21255] dvmrp17: left allmulticast mode [ 1359.045844][T21271] bridge14: entered promiscuous mode [ 1359.173125][T21008] veth0_vlan: entered promiscuous mode [ 1359.196071][T21008] veth1_vlan: entered promiscuous mode [ 1359.224781][T21008] veth0_macvtap: entered promiscuous mode [ 1359.238005][T21008] veth1_macvtap: entered promiscuous mode [ 1359.334683][T21008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1359.359621][T21008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1359.390795][ T6848] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.414857][ T6848] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.430117][ T6848] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.442596][ T6848] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.715778][ T6853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.187762][ T6853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1360.245496][ T6848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.255922][ T6848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1360.331975][T21286] netlink: 240 bytes leftover after parsing attributes in process `syz.5.4103'. [ 1361.120256][T21297] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4173'. [ 1361.533890][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.540392][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.226459][T21316] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1363.237518][T21316] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1363.342035][T21324] fuse: Bad value for 'fd' [ 1363.784879][T21331] bridge20: entered promiscuous mode [ 1363.790200][T21331] bridge20: entered allmulticast mode [ 1363.798327][T21331] team0: Port device bridge20 added [ 1366.464392][T21349] ISOFS: Unable to identify CD-ROM format. [ 1366.557648][T21351] mkiss: ax0: crc mode is auto. [ 1366.606055][T21354] virtiofs: Unknown parameter 'always 1 V3 [ 1366.606055][T21354] 010000E0 1 0:00000000 0 [ 1366.606055][T21354] 18 nlmon0 : 1 V3 [ 1366.606055][T21354] 010000E0 1 0:00000000 0 [ 1366.606055][T21354] 20 batadv0 : 1 V3 [ 1366.606055][T21354] 010000E0 1 0:00000000 0 [ 1366.606055][T21354] 21 vxcan0 : 1 V3 [ 1366.606055][T21354] 010000E0 1 0:00000000 0 [ 1366.606055][T21354] 22 vxcan1 : 1 V3 [ 1366.606055][T21354] 010000E0 1 0:00000000 0 [ 1366.606055][T21354] 23 veth0 : 1 V3 [ 1366.606055][T21354] 010000E0 1 0:00000000 0 [ 1366.606055][T21354] 24 veth1 : 1 V3 [ 1366.606055][T21354] 010000E0 1 0:00000000 0 [ 1366.606055][T21354] 25 wg0 : 1 V3 [ 1366.606055][T21354] 010000E0 1 0:00000000 0 [ 1366.606055][T21354] 26 wg1 : 1 V3 [ 1366.606055][T21354] 010000E0 1 0:00000000 0 [ 1366.606055][T21354] 27 wg2 : 1 V3 [ 1366.606055][T21354] 010000E0 1 0:00000000 0 [ 1366.606055][T21354] 28 veth0_to_bridge: 1 V3 [ 1366.606055][T21354] 010000E0 1 0:00000000 0 [ 1366.606055][T21354] 29 bridge_slave_0: 1 V3 [ 1366.606055][T21354] 010000E0 1 0:00000000 0 [ 1366.606055][T21354] 30 veth1_to_bridge: 1 V3 [ 1366.606055][T21354] 010000E0 1 0:00000000 0 [ 1366.606055][T21354] 31 bridge_slave_1: 1 V3 [ 1366.606055][T21354] 010000E0 1 0:00000000 0 [ 1366.606055][T21354] 32 veth0_to_bond: 1 V3 [ 1366.606055][T21354] 010000E0 1 0:00000000 0 [ 1366.606055][T21354] 33 bond_slave_0: 1 V3 [ 1366.606055][T21354] 010000E0 1 0:0 [ 1366.615087][T21357] FAULT_INJECTION: forcing a failure. [ 1366.615087][T21357] name failslab, interval 1, probability 0, space 0, times 0 [ 1366.770735][ C1] vkms_vblank_simulate: vblank timer overrun [ 1366.805282][T21354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4186'. [ 1366.832837][T21357] CPU: 0 UID: 0 PID: 21357 Comm: syz.5.4188 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1366.832859][T21357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1366.832868][T21357] Call Trace: [ 1366.832874][T21357] [ 1366.832881][T21357] dump_stack_lvl+0x16c/0x1f0 [ 1366.832907][T21357] should_fail_ex+0x512/0x640 [ 1366.832930][T21357] ? __kmalloc_noprof+0xbf/0x510 [ 1366.832947][T21357] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1366.832974][T21357] should_failslab+0xc2/0x120 [ 1366.832991][T21357] __kmalloc_noprof+0xd2/0x510 [ 1366.833010][T21357] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1366.833037][T21357] ? cred_has_capability.isra.0+0x190/0x310 [ 1366.833058][T21357] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1366.833087][T21357] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1366.833120][T21357] ? bpf_lsm_capable+0x9/0x10 [ 1366.833147][T21357] ? security_capable+0x7e/0x260 [ 1366.833176][T21357] genl_rcv_msg+0x55c/0x800 [ 1366.833193][T21357] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1366.833207][T21357] ? __pfx_nfc_genl_start_poll+0x10/0x10 [ 1366.833225][T21357] ? __lock_acquire+0x622/0x1c90 [ 1366.833252][T21357] netlink_rcv_skb+0x158/0x420 [ 1366.833273][T21357] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1366.833288][T21357] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1366.833320][T21357] ? netlink_deliver_tap+0x1ae/0xd30 [ 1366.833339][T21357] ? selinux_netlink_send+0x578/0x830 [ 1366.833354][T21357] ? is_vmalloc_addr+0x86/0xa0 [ 1366.833370][T21357] genl_rcv+0x28/0x40 [ 1366.833392][T21357] netlink_unicast+0x5a7/0x870 [ 1366.833418][T21357] ? __pfx_netlink_unicast+0x10/0x10 [ 1366.833452][T21357] netlink_sendmsg+0x8d1/0xdd0 [ 1366.833479][T21357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1366.833512][T21357] ____sys_sendmsg+0xa95/0xc70 [ 1366.833531][T21357] ? copy_msghdr_from_user+0x10a/0x160 [ 1366.833553][T21357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1366.833582][T21357] ___sys_sendmsg+0x134/0x1d0 [ 1366.833607][T21357] ? __pfx____sys_sendmsg+0x10/0x10 [ 1366.833628][T21357] ? __lock_acquire+0x622/0x1c90 [ 1366.833676][T21357] ? __mutex_unlock_slowpath+0x140/0x800 [ 1366.833711][T21357] __sys_sendmsg+0x16d/0x220 [ 1366.833740][T21357] ? __pfx___sys_sendmsg+0x10/0x10 [ 1366.833786][T21357] do_syscall_64+0xcd/0x4c0 [ 1366.833812][T21357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.833830][T21357] RIP: 0033:0x7f5dfb98eb69 [ 1366.833846][T21357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1366.833863][T21357] RSP: 002b:00007f5dfc79f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1366.833881][T21357] RAX: ffffffffffffffda RBX: 00007f5dfbbb5fa0 RCX: 00007f5dfb98eb69 [ 1366.833892][T21357] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 1366.833904][T21357] RBP: 00007f5dfc79f090 R08: 0000000000000000 R09: 0000000000000000 [ 1366.833915][T21357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1366.833926][T21357] R13: 0000000000000000 R14: 00007f5dfbbb5fa0 R15: 00007fffe92e3e28 [ 1366.833951][T21357] [ 1367.156436][T21358] lo speed is unknown, defaulting to 1000 [ 1367.357104][T21364] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4191'. [ 1367.550026][ T30] audit: type=1400 audit(2000000107.360:668): avc: denied { getopt } for pid=21367 comm="syz.1.4189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1368.113311][T21379] bridge0: entered promiscuous mode [ 1368.118600][T21379] bridge0: entered allmulticast mode [ 1368.134835][T21379] team0: Port device bridge0 added [ 1369.617984][T21390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4196'. [ 1370.132884][T17571] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1370.236803][T21410] syz.5.4202: attempt to access beyond end of device [ 1370.236803][T21410] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1370.255102][T21410] syz.5.4202: attempt to access beyond end of device [ 1370.255102][T21410] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1370.268730][T21410] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1370.290964][T21410] syz.5.4202: attempt to access beyond end of device [ 1370.290964][T21410] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1370.305697][ T975] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1370.316035][T17571] usb 7-1: config index 0 descriptor too short (expected 539, got 27) [ 1370.330148][T17571] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 1370.344222][T21410] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1370.356955][T21410] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 1370.367272][T17571] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1370.377709][T17571] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.387709][T17571] usb 7-1: Product: syz [ 1370.391945][T17571] usb 7-1: Manufacturer: syz [ 1370.399105][T17571] usb 7-1: SerialNumber: syz [ 1370.404935][T21410] UDF-fs: Scanning with blocksize 1024 failed [ 1370.443505][T17571] usb 7-1: config 0 descriptor?? [ 1370.457333][T21410] syz.5.4202: attempt to access beyond end of device [ 1370.457333][T21410] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1370.472996][T17571] hub 7-1:0.0: bad descriptor, ignoring hub [ 1370.479030][ T975] usb 4-1: Using ep0 maxpacket: 8 [ 1370.484229][T17571] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1370.495138][ T975] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1370.520362][ T975] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1370.530695][T17571] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input22 [ 1370.540088][T21410] syz.5.4202: attempt to access beyond end of device [ 1370.540088][T21410] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1370.553249][ T975] usb 4-1: config 1 has an invalid interface descriptor of length 2, skipping [ 1370.562094][ T975] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1370.573981][T17571] usbtouchscreen 7-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 1370.609392][T21410] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1370.610815][T17571] usbtouchscreen 7-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 1370.635300][T21410] syz.5.4202: attempt to access beyond end of device [ 1370.635300][T21410] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1370.649225][ T975] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1370.653028][T21410] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1370.660504][ T975] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1370.683742][ T975] usb 4-1: config 1 has no interface number 1 [ 1370.729496][ T975] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1370.758832][T21410] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 1370.778346][T21410] UDF-fs: Scanning with blocksize 2048 failed [ 1370.782736][ T975] usb 4-1: config 1 interface 2 has no altsetting 0 [ 1370.818289][T21410] syz.5.4202: attempt to access beyond end of device [ 1370.818289][T21410] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1370.844069][ T975] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1370.952981][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.961061][ T975] usb 4-1: Product: syz [ 1370.965268][ T975] usb 4-1: Manufacturer: syz [ 1370.970012][ T975] usb 4-1: SerialNumber: syz [ 1370.983014][T21410] syz.5.4202: attempt to access beyond end of device [ 1370.983014][T21410] nbd5: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 1371.002075][T21410] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1371.015375][T21410] syz.5.4202: attempt to access beyond end of device [ 1371.015375][T21410] nbd5: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 1371.029066][T21410] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1371.039442][T21410] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 1371.048968][T21410] UDF-fs: Scanning with blocksize 4096 failed [ 1371.111146][T21410] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1371.122075][T21407] block nbd5: shutting down sockets [ 1371.148195][T21412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4203'. [ 1371.169807][T21412] FAULT_INJECTION: forcing a failure. [ 1371.169807][T21412] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.205262][T21412] CPU: 0 UID: 0 PID: 21412 Comm: syz.2.4203 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1371.205289][T21412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1371.205300][T21412] Call Trace: [ 1371.205306][T21412] [ 1371.205313][T21412] dump_stack_lvl+0x16c/0x1f0 [ 1371.205342][T21412] should_fail_ex+0x512/0x640 [ 1371.205372][T21412] should_failslab+0xc2/0x120 [ 1371.205393][T21412] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1371.205410][T21412] ? skb_clone+0x190/0x3f0 [ 1371.205438][T21412] skb_clone+0x190/0x3f0 [ 1371.205463][T21412] netlink_deliver_tap+0xabd/0xd30 [ 1371.205492][T21412] netlink_unicast+0x71f/0x870 [ 1371.205520][T21412] ? __pfx_netlink_unicast+0x10/0x10 [ 1371.205546][T21412] ? genl_rcv_msg+0x4bb/0x800 [ 1371.205570][T21412] netlink_ack+0x696/0xb80 [ 1371.205603][T21412] netlink_rcv_skb+0x332/0x420 [ 1371.205628][T21412] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1371.205646][T21412] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1371.205682][T21412] ? netlink_deliver_tap+0x1ae/0xd30 [ 1371.205711][T21412] genl_rcv+0x28/0x40 [ 1371.205735][T21412] netlink_unicast+0x5a7/0x870 [ 1371.205762][T21412] ? __pfx_netlink_unicast+0x10/0x10 [ 1371.205804][T21412] netlink_sendmsg+0x8d1/0xdd0 [ 1371.205834][T21412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1371.205870][T21412] ____sys_sendmsg+0xa95/0xc70 [ 1371.205889][T21412] ? copy_msghdr_from_user+0x10a/0x160 [ 1371.205911][T21412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1371.205939][T21412] ___sys_sendmsg+0x134/0x1d0 [ 1371.205965][T21412] ? __pfx____sys_sendmsg+0x10/0x10 [ 1371.205985][T21412] ? __lock_acquire+0x622/0x1c90 [ 1371.206030][T21412] ? __mutex_unlock_slowpath+0x140/0x800 [ 1371.206062][T21412] __sys_sendmsg+0x16d/0x220 [ 1371.206086][T21412] ? __pfx___sys_sendmsg+0x10/0x10 [ 1371.206119][T21412] ? fput+0x70/0xf0 [ 1371.206145][T21412] do_syscall_64+0xcd/0x4c0 [ 1371.206171][T21412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.206189][T21412] RIP: 0033:0x7f21c5b8eb69 [ 1371.206204][T21412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1371.206221][T21412] RSP: 002b:00007f21c69f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1371.206239][T21412] RAX: ffffffffffffffda RBX: 00007f21c5db5fa0 RCX: 00007f21c5b8eb69 [ 1371.206250][T21412] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 0000000000000003 [ 1371.206261][T21412] RBP: 00007f21c69f1090 R08: 0000000000000000 R09: 0000000000000000 [ 1371.206271][T21412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1371.206281][T21412] R13: 0000000000000000 R14: 00007f21c5db5fa0 R15: 00007ffdcadc4948 [ 1371.206304][T21412] [ 1371.488091][ T975] usb 4-1: USB disconnect, device number 43 [ 1371.795173][T21420] bridge1: entered promiscuous mode [ 1371.800743][T21420] bridge1: entered allmulticast mode [ 1371.816280][T21420] team0: Port device bridge1 added [ 1373.323210][T21020] usb 7-1: USB disconnect, device number 13 [ 1373.445769][T21434] FAULT_INJECTION: forcing a failure. [ 1373.445769][T21434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1373.733494][T21434] CPU: 1 UID: 0 PID: 21434 Comm: syz.1.4210 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1373.733521][T21434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1373.733532][T21434] Call Trace: [ 1373.733538][T21434] [ 1373.733545][T21434] dump_stack_lvl+0x16c/0x1f0 [ 1373.733574][T21434] should_fail_ex+0x512/0x640 [ 1373.733604][T21434] _copy_from_user+0x2e/0xd0 [ 1373.733623][T21434] kvm_vm_ioctl+0xa69/0x3ff0 [ 1373.733651][T21434] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1373.733684][T21434] ? kasan_quarantine_put+0x10a/0x240 [ 1373.733712][T21434] ? lockdep_hardirqs_on+0x7c/0x110 [ 1373.733743][T21434] ? find_held_lock+0x2b/0x80 [ 1373.733765][T21434] ? tomoyo_path_number_perm+0x295/0x580 [ 1373.733789][T21434] ? tomoyo_path_number_perm+0x18d/0x580 [ 1373.733810][T21434] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1373.733830][T21434] ? find_held_lock+0x2b/0x80 [ 1373.733857][T21434] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1373.733879][T21434] ? do_vfs_ioctl+0x128/0x14f0 [ 1373.733906][T21434] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1373.733932][T21434] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1373.733964][T21434] ? hook_file_ioctl_common+0x145/0x410 [ 1373.733996][T21434] ? selinux_file_ioctl+0x180/0x270 [ 1373.734021][T21434] ? selinux_file_ioctl+0xb4/0x270 [ 1373.734043][T21434] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1373.734061][T21434] __x64_sys_ioctl+0x18b/0x210 [ 1373.734088][T21434] do_syscall_64+0xcd/0x4c0 [ 1373.734116][T21434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.734133][T21434] RIP: 0033:0x7fd8b158eb69 [ 1373.734148][T21434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1373.734165][T21434] RSP: 002b:00007fd8b2329038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1373.734183][T21434] RAX: ffffffffffffffda RBX: 00007fd8b17b5fa0 RCX: 00007fd8b158eb69 [ 1373.734195][T21434] RDX: 0000200000000300 RSI: 000000004008ae61 RDI: 0000000000000004 [ 1373.734206][T21434] RBP: 00007fd8b2329090 R08: 0000000000000000 R09: 0000000000000000 [ 1373.734216][T21434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1373.734227][T21434] R13: 0000000000000000 R14: 00007fd8b17b5fa0 R15: 00007ffc1746d9b8 [ 1373.734251][T21434] [ 1373.964027][ C1] vkms_vblank_simulate: vblank timer overrun [ 1375.129140][T21453] syz.3.4212 (21453): drop_caches: 2 [ 1375.146490][T21453] syz.3.4212 (21453): drop_caches: 2 [ 1375.710281][T21448] input: syz0 as /devices/virtual/input/input23 [ 1375.787276][T21458] syz.2.4215: attempt to access beyond end of device [ 1375.787276][T21458] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1375.810633][T21458] syz.2.4215: attempt to access beyond end of device [ 1375.810633][T21458] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1375.839642][T21458] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1375.860398][T21458] syz.2.4215: attempt to access beyond end of device [ 1375.860398][T21458] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1375.874719][T21458] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1375.888381][T21458] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1375.899199][T21458] UDF-fs: Scanning with blocksize 1024 failed [ 1375.910158][T21458] syz.2.4215: attempt to access beyond end of device [ 1375.910158][T21458] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1375.924412][T21458] syz.2.4215: attempt to access beyond end of device [ 1375.924412][T21458] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1375.937941][T21458] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1375.958887][T21458] syz.2.4215: attempt to access beyond end of device [ 1375.958887][T21458] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1376.018437][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1376.106571][T21458] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1376.109511][T21452] block nbd2: shutting down sockets [ 1376.236114][T21458] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1376.298794][T21458] UDF-fs: Scanning with blocksize 2048 failed [ 1376.325319][ T9] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1376.344357][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.344407][T21458] syz.2.4215: attempt to access beyond end of device [ 1376.344407][T21458] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1376.352450][ T9] usb 2-1: Product: syz [ 1376.377247][ T9] usb 2-1: Manufacturer: syz [ 1376.389621][ T9] usb 2-1: SerialNumber: syz [ 1376.392435][T21458] syz.2.4215: attempt to access beyond end of device [ 1376.392435][T21458] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 1376.410482][T21458] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1376.420932][ T9] usb 2-1: config 0 descriptor?? [ 1376.436097][ T9] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 040 [ 1376.444222][T21458] syz.2.4215: attempt to access beyond end of device [ 1376.444222][T21458] nbd2: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 1376.459330][T21458] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1376.472200][T21458] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1376.479974][T21458] UDF-fs: Scanning with blocksize 4096 failed [ 1376.486492][T21458] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1376.922363][ T9] (null): failure reading functionality [ 1376.947744][T21448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.005968][T19345] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1377.055853][T21448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.077336][ T9] i2c i2c-1: failure reading functionality [ 1377.084879][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 1377.097272][ T9] usb 2-1: USB disconnect, device number 40 [ 1377.176282][T21481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21481 comm=syz.3.4220 [ 1377.240927][T19345] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1377.284877][T19345] usb 3-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.300594][T21484] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.4223'. [ 1377.381272][T19345] usb 3-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 1377.563215][T19345] usb 3-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1377.573365][T19345] usb 3-1: config 66 interface 0 has no altsetting 0 [ 1377.695526][T19345] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1377.723442][T19345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.731664][T19345] usb 3-1: Product: syz [ 1377.738412][T19345] usb 3-1: Manufacturer: syz [ 1377.748500][T19345] usb 3-1: SerialNumber: syz [ 1379.553608][T21502] IPVS: set_ctl: invalid protocol: 44 172.20.20.51:20001 [ 1379.716508][T19345] ati_remote2 3-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 1380.052758][ T30] audit: type=1400 audit(2000000119.730:669): avc: denied { bind } for pid=21505 comm="syz.2.4230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1380.084727][T19345] usb 3-1: USB disconnect, device number 39 [ 1381.045365][ T30] audit: type=1400 audit(2000000120.840:670): avc: denied { ioctl } for pid=21515 comm="syz.1.4233" path="socket:[69985]" dev="sockfs" ino=69985 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1381.151180][T21512] syz.6.4232: attempt to access beyond end of device [ 1381.151180][T21512] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1381.164042][ T30] audit: type=1400 audit(2000000120.920:671): avc: denied { getopt } for pid=21515 comm="syz.1.4233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1381.192922][T21512] syz.6.4232: attempt to access beyond end of device [ 1381.192922][T21512] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1381.206545][T21512] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1381.216351][T21512] syz.6.4232: attempt to access beyond end of device [ 1381.216351][T21512] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1381.231692][T21512] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1381.235141][T21522] nbd6: detected capacity change from 0 to 10 [ 1381.241234][T21512] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 1381.255402][T21512] UDF-fs: Scanning with blocksize 1024 failed [ 1381.267503][T21512] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1381.278804][T21512] block nbd6: Send control failed (result -89) [ 1381.288520][T21512] block nbd6: Request send failed, requeueing [ 1381.301115][T13180] block nbd6: Receive control failed (result -32) [ 1381.311188][ T6507] block nbd6: Dead connection, failed to find a fallback [ 1381.318586][ T6507] block nbd6: shutting down sockets [ 1381.323991][ T6507] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1381.333590][T21512] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=1, location=1 [ 1381.343470][T21512] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1381.352638][T21512] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=0, location=0 [ 1381.364470][T21512] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1381.380510][T21512] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 1381.388661][T21512] UDF-fs: Scanning with blocksize 2048 failed [ 1381.423687][T21512] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1381.434073][T21512] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1381.443868][T21512] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=0, location=0 [ 1381.453369][T21512] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1381.464205][T21512] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 1381.471786][T21512] UDF-fs: Scanning with blocksize 4096 failed [ 1381.485286][T21512] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 1381.515491][T21529] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4236'. [ 1382.963901][T21548] Bluetooth: MGMT ver 1.23 [ 1382.980194][T21552] vivid-003: disconnect [ 1383.046649][ T30] audit: type=1400 audit(2000000122.860:672): avc: denied { map } for pid=21550 comm="syz.6.4244" path="/dev/vbi7" dev="devtmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1383.080160][ T30] audit: type=1400 audit(2000000122.860:673): avc: denied { execute } for pid=21550 comm="syz.6.4244" path="/dev/vbi7" dev="devtmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1383.147610][T21550] vivid-003: reconnect [ 1383.272007][T21559] syz.5.4241 (21559): drop_caches: 2 [ 1383.278592][T21559] syz.5.4241 (21559): drop_caches: 2 [ 1383.802817][ T9943] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1383.969896][ T9943] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1384.289007][ T9943] usb 7-1: config 0 has no interface number 0 [ 1384.311299][ T9943] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1384.342990][ T9943] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1384.382858][ T9943] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1384.436303][ T9943] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1384.486375][ T9943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.546239][ T9943] usb 7-1: config 0 descriptor?? [ 1385.003598][T21577] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.4251'. [ 1385.486474][T21562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.488724][ T9943] input: HID 28bd:0042 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0042.0014/input/input24 [ 1385.543211][T21562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.697949][ T9943] uclogic 0003:28BD:0042.0014: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.6-1/input1 [ 1386.334633][T21562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.346093][T21562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.379006][T21020] usb 7-1: USB disconnect, device number 14 [ 1386.990218][ T30] audit: type=1400 audit(2000000126.800:674): avc: denied { create } for pid=21597 comm="syz.3.4257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1389.907956][ T30] audit: type=1400 audit(2000000129.720:675): avc: denied { ioctl } for pid=21635 comm="syz.2.4265" path="socket:[70317]" dev="sockfs" ino=70317 ioctlcmd=0x61e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1389.933560][T21636] clip:clip_setentry: non-CLIP VCC [ 1394.664367][T21673] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4275'. [ 1394.695386][T21677] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4277'. [ 1396.088542][T21703] bridge23: entered promiscuous mode [ 1396.093972][T21703] bridge23: entered allmulticast mode [ 1396.101979][T21703] team0: Port device bridge23 added [ 1398.294265][T21723] syz.1.4289: attempt to access beyond end of device [ 1398.294265][T21723] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1398.307653][T21723] syz.1.4289: attempt to access beyond end of device [ 1398.307653][T21723] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1398.510750][T21723] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1399.306843][T21723] syz.1.4289: attempt to access beyond end of device [ 1399.306843][T21723] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1399.405355][T21723] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1399.566728][T21723] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 1399.602427][T21723] UDF-fs: Scanning with blocksize 1024 failed [ 1399.637248][T21723] syz.1.4289: attempt to access beyond end of device [ 1399.637248][T21723] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1399.731651][T21741] fuse: Unknown parameter '0x0000000000000005' [ 1399.782974][T21723] syz.1.4289: attempt to access beyond end of device [ 1399.782974][T21723] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1399.873172][T21723] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1399.934033][T21723] syz.1.4289: attempt to access beyond end of device [ 1399.934033][T21723] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1400.055358][T21723] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1400.178304][T21723] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 1400.381853][T21723] UDF-fs: Scanning with blocksize 2048 failed [ 1400.621700][T21723] syz.1.4289: attempt to access beyond end of device [ 1400.621700][T21723] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1400.688918][T21723] syz.1.4289: attempt to access beyond end of device [ 1400.688918][T21723] nbd1: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 1400.702095][T21723] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1400.713137][T21723] syz.1.4289: attempt to access beyond end of device [ 1400.713137][T21723] nbd1: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 1400.726217][T21723] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1400.736246][T21723] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 1400.744034][T21723] UDF-fs: Scanning with blocksize 4096 failed [ 1400.750199][T21723] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 1400.761137][T21723] block nbd1: shutting down sockets [ 1402.714655][T21785] fuse: Unknown parameter '0x0000000000000005' [ 1403.098740][T21790] syz.2.4305: attempt to access beyond end of device [ 1403.098740][T21790] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1403.290111][T21790] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1403.301009][T21790] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1403.314107][T21790] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1403.321701][T21790] UDF-fs: Scanning with blocksize 1024 failed [ 1403.330170][T21790] bio_check_eod: 2 callbacks suppressed [ 1403.330184][T21790] syz.2.4305: attempt to access beyond end of device [ 1403.330184][T21790] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1403.435978][T21790] syz.2.4305: attempt to access beyond end of device [ 1403.435978][T21790] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1403.594538][T21790] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1403.626153][T21790] syz.2.4305: attempt to access beyond end of device [ 1403.626153][T21790] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1403.626540][T21786] block nbd2: shutting down sockets [ 1404.106076][T21790] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1404.424147][T21804] syz.1.4308 (21804): drop_caches: 2 [ 1404.434037][T21804] syz.1.4308 (21804): drop_caches: 2 [ 1404.513085][T21790] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1404.524399][T21790] UDF-fs: Scanning with blocksize 2048 failed [ 1404.534505][T21790] syz.2.4305: attempt to access beyond end of device [ 1404.534505][T21790] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1404.550023][T21790] syz.2.4305: attempt to access beyond end of device [ 1404.550023][T21790] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 1404.563838][T21790] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1404.583125][T21790] syz.2.4305: attempt to access beyond end of device [ 1404.583125][T21790] nbd2: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 1404.712827][T21790] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1404.847992][T21790] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1404.891629][T21790] UDF-fs: Scanning with blocksize 4096 failed [ 1404.921210][T21790] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1404.948101][T21810] kvm: kvm [21809]: vcpu0, guest rIP: 0xeeee8000 Unhandled WRMSR(0x40000006) = 0x0 [ 1406.232063][T21839] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1406.453019][ T5885] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 1406.659737][ T5885] usb 7-1: config 65 has an invalid interface number: 95 but max is 0 [ 1406.672274][ T5885] usb 7-1: config 65 has no interface number 0 [ 1406.718251][ T5885] usb 7-1: string descriptor 0 read error: -22 [ 1406.727784][ T5885] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 1406.756778][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.801186][ T5885] usbtest 7-1:65.95: Linux gadget zero [ 1406.825488][ T5885] usbtest 7-1:65.95: low-speed {control in/out} tests (+alt) [ 1410.408214][ T30] audit: type=1400 audit(2000000150.210:676): avc: denied { create } for pid=21877 comm="syz.1.4327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1412.845843][ T5885] usb 7-1: USB disconnect, device number 15 [ 1413.438055][T21886] bridge0: port 3(batadv1) entered blocking state [ 1413.448619][T21886] bridge0: port 3(batadv1) entered disabled state [ 1413.456683][T21886] batadv1: entered allmulticast mode [ 1413.476068][T21886] batadv1: entered promiscuous mode [ 1413.487137][T13553] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1413.497076][T13553] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1417.186418][T21950] netlink: 'syz.5.4342': attribute type 3 has an invalid length. [ 1417.526045][T21961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4346'. [ 1417.563776][T21961] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21961 comm=syz.2.4346 [ 1418.292930][T17571] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1418.623293][T17571] usb 2-1: Using ep0 maxpacket: 32 [ 1418.717426][T17571] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1418.729813][T17571] usb 2-1: config 0 has no interface number 0 [ 1418.748106][T17571] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1418.772827][T17571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.780950][T17571] usb 2-1: Product: syz [ 1418.809930][T17571] usb 2-1: Manufacturer: syz [ 1418.815186][T17571] usb 2-1: SerialNumber: syz [ 1418.824751][T17571] usb 2-1: config 0 descriptor?? [ 1418.843033][T17571] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1419.040172][T13180] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 1420.080222][T17571] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1420.087089][T17571] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 1420.097914][T17571] usb 2-1: USB disconnect, device number 41 [ 1420.881039][T22010] tipc: Enabled bearer , priority 0 [ 1420.888495][T22010] syzkaller0: entered promiscuous mode [ 1420.894224][T22010] syzkaller0: entered allmulticast mode [ 1420.905511][T22010] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input26 [ 1420.970825][T22010] tipc: Resetting bearer [ 1420.981027][T22009] tipc: Resetting bearer [ 1421.365060][T22009] tipc: Disabling bearer [ 1421.655174][T19954] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1421.733531][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1421.863597][T19954] usb 7-1: Using ep0 maxpacket: 8 [ 1422.117642][T19954] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1422.132776][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1422.144271][ T9] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1422.163171][ T9] usb 3-1: config 1 has no interface number 0 [ 1422.193841][ T9] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1422.208844][T19954] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 1422.217237][ T9] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1422.383743][T19954] usb 7-1: config 0 has no interface number 0 [ 1422.568692][T19954] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 102, changing to 10 [ 1422.594203][ T9] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1422.601114][T19954] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 24624, setting to 1024 [ 1422.683645][ T9] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1422.794299][T19954] usb 7-1: config 0 interface 88 has no altsetting 0 [ 1422.807394][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.946681][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.953224][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.006207][ T9] usb 3-1: Product: syz [ 1423.012999][T19954] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1423.087393][T19954] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1423.102942][ T9] usb 3-1: Manufacturer: syz [ 1423.105164][T13180] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1423.114056][ T9] usb 3-1: SerialNumber: syz [ 1423.124045][T13180] Bluetooth: hci0: Injecting HCI hardware error event [ 1423.142192][T19954] usb 7-1: Product: syz [ 1423.143427][T13180] Bluetooth: hci0: hardware error 0x00 [ 1423.147904][T22017] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1423.173568][T19954] usb 7-1: Manufacturer: syz [ 1423.178741][T22017] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1423.179004][T19954] usb 7-1: SerialNumber: syz [ 1423.405935][T19954] usb 7-1: config 0 descriptor?? [ 1423.946928][T19954] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input27 [ 1423.958517][T22017] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1423.972972][T22017] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1423.984678][T19954] usb 7-1: USB disconnect, device number 16 [ 1423.984763][ C1] usb_acecad 7-1:0.88: can't resubmit intr, dummy_hcd.6-1/input0, status -19 [ 1424.394851][ T9] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 1424.434018][ T9] aqc111 3-1:1.105: probe with driver aqc111 failed with error -61 [ 1424.599694][ T9] usb 3-1: USB disconnect, device number 40 [ 1425.105618][T22053] binder: BINDER_SET_CONTEXT_MGR already set [ 1425.112107][T22053] binder: 22043:22053 ioctl 4018620d 200000000040 returned -16 [ 1425.159525][T22059] binder: 22043:22059 ioctl c0306201 200000000180 returned -22 [ 1425.185190][T13180] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1426.060209][T22061] comedi comedi0: reset error (fatal) [ 1428.669016][T22105] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4387'. [ 1429.502064][ T30] audit: type=1326 audit(2000000169.310:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22103 comm="syz.6.4386" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f562f78eb69 code=0x0 [ 1429.534961][T17571] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1429.712930][T17571] usb 3-1: Using ep0 maxpacket: 32 [ 1429.722608][T17571] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1429.847352][T17571] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1429.857176][T17571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.873892][T22125] clip:clip_setentry: non-CLIP VCC [ 1429.879784][T17571] usb 3-1: config 0 descriptor?? [ 1431.283920][T22115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4390'. [ 1431.491650][T17571] logitech 0003:046D:C294.0015: unknown main item tag 0x0 [ 1431.592580][T17571] logitech 0003:046D:C294.0015: hidraw0: USB HID vb4.34 Device [HID 046d:c294] on usb-dummy_hcd.2-1/input0 [ 1431.867136][ T30] audit: type=1400 audit(2000000171.470:678): avc: denied { nlmsg_write } for pid=22147 comm="syz.3.4399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1431.932825][T17571] logitech 0003:046D:C294.0015: no inputs found [ 1431.961154][T17571] usb 3-1: USB disconnect, device number 41 [ 1433.305874][T22170] FAULT_INJECTION: forcing a failure. [ 1433.305874][T22170] name failslab, interval 1, probability 0, space 0, times 0 [ 1433.320980][T22170] CPU: 1 UID: 0 PID: 22170 Comm: syz.2.4404 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1433.321006][T22170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1433.321015][T22170] Call Trace: [ 1433.321019][T22170] [ 1433.321024][T22170] dump_stack_lvl+0x16c/0x1f0 [ 1433.321044][T22170] should_fail_ex+0x512/0x640 [ 1433.321064][T22170] should_failslab+0xc2/0x120 [ 1433.321077][T22170] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1433.321094][T22170] ? __sctp_v6_cmp_addr+0x206/0x530 [ 1433.321110][T22170] ? sctp_add_bind_addr+0xae/0x3f0 [ 1433.321124][T22170] sctp_add_bind_addr+0xae/0x3f0 [ 1433.321139][T22170] sctp_copy_local_addr_list+0x349/0x550 [ 1433.321156][T22170] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1433.321172][T22170] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 1433.321188][T22170] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1433.321202][T22170] sctp_bind_addr_copy+0xe0/0x530 [ 1433.321222][T22170] sctp_connect_new_asoc+0x1c9/0x770 [ 1433.321241][T22170] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1433.321264][T22170] sctp_sendmsg+0x1560/0x1e10 [ 1433.321283][T22170] ? __lock_acquire+0xb8a/0x1c90 [ 1433.321301][T22170] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1433.321320][T22170] ? __pfx_sock_has_perm+0x10/0x10 [ 1433.321339][T22170] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1433.321357][T22170] inet_sendmsg+0x119/0x140 [ 1433.321370][T22170] __sys_sendto+0x43c/0x520 [ 1433.321384][T22170] ? __pfx___sys_sendto+0x10/0x10 [ 1433.321410][T22170] ? ksys_write+0x1ac/0x250 [ 1433.321420][T22170] ? __pfx_ksys_write+0x10/0x10 [ 1433.321433][T22170] __x64_sys_sendto+0xe0/0x1c0 [ 1433.321446][T22170] ? do_syscall_64+0x91/0x4c0 [ 1433.321461][T22170] ? lockdep_hardirqs_on+0x7c/0x110 [ 1433.321476][T22170] do_syscall_64+0xcd/0x4c0 [ 1433.321497][T22170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.321509][T22170] RIP: 0033:0x7f21c5b8eb69 [ 1433.321519][T22170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1433.321530][T22170] RSP: 002b:00007f21c69f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1433.321541][T22170] RAX: ffffffffffffffda RBX: 00007f21c5db5fa0 RCX: 00007f21c5b8eb69 [ 1433.321549][T22170] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1433.321555][T22170] RBP: 00007f21c69f1090 R08: 0000200000000080 R09: 000000000000001c [ 1433.321562][T22170] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000001 [ 1433.321569][T22170] R13: 0000000000000000 R14: 00007f21c5db5fa0 R15: 00007ffdcadc4948 [ 1433.321583][T22170] [ 1433.708980][T22177] syz.6.4403: attempt to access beyond end of device [ 1433.708980][T22177] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1433.724586][T22177] syz.6.4403: attempt to access beyond end of device [ 1433.724586][T22177] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1433.738548][T22177] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1433.749957][T22177] syz.6.4403: attempt to access beyond end of device [ 1433.749957][T22177] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1433.765198][T22177] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1433.774906][T22177] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 1433.782643][T22177] UDF-fs: Scanning with blocksize 1024 failed [ 1433.796522][T22177] syz.6.4403: attempt to access beyond end of device [ 1433.796522][T22177] nbd6: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1433.810948][T22177] syz.6.4403: attempt to access beyond end of device [ 1433.810948][T22177] nbd6: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1433.916053][T22177] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1434.054709][T22177] syz.6.4403: attempt to access beyond end of device [ 1434.054709][T22177] nbd6: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1434.441199][T22177] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1434.488880][T22177] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 1434.742973][T22177] UDF-fs: Scanning with blocksize 2048 failed [ 1434.749600][T22177] syz.6.4403: attempt to access beyond end of device [ 1434.749600][T22177] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1434.803016][T22177] syz.6.4403: attempt to access beyond end of device [ 1434.803016][T22177] nbd6: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 1434.962862][T22177] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1434.972487][T22177] syz.6.4403: attempt to access beyond end of device [ 1434.972487][T22177] nbd6: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 1435.032585][T22177] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1435.620273][T22177] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 1435.772787][T22177] UDF-fs: Scanning with blocksize 4096 failed [ 1435.798037][T22177] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 1435.839324][T22177] block nbd6: shutting down sockets [ 1438.452820][T19954] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1439.407596][T19954] usb 4-1: Using ep0 maxpacket: 16 [ 1439.491259][T19954] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1439.499538][T19954] usb 4-1: config 1 has no interface number 0 [ 1439.508374][T19954] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1439.548220][T19954] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1439.591831][T19954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.618271][T19954] usb 4-1: Product: syz [ 1439.636563][T19954] usb 4-1: Manufacturer: syz [ 1439.651915][T22245] syz.1.4425: attempt to access beyond end of device [ 1439.651915][T22245] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1439.667611][T19954] usb 4-1: SerialNumber: syz [ 1439.690952][T22245] syz.1.4425: attempt to access beyond end of device [ 1439.690952][T22245] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1439.713126][T22245] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1439.741235][T22245] syz.1.4425: attempt to access beyond end of device [ 1439.741235][T22245] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1439.768276][T22245] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1439.786267][T22245] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 1439.795461][T22245] UDF-fs: Scanning with blocksize 1024 failed [ 1439.806078][T22245] syz.1.4425: attempt to access beyond end of device [ 1439.806078][T22245] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1439.825109][T22245] syz.1.4425: attempt to access beyond end of device [ 1439.825109][T22245] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1439.841395][T22245] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1439.860704][T22245] syz.1.4425: attempt to access beyond end of device [ 1439.860704][T22245] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1439.889659][T22245] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1439.902332][T22245] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 1439.937759][T22245] UDF-fs: Scanning with blocksize 2048 failed [ 1440.009264][T22245] syz.1.4425: attempt to access beyond end of device [ 1440.009264][T22245] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1440.026467][T22245] syz.1.4425: attempt to access beyond end of device [ 1440.026467][T22245] nbd1: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 1440.040663][T22245] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1440.068980][T22252] fuse: Unknown parameter '' [ 1440.078704][T22245] syz.1.4425: attempt to access beyond end of device [ 1440.078704][T22245] nbd1: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 1440.097670][T19954] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 1440.110509][T22245] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1440.122127][T22245] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 1440.131955][T22245] UDF-fs: Scanning with blocksize 4096 failed [ 1440.140309][T22245] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 1440.860826][T22258] bridge16: entered promiscuous mode [ 1440.866191][T22258] bridge16: entered allmulticast mode [ 1440.873337][T22258] team0: Port device bridge16 added [ 1440.929137][ T5959] usb 4-1: USB disconnect, device number 44 [ 1442.125089][T22280] syz.2.4433 (22280): drop_caches: 2 [ 1442.136237][T22280] syz.2.4433 (22280): drop_caches: 2 [ 1447.940200][T22338] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4450'. [ 1449.579398][T22359] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1452.486999][T22398] bridge26: entered promiscuous mode [ 1452.492442][T22398] bridge26: entered allmulticast mode [ 1452.500624][T22398] team0: Port device bridge26 added [ 1455.760438][T22429] syz.2.4473 (22429): drop_caches: 2 [ 1455.787110][T22429] syz.2.4473 (22429): drop_caches: 2 [ 1455.999326][T22432] FAULT_INJECTION: forcing a failure. [ 1455.999326][T22432] name failslab, interval 1, probability 0, space 0, times 0 [ 1456.173272][T22432] CPU: 1 UID: 0 PID: 22432 Comm: syz.5.4476 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1456.173300][T22432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1456.173311][T22432] Call Trace: [ 1456.173317][T22432] [ 1456.173325][T22432] dump_stack_lvl+0x16c/0x1f0 [ 1456.173355][T22432] should_fail_ex+0x512/0x640 [ 1456.173385][T22432] should_failslab+0xc2/0x120 [ 1456.173405][T22432] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1456.173424][T22432] ? skb_clone+0x190/0x3f0 [ 1456.173452][T22432] skb_clone+0x190/0x3f0 [ 1456.173476][T22432] netlink_deliver_tap+0xabd/0xd30 [ 1456.173506][T22432] netlink_unicast+0x71f/0x870 [ 1456.173535][T22432] ? __pfx_netlink_unicast+0x10/0x10 [ 1456.173561][T22432] ? genl_rcv_msg+0x4bb/0x800 [ 1456.173584][T22432] netlink_ack+0x696/0xb80 [ 1456.173618][T22432] netlink_rcv_skb+0x332/0x420 [ 1456.173642][T22432] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1456.173660][T22432] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1456.173703][T22432] genl_rcv+0x28/0x40 [ 1456.173728][T22432] netlink_unicast+0x5a7/0x870 [ 1456.173756][T22432] ? __pfx_netlink_unicast+0x10/0x10 [ 1456.173786][T22432] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1456.173819][T22432] netlink_sendmsg+0x8d1/0xdd0 [ 1456.173847][T22432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1456.173882][T22432] ____sys_sendmsg+0xa95/0xc70 [ 1456.173900][T22432] ? copy_msghdr_from_user+0x10a/0x160 [ 1456.173924][T22432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1456.173954][T22432] ___sys_sendmsg+0x134/0x1d0 [ 1456.173979][T22432] ? __pfx____sys_sendmsg+0x10/0x10 [ 1456.174000][T22432] ? __lock_acquire+0x622/0x1c90 [ 1456.174057][T22432] ? __mutex_unlock_slowpath+0x140/0x800 [ 1456.174091][T22432] __sys_sendmsg+0x16d/0x220 [ 1456.174115][T22432] ? __pfx___sys_sendmsg+0x10/0x10 [ 1456.174156][T22432] do_syscall_64+0xcd/0x4c0 [ 1456.174182][T22432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.174200][T22432] RIP: 0033:0x7f5dfb98eb69 [ 1456.174215][T22432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1456.174231][T22432] RSP: 002b:00007f5dfc79f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1456.174249][T22432] RAX: ffffffffffffffda RBX: 00007f5dfbbb5fa0 RCX: 00007f5dfb98eb69 [ 1456.174261][T22432] RDX: 0000000000040084 RSI: 0000200000000080 RDI: 0000000000000003 [ 1456.174272][T22432] RBP: 00007f5dfc79f090 R08: 0000000000000000 R09: 0000000000000000 [ 1456.174283][T22432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1456.174293][T22432] R13: 0000000000000000 R14: 00007f5dfbbb5fa0 R15: 00007fffe92e3e28 [ 1456.174318][T22432] [ 1456.438245][ C1] vkms_vblank_simulate: vblank timer overrun [ 1459.512617][T22466] lo speed is unknown, defaulting to 1000 [ 1460.250747][T22477] ISOFS: Unable to identify CD-ROM format. [ 1463.313147][T22516] netlink: 'syz.5.4499': attribute type 10 has an invalid length. [ 1463.353847][T22516] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1463.995733][T22529] syz.1.4501: attempt to access beyond end of device [ 1463.995733][T22529] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1464.094118][T22527] nbd1: detected capacity change from 0 to 10 [ 1464.142962][T22529] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1464.167729][T22529] block nbd1: Send control failed (result -89) [ 1464.203346][T22529] block nbd1: Request send failed, requeueing [ 1464.236335][T13180] block nbd1: Receive control failed (result -32) [ 1464.236400][T22470] block nbd1: Dead connection, failed to find a fallback [ 1464.253617][T22470] block nbd1: shutting down sockets [ 1464.258866][T22470] I/O error, dev nbd1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1464.268746][T22529] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=4, location=4 [ 1464.279415][T22529] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1464.290457][T22529] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3, location=3 [ 1464.300100][T22529] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1464.314820][T22529] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2, location=2 [ 1464.325198][T22529] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1464.335558][T22529] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 1464.344545][T22529] UDF-fs: Scanning with blocksize 1024 failed [ 1464.355527][T22529] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1464.413186][T22529] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1464.423293][T22529] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 1464.434857][T22529] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1464.464601][T22529] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 1464.490134][T22529] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1464.522038][T22529] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 1464.549683][T22529] UDF-fs: Scanning with blocksize 2048 failed [ 1464.574616][T22529] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1464.594222][T22529] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1464.695690][T22529] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 1464.740889][T22529] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1464.794252][T22529] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 1464.802135][T22529] UDF-fs: Scanning with blocksize 4096 failed [ 1464.808871][T22529] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 1467.495852][T22556] bridge27: entered promiscuous mode [ 1467.501231][T22556] bridge27: entered allmulticast mode [ 1467.516079][T22556] team0: Port device bridge27 added [ 1468.170871][T22559] lo speed is unknown, defaulting to 1000 [ 1471.619428][T22605] syz.3.4521: attempt to access beyond end of device [ 1471.619428][T22605] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1471.633294][T22605] syz.3.4521: attempt to access beyond end of device [ 1471.633294][T22605] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1472.179907][T22605] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1472.218405][T22605] ------------[ cut here ]------------ [ 1472.224374][T22605] WARNING: CPU: 1 PID: 22605 at fs/buffer.c:1125 __getblk_slow+0x4cc/0x560 [ 1472.233037][T22605] Modules linked in: [ 1472.237181][T22605] CPU: 1 UID: 0 PID: 22605 Comm: syz.3.4521 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1472.248913][T22605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1472.258983][T22605] RIP: 0010:__getblk_slow+0x4cc/0x560 [ 1472.264391][T22605] Code: c0 8b 48 89 df e8 24 e6 bb ff 90 0f 0b e8 dc 55 73 ff 48 c7 c6 60 59 c0 8b 48 89 df e8 0d e6 bb ff 90 0f 0b e8 c5 55 73 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 c0 5a c0 8b 31 db e8 2d 1a 52 [ 1472.284056][T22605] RSP: 0018:ffffc900052477f0 EFLAGS: 00010283 [ 1472.290108][T22605] RAX: 0000000000014a0e RBX: 0000000000000200 RCX: ffffc90011d89000 [ 1472.298173][T22605] RDX: 0000000000080000 RSI: ffffffff824813ab RDI: 0000000000000005 [ 1472.306600][T22605] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 1472.314882][T22605] R10: 0000000000000200 R11: 0000000000000001 R12: ffff888024025080 [ 1472.322944][T22605] R13: 0000000000000200 R14: 0000000000000200 R15: ffff888024025080 [ 1472.330948][T22605] FS: 00007f8710db76c0(0000) GS:ffff8881247fe000(0000) knlGS:0000000000000000 [ 1472.339931][T22605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1472.346555][T22605] CR2: 0000200000000280 CR3: 0000000059a1c000 CR4: 00000000003526f0 [ 1472.354568][T22605] Call Trace: [ 1472.357847][T22605] [ 1472.360775][T22605] ? __pfx___might_resched+0x10/0x10 [ 1472.366117][T22605] bdev_getblk+0xd4/0xe0 [ 1472.370364][T22605] __bread_gfp+0x86/0x3c0 [ 1472.374741][T22605] udf_read_tagged+0xae/0x740 [ 1472.379425][T22605] udf_check_anchor_block+0x89/0x4b0 [ 1472.384814][T22605] ? udf_get_last_block+0x1ce/0x2a0 [ 1472.390025][T22605] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 1472.395981][T22605] udf_load_vrs+0x682/0x1070 [ 1472.400581][T22605] ? __pfx_udf_load_vrs+0x10/0x10 [ 1472.405611][T22605] ? __pfx_udf_get_last_session+0x10/0x10 [ 1472.411324][T22605] ? lockdep_init_map_type+0x5c/0x280 [ 1472.416733][T22605] udf_fill_super+0x791/0x1df0 [ 1472.421485][T22605] ? __pfx_udf_fill_super+0x10/0x10 [ 1472.426694][T22605] ? do_raw_spin_lock+0x12c/0x2b0 [ 1472.431708][T22605] ? find_held_lock+0x2b/0x80 [ 1472.436380][T22605] ? sb_set_blocksize+0x176/0x1d0 [ 1472.441382][T22605] ? setup_bdev_super+0x369/0x730 [ 1472.446428][T22605] get_tree_bdev_flags+0x38c/0x620 [ 1472.451515][T22605] ? __pfx_udf_fill_super+0x10/0x10 [ 1472.456708][T22605] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1472.462340][T22605] ? bpf_lsm_capable+0x9/0x10 [ 1472.467015][T22605] ? security_capable+0x7e/0x260 [ 1472.471938][T22605] vfs_get_tree+0x8b/0x340 [ 1472.476403][T22605] path_mount+0x1482/0x1fd0 [ 1472.480899][T22605] ? __pfx_path_mount+0x10/0x10 [ 1472.485749][T22605] ? kmem_cache_free+0x2d1/0x4d0 [ 1472.490666][T22605] ? putname+0x154/0x1a0 [ 1472.494922][T22605] ? putname+0x154/0x1a0 [ 1472.499143][T22605] ? __x64_sys_mount+0x28d/0x310 [ 1472.504087][T22605] __x64_sys_mount+0x28d/0x310 [ 1472.508837][T22605] ? __pfx___x64_sys_mount+0x10/0x10 [ 1472.514132][T22605] do_syscall_64+0xcd/0x4c0 [ 1472.518635][T22605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.524533][T22605] RIP: 0033:0x7f870ff8eb69 [ 1472.528947][T22605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1472.548594][T22605] RSP: 002b:00007f8710db7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1472.556999][T22605] RAX: ffffffffffffffda RBX: 00007f87101b6240 RCX: 00007f870ff8eb69 [ 1472.565006][T22605] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 1472.573006][T22605] RBP: 00007f8710011df1 R08: 0000000000000000 R09: 0000000000000000 [ 1472.580972][T22605] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 1472.588935][T22605] R13: 0000000000000001 R14: 00007f87101b6240 R15: 00007fff5d2dedd8 [ 1472.596918][T22605] [ 1472.599914][T22605] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1472.607183][T22605] CPU: 1 UID: 0 PID: 22605 Comm: syz.3.4521 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1472.618867][T22605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1472.629329][T22605] Call Trace: [ 1472.632583][T22605] [ 1472.635492][T22605] dump_stack_lvl+0x3d/0x1f0 [ 1472.640063][T22605] vpanic+0x6a3/0x780 [ 1472.644023][T22605] ? __pfx_vpanic+0x10/0x10 [ 1472.648514][T22605] ? __getblk_slow+0x4cc/0x560 [ 1472.653262][T22605] panic+0xca/0xd0 [ 1472.656965][T22605] ? __pfx_panic+0x10/0x10 [ 1472.661383][T22605] check_panic_on_warn+0xab/0xb0 [ 1472.666307][T22605] __warn+0xf6/0x3c0 [ 1472.670171][T22605] ? __getblk_slow+0x4cc/0x560 [ 1472.674919][T22605] report_bug+0x3c3/0x580 [ 1472.679225][T22605] ? __getblk_slow+0x4cc/0x560 [ 1472.683974][T22605] handle_bug+0x184/0x210 [ 1472.688290][T22605] exc_invalid_op+0x17/0x50 [ 1472.692773][T22605] asm_exc_invalid_op+0x1a/0x20 [ 1472.697594][T22605] RIP: 0010:__getblk_slow+0x4cc/0x560 [ 1472.702944][T22605] Code: c0 8b 48 89 df e8 24 e6 bb ff 90 0f 0b e8 dc 55 73 ff 48 c7 c6 60 59 c0 8b 48 89 df e8 0d e6 bb ff 90 0f 0b e8 c5 55 73 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 c0 5a c0 8b 31 db e8 2d 1a 52 [ 1472.722530][T22605] RSP: 0018:ffffc900052477f0 EFLAGS: 00010283 [ 1472.728569][T22605] RAX: 0000000000014a0e RBX: 0000000000000200 RCX: ffffc90011d89000 [ 1472.736516][T22605] RDX: 0000000000080000 RSI: ffffffff824813ab RDI: 0000000000000005 [ 1472.744460][T22605] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 1472.752401][T22605] R10: 0000000000000200 R11: 0000000000000001 R12: ffff888024025080 [ 1472.760348][T22605] R13: 0000000000000200 R14: 0000000000000200 R15: ffff888024025080 [ 1472.768299][T22605] ? __getblk_slow+0x4cb/0x560 [ 1472.773045][T22605] ? __pfx___might_resched+0x10/0x10 [ 1472.778310][T22605] bdev_getblk+0xd4/0xe0 [ 1472.782538][T22605] __bread_gfp+0x86/0x3c0 [ 1472.786845][T22605] udf_read_tagged+0xae/0x740 [ 1472.791498][T22605] udf_check_anchor_block+0x89/0x4b0 [ 1472.796756][T22605] ? udf_get_last_block+0x1ce/0x2a0 [ 1472.801938][T22605] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 1472.807810][T22605] udf_load_vrs+0x682/0x1070 [ 1472.812381][T22605] ? __pfx_udf_load_vrs+0x10/0x10 [ 1472.817384][T22605] ? __pfx_udf_get_last_session+0x10/0x10 [ 1472.823081][T22605] ? lockdep_init_map_type+0x5c/0x280 [ 1472.828434][T22605] udf_fill_super+0x791/0x1df0 [ 1472.833180][T22605] ? __pfx_udf_fill_super+0x10/0x10 [ 1472.838347][T22605] ? do_raw_spin_lock+0x12c/0x2b0 [ 1472.843342][T22605] ? find_held_lock+0x2b/0x80 [ 1472.848004][T22605] ? sb_set_blocksize+0x176/0x1d0 [ 1472.853002][T22605] ? setup_bdev_super+0x369/0x730 [ 1472.858007][T22605] get_tree_bdev_flags+0x38c/0x620 [ 1472.863098][T22605] ? __pfx_udf_fill_super+0x10/0x10 [ 1472.868270][T22605] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1472.873880][T22605] ? bpf_lsm_capable+0x9/0x10 [ 1472.878542][T22605] ? security_capable+0x7e/0x260 [ 1472.883480][T22605] vfs_get_tree+0x8b/0x340 [ 1472.887876][T22605] path_mount+0x1482/0x1fd0 [ 1472.892358][T22605] ? __pfx_path_mount+0x10/0x10 [ 1472.897184][T22605] ? kmem_cache_free+0x2d1/0x4d0 [ 1472.902191][T22605] ? putname+0x154/0x1a0 [ 1472.906438][T22605] ? putname+0x154/0x1a0 [ 1472.910698][T22605] ? __x64_sys_mount+0x28d/0x310 [ 1472.915624][T22605] __x64_sys_mount+0x28d/0x310 [ 1472.920374][T22605] ? __pfx___x64_sys_mount+0x10/0x10 [ 1472.925647][T22605] do_syscall_64+0xcd/0x4c0 [ 1472.930216][T22605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.936108][T22605] RIP: 0033:0x7f870ff8eb69 [ 1472.940511][T22605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1472.960096][T22605] RSP: 002b:00007f8710db7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1472.968483][T22605] RAX: ffffffffffffffda RBX: 00007f87101b6240 RCX: 00007f870ff8eb69 [ 1472.976429][T22605] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 1472.984383][T22605] RBP: 00007f8710011df1 R08: 0000000000000000 R09: 0000000000000000 [ 1472.992329][T22605] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 1473.000276][T22605] R13: 0000000000000001 R14: 00007f87101b6240 R15: 00007fff5d2dedd8 [ 1473.008241][T22605] [ 1473.011484][T22605] Kernel Offset: disabled [ 1473.015786][T22605] Rebooting in 86400 seconds..