last executing test programs: 5m44.174563367s ago: executing program 3 (id=1172): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYRESOCT=r4], 0x6c}}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x41, 0x107, 0xfffffffc, 0x0, {0x2, 0x7c}, [@typed={0x8, 0x12d, 0x0, 0x0, @fd=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) umount2(&(0x7f0000000340)='./file0\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x25c, 0x0, 0x11, 0x148, 0x0, 0x10, 0x20c, 0x2a8, 0x2a8, 0x20c, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0xb0, 0xf8, 0x1c, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'ip6gre0\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x5, 0x7, 0x6, 0x1], 0x5, 0x3}, {0x3, [0x2, 0x2, 0x3, 0x6, 0x2, 0x3], 0x2, 0x3}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2b8) syz_emit_ethernet(0x2a, &(0x7f0000000c40)=ANY=[@ANYBLOB="0180c200000050a245d5cde086dd4500001c000000000002907800000000ffffffff1cff49dc958bb45948a35779ee2fb5981200907800000000"], 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x8000000000000000}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) 5m42.843257797s ago: executing program 3 (id=1179): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f00000023c0)=[{&(0x7f00000003c0)="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", 0xff5}], 0x1) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) 5m37.499219326s ago: executing program 3 (id=1191): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000063c0)=""/1024, 0x18) getdents(r0, &(0x7f0000000440)=""/170, 0xaa) 5m36.648866585s ago: executing program 3 (id=1195): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) 5m36.299999517s ago: executing program 3 (id=1201): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f00000023c0)=[{&(0x7f00000003c0)="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", 0xff5}], 0x1) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) 5m35.222263916s ago: executing program 3 (id=1205): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1dd) socket(0x10, 0x80002, 0xfffffffe) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x4}}, 0x18}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x40000) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x8882, 0x0) 5m34.923415511s ago: executing program 32 (id=1205): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1dd) socket(0x10, 0x80002, 0xfffffffe) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x4}}, 0x18}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x40000) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x8882, 0x0) 59.560021127s ago: executing program 1 (id=2136): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102368, 0x18fe0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) 55.609903509s ago: executing program 1 (id=2149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) preadv(r2, &(0x7f0000001480)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, 0x3, 0x5) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0xf33d6ff98cacd2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044011}, 0x4000) sendmsg$NFT_BATCH(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1c, 0x8, 0x40, 0x42, 0x1}, 0x50) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='.dead\x00', &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2003041, 0x0) 54.583508789s ago: executing program 2 (id=2152): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102368, 0x18fe0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) 54.531095123s ago: executing program 1 (id=2153): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2a}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4d, 0x1, 0x3}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x4, @multicast2, 0x4e20, 0x2, 'dh\x00', 0x24, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001080211000000080211"], 0x36) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000040)={0x2, 0x0, "b86b2d", 0x74, 0x6}) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0xfffffffffffffcd8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES8=r3], 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) 54.373676143s ago: executing program 2 (id=2155): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x10002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x40) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) 53.659252444s ago: executing program 1 (id=2159): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f00000023c0)=[{&(0x7f00000003c0)="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", 0xfe6}], 0x1) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) 52.891581596s ago: executing program 2 (id=2161): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$rds(0x15, 0x5, 0x0) r0 = io_uring_setup(0x93d, &(0x7f0000000080)={0x0, 0x70e6, 0x2, 0x2, 0x119}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 52.321911877s ago: executing program 5 (id=2163): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x20800) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x1b8, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfff}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xd}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}]}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x80}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x80000000}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4f}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}}]}, @IPSET_ATTR_ADT={0x80, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x81}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, '\xaa\xaa\xaa\xaa\xaa'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x27}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3ec}}]}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5d45}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xf}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x700c}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f0000000280)) syz_emit_ethernet(0x52, &(0x7f0000000800)={@link_local, @random="ca007d050086", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff38f5", 0x1c, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, @local, {[@dstopts={0x73}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e21, 0x26, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x2a, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e31687172d956b141e3f4e87e6ab615ea379a12c5a6f5c6e7b3ab38f5f3570909f89f3e47ec97b12cc30a1c48cd0300fd5dfad4624800"}, 0xd8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000780)={@local, @random="0000101d00", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x7, 0x0, 0xe7}}}}}}, 0x0) 52.188415471s ago: executing program 0 (id=2164): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) preadv(r2, &(0x7f0000001480)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, 0x3, 0x5) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0xf33d6ff98cacd2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044011}, 0x4000) sendmsg$NFT_BATCH(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1c, 0x8, 0x40, 0x42, 0x1}, 0x50) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='.dead\x00', &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2003041, 0x0) 52.187770919s ago: executing program 5 (id=2165): r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_matches\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2020) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/108, 0x6c) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x1ac) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 52.043870303s ago: executing program 4 (id=2167): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r1, @ANYBLOB="02"], 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 51.860210905s ago: executing program 4 (id=2168): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='rxrpc_rx_ack\x00', 0xffffffffffffffff, 0x0, 0x1}, 0xffffffb1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000100)) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x804, {0xac7a, 0x1, 0x803, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x0, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000080)={0xfffffffffffffff9, 0x10, '\x00', 0xfefe0c8bdf687c06, &(0x7f0000000000)=[0x0, 0x0]}) socketpair(0x1f, 0x800, 0x4000003, &(0x7f0000000040)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0xaa181, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/xfrm_stat\x00') read$FUSE(r6, &(0x7f0000001780)={0x2020}, 0x2020) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 51.064499641s ago: executing program 0 (id=2169): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000e00000000000000000000d93aa6bfd50125e8c2b2c71381138c009500000000000000654b400661fa7580b5bd6c13398a463af013b1a831e3dcb56ba871af8724e71b568b10d8522f4a6e722a1f8cae9194e91526011d5e913c69972865c7d4b4871af95d0f135e4eca5476023da8ef6dec8125bac1d56a807beaa354d8fe59cf3605d68094d5d073e5ec5fc31629cfb62e67938ebe3f2b9c7d5ba4b4ccbd78f53bfea5984a04dd54de6d785951cad3481c0d66011420f8c34623fa3d6c79316826ff39a7344d80c60b27428116529d1e886faef9c435d94f0d788df35583e36e02a85aeaa9bb3955643227678a5bab65cd45f7d413969503747dbb056c02b5f4196ee4f433834f934601dfcce640695c36a372a1d7fdbc2b7e8ef6637722739a985955f662fe7be07b0aa2b0cf16efca57694b6f0530044e64abe01d67ba3eaa0e226c7ed9608a8a57"], 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000", 0x14, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x100000500) r6 = creat(0x0, 0xd931d3864d39ddd8) write$binfmt_elf32(r6, &(0x7f00000002c0)=ANY=[], 0x69) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x30, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f00000052c0)={'filter\x00', 0x0, 0x0, 0x0, [0x9573, 0x4000000000000000, 0x3, 0x5, 0x547, 0x1], 0x1, 0x0, 0x0, [{}]}, 0x88) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r9, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r10, 0x200, 0x70bd26, 0x9, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004090}, 0x40000) 50.790287709s ago: executing program 4 (id=2170): syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_io_uring_setup(0x772c, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0xc, 0xfffffffd}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000340)=0xff) 50.749288557s ago: executing program 5 (id=2171): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) syz_emit_ethernet(0x14, &(0x7f0000000040)={@local, @dev, @void, {@generic={0x8863, "d0a70ca9c1aa"}}}, 0x0) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/142) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"0e00", 0x9, 0x6, 0x2, 0x0, 0x0, "f700", '\x00\x00\a\x00', "0300", "fcffffff", ["0000000000000401e40000b6", '\x00', "0c436d743c97c443084000", "ff81000000008000"]}) 49.947215691s ago: executing program 1 (id=2172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x1d3) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000000c0)={&(0x7f0000000240)=[{0x3c, 0x801, 0x0, 0x0}, {0x3a, 0x6810, 0x0, 0x0}, {0x7, 0xa00, 0x0, 0x0}], 0x3}) bind$packet(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() setpgid(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaa0f00aa0180c20000010800450000280068000000069078ac0a14bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780002"], 0x0) 49.766720475s ago: executing program 4 (id=2173): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x3ff) 49.725000699s ago: executing program 2 (id=2174): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002200)=@generic={0x0}, 0x18) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) r8 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r8, 0x0, 0x8, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) 49.16790014s ago: executing program 5 (id=2175): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002200)=@generic={0x0}, 0x18) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) r8 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r8, 0x0, 0x8, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) 49.16650483s ago: executing program 0 (id=2176): r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x7ac9, 0x10100, 0x6, 0x25d}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x54, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x0, {0x2}}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 48.838344883s ago: executing program 0 (id=2177): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r0, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000040)={0xeeef0000, 0xf000}) syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002000000406b1d010140000102030109029400030104a0090904000000010100000a2401f7ff0702010209240303000303030b05240506020904010000010200000904010101010200000924020182040910ca0c2402010904070602000000090501090004ffc803072501000405000904020000010200000904020101010200000b240201060108013a388207240101c005000905820950"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 48.218906919s ago: executing program 0 (id=2178): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000540)={0xffff, 0x2, 0x7, 0x0, 0xdfcd, 0xa}) wait4(0x0, 0x0, 0x1000000, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x50) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r7 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000380)={0x0, 0x0, r8}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884) r9 = fanotify_init(0x40, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) write$binfmt_aout(r9, &(0x7f0000000480)=ANY=[@ANYBLOB="00814aed80e71a8757b22969594c8f612d02b160b814d6b543b0dd24f43c8444ed682c7da2227f41f7895d165bf5ed240045829ffdedc7b84f2cf91c1899cb4d5d6e346998efccd16b54667bae3b652d44c43df6dcdbc944a606cf3715440fa6c9ca07a13c70a5795b0374d77ee61a3bc588af3f3a79063bf71ae0e7379f75eb38f92f0ab61df96f0aefd548c2f4b628f6c4f88da9f740debef8cf606e0597f2c3dc4c53c9913a784e72adb2d78085a7ce690e2924e5"], 0x20) 48.195785256s ago: executing program 0 (id=2179): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) creat(&(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r7, r5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000000308050200000000000000000300008900024000f70000000100009e99b898c6dd2565834177f56c1259a51714c33b76a232da9777a626fcdbe6fe6949f3aa93c8b9c47b791e7df159c5c52640e4beb8383d"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4004004) 48.169424093s ago: executing program 2 (id=2180): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setpriority(0x2, 0x0, 0x7) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) eventfd(0x9) 47.66726722s ago: executing program 5 (id=2181): write$sysctl(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) chroot(&(0x7f00000001c0)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x8004) accept4$rose(r2, 0x0, 0x0, 0x80000) shutdown(0xffffffffffffffff, 0x0) 46.626921695s ago: executing program 5 (id=2182): quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x349, 0x6, 0x80000000000008, 0x0, 0x3}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x14b0, 0x400, 0x3, 0x30}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x1}) socket$kcm(0x10, 0x2, 0x0) r6 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x4, 'syz0\x00'}, 0x5, 0x31, 0x1, r6, 0x0, 0x8, 'syz0\x00', 0x0}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) mq_open(0x0, 0x80, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x81, 0x56, 0x1ff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) 46.626270668s ago: executing program 1 (id=2183): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x1, 0x13580, 0x0, 0x1ff}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) poll(&(0x7f0000000040)=[{r1, 0x5482}], 0x1, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0xe, 0x0, @fd_index=0x8, 0x0, 0x0, 0x3, 0x0, 0x1, {0x0, 0x0, r0}}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) sendto$inet(r4, 0x0, 0x0, 0x2400c084, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r4, &(0x7f00000007c0), 0x0, 0x2c000011) io_uring_enter(r1, 0x55, 0x84a23, 0xf, 0x0, 0x0) 46.614930003s ago: executing program 2 (id=2184): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mq_unlink(0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0xfdfd) 46.389517726s ago: executing program 4 (id=2185): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 45.664197177s ago: executing program 4 (id=2186): r0 = syz_io_uring_setup(0x6593, &(0x7f00000000c0)={0x0, 0x1429, 0x400, 0x3, 0x126}, &(0x7f0000000000), &(0x7f0000000140)) io_uring_enter(r0, 0x772d, 0x61b9, 0x40, &(0x7f0000000180)={[0x7fffffffffffffff]}, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x4) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005000000030024000780080005"], 0xd0}}, 0x0) 0s ago: executing program 33 (id=2179): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) creat(&(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r7, r5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000000308050200000000000000000300008900024000f70000000100009e99b898c6dd2565834177f56c1259a51714c33b76a232da9777a626fcdbe6fe6949f3aa93c8b9c47b791e7df159c5c52640e4beb8383d"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4004004) kernel console output (not intermixed with test programs): th blocksize 1024 failed [ 431.599808][T11830] syz.1.1456: attempt to access beyond end of device [ 431.599808][T11830] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 431.662121][T11830] syz.1.1456: attempt to access beyond end of device [ 431.662121][T11830] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 431.698007][T11830] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 431.711412][T11830] syz.1.1456: attempt to access beyond end of device [ 431.711412][T11830] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 431.750760][T11839] nbd5: detected capacity change from 0 to 1024 [ 431.766739][ T5828] block nbd5: Send control failed (result -89) [ 431.770843][T11830] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 431.773374][ T5828] block nbd5: Request send failed, requeueing [ 431.788731][ T5941] usb 3-1: USB disconnect, device number 27 [ 431.796741][T11841] block nbd5: NBD_DISCONNECT [ 431.802820][T11830] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 431.866208][T11830] UDF-fs: Scanning with blocksize 2048 failed [ 431.902651][ T5828] block nbd5: Disconnected due to user request. [ 431.920641][T11830] syz.1.1456: attempt to access beyond end of device [ 431.920641][T11830] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 431.947112][T11830] syz.1.1456: attempt to access beyond end of device [ 431.947112][T11830] nbd1: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 431.973854][ T11] blk_print_req_error: 122 callbacks suppressed [ 431.973870][ T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 431.978520][T11841] block nbd5: Send disconnect failed -89 [ 431.980187][ T11] buffer_io_error: 111 callbacks suppressed [ 431.980197][ T11] Buffer I/O error on dev nbd5, logical block 0, async page read [ 432.067282][T11830] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 432.078981][ T5828] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.102517][ T5828] Buffer I/O error on dev nbd5, logical block 0, async page read [ 432.102691][T11830] syz.1.1456: attempt to access beyond end of device [ 432.102691][T11830] nbd1: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 432.110374][ T5828] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.133156][ T5828] Buffer I/O error on dev nbd5, logical block 0, async page read [ 432.144949][ T5828] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.154119][ T5828] Buffer I/O error on dev nbd5, logical block 0, async page read [ 432.163571][ T5828] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.172881][ T5828] Buffer I/O error on dev nbd5, logical block 0, async page read [ 432.180998][ T5828] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.190038][ T5828] Buffer I/O error on dev nbd5, logical block 0, async page read [ 432.204444][T11830] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 432.235097][ T5828] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.251316][T11830] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 432.279297][ T5828] Buffer I/O error on dev nbd5, logical block 0, async page read [ 432.294559][T11830] UDF-fs: Scanning with blocksize 4096 failed [ 432.326807][T11830] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 432.339652][ T5828] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.411261][ T5828] Buffer I/O error on dev nbd5, logical block 0, async page read [ 432.419090][ T5828] ldm_validate_partition_table(): Disk read failed. [ 432.460824][ T5828] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.472676][ T5828] Buffer I/O error on dev nbd5, logical block 0, async page read [ 432.482724][ T5828] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.493137][ T5828] Buffer I/O error on dev nbd5, logical block 0, async page read [ 432.503964][ T5828] Dev nbd5: unable to read RDB block 0 [ 432.521251][ T5828] nbd5: unable to read partition table [ 432.540972][T11843] ldm_validate_partition_table(): Disk read failed. [ 432.548174][T11843] Dev nbd5: unable to read RDB block 0 [ 432.562853][T11843] nbd5: unable to read partition table [ 432.577721][ T5828] ldm_validate_partition_table(): Disk read failed. [ 432.595253][ T5828] Dev nbd5: unable to read RDB block 0 [ 432.605425][ T5828] nbd5: unable to read partition table [ 432.671036][ T5941] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 432.902606][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.912697][ T5941] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 432.952638][ T5941] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 432.967544][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.982103][ T5941] usb 3-1: config 0 descriptor?? [ 432.997306][ T5941] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 433.088397][ T5845] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 433.143013][ T5845] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 433.232680][T11874] lo speed is unknown, defaulting to 1000 [ 434.072372][T11898] netlink: 'syz.0.1466': attribute type 4 has an invalid length. [ 434.080149][T11898] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1466'. [ 435.115078][T11919] overlayfs: failed to clone upperpath [ 435.425887][ T5941] usb 3-1: USB disconnect, device number 28 [ 435.480854][ T3091] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 435.586140][T11937] netlink: del zone limit has 4 unknown bytes [ 435.661256][ T3091] usb 6-1: Using ep0 maxpacket: 8 [ 435.712095][ T3091] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 435.880826][ T3091] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 435.976193][ T3091] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 435.986405][ T3091] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.093850][ T3091] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 436.139180][ T3091] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.409576][ T3091] usb 6-1: GET_CAPABILITIES returned 0 [ 436.416768][ T3091] usbtmc 6-1:16.0: can't read capabilities [ 436.665938][ T3091] usb 6-1: USB disconnect, device number 6 [ 438.460630][T11983] openvswitch: netlink: Message has 4 unknown bytes. [ 439.123074][ T5976] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 439.312213][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.336456][ T5976] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.368657][ T5976] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.405642][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.429778][ T5976] usb 6-1: config 0 descriptor?? [ 439.447581][ T5976] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 439.505963][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.512404][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.470231][T12041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1495'. [ 442.751087][ T5911] usb 6-1: USB disconnect, device number 7 [ 443.499099][T12054] openvswitch: netlink: Message has 4 unknown bytes. [ 443.885360][T12068] blktrace: Concurrent blktraces are not allowed on loop4 [ 445.339830][T12085] netlink: 'syz.5.1506': attribute type 1 has an invalid length. [ 445.347644][T12085] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1506'. [ 445.521060][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 445.690901][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 445.699272][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 445.711434][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 445.723413][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 445.733767][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.747025][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 445.756193][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.987633][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 446.003913][ T9] usbtmc 3-1:16.0: can't read capabilities [ 446.186732][T12117] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1509'. [ 446.191833][ T5911] usb 3-1: USB disconnect, device number 29 [ 447.069632][T12136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1512'. [ 447.785052][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'. [ 448.441269][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1520'. [ 449.272071][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1525'. [ 449.368889][T12186] netlink: 'syz.4.1525': attribute type 11 has an invalid length. [ 449.376809][T12186] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1525'. [ 449.670760][ T5976] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 449.832759][ T5976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.853304][ T5976] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 449.866043][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.925078][ T5976] usb 3-1: config 0 descriptor?? [ 449.969876][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'. [ 450.005371][ T5976] pwc: Askey VC010 type 2 USB webcam detected. [ 450.165165][T12210] process 'syz.4.1529' launched './file0' with NULL argv: empty string added [ 450.427174][ T5976] pwc: recv_control_msg error -32 req 02 val 2b00 [ 450.439872][ T5976] pwc: recv_control_msg error -32 req 02 val 2700 [ 450.462925][ T5976] pwc: recv_control_msg error -32 req 02 val 2c00 [ 450.479735][ T5976] pwc: recv_control_msg error -32 req 04 val 1000 [ 450.497692][ T5976] pwc: recv_control_msg error -32 req 04 val 1300 [ 450.507522][ T5976] pwc: recv_control_msg error -32 req 04 val 1400 [ 450.522377][ T5976] pwc: recv_control_msg error -32 req 02 val 2000 [ 450.541235][ T5976] pwc: recv_control_msg error -32 req 02 val 2100 [ 450.548420][ T5976] pwc: recv_control_msg error -32 req 04 val 1500 [ 450.558403][ T5976] pwc: recv_control_msg error -32 req 02 val 2500 [ 450.795743][ T5976] pwc: recv_control_msg error -32 req 02 val 2600 [ 450.813488][ T5976] pwc: recv_control_msg error -32 req 02 val 2900 [ 451.163305][ T5976] pwc: recv_control_msg error -71 req 04 val 1100 [ 451.221584][ T5976] pwc: recv_control_msg error -71 req 04 val 1200 [ 451.243553][ T5976] pwc: Registered as video103. [ 451.282724][ T5976] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28 [ 451.369532][ T5976] usb 3-1: USB disconnect, device number 30 [ 451.407285][T12239] syz.4.1534: attempt to access beyond end of device [ 451.407285][T12239] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 451.451529][T12239] syz.4.1534: attempt to access beyond end of device [ 451.451529][T12239] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 451.507812][T12239] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 451.527163][T12239] syz.4.1534: attempt to access beyond end of device [ 451.527163][T12239] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 451.540609][T12239] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 451.590873][T12239] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 451.623514][T12239] UDF-fs: Scanning with blocksize 1024 failed [ 451.630097][T12239] syz.4.1534: attempt to access beyond end of device [ 451.630097][T12239] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 451.653526][T12239] syz.4.1534: attempt to access beyond end of device [ 451.653526][T12239] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 451.750935][T12239] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 451.860942][T12239] syz.4.1534: attempt to access beyond end of device [ 451.860942][T12239] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 452.061009][ T5841] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 452.187147][T12237] block nbd4: shutting down sockets [ 452.205019][T12239] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 452.254674][ T5845] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 453.170919][T12239] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 453.180049][T12239] UDF-fs: Scanning with blocksize 2048 failed [ 453.196674][T12239] syz.4.1534: attempt to access beyond end of device [ 453.196674][T12239] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 453.214581][T12239] syz.4.1534: attempt to access beyond end of device [ 453.214581][T12239] nbd4: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 453.227767][T12239] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 453.237468][T12239] syz.4.1534: attempt to access beyond end of device [ 453.237468][T12239] nbd4: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 453.255781][T12239] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 453.269879][T12239] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 453.278506][T12239] UDF-fs: Scanning with blocksize 4096 failed [ 453.284746][T12239] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 454.147148][T12288] bond0: (slave rose0): Releasing backup interface [ 454.285120][T12298] syz.5.1543: attempt to access beyond end of device [ 454.285120][T12298] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 454.309497][T12298] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 454.341078][T12298] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 454.367999][T12298] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 454.378379][T12298] UDF-fs: Scanning with blocksize 1024 failed [ 454.390257][T12298] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 454.400387][T12298] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 454.410352][T12298] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 454.418416][T12298] UDF-fs: Scanning with blocksize 2048 failed [ 454.425415][T12298] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 454.456692][ T3091] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 454.501220][T12298] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 454.527654][T12298] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 454.550822][T12298] UDF-fs: Scanning with blocksize 4096 failed [ 454.596887][T12298] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 454.657716][T12297] block nbd5: shutting down sockets [ 454.758236][ T3091] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 454.770744][ T3091] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 454.785702][ T3091] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.804489][ T3091] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 454.817750][ T3091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.933897][ T3091] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 455.388083][T12326] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1548'. [ 455.395562][ T3091] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 455.538325][T12329] netlink: del zone limit has 4 unknown bytes [ 455.548815][ T3091] usb 3-1: USB disconnect, device number 31 [ 456.500211][T12354] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12354 comm=syz.4.1552 [ 457.462095][T12338] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 457.468638][T12338] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 457.476923][T12338] vhci_hcd vhci_hcd.0: Device attached [ 457.484445][T12338] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 457.629827][T12338] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1551'. [ 457.741151][ T3091] usb 44-1: SetAddress Request (2) to port 0 [ 457.747006][ T5845] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 457.747921][ T3091] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 457.919820][T12362] vhci_hcd: connection closed [ 457.920086][ T7066] vhci_hcd: stop threads [ 457.929132][ T5845] Bluetooth: hci4: unexpected event for opcode 0x0c22 [ 457.942969][ T7066] vhci_hcd: release socket [ 457.950183][ T7066] vhci_hcd: disconnect device [ 457.968878][T12372] netlink: 'syz.2.1553': attribute type 4 has an invalid length. [ 457.977933][T12372] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1553'. [ 458.455354][ T3091] usb 44-1: enqueue for inactive port 0 [ 459.236568][ T3091] usb usb44-port1: attempt power cycle [ 459.600331][T12393] overlayfs: failed to clone upperpath [ 459.736073][T12399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1560'. [ 459.991269][ T3091] usb usb44-port1: unable to enumerate USB device [ 460.982641][T12409] nbd5: detected capacity change from 0 to 1024 [ 461.026400][T12412] block nbd5: NBD_DISCONNECT [ 461.027344][ T5828] block nbd5: Send control failed (result -89) [ 461.037923][ T5828] block nbd5: Request send failed, requeueing [ 461.078371][ T5845] block nbd5: Receive control failed (result -32) [ 461.078452][T12353] block nbd5: Dead connection, failed to find a fallback [ 461.092734][T12412] block nbd5: Send disconnect failed -89 [ 461.111276][T12353] block nbd5: shutting down sockets [ 461.116511][T12353] blk_print_req_error: 43 callbacks suppressed [ 461.116523][T12353] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 461.132015][T12353] buffer_io_error: 43 callbacks suppressed [ 461.132023][T12353] Buffer I/O error on dev nbd5, logical block 0, async page read [ 461.148972][ T5828] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 461.173423][ T5828] Buffer I/O error on dev nbd5, logical block 0, async page read [ 461.182233][ T5828] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 461.195786][ T5828] Buffer I/O error on dev nbd5, logical block 0, async page read [ 461.204603][ T5828] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 461.220746][ T5828] Buffer I/O error on dev nbd5, logical block 0, async page read [ 461.229465][ T5828] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 461.249727][ T5828] Buffer I/O error on dev nbd5, logical block 0, async page read [ 461.303038][ T5828] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 461.308458][T12417] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12417 comm=syz.0.1564 [ 461.465776][T12424] 9pnet_virtio: no channels available for device syz [ 461.667910][ T5828] Buffer I/O error on dev nbd5, logical block 0, async page read [ 461.676969][ T5828] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 461.686064][ T5828] Buffer I/O error on dev nbd5, logical block 0, async page read [ 461.694872][ T5828] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 461.704288][ T5828] Buffer I/O error on dev nbd5, logical block 0, async page read [ 461.712644][ T5828] ldm_validate_partition_table(): Disk read failed. [ 461.719707][ T5828] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 461.728807][ T5828] Buffer I/O error on dev nbd5, logical block 0, async page read [ 461.758683][ T5828] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 461.767974][ T5828] Buffer I/O error on dev nbd5, logical block 0, async page read [ 461.778940][ T5828] Dev nbd5: unable to read RDB block 0 [ 461.798187][ T5828] nbd5: unable to read partition table [ 461.819773][T12414] ldm_validate_partition_table(): Disk read failed. [ 461.871651][T12414] Dev nbd5: unable to read RDB block 0 [ 461.890517][T12414] nbd5: unable to read partition table [ 462.077485][ T5828] ldm_validate_partition_table(): Disk read failed. [ 462.101210][ T5828] Dev nbd5: unable to read RDB block 0 [ 462.124724][ T5828] nbd5: unable to read partition table [ 462.152225][ T5203] ldm_validate_partition_table(): Disk read failed. [ 462.168091][ T5203] Dev nbd5: unable to read RDB block 0 [ 462.175606][ T5203] nbd5: unable to read partition table [ 462.268573][ T5203] ldm_validate_partition_table(): Disk read failed. [ 462.275667][ T5203] Dev nbd5: unable to read RDB block 0 [ 462.281953][ T5203] nbd5: unable to read partition table [ 462.415549][T12433] netlink: 'syz.1.1568': attribute type 1 has an invalid length. [ 462.423433][T12433] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1568'. [ 463.361075][T12447] nbd1: detected capacity change from 0 to 1024 [ 463.368232][T12451] block nbd1: NBD_DISCONNECT [ 463.374007][T12451] block nbd1: Send disconnect failed -89 [ 463.410854][ T5828] block nbd1: Send control failed (result -89) [ 463.417039][ T5828] block nbd1: Request send failed, requeueing [ 463.426450][T12457] netlink: 'syz.4.1574': attribute type 4 has an invalid length. [ 463.434435][T12457] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1574'. [ 463.490435][ T5828] block nbd1: Disconnected due to user request. [ 463.518674][ T5828] ldm_validate_partition_table(): Disk read failed. [ 463.542942][ T5828] Dev nbd1: unable to read RDB block 0 [ 463.564030][ T5828] nbd1: unable to read partition table [ 463.573945][T12460] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12460 comm=syz.0.1576 [ 463.636174][T12451] ldm_validate_partition_table(): Disk read failed. [ 463.655401][T12451] Dev nbd1: unable to read RDB block 0 [ 463.667591][T12451] nbd1: unable to read partition table [ 463.713185][ T5828] ldm_validate_partition_table(): Disk read failed. [ 463.764611][T12464] overlayfs: failed to clone upperpath [ 463.778549][ T5828] Dev nbd1: unable to read RDB block 0 [ 463.803766][ T5828] nbd1: unable to read partition table [ 464.885509][T12483] blktrace: Concurrent blktraces are not allowed on loop0 [ 465.075334][T12488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1582'. [ 467.288215][T12509] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12509 comm=syz.1.1587 [ 468.242600][T12517] netlink: 'syz.2.1590': attribute type 4 has an invalid length. [ 468.250408][T12517] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1590'. [ 468.450480][ T5845] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 468.467991][ T5845] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 471.186536][T12576] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12576 comm=syz.5.1601 [ 472.661309][ T5976] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 473.037927][ T5845] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 473.093159][ T5976] usb 3-1: Using ep0 maxpacket: 8 [ 473.232700][ T5976] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 473.243358][ T5976] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.256832][ T5976] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 473.682489][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.697571][ T5976] usbtmc 3-1:16.0: bulk endpoints not found [ 473.727633][ T5845] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 474.936411][T12629] blktrace: Concurrent blktraces are not allowed on loop2 [ 475.609402][ T5976] usb 3-1: USB disconnect, device number 32 [ 477.709889][T12665] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 477.715997][T12665] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 477.743888][T12665] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 477.759734][T12665] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 477.770172][T12665] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 478.208619][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1623'. [ 478.741792][T12696] netlink: 'syz.2.1622': attribute type 1 has an invalid length. [ 478.750307][T12696] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1622'. [ 479.303101][ T5845] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 479.421383][ T5845] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 479.550960][ T5914] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 479.605564][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 479.656421][T12711] netlink: 'syz.4.1627': attribute type 4 has an invalid length. [ 479.665697][T12711] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1627'. [ 479.730893][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 479.778218][ T5914] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.810795][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 479.818222][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 479.837933][ T5914] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 479.847231][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.856795][ T5914] usb 6-1: config 0 descriptor?? [ 479.865020][ T5914] pwc: Askey VC010 type 2 USB webcam detected. [ 480.314254][ T5914] pwc: recv_control_msg error -32 req 02 val 2b00 [ 480.321731][ T5914] pwc: recv_control_msg error -32 req 02 val 2700 [ 480.329846][T12702] blktrace: Concurrent blktraces are not allowed on loop10 [ 480.337826][ T5914] pwc: recv_control_msg error -32 req 02 val 2c00 [ 480.875380][ T5914] pwc: recv_control_msg error -32 req 04 val 1000 [ 480.903747][ T5914] pwc: recv_control_msg error -32 req 04 val 1300 [ 480.911890][ T5914] pwc: recv_control_msg error -32 req 04 val 1400 [ 480.920450][ T5914] pwc: recv_control_msg error -32 req 02 val 2000 [ 480.936299][ T5914] pwc: recv_control_msg error -32 req 02 val 2100 [ 480.949215][ T5914] pwc: recv_control_msg error -32 req 04 val 1500 [ 480.978728][ T5914] pwc: recv_control_msg error -71 req 02 val 2500 [ 480.993965][T12731] blktrace: Concurrent blktraces are not allowed on loop0 [ 481.620276][ T5914] pwc: recv_control_msg error -71 req 02 val 2400 [ 481.620617][ T5914] pwc: recv_control_msg error -71 req 02 val 2600 [ 481.621032][ T5914] pwc: recv_control_msg error -71 req 02 val 2900 [ 481.621375][ T5914] pwc: recv_control_msg error -71 req 02 val 2800 [ 481.621814][ T5914] pwc: recv_control_msg error -71 req 04 val 1100 [ 481.622135][ T5914] pwc: recv_control_msg error -71 req 04 val 1200 [ 481.623543][ T5914] pwc: Registered as video103. [ 481.624819][ T5914] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input29 [ 481.627089][ T5914] usb 6-1: USB disconnect, device number 8 [ 481.727943][T12734] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12734 comm=syz.2.1631 [ 482.242579][T12749] netlink: 'syz.2.1633': attribute type 4 has an invalid length. [ 482.250404][T12749] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1633'. [ 482.650971][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1634'. [ 487.712003][T12823] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1647'. [ 487.800497][T12824] netlink: 'syz.5.1647': attribute type 11 has an invalid length. [ 487.808410][T12824] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1647'. [ 489.540948][T12844] nbd1: detected capacity change from 0 to 1024 [ 489.563328][ T5828] block nbd1: Send control failed (result -89) [ 489.592934][T12849] block nbd1: NBD_DISCONNECT [ 489.597585][ T5828] block nbd1: Request send failed, requeueing [ 489.643954][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1654'. [ 489.730593][ T5828] block nbd1: Disconnected due to user request. [ 489.875579][T12353] blk_print_req_error: 128 callbacks suppressed [ 489.875598][T12353] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 489.890986][T12849] block nbd1: Send disconnect failed -89 [ 489.892557][T12353] buffer_io_error: 128 callbacks suppressed [ 489.892567][T12353] Buffer I/O error on dev nbd1, logical block 0, async page read [ 490.040490][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.329528][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 490.342532][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.450269][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 490.459916][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.470479][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 490.479058][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.491026][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 490.498892][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.553973][T12866] blktrace: Concurrent blktraces are not allowed on loop0 [ 490.703553][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 490.721207][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.735094][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 490.743621][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.757218][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 490.765636][ T5828] ldm_validate_partition_table(): Disk read failed. [ 490.795712][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.805200][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 490.814700][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.826537][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 490.837707][ T5828] Dev nbd1: unable to read RDB block 0 [ 490.843698][ T5828] nbd1: unable to read partition table [ 490.850731][T12855] ldm_validate_partition_table(): Disk read failed. [ 490.857525][T12855] Dev nbd1: unable to read RDB block 0 [ 490.875304][T12855] nbd1: unable to read partition table [ 490.912307][ T5203] ldm_validate_partition_table(): Disk read failed. [ 491.002471][ T5203] Dev nbd1: unable to read RDB block 0 [ 491.062181][ T5203] nbd1: unable to read partition table [ 491.124875][ T5828] ldm_validate_partition_table(): Disk read failed. [ 491.169677][ T5828] Dev nbd1: unable to read RDB block 0 [ 491.203229][ T5828] nbd1: unable to read partition table [ 491.670980][T12890] overlayfs: failed to clone upperpath [ 493.421387][T12914] blktrace: Concurrent blktraces are not allowed on loop0 [ 493.447818][T12902] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 493.490959][T12902] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 493.497478][T12902] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 493.542520][T12902] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 493.560160][T12902] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 493.820980][ T5911] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 494.199668][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 494.211395][ T5911] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 494.239876][ T5911] usb 3-1: config 0 has no interface number 0 [ 494.243897][T12927] netlink: del zone limit has 4 unknown bytes [ 494.395917][ T5911] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 494.546739][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.597785][ T5911] usb 3-1: Product: syz [ 494.624614][ T5911] usb 3-1: Manufacturer: syz [ 494.629262][ T5911] usb 3-1: SerialNumber: syz [ 494.661220][ T5911] usb 3-1: config 0 descriptor?? [ 494.846890][ T5911] hub 3-1:0.145: bad descriptor, ignoring hub [ 495.066275][ T5911] hub 3-1:0.145: probe with driver hub failed with error -5 [ 495.092694][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 495.148160][ T5911] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/input/input30 [ 495.398400][ T5911] input: failed to attach handler mousedev to device input30, error: -2 [ 495.473676][ T5911] usb 3-1: USB disconnect, device number 33 [ 495.570891][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 495.577169][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 495.583309][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 495.590432][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 495.895052][T12964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12964 comm=syz.2.1676 [ 496.462915][T12970] netlink: 'syz.2.1678': attribute type 4 has an invalid length. [ 496.470921][T12970] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1678'. [ 497.731940][T12989] netlink: del zone limit has 4 unknown bytes [ 498.227157][T12994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1683'. [ 499.036805][T13005] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13005 comm=syz.4.1686 [ 499.532540][T13013] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13013 comm=syz.0.1688 [ 499.725119][T13024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1690'. [ 500.980258][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.986623][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.096912][T12955] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 501.163214][T12955] Bluetooth: hci4: unexpected event for opcode 0x0c22 [ 501.303810][T13037] netlink: del zone limit has 4 unknown bytes [ 501.810119][T13043] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 501.816653][T13043] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 501.899814][T13043] vhci_hcd vhci_hcd.0: Device attached [ 502.172520][T13049] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 502.180963][ T5914] usb 44-1: SetAddress Request (6) to port 0 [ 502.210786][ T5914] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 502.310311][T13043] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1691'. [ 502.543839][T13046] vhci_hcd: connection reset by peer [ 502.549377][ T74] vhci_hcd: stop threads [ 502.555971][ T74] vhci_hcd: release socket [ 503.029118][ T74] vhci_hcd: disconnect device [ 503.368311][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1700'. [ 503.724799][T13073] netlink: 'syz.2.1702': attribute type 4 has an invalid length. [ 503.733197][T13073] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1702'. [ 505.783082][T13102] lo speed is unknown, defaulting to 1000 [ 505.931129][T13116] 9pnet_virtio: no channels available for device syz [ 507.160433][T13135] netlink: 'syz.0.1714': attribute type 4 has an invalid length. [ 507.168276][T13135] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1714'. [ 507.411921][ T5914] usb 44-1: device descriptor read/8, error -110 [ 507.527834][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1715'. [ 507.560965][ T5893] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 507.614619][T13153] netlink: 'syz.4.1715': attribute type 11 has an invalid length. [ 507.622570][T13153] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1715'. [ 508.129398][ T5914] usb usb44-port1: attempt power cycle [ 508.137906][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.623427][ T5893] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 508.644679][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.693023][ T5893] usb 3-1: config 0 descriptor?? [ 508.758007][ T5893] pwc: Askey VC010 type 2 USB webcam detected. [ 509.211834][T13173] 9pnet_virtio: no channels available for device syz [ 509.251039][ T5893] pwc: recv_control_msg error -32 req 02 val 2b00 [ 509.270157][ T5893] pwc: recv_control_msg error -32 req 02 val 2700 [ 509.297429][ T5893] pwc: recv_control_msg error -32 req 02 val 2c00 [ 509.311719][ T5914] usb usb44-port1: unable to enumerate USB device [ 509.333936][ T5893] pwc: recv_control_msg error -32 req 04 val 1000 [ 509.341370][T13141] blktrace: Concurrent blktraces are not allowed on loop4 [ 509.404753][ T5893] pwc: recv_control_msg error -32 req 04 val 1300 [ 509.413223][ T973] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 509.449611][ T5893] pwc: recv_control_msg error -32 req 04 val 1400 [ 509.480172][ T5893] pwc: recv_control_msg error -32 req 02 val 2000 [ 509.582128][ T973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.603288][ T973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.615423][ T973] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 509.628637][ T973] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 509.640312][ T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.695121][ T973] usb 6-1: config 0 descriptor?? [ 509.711485][ T5893] pwc: recv_control_msg error -32 req 02 val 2100 [ 510.050231][ T5893] pwc: recv_control_msg error -32 req 04 val 1500 [ 510.078992][ T5893] pwc: recv_control_msg error -32 req 02 val 2500 [ 510.154243][ T5893] pwc: recv_control_msg error -71 req 02 val 2400 [ 510.215338][ T5893] pwc: recv_control_msg error -71 req 02 val 2600 [ 510.247836][ T5893] pwc: recv_control_msg error -71 req 02 val 2900 [ 510.286807][ T5893] pwc: recv_control_msg error -71 req 02 val 2800 [ 510.308605][ T5893] pwc: recv_control_msg error -71 req 04 val 1100 [ 510.310357][ T973] usbhid 6-1:0.0: can't add hid device: -71 [ 510.350890][ T5893] pwc: recv_control_msg error -71 req 04 val 1200 [ 510.378058][ T973] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 510.415142][ T973] usb 6-1: USB disconnect, device number 9 [ 510.611365][ T5893] pwc: Registered as video103. [ 510.629605][ T5893] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31 [ 510.737587][T13210] netlink: 'syz.1.1727': attribute type 4 has an invalid length. [ 510.745524][T13210] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1727'. [ 510.801305][ T5893] usb 3-1: USB disconnect, device number 34 [ 510.828022][T13210] : renamed from bond0 (while UP) [ 511.614241][T13224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1723'. [ 511.980906][ T5914] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 512.263510][T13242] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13242 comm=syz.1.1730 [ 512.736793][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 512.742469][ T5914] usb 6-1: config 0 has an invalid interface number: 145 but max is 0 [ 512.742494][ T5914] usb 6-1: config 0 has no interface number 0 [ 512.750985][ T5914] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 512.751009][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.751028][ T5914] usb 6-1: Product: syz [ 512.751042][ T5914] usb 6-1: Manufacturer: syz [ 512.751056][ T5914] usb 6-1: SerialNumber: syz [ 512.800117][ T5914] usb 6-1: config 0 descriptor?? [ 512.814807][ T5914] hub 6-1:0.145: bad descriptor, ignoring hub [ 512.814830][ T5914] hub 6-1:0.145: probe with driver hub failed with error -5 [ 512.823442][ T5914] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.145/input/input32 [ 514.102336][T13283] netlink: 'syz.1.1734': attribute type 1 has an invalid length. [ 514.110148][T13283] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1734'. [ 514.513060][T13286] 9pnet_virtio: no channels available for device syz [ 515.291855][ T5911] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 515.460980][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 515.469856][ T5911] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 515.479213][ T5911] usb 3-1: config 0 has no interface number 0 [ 515.492423][ T5911] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 515.530809][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.547156][ T5911] usb 3-1: Product: syz [ 515.555983][ T5911] usb 3-1: Manufacturer: syz [ 515.564208][ T5911] usb 3-1: SerialNumber: syz [ 515.575048][ T5911] usb 3-1: config 0 descriptor?? [ 515.596898][ T5911] hub 3-1:0.145: bad descriptor, ignoring hub [ 515.621249][ T5911] hub 3-1:0.145: probe with driver hub failed with error -5 [ 515.639277][T13310] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 515.645808][T13310] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 515.663025][T13310] vhci_hcd vhci_hcd.0: Device attached [ 515.670892][ T5911] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/input/input33 [ 515.682229][T13314] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1742'. [ 515.686367][T13310] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 515.873143][T13317] blktrace: Concurrent blktraces are not allowed on loop0 [ 515.908999][T13310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1740'. [ 515.998760][ T5942] usb 42-1: SetAddress Request (10) to port 0 [ 516.005373][ T5942] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 516.113032][T13311] vhci_hcd: connection closed [ 516.121048][ T74] vhci_hcd: stop threads [ 516.236599][T13322] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13322 comm=syz.1.1744 [ 516.261851][ T74] vhci_hcd: release socket [ 516.337786][ T74] vhci_hcd: disconnect device [ 516.438159][T13332] openvswitch: netlink: Message has 4 unknown bytes. [ 516.550475][T13333] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13333 comm=syz.1.1746 [ 518.119186][T13350] 9pnet_virtio: no channels available for device syz [ 518.172159][ T9] usb 6-1: USB disconnect, device number 10 [ 518.345233][T13359] openvswitch: netlink: Message has 4 unknown bytes. [ 518.810887][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 518.981035][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 519.284343][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 519.381082][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 519.432668][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 519.454357][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.484491][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 519.530994][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.938076][T13382] netlink: 'syz.1.1756': attribute type 4 has an invalid length. [ 519.946196][T13382] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1756'. [ 520.011117][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 520.051637][ T9] usbtmc 6-1:16.0: can't read capabilities [ 520.145162][ T9] usb 6-1: USB disconnect, device number 11 [ 520.241851][T13386] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13386 comm=syz.4.1757 [ 520.542670][T13392] netlink: 'syz.0.1759': attribute type 4 has an invalid length. [ 520.550433][T13392] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1759'. [ 520.766808][T13401] 9pnet_virtio: no channels available for device syz [ 520.820883][T13390] nbd4: detected capacity change from 0 to 10 [ 520.869728][ T5828] block nbd4: Send control failed (result -89) [ 520.961446][ T5828] block nbd4: Request send failed, requeueing [ 520.978618][T12955] block nbd4: Receive control failed (result -32) [ 520.993318][T12353] block nbd4: Dead connection, failed to find a fallback [ 521.000372][T12353] block nbd4: shutting down sockets [ 521.005643][T12353] blk_print_req_error: 59 callbacks suppressed [ 521.005654][T12353] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 521.023516][T12353] buffer_io_error: 59 callbacks suppressed [ 521.023529][T12353] Buffer I/O error on dev nbd4, logical block 0, async page read [ 521.040784][ T5828] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 521.049874][ T5828] Buffer I/O error on dev nbd4, logical block 0, async page read [ 521.115166][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1762'. [ 521.208487][T13410] netlink: 'syz.5.1762': attribute type 11 has an invalid length. [ 521.216465][T13410] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1762'. [ 521.290139][ T5942] usb 42-1: device descriptor read/8, error -110 [ 521.576520][ T5828] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 521.728910][ T5828] Buffer I/O error on dev nbd4, logical block 0, async page read [ 521.818721][ T5828] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 521.827823][ T5828] Buffer I/O error on dev nbd4, logical block 0, async page read [ 521.835758][ T5828] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 521.844816][ T5828] Buffer I/O error on dev nbd4, logical block 0, async page read [ 521.852779][ T5828] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 521.863939][ T5828] Buffer I/O error on dev nbd4, logical block 0, async page read [ 522.009676][ T5942] usb usb42-port1: attempt power cycle [ 522.044913][ T5828] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 522.154227][T13419] netlink: 'syz.1.1764': attribute type 1 has an invalid length. [ 522.162052][T13419] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1764'. [ 522.182678][ T5828] Buffer I/O error on dev nbd4, logical block 0, async page read [ 522.192342][ T5828] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 522.500780][ T5828] Buffer I/O error on dev nbd4, logical block 0, async page read [ 522.509026][ T5828] ldm_validate_partition_table(): Disk read failed. [ 522.535898][ T5828] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 522.578583][ T5828] Buffer I/O error on dev nbd4, logical block 0, async page read [ 522.664955][ T5942] usb usb42-port1: unable to enumerate USB device [ 522.670992][ T5828] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 522.696976][ T5828] Buffer I/O error on dev nbd4, logical block 0, async page read [ 522.726603][ T5828] Dev nbd4: unable to read RDB block 0 [ 522.731080][T13426] openvswitch: netlink: Message has 4 unknown bytes. [ 522.757755][ T5828] nbd4: unable to read partition table [ 522.869351][ T5828] nbd4: partition table beyond EOD, truncated [ 522.900774][ T5828] ldm_validate_partition_table(): Disk read failed. [ 522.907799][ T5828] Dev nbd4: unable to read RDB block 0 [ 522.954482][ T5911] usb 3-1: USB disconnect, device number 35 [ 522.980882][ T5828] nbd4: unable to read partition table [ 522.987625][ T5828] nbd4: partition table beyond EOD, truncated [ 523.011439][T13433] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13433 comm=syz.2.1769 [ 524.341397][T13447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1768'. [ 524.714770][T12955] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 525.058079][T12955] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 525.220862][T13467] netlink: 'syz.2.1774': attribute type 4 has an invalid length. [ 525.309201][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1775'. [ 525.402690][T13474] netlink: 'syz.5.1775': attribute type 11 has an invalid length. [ 525.410560][T13474] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1775'. [ 525.699257][T13467] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1774'. [ 527.070053][T12955] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 527.217363][T12955] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 527.346762][T12955] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 527.363664][T12955] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 527.840157][T13517] netlink: 'syz.1.1781': attribute type 1 has an invalid length. [ 527.847999][T13517] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1781'. [ 528.623044][T13529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1783'. [ 530.406010][T13545] lo speed is unknown, defaulting to 1000 [ 531.401864][T13558] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 531.408390][T13558] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 531.441240][T13558] vhci_hcd vhci_hcd.0: Device attached [ 531.442448][T13566] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 531.570858][ T5911] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 531.710853][ T9] usb 36-1: SetAddress Request (6) to port 0 [ 531.716973][ T9] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd [ 531.740781][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 531.748125][ T5911] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 531.765030][ T5911] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 531.821687][ T5911] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 531.880788][ T5911] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 531.918982][ T5911] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 531.982649][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.078064][T13558] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1786'. [ 532.229442][T13562] vhci_hcd: connection reset by peer [ 532.235180][ T7068] vhci_hcd: stop threads [ 532.249569][ T7068] vhci_hcd: release socket [ 532.271766][ T7068] vhci_hcd: disconnect device [ 532.296006][ T5911] usb 6-1: GET_CAPABILITIES returned 0 [ 532.303634][ T5911] usbtmc 6-1:16.0: can't read capabilities [ 532.500559][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 532.514633][T13561] usbtmc 6-1:16.0: Unable to send data, error -71 [ 532.525305][ T5911] usb 6-1: USB disconnect, device number 12 [ 532.943865][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1792'. [ 533.038954][T13600] netlink: 'syz.2.1792': attribute type 11 has an invalid length. [ 533.046898][T13600] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1792'. [ 533.333042][T13598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1793'. [ 533.662056][T13611] openvswitch: netlink: Message has 4 unknown bytes. [ 534.015019][T13617] netlink: 'syz.2.1796': attribute type 1 has an invalid length. [ 534.022978][T13617] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1796'. [ 534.763825][T13635] netlink: 'syz.5.1798': attribute type 1 has an invalid length. [ 534.771683][T13635] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1798'. [ 534.845648][T13621] bio_check_eod: 8 callbacks suppressed [ 534.845680][T13621] syz.1.1797: attempt to access beyond end of device [ 534.845680][T13621] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 535.071316][T13621] syz.1.1797: attempt to access beyond end of device [ 535.071316][T13621] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 535.084325][T13621] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 535.094005][T13621] syz.1.1797: attempt to access beyond end of device [ 535.094005][T13621] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 535.096556][T13629] netlink: del zone limit has 4 unknown bytes [ 535.119738][T13621] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 535.130020][T13621] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 535.138673][T13621] UDF-fs: Scanning with blocksize 1024 failed [ 535.145710][T13621] syz.1.1797: attempt to access beyond end of device [ 535.145710][T13621] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 535.190361][T13621] syz.1.1797: attempt to access beyond end of device [ 535.190361][T13621] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 535.262243][T13630] nbd1: detected capacity change from 0 to 10 [ 535.533539][T13648] mkiss: ax0: crc mode is auto. [ 535.919602][T13621] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 535.930204][T13621] block nbd1: Send control failed (result -89) [ 535.970883][T13621] block nbd1: Request send failed, requeueing [ 536.004662][ T11] block nbd1: Dead connection, failed to find a fallback [ 536.012045][ T11] block nbd1: shutting down sockets [ 536.017311][ T11] blk_print_req_error: 25 callbacks suppressed [ 536.017323][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.034298][ T6806] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.053612][ T6806] buffer_io_error: 25 callbacks suppressed [ 536.053624][ T6806] Buffer I/O error on dev nbd1, logical block 0, async page read [ 536.081246][T13621] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 536.091600][ T6806] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.100722][ T6806] Buffer I/O error on dev nbd1, logical block 1, async page read [ 536.108690][T13621] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.117906][T13621] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 536.127337][ T6806] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.136926][T13621] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 536.147513][ T6806] Buffer I/O error on dev nbd1, logical block 0, async page read [ 536.159112][T13621] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 536.168407][ T6806] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.251953][T13621] UDF-fs: Scanning with blocksize 2048 failed [ 536.375877][T13655] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13655 comm=syz.5.1803 [ 536.813343][ T9] usb 36-1: device descriptor read/8, error -110 [ 537.003410][ T6806] Buffer I/O error on dev nbd1, logical block 1, async page read [ 537.011585][ T6806] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 537.021659][ T6806] Buffer I/O error on dev nbd1, logical block 0, async page read [ 537.029522][ T6806] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 537.038702][ T6806] Buffer I/O error on dev nbd1, logical block 1, async page read [ 537.048719][ T6806] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 537.057819][ T6806] Buffer I/O error on dev nbd1, logical block 0, async page read [ 537.065733][ T6806] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 537.075113][ T6806] Buffer I/O error on dev nbd1, logical block 1, async page read [ 537.086629][ T6806] Buffer I/O error on dev nbd1, logical block 0, async page read [ 537.099681][ T6806] Buffer I/O error on dev nbd1, logical block 1, async page read [ 537.108983][T13621] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 537.109378][ T6806] ldm_validate_partition_table(): Disk read failed. [ 537.286158][T13621] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 537.297204][ T9] usb usb36-port1: attempt power cycle [ 537.313370][T13621] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 537.336750][T13621] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 537.461944][ T6806] Dev nbd1: unable to read RDB block 0 [ 537.469414][T13661] 9pnet_virtio: no channels available for device syz [ 537.480744][ T5941] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 537.488916][T13621] UDF-fs: Scanning with blocksize 4096 failed [ 537.509531][T13621] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 537.535760][ T6806] nbd1: unable to read partition table [ 537.555869][ T6806] nbd1: partition table beyond EOD, truncated [ 537.694606][ T6806] ldm_validate_partition_table(): Disk read failed. [ 537.702605][ T6806] Dev nbd1: unable to read RDB block 0 [ 537.710451][ T6806] nbd1: unable to read partition table [ 537.717607][ T6806] nbd1: partition table beyond EOD, truncated [ 537.780682][T13674] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1807'. [ 537.874448][T13675] netlink: 'syz.5.1807': attribute type 11 has an invalid length. [ 537.882340][T13675] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1807'. [ 538.162918][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.297571][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.332089][ T9] usb usb36-port1: unable to enumerate USB device [ 538.358804][ T5941] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 538.470008][ T5941] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.518568][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.625409][ T5941] usb 3-1: config 0 descriptor?? [ 538.948903][T13688] netlink: 'syz.1.1810': attribute type 1 has an invalid length. [ 538.956819][T13688] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1810'. [ 539.307653][ T5941] usbhid 3-1:0.0: can't add hid device: -71 [ 539.320785][ T5941] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 539.361549][ T5941] usb 3-1: USB disconnect, device number 36 [ 539.480526][T13696] openvswitch: netlink: Message has 4 unknown bytes. [ 539.696669][T13689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1808'. [ 540.290986][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 540.446730][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 540.492007][ T9] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 540.524681][ T9] usb 3-1: config 0 has no interface number 0 [ 540.557245][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 540.573393][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.598423][ T9] usb 3-1: Product: syz [ 540.617293][ T9] usb 3-1: Manufacturer: syz [ 540.632401][ T9] usb 3-1: SerialNumber: syz [ 540.683154][ T9] usb 3-1: config 0 descriptor?? [ 540.721865][ T9] hub 3-1:0.145: bad descriptor, ignoring hub [ 540.727959][ T9] hub 3-1:0.145: probe with driver hub failed with error -5 [ 540.749917][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/input/input34 [ 542.408791][T13773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1817'. [ 542.744993][T13774] 9pnet_virtio: no channels available for device syz [ 543.177538][T13784] netlink: 'syz.5.1819': attribute type 4 has an invalid length. [ 543.187340][T13784] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1819'. [ 543.242261][T13785] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13785 comm=syz.1.1821 [ 544.333442][T13792] syz.2.1822: attempt to access beyond end of device [ 544.333442][T13792] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 544.346584][T13792] syz.2.1822: attempt to access beyond end of device [ 544.346584][T13792] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 544.370113][T13792] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 544.439354][T13792] syz.2.1822: attempt to access beyond end of device [ 544.439354][T13792] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 544.462972][T13792] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 544.534614][T13792] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 544.586416][T13792] UDF-fs: Scanning with blocksize 1024 failed [ 544.603732][T13792] syz.2.1822: attempt to access beyond end of device [ 544.603732][T13792] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 544.793006][T13792] syz.2.1822: attempt to access beyond end of device [ 544.793006][T13792] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 544.831487][T13792] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 544.841737][T13792] syz.2.1822: attempt to access beyond end of device [ 544.841737][T13792] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 544.865554][T13792] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 544.880041][T13792] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 545.069347][T13792] UDF-fs: Scanning with blocksize 2048 failed [ 545.151545][T13792] syz.2.1822: attempt to access beyond end of device [ 545.151545][T13792] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 545.189024][T13792] syz.2.1822: attempt to access beyond end of device [ 545.189024][T13792] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 545.208119][T13792] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 545.235532][T13792] syz.2.1822: attempt to access beyond end of device [ 545.235532][T13792] nbd2: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 545.250834][T13792] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 545.286317][T13792] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 545.308929][T13792] UDF-fs: Scanning with blocksize 4096 failed [ 545.376336][T13792] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 545.423753][T13788] block nbd2: shutting down sockets [ 545.429246][T13821] openvswitch: netlink: Message has 4 unknown bytes. [ 545.617480][T13823] blktrace: Concurrent blktraces are not allowed on loop4 [ 545.924290][ T9] usb 3-1: USB disconnect, device number 37 [ 546.144728][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1827'. [ 547.935133][T13839] netlink: 'syz.1.1830': attribute type 1 has an invalid length. [ 547.942910][T13839] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1830'. [ 548.035059][T13842] netlink: 'syz.5.1829': attribute type 1 has an invalid length. [ 548.042992][T13842] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1829'. [ 548.666942][T13849] netlink: del zone limit has 4 unknown bytes [ 549.017244][T13850] netlink: 'syz.5.1833': attribute type 4 has an invalid length. [ 549.028748][T13850] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1833'. [ 550.305797][T13864] netlink: 'syz.5.1836': attribute type 1 has an invalid length. [ 550.313647][T13864] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1836'. [ 550.763290][T13868] blktrace: Concurrent blktraces are not allowed on loop2 [ 551.131794][ T30] audit: type=1400 audit(1753568584.889:481): avc: denied { create } for pid=13877 comm="syz.5.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 551.232648][T13878] nbd0: detected capacity change from 0 to 127 [ 551.283099][T13889] syz.2.1842: attempt to access beyond end of device [ 551.283099][T13889] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 551.333097][T13889] syz.2.1842: attempt to access beyond end of device [ 551.333097][T13889] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 551.361991][ T30] audit: type=1400 audit(1753568585.109:482): avc: denied { load_policy } for pid=13877 comm="syz.5.1840" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 551.394764][T13889] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 551.432832][T13889] syz.2.1842: attempt to access beyond end of device [ 551.432832][T13889] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 551.500773][T13889] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 551.518223][T13889] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 551.569780][T13889] UDF-fs: Scanning with blocksize 1024 failed [ 551.593779][T13889] syz.2.1842: attempt to access beyond end of device [ 551.593779][T13889] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 551.651015][T13889] syz.2.1842: attempt to access beyond end of device [ 551.651015][T13889] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 551.670387][T13889] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 551.690750][T13889] syz.2.1842: attempt to access beyond end of device [ 551.690750][T13889] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 551.715865][T13889] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 551.752512][T13889] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 551.788370][T13889] UDF-fs: Scanning with blocksize 2048 failed [ 551.807910][T13885] SELinux: failed to load policy [ 551.830362][T13889] syz.2.1842: attempt to access beyond end of device [ 551.830362][T13889] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 551.853946][T12955] block nbd0: Receive control failed (result -104) [ 551.922277][T13889] syz.2.1842: attempt to access beyond end of device [ 551.922277][T13889] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 551.981074][T13889] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 552.050991][T13889] syz.2.1842: attempt to access beyond end of device [ 552.050991][T13889] nbd2: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 552.093813][T13908] lo speed is unknown, defaulting to 1000 [ 552.134005][T13889] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 552.208843][T13889] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 552.245534][T13889] UDF-fs: Scanning with blocksize 4096 failed [ 552.267621][T13889] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 552.321084][T13882] block nbd2: shutting down sockets [ 553.898788][ T30] audit: type=1400 audit(1753568587.619:483): avc: denied { write } for pid=13948 comm="syz.4.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 554.101187][T13959] netlink: 'syz.2.1850': attribute type 1 has an invalid length. [ 554.108990][T13959] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1850'. [ 554.297914][T13950] tmpfs: Bad value for 'mpol' [ 554.696078][T12353] block nbd0: Connection timed out, retrying (0/1 alive) [ 554.704052][T12353] block nbd0: Connection timed out, retrying (0/1 alive) [ 554.711331][ T5980] block nbd0: Dead connection, failed to find a fallback [ 554.718345][ T5980] block nbd0: shutting down sockets [ 554.723746][ T5980] blk_print_req_error: 33 callbacks suppressed [ 554.723754][ T5980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 554.741483][T12353] block nbd0: Connection timed out, retrying (0/1 alive) [ 554.748514][ T5980] buffer_io_error: 30 callbacks suppressed [ 554.748522][ T5980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 554.762376][T12353] block nbd0: Connection timed out, retrying (0/1 alive) [ 554.769460][ T5980] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 554.778656][ T5980] Buffer I/O error on dev nbd0, logical block 3, async page read [ 554.786703][ T5980] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 554.795807][ T5980] Buffer I/O error on dev nbd0, logical block 2, async page read [ 554.803620][ T5980] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 554.812643][ T5980] Buffer I/O error on dev nbd0, logical block 1, async page read [ 554.820443][ T5828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 554.830883][ T5828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 554.838686][ T5828] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 554.883286][ T5828] Buffer I/O error on dev nbd0, logical block 1, async page read [ 554.893193][ T5828] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 554.911453][ T5828] Buffer I/O error on dev nbd0, logical block 2, async page read [ 554.935537][ T5828] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 554.964225][ T5828] Buffer I/O error on dev nbd0, logical block 3, async page read [ 554.985780][ T5828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.048163][ T5828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 555.049832][T13974] netlink: del zone limit has 4 unknown bytes [ 555.110743][ T5828] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.323123][ T5828] Buffer I/O error on dev nbd0, logical block 1, async page read [ 555.392345][ T5828] ldm_validate_partition_table(): Disk read failed. [ 555.400502][ T5828] Dev nbd0: unable to read RDB block 0 [ 555.525085][ T5828] nbd0: unable to read partition table [ 555.800911][ T5942] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 556.068275][ T5828] ldm_validate_partition_table(): Disk read failed. [ 556.103017][ T5828] Dev nbd0: unable to read RDB block 0 [ 556.110178][ T5828] nbd0: unable to read partition table [ 556.180842][ T5942] usb 6-1: Using ep0 maxpacket: 16 [ 556.202086][ T5942] usb 6-1: config 0 has an invalid interface number: 145 but max is 0 [ 556.244067][ T5942] usb 6-1: config 0 has no interface number 0 [ 556.258130][ T5942] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 556.278214][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.291969][ T5942] usb 6-1: Product: syz [ 556.298156][ T5942] usb 6-1: Manufacturer: syz [ 556.391886][ T5942] usb 6-1: SerialNumber: syz [ 556.411575][ T5942] usb 6-1: config 0 descriptor?? [ 556.418185][ T5942] hub 6-1:0.145: bad descriptor, ignoring hub [ 556.427777][ T5942] hub 6-1:0.145: probe with driver hub failed with error -5 [ 556.456620][ T5942] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.145/input/input35 [ 556.505353][T14008] FAULT_INJECTION: forcing a failure. [ 556.505353][T14008] name failslab, interval 1, probability 0, space 0, times 1 [ 556.550717][T14008] CPU: 1 UID: 0 PID: 14008 Comm: syz.2.1865 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 556.550743][T14008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 556.550753][T14008] Call Trace: [ 556.550759][T14008] [ 556.550765][T14008] dump_stack_lvl+0x16c/0x1f0 [ 556.550800][T14008] should_fail_ex+0x512/0x640 [ 556.550826][T14008] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 556.550855][T14008] should_failslab+0xc2/0x120 [ 556.550872][T14008] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 556.550896][T14008] ? __alloc_skb+0x2b2/0x380 [ 556.550924][T14008] __alloc_skb+0x2b2/0x380 [ 556.550948][T14008] ? __pfx___alloc_skb+0x10/0x10 [ 556.550974][T14008] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 556.550998][T14008] netlink_alloc_large_skb+0x69/0x130 [ 556.551019][T14008] netlink_sendmsg+0x6a1/0xdd0 [ 556.551042][T14008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.551071][T14008] ____sys_sendmsg+0xa98/0xc70 [ 556.551092][T14008] ? copy_msghdr_from_user+0x10a/0x160 [ 556.551108][T14008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 556.551139][T14008] ___sys_sendmsg+0x134/0x1d0 [ 556.551157][T14008] ? __pfx____sys_sendmsg+0x10/0x10 [ 556.551171][T14008] ? __lock_acquire+0x622/0x1c90 [ 556.551216][T14008] __sys_sendmsg+0x16d/0x220 [ 556.551232][T14008] ? __pfx___sys_sendmsg+0x10/0x10 [ 556.551264][T14008] do_syscall_64+0xcd/0x4c0 [ 556.551282][T14008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.551299][T14008] RIP: 0033:0x7fec5a78e9a9 [ 556.551313][T14008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.551329][T14008] RSP: 002b:00007fec585f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.551346][T14008] RAX: ffffffffffffffda RBX: 00007fec5a9b5fa0 RCX: 00007fec5a78e9a9 [ 556.551357][T14008] RDX: 0000000000000080 RSI: 0000200000002000 RDI: 0000000000000003 [ 556.551367][T14008] RBP: 00007fec585f6090 R08: 0000000000000000 R09: 0000000000000000 [ 556.551376][T14008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.551385][T14008] R13: 0000000000000000 R14: 00007fec5a9b5fa0 R15: 00007ffff47ed968 [ 556.551407][T14008] [ 556.777900][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.618068][ T5845] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 557.858198][T14035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14035 comm=syz.0.1872 [ 557.967358][T14035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1872'. [ 557.994299][ T5845] Bluetooth: hci4: unexpected event for opcode 0x0c22 [ 558.363962][ T5941] usb 6-1: USB disconnect, device number 13 [ 558.560071][T14054] tmpfs: Bad value for 'mpol' [ 558.826175][ T5845] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 559.016683][T14066] FAULT_INJECTION: forcing a failure. [ 559.016683][T14066] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 559.030981][T14066] CPU: 0 UID: 0 PID: 14066 Comm: syz.5.1878 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 559.031006][T14066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.031015][T14066] Call Trace: [ 559.031021][T14066] [ 559.031027][T14066] dump_stack_lvl+0x16c/0x1f0 [ 559.031059][T14066] should_fail_ex+0x512/0x640 [ 559.031090][T14066] _copy_to_user+0x32/0xd0 [ 559.031110][T14066] simple_read_from_buffer+0xcb/0x170 [ 559.031138][T14066] proc_fail_nth_read+0x197/0x270 [ 559.031164][T14066] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 559.031190][T14066] ? rw_verify_area+0xcf/0x680 [ 559.031211][T14066] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 559.031235][T14066] vfs_read+0x1e1/0xc60 [ 559.031263][T14066] ? __pfx___mutex_lock+0x10/0x10 [ 559.031281][T14066] ? __pfx_vfs_read+0x10/0x10 [ 559.031312][T14066] ? __fget_files+0x20e/0x3c0 [ 559.031336][T14066] ksys_read+0x12a/0x250 [ 559.031359][T14066] ? __pfx_ksys_read+0x10/0x10 [ 559.031391][T14066] do_syscall_64+0xcd/0x4c0 [ 559.031410][T14066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.031427][T14066] RIP: 0033:0x7fecd958d3bc [ 559.031441][T14066] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 559.031458][T14066] RSP: 002b:00007fecda480030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 559.031480][T14066] RAX: ffffffffffffffda RBX: 00007fecd97b6160 RCX: 00007fecd958d3bc [ 559.031491][T14066] RDX: 000000000000000f RSI: 00007fecda4800a0 RDI: 000000000000000a [ 559.031501][T14066] RBP: 00007fecda480090 R08: 0000000000000000 R09: 0000000000000000 [ 559.031511][T14066] R10: 00000002000000fc R11: 0000000000000246 R12: 0000000000000001 [ 559.031521][T14066] R13: 0000000000000000 R14: 00007fecd97b6160 R15: 00007ffe26061e48 [ 559.031548][T14066] [ 559.803929][T14069] macsec0: entered promiscuous mode [ 559.862063][T14069] macsec1: entered allmulticast mode [ 559.874151][T14069] macsec0: entered allmulticast mode [ 559.893644][T14069] veth1_macvtap: entered allmulticast mode [ 559.951133][ T30] audit: type=1400 audit(1753568593.699:484): avc: denied { connect } for pid=14073 comm="syz.1.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 559.990804][T14077] netlink: del zone limit has 4 unknown bytes [ 560.169266][ T30] audit: type=1400 audit(1753568593.729:485): avc: denied { write } for pid=14073 comm="syz.1.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 560.692673][T14090] netlink: 'syz.5.1885': attribute type 1 has an invalid length. [ 560.700699][T14090] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1885'. [ 561.359509][ T30] audit: type=1400 audit(1753568595.109:486): avc: denied { read write } for pid=14094 comm="syz.5.1887" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 561.431284][ T30] audit: type=1400 audit(1753568595.179:487): avc: denied { open } for pid=14094 comm="syz.5.1887" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 561.573732][T14100] netlink: 'syz.1.1888': attribute type 4 has an invalid length. [ 561.581724][T14100] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1888'. [ 562.390932][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.397200][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.132797][T14133] 9pnet_virtio: no channels available for device syz [ 563.443418][T14142] netlink: del zone limit has 4 unknown bytes [ 564.691942][T14157] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 565.496055][T14182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1905'. [ 566.575518][T14196] netlink: 'syz.2.1907': attribute type 1 has an invalid length. [ 566.583312][T14196] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1907'. [ 567.302804][T14205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1909'. [ 567.718973][T14212] fuse: Bad value for 'fd' [ 567.773558][T14212] lo speed is unknown, defaulting to 1000 [ 568.920182][T14225] netlink: 'syz.4.1914': attribute type 1 has an invalid length. [ 568.928054][T14225] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1914'. [ 570.282924][T14237] netlink: 'syz.5.1917': attribute type 4 has an invalid length. [ 570.291149][T14237] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1917'. [ 570.991825][ T30] audit: type=1400 audit(1753568604.439:488): avc: denied { accept } for pid=14236 comm="syz.2.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 572.477193][T14251] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 572.483726][T14251] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 572.496697][T14251] vhci_hcd vhci_hcd.0: Device attached [ 572.510017][T14251] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 572.623534][T14266] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1925'. [ 572.634165][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1925'. [ 572.660260][T14251] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1923'. [ 572.670968][T14259] vhci_hcd: connection closed [ 572.680683][ T7066] vhci_hcd: stop threads [ 572.699882][ T7066] vhci_hcd: release socket [ 572.706393][ T7066] vhci_hcd: disconnect device [ 572.715834][ T30] audit: type=1400 audit(1753568606.469:489): avc: denied { associate } for pid=14265 comm="syz.4.1925" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 572.830812][ T5911] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 572.843233][T14273] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1929'. [ 573.410697][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 573.445243][T14278] netlink: del zone limit has 4 unknown bytes [ 573.507583][ T5911] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 573.592278][ T5911] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 573.723002][ T5911] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 573.750678][ T5911] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.764825][ T5911] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 573.775102][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.027088][ T5911] usb 3-1: GET_CAPABILITIES returned 0 [ 574.036977][ T30] audit: type=1400 audit(1753568607.789:490): avc: denied { nlmsg_read } for pid=14281 comm="syz.0.1930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 574.061401][T14292] netlink: 'syz.5.1932': attribute type 2 has an invalid length. [ 574.070801][T14292] netlink: 'syz.5.1932': attribute type 4 has an invalid length. [ 574.211426][ T5911] usbtmc 3-1:16.0: can't read capabilities [ 574.219617][ T30] audit: type=1400 audit(1753568607.889:491): avc: denied { connect } for pid=14287 comm="syz.5.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 574.273886][ T5911] usb 3-1: USB disconnect, device number 38 [ 574.442930][ T30] audit: type=1400 audit(1753568608.039:492): avc: denied { shutdown } for pid=14287 comm="syz.5.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 575.471232][ T30] audit: type=1400 audit(1753568609.109:493): avc: denied { ioctl } for pid=14316 comm="syz.2.1937" path="socket:[38113]" dev="sockfs" ino=38113 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 575.526792][T14322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=14322 comm=syz.2.1937 [ 575.641218][T14330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14330 comm=syz.0.1939 [ 575.685161][T14330] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1939'. [ 575.694620][ T30] audit: type=1400 audit(1753568609.439:494): avc: denied { getopt } for pid=14321 comm="syz.0.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 576.032166][T14340] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 576.038722][T14340] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 576.062471][T14340] vhci_hcd vhci_hcd.0: Device attached [ 576.071601][T14343] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 576.290776][T12955] Bluetooth: hci3: command 0x0c1a tx timeout [ 576.719231][ T43] usb 42-1: SetAddress Request (14) to port 0 [ 576.778366][T14340] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1942'. [ 576.789581][ T43] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 576.826137][T14341] vhci_hcd: connection closed [ 576.826344][ T7066] vhci_hcd: stop threads [ 576.859434][ T7066] vhci_hcd: release socket [ 576.885194][ T7066] vhci_hcd: disconnect device [ 578.353988][ T30] audit: type=1400 audit(1753568612.059:495): avc: denied { ioctl } for pid=14369 comm="syz.1.1949" path="/dev/sg0" dev="devtmpfs" ino=759 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 578.521895][T12955] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 578.660872][T14375] sctp: failed to load transform for md5: -2 [ 578.675693][T14376] sctp: failed to load transform for md5: -2 [ 578.962718][T14394] input: syz1 as /devices/virtual/input/input36 [ 579.107780][T12955] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 579.111504][ T30] audit: type=1400 audit(1753568612.869:496): avc: denied { lock } for pid=14388 comm="syz.1.1954" path="socket:[37723]" dev="sockfs" ino=37723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 579.825529][ T5893] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 580.010800][ T5893] usb 3-1: device descriptor read/64, error -71 [ 580.250784][ T5893] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 580.559441][T14410] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1957'. [ 580.619368][ T5893] usb 3-1: device descriptor read/64, error -71 [ 580.700196][ T30] audit: type=1400 audit(1753568614.449:497): avc: denied { setattr } for pid=14418 comm="syz.5.1958" name="seq" dev="devtmpfs" ino=1285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 580.779206][ T5893] usb usb3-port1: attempt power cycle [ 580.896596][ T30] audit: type=1400 audit(1753568614.649:498): avc: denied { ioctl } for pid=14421 comm="syz.5.1959" path="socket:[37758]" dev="sockfs" ino=37758 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 580.944160][ T30] audit: type=1400 audit(1753568614.679:499): avc: denied { ioctl } for pid=14421 comm="syz.5.1959" path="socket:[37759]" dev="sockfs" ino=37759 ioctlcmd=0x4b60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 581.141005][ T5893] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 581.170735][ T5941] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 581.201274][ T5893] usb 3-1: device descriptor read/8, error -71 [ 581.276919][T14430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1960'. [ 581.330982][ T5941] usb 6-1: Using ep0 maxpacket: 32 [ 581.346584][ T5941] usb 6-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 581.360774][ T5941] usb 6-1: config 1 interface 0 has no altsetting 0 [ 581.450915][ T5941] usb 6-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 581.465919][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.490335][ T5941] usb 6-1: Product: syz [ 581.943077][ T5893] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 581.950754][ T43] usb 42-1: device descriptor read/8, error -110 [ 581.982470][ T5941] usb 6-1: Manufacturer: ⡃장䢚惭븅愦ኑ鼹嬼㹦⡯洛灎㙽삧筷ᬙ꿖춞礲㽾⠻ࣱ䏝우飺矖迦즘䪖 [ 582.014542][ T5893] usb 3-1: device descriptor read/8, error -71 [ 582.233868][ T5893] usb usb3-port1: unable to enumerate USB device [ 582.451186][ T5941] usb 6-1: SerialNumber: syz [ 582.628269][ T43] usb usb42-port1: attempt power cycle [ 583.025644][T14450] mkiss: ax0: crc mode is auto. [ 583.632030][ T5941] usbhid 6-1:1.0: can't add hid device: -71 [ 583.641585][ T5941] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 583.904275][ T5941] usb 6-1: USB disconnect, device number 14 [ 584.396564][ T43] usb usb42-port1: unable to enumerate USB device [ 588.773711][T14524] binder: 14488:14524 ioctl c0306201 200000000540 returned -14 [ 589.275007][ T30] audit: type=1400 audit(1753568623.029:500): avc: denied { listen } for pid=14513 comm="syz.0.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 589.486962][T14528] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 589.493592][T14528] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 589.511997][T14528] vhci_hcd vhci_hcd.0: Device attached [ 589.608679][T14531] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 589.715094][T14531] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1982'. [ 589.782654][ T43] usb 44-1: SetAddress Request (11) to port 0 [ 589.799732][ T43] usb 44-1: new SuperSpeed USB device number 11 using vhci_hcd [ 589.846126][T14529] vhci_hcd: connection closed [ 589.852354][ T202] vhci_hcd: stop threads [ 589.863918][ T202] vhci_hcd: release socket [ 589.883699][ T202] vhci_hcd: disconnect device [ 590.354962][ T30] audit: type=1400 audit(1753568624.099:501): avc: denied { getopt } for pid=14538 comm="syz.2.1988" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 591.317734][T14554] openvswitch: netlink: VXLAN extension message has 22 unknown bytes. [ 592.041864][T14566] netlink: 'syz.2.1993': attribute type 1 has an invalid length. [ 592.049657][T14566] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1993'. [ 593.225226][T12955] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 593.377242][T14582] blktrace: Concurrent blktraces are not allowed on loop4 [ 593.667711][T12955] Bluetooth: hci4: unexpected event for opcode 0x0c22 [ 593.959885][T14598] openvswitch: netlink: VXLAN extension message has 22 unknown bytes. [ 594.931206][ T43] usb 44-1: device descriptor read/8, error -110 [ 595.724235][ T43] usb usb44-port1: attempt power cycle [ 596.251411][T14616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14616 comm=syz.0.2008 [ 596.869581][ T43] usb usb44-port1: unable to enumerate USB device [ 597.525645][ T30] audit: type=1400 audit(1753568631.279:502): avc: denied { write } for pid=14640 comm="syz.2.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 598.248640][T14647] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 598.276816][T14660] 9pnet_fd: Insufficient options for proto=fd [ 598.358341][ T30] audit: type=1400 audit(1753568632.079:503): avc: denied { getopt } for pid=14659 comm="syz.0.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 598.437748][T14665] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2027'. [ 598.515264][T14653] block device autoloading is deprecated and will be removed. [ 598.579990][T14669] netlink: del zone limit has 4 unknown bytes [ 599.690021][T14677] comedi comedi3: comedi_config --init_data is deprecated [ 599.863792][T14680] serio: Serial port ptm0 [ 600.027190][T14683] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14683 comm=syz.2.2033 [ 600.330985][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2038'. [ 600.360377][T14694] hsr_slave_0: left promiscuous mode [ 600.374537][T14700] FAULT_INJECTION: forcing a failure. [ 600.374537][T14700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.387686][ T5941] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 600.398435][T14694] hsr_slave_1: left promiscuous mode [ 600.399539][T14700] CPU: 0 UID: 0 PID: 14700 Comm: syz.1.2041 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 600.399559][T14700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 600.399568][T14700] Call Trace: [ 600.399573][T14700] [ 600.399579][T14700] dump_stack_lvl+0x16c/0x1f0 [ 600.399607][T14700] should_fail_ex+0x512/0x640 [ 600.399633][T14700] _copy_from_user+0x2e/0xd0 [ 600.399649][T14700] copy_msghdr_from_user+0x98/0x160 [ 600.399664][T14700] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 600.399684][T14700] ? __lock_acquire+0x622/0x1c90 [ 600.399701][T14700] ___sys_recvmsg+0xdb/0x1a0 [ 600.399716][T14700] ? __pfx____sys_recvmsg+0x10/0x10 [ 600.399732][T14700] ? find_held_lock+0x2b/0x80 [ 600.399763][T14700] do_recvmmsg+0x2fe/0x750 [ 600.399780][T14700] ? __pfx_do_recvmmsg+0x10/0x10 [ 600.399799][T14700] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 600.399821][T14700] ? __fget_files+0x20e/0x3c0 [ 600.399840][T14700] __x64_sys_recvmmsg+0x22a/0x280 [ 600.399857][T14700] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 600.399878][T14700] do_syscall_64+0xcd/0x4c0 [ 600.399894][T14700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.399909][T14700] RIP: 0033:0x7fd5dc38e9a9 [ 600.399922][T14700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.399936][T14700] RSP: 002b:00007fd5dd16f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 600.399950][T14700] RAX: ffffffffffffffda RBX: 00007fd5dc5b5fa0 RCX: 00007fd5dc38e9a9 [ 600.399960][T14700] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000007 [ 600.399969][T14700] RBP: 00007fd5dd16f090 R08: 0000000000000000 R09: 0000000000000000 [ 600.399977][T14700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.399986][T14700] R13: 0000000000000000 R14: 00007fd5dc5b5fa0 R15: 00007fff6bdc53a8 [ 600.400006][T14700] [ 600.540692][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 600.614340][ T5941] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 600.622677][ T5941] usb 3-1: config 0 has no interface number 0 [ 600.630805][ T5941] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 600.640738][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.648709][ T5941] usb 3-1: Product: syz [ 600.685653][ T5941] usb 3-1: Manufacturer: syz [ 600.700937][ T5941] usb 3-1: SerialNumber: syz [ 600.708066][ T5941] usb 3-1: config 0 descriptor?? [ 600.719530][ T5941] hub 3-1:0.145: bad descriptor, ignoring hub [ 600.748681][ T5941] hub 3-1:0.145: probe with driver hub failed with error -5 [ 600.769017][ T5941] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/input/input37 [ 601.546572][T14717] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14717 comm=syz.4.2046 [ 601.648921][T14719] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 601.655472][T14719] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 602.019199][T14719] vhci_hcd vhci_hcd.0: Device attached [ 602.025911][T14724] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 602.271964][T14724] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2040'. [ 602.478332][ T5893] usb 44-1: SetAddress Request (15) to port 0 [ 602.478376][T14720] vhci_hcd: connection closed [ 602.484845][ T5893] usb 44-1: new SuperSpeed USB device number 15 using vhci_hcd [ 602.502021][ T7066] vhci_hcd: stop threads [ 602.506268][ T7066] vhci_hcd: release socket [ 602.553119][ T7066] vhci_hcd: disconnect device [ 602.617066][ T5893] usb 44-1: enqueue for inactive port 0 [ 602.758633][ T973] usb 3-1: USB disconnect, device number 43 [ 603.061868][T12955] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 603.182741][T12955] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 603.391633][ T5893] usb usb44-port1: attempt power cycle [ 604.025195][ T5911] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 604.053910][ T5893] usb usb44-port1: unable to enumerate USB device [ 604.182422][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.317946][ T5911] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 604.327687][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.339317][ T5911] usb 3-1: config 0 descriptor?? [ 604.346448][ T5911] pwc: Askey VC010 type 2 USB webcam detected. [ 604.922607][T14760] netlink: 'syz.4.2058': attribute type 4 has an invalid length. [ 604.930420][T14760] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2058'. [ 605.254871][ T5911] pwc: recv_control_msg error -32 req 02 val 2b00 [ 605.265740][ T5911] pwc: recv_control_msg error -32 req 02 val 2700 [ 605.689094][ T5911] pwc: recv_control_msg error -32 req 02 val 2c00 [ 605.711218][ T5911] pwc: recv_control_msg error -32 req 04 val 1000 [ 605.723981][T14772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2061'. [ 605.744143][ T5911] pwc: recv_control_msg error -32 req 04 val 1300 [ 605.801508][ T5911] pwc: recv_control_msg error -32 req 04 val 1400 [ 605.863225][ T5911] pwc: recv_control_msg error -32 req 02 val 2000 [ 605.893916][ T5911] pwc: recv_control_msg error -32 req 02 val 2100 [ 605.918010][ T5911] pwc: recv_control_msg error -32 req 04 val 1500 [ 605.948470][ T5911] pwc: recv_control_msg error -32 req 02 val 2500 [ 605.967834][ T5911] pwc: recv_control_msg error -32 req 02 val 2400 [ 606.016150][ T5911] pwc: recv_control_msg error -32 req 02 val 2600 [ 606.205904][T12955] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 606.292836][ T5911] pwc: recv_control_msg error -32 req 02 val 2900 [ 606.351146][ T5911] pwc: recv_control_msg error -32 req 02 val 2800 [ 606.363791][ T5911] pwc: recv_control_msg error -32 req 04 val 1100 [ 606.375502][ T5911] pwc: recv_control_msg error -71 req 04 val 1200 [ 606.412099][ T5911] pwc: Registered as video103. [ 606.423135][T12955] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 606.433456][ T5911] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input38 [ 606.497036][ T5911] usb 3-1: USB disconnect, device number 44 [ 606.561823][T14802] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 607.294783][T14815] netlink: 'syz.0.2071': attribute type 4 has an invalid length. [ 607.304371][T14815] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2071'. [ 607.472017][ T30] audit: type=1400 audit(1753568641.229:504): avc: denied { setopt } for pid=14816 comm="syz.0.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 607.548147][T14822] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 607.631328][T14822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2070'. [ 607.746439][T14819] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 607.752990][T14819] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 607.771206][T14819] vhci_hcd vhci_hcd.0: Device attached [ 607.967350][T14820] vhci_hcd: connection closed [ 607.967702][ T7066] vhci_hcd: stop threads [ 607.977425][ T7066] vhci_hcd: release socket [ 607.981972][ T7066] vhci_hcd: disconnect device [ 609.222223][T14844] lo speed is unknown, defaulting to 1000 [ 610.630565][T14865] mkiss: ax0: crc mode is auto. [ 611.674570][T14872] lo speed is unknown, defaulting to 1000 [ 612.085809][ T30] audit: type=1400 audit(1753568645.839:505): avc: denied { bind } for pid=14866 comm="syz.0.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 612.174359][ T30] audit: type=1400 audit(1753568645.879:506): avc: denied { getopt } for pid=14866 comm="syz.0.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 612.222960][ T5942] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 612.462517][ T5942] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 612.471605][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.481265][ T5942] usb 3-1: config 0 descriptor?? [ 612.487517][ T5942] cp210x 3-1:0.0: cp210x converter detected [ 613.115268][T14887] tipc: Enabling of bearer rejected, failed to enable media [ 613.485533][T14896] capability: warning: `syz.1.2087' uses deprecated v2 capabilities in a way that may be insecure [ 613.578462][T14898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2086'. [ 614.691991][ T5942] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 614.737317][ T5942] cp210x 3-1:0.0: querying part number failed [ 614.967533][ T5942] usb 3-1: cp210x converter now attached to ttyUSB0 [ 615.259217][ T5942] usb 3-1: USB disconnect, device number 45 [ 615.277412][ T5942] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 615.794204][ T5942] cp210x 3-1:0.0: device disconnected [ 615.822308][T14913] mkiss: ax0: crc mode is auto. [ 616.464098][T14921] mkiss: ax0: crc mode is auto. [ 618.199288][T14942] /dev/nullb0: Can't open blockdev [ 618.244738][T14939] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 618.251293][T14939] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 618.659331][T14939] vhci_hcd vhci_hcd.0: Device attached [ 619.003852][T14945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2099'. [ 619.221298][T14946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2091'. [ 619.740828][ T30] audit: type=1400 audit(1753568653.479:507): avc: denied { search } for pid=14947 comm="syz.5.2101" name="/" dev="configfs" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 619.793025][T14950] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 620.301339][ T5893] usb 42-1: SetAddress Request (18) to port 0 [ 620.321091][ T5893] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 620.361655][T14961] openvswitch: netlink: Message has 4 unknown bytes. [ 620.983885][T14940] vhci_hcd: connection reset by peer [ 620.989518][ T7060] vhci_hcd: stop threads [ 620.995624][ T7060] vhci_hcd: release socket [ 621.003872][T14969] 9pnet_fd: Insufficient options for proto=fd [ 621.010266][ T7060] vhci_hcd: disconnect device [ 622.193877][T14988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2113'. [ 622.255365][T14994] Illegal XDP return value 4290970536 on prog (id 467) dev N/A, expect packet loss! [ 622.268154][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2114'. [ 622.460822][ T5845] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 622.719402][ T5845] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 623.818302][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.824675][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.411138][T15035] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 624.457606][ T30] audit: type=1400 audit(1753568658.169:508): avc: denied { write } for pid=15032 comm="syz.2.2123" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 624.482113][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.630892][ T30] audit: type=1400 audit(1753568658.359:509): avc: denied { module_request } for pid=15032 comm="syz.2.2123" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 624.652720][ T30] audit: type=1400 audit(1753568658.369:510): avc: denied { recv } for pid=15036 comm="kworker/u8:22" saddr=10.128.0.169 src=30006 daddr=10.128.1.23 dest=59168 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 624.678238][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.777142][ T30] audit: type=1400 audit(1753568658.529:511): avc: denied { create } for pid=15037 comm="syz.1.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 624.837104][ T30] audit: type=1400 audit(1753568658.529:512): avc: denied { write } for pid=15037 comm="syz.1.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 624.869160][ T30] audit: type=1400 audit(1753568658.549:513): avc: denied { create } for pid=15037 comm="syz.1.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 624.950552][ T30] audit: type=1400 audit(1753568658.549:514): avc: denied { ioctl } for pid=15037 comm="syz.1.2124" path="socket:[40748]" dev="sockfs" ino=40748 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 624.989277][ T30] audit: type=1400 audit(1753568658.559:515): avc: denied { write } for pid=15037 comm="syz.1.2124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 625.024177][ T30] audit: type=1400 audit(1753568658.649:516): avc: denied { map_create } for pid=15040 comm="syz.0.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 625.043268][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.192265][T15049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2127'. [ 625.282197][T15048] FAULT_INJECTION: forcing a failure. [ 625.282197][T15048] name failslab, interval 1, probability 0, space 0, times 0 [ 625.302198][T15048] CPU: 0 UID: 0 PID: 15048 Comm: syz.1.2126 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 625.302222][T15048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 625.302231][T15048] Call Trace: [ 625.302237][T15048] [ 625.302244][T15048] dump_stack_lvl+0x16c/0x1f0 [ 625.302276][T15048] should_fail_ex+0x512/0x640 [ 625.302303][T15048] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 625.302333][T15048] should_failslab+0xc2/0x120 [ 625.302350][T15048] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 625.302376][T15048] ? copy_process+0x4b6/0x7650 [ 625.302400][T15048] ? _raw_spin_unlock_irq+0x23/0x50 [ 625.302428][T15048] copy_process+0x4b6/0x7650 [ 625.302462][T15048] ? __pfx_copy_process+0x10/0x10 [ 625.302497][T15048] kernel_clone+0xfc/0x960 [ 625.302523][T15048] ? __pfx_kernel_clone+0x10/0x10 [ 625.302555][T15048] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 625.302575][T15048] __do_sys_clone+0xce/0x120 [ 625.302598][T15048] ? __pfx___do_sys_clone+0x10/0x10 [ 625.302631][T15048] ? ksys_write+0x1ac/0x250 [ 625.302656][T15048] ? __pfx_ksys_write+0x10/0x10 [ 625.302688][T15048] do_syscall_64+0xcd/0x4c0 [ 625.302707][T15048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.302724][T15048] RIP: 0033:0x7fd5dc38e9a9 [ 625.302740][T15048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.302756][T15048] RSP: 002b:00007fd5dd12cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 625.302773][T15048] RAX: ffffffffffffffda RBX: 00007fd5dc5b6160 RCX: 00007fd5dc38e9a9 [ 625.302784][T15048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 625.302793][T15048] RBP: 00007fd5dd12d090 R08: 0000000000000000 R09: 0000000000000000 [ 625.302803][T15048] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 625.302812][T15048] R13: 0000000000000000 R14: 00007fd5dc5b6160 R15: 00007fff6bdc53a8 [ 625.302835][T15048] [ 625.503340][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.510427][ T5893] usb 42-1: device descriptor read/8, error -110 [ 625.523574][ T30] audit: type=1400 audit(1753568658.659:517): avc: denied { read write } for pid=5826 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 625.547636][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.555446][ T30] audit: type=1400 audit(1753568658.659:518): avc: denied { open } for pid=5826 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 625.579404][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.586244][ T30] audit: type=1400 audit(1753568658.659:519): avc: denied { ioctl } for pid=5826 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 625.611676][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.618687][ T30] audit: type=1400 audit(1753568658.679:520): avc: denied { perfmon } for pid=15040 comm="syz.0.2125" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 626.221122][ T5893] usb usb42-port1: attempt power cycle [ 626.608756][T15063] 9pnet_virtio: no channels available for device syz [ 626.752250][T15067] netlink: del zone limit has 4 unknown bytes [ 626.873140][ T5893] usb usb42-port1: unable to enumerate USB device [ 627.540820][T15076] netlink: del zone limit has 4 unknown bytes [ 627.808585][T15072] netlink: 'syz.4.2134': attribute type 1 has an invalid length. [ 628.646709][T15072] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2134'. [ 629.011087][T15095] nbd5: detected capacity change from 0 to 10 [ 629.054254][T15095] block nbd5: Send control failed (result -89) [ 629.060445][T15095] block nbd5: Request send failed, requeueing [ 629.100716][ T11] block nbd5: Dead connection, failed to find a fallback [ 629.100752][ T5845] block nbd5: Receive control failed (result -32) [ 629.107848][ T11] block nbd5: shutting down sockets [ 629.119539][ T11] blk_print_req_error: 138 callbacks suppressed [ 629.119553][ T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.135010][ T11] buffer_io_error: 138 callbacks suppressed [ 629.135018][ T11] Buffer I/O error on dev nbd5, logical block 0, async page read [ 629.160860][T15095] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.207627][T15095] Buffer I/O error on dev nbd5, logical block 0, async page read [ 629.220936][T15095] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.341273][T15095] Buffer I/O error on dev nbd5, logical block 0, async page read [ 629.355585][T15095] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.376181][T15095] Buffer I/O error on dev nbd5, logical block 0, async page read [ 629.386668][T15095] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.396105][T15095] Buffer I/O error on dev nbd5, logical block 0, async page read [ 629.408136][T15095] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.417807][T15095] Buffer I/O error on dev nbd5, logical block 0, async page read [ 629.425966][T15095] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.436749][T15092] netlink: 'syz.2.2139': attribute type 4 has an invalid length. [ 629.444559][T15092] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2139'. [ 629.456085][T15095] Buffer I/O error on dev nbd5, logical block 0, async page read [ 629.467701][T15095] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.542879][T15095] Buffer I/O error on dev nbd5, logical block 0, async page read [ 629.605474][T15095] ldm_validate_partition_table(): Disk read failed. [ 629.660827][T15095] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.690436][T15105] 9pnet_virtio: no channels available for device syz [ 629.913841][T15095] Buffer I/O error on dev nbd5, logical block 0, async page read [ 629.932284][T15095] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.949717][T15095] Buffer I/O error on dev nbd5, logical block 0, async page read [ 629.958759][T15095] Dev nbd5: unable to read RDB block 0 [ 629.965258][T15095] nbd5: unable to read partition table [ 629.975172][T15095] nbd5: partition table beyond EOD, truncated [ 629.981911][T15095] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 629.984555][ T5828] ldm_validate_partition_table(): Disk read failed. [ 629.992626][T15095] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=4, location=4 [ 630.011442][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 630.011456][ T30] audit: type=1400 audit(1753568663.769:573): avc: denied { read write } for pid=15107 comm="syz.2.2144" name="swradio4" dev="devtmpfs" ino=1008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 630.013917][T15095] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=3, location=3 [ 630.040913][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.058692][ T30] audit: type=1400 audit(1753568663.769:574): avc: denied { open } for pid=15107 comm="syz.2.2144" path="/dev/swradio4" dev="devtmpfs" ino=1008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 630.098647][ T5828] Dev nbd5: unable to read RDB block 0 [ 630.115514][ T5828] nbd5: unable to read partition table [ 630.133054][ T5828] nbd5: partition table beyond EOD, truncated [ 630.151292][ T30] audit: type=1400 audit(1753568663.849:575): avc: denied { ioctl } for pid=15107 comm="syz.2.2144" path="/dev/swradio4" dev="devtmpfs" ino=1008 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 630.193169][T15095] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=2, location=2 [ 630.208968][T15095] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 630.237687][T15095] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 630.600444][T15095] UDF-fs: Scanning with blocksize 1024 failed [ 630.651282][ T30] audit: type=1400 audit(1753568663.869:576): avc: denied { map } for pid=15107 comm="syz.2.2144" path="/dev/swradio4" dev="devtmpfs" ino=1008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 630.666749][T15095] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 630.687738][ T5828] ldm_validate_partition_table(): Disk read failed. [ 630.696864][ T30] audit: type=1400 audit(1753568663.869:577): avc: denied { execute } for pid=15107 comm="syz.2.2144" path="/dev/swradio4" dev="devtmpfs" ino=1008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 630.773410][ T30] audit: type=1400 audit(1753568663.989:578): avc: denied { read write } for pid=15115 comm="syz.2.2147" name="vbi8" dev="devtmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 630.836100][T15095] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=1, location=1 [ 630.921525][ T5845] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 631.095302][T12955] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 631.133403][ T30] audit: type=1400 audit(1753568663.989:579): avc: denied { open } for pid=15115 comm="syz.2.2147" path="/dev/vbi8" dev="devtmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 631.156990][ T30] audit: type=1400 audit(1753568664.009:580): avc: denied { ioctl } for pid=15115 comm="syz.2.2147" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 631.242973][T15125] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2146'. [ 631.287762][ T5828] Dev nbd5: unable to read RDB block 0 [ 631.294405][ T5828] nbd5: unable to read partition table [ 631.300121][ T5828] nbd5: partition table beyond EOD, truncated [ 631.326056][ T30] audit: type=1400 audit(1753568664.129:581): avc: denied { block_suspend } for pid=15111 comm="syz.0.2145" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 631.352198][ T30] audit: type=1400 audit(1753568664.479:582): avc: denied { create } for pid=15113 comm="syz.4.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 631.378304][T15095] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=0, location=0 [ 631.390418][T15095] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 631.412921][T15095] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 631.423022][T15095] UDF-fs: Scanning with blocksize 2048 failed [ 631.435883][T15095] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 631.447234][T15129] netlink: 'syz.0.2148': attribute type 1 has an invalid length. [ 631.467899][T15095] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=0, location=0 [ 631.482942][T15095] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 631.528471][T15095] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 631.744519][T15095] UDF-fs: Scanning with blocksize 4096 failed [ 631.761930][ T5828] ldm_validate_partition_table(): Disk read failed. [ 631.772038][T15095] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 632.319234][ T5828] Dev nbd5: unable to read RDB block 0 [ 632.325469][ T5828] nbd5: unable to read partition table [ 632.335226][ T5828] nbd5: partition table beyond EOD, truncated [ 632.491952][T15141] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20000 [ 632.547467][T15144] netlink: del zone limit has 4 unknown bytes [ 632.592569][T15140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.940742][ T5893] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 632.961331][ T5942] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 633.057874][T15155] lo speed is unknown, defaulting to 1000 [ 633.112370][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.140822][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.161684][ T5942] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.180816][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 633.193986][ T5942] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 633.216485][ T5942] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 633.235907][ T5893] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 633.248272][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.257548][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.274967][ T5942] usb 3-1: config 0 descriptor?? [ 633.296297][ T5942] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 633.312415][ T5893] usb 6-1: config 0 descriptor?? [ 633.324118][ T5942] dvb-usb: bulk message failed: -22 (3/0) [ 633.344661][ T5942] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 633.355125][ T5942] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 633.397324][ T5942] usb 3-1: media controller created [ 633.422526][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 633.514985][ T5942] dvb-usb: bulk message failed: -22 (6/0) [ 633.556478][ T5942] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 633.622644][ T5942] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input39 [ 633.705036][ T5942] dvb-usb: schedule remote query interval to 150 msecs. [ 633.730805][ T5942] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 633.788470][ T5893] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 633.815290][ T5942] usb 3-1: USB disconnect, device number 46 [ 633.941175][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2160'. [ 633.971475][ T5893] usb 6-1: USB disconnect, device number 15 [ 633.979020][ T5942] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 634.084499][T15164] fido_id[15164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 634.495555][T15163] veth1_vlan (unregistering): left allmulticast mode [ 634.595223][T15163] : (slave macvlan0): Releasing backup interface [ 634.723454][ T5845] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 634.863624][T15179] blktrace: Concurrent blktraces are not allowed on loop10 [ 634.883321][T15180] netlink: del zone limit has 4 unknown bytes [ 636.101409][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 636.101421][ T30] audit: type=1400 audit(1753568669.849:616): avc: denied { write } for pid=15187 comm="syz.4.2168" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 636.159912][T15190] lo speed is unknown, defaulting to 1000 [ 636.170296][ T30] audit: type=1400 audit(1753568669.849:617): avc: denied { create } for pid=15187 comm="syz.4.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 636.222152][ T30] audit: type=1400 audit(1753568669.849:618): avc: denied { ioctl } for pid=15187 comm="syz.4.2168" path="socket:[41275]" dev="sockfs" ino=41275 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 636.290030][ T30] audit: type=1400 audit(1753568669.849:619): avc: denied { write } for pid=15187 comm="syz.4.2168" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 636.358782][ T30] audit: type=1400 audit(1753568669.849:620): avc: denied { open } for pid=15187 comm="syz.4.2168" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 636.416288][ T30] audit: type=1400 audit(1753568669.849:621): avc: denied { ioctl } for pid=15187 comm="syz.4.2168" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 636.440877][ C1] vkms_vblank_simulate: vblank timer overrun [ 636.468279][ T30] audit: type=1400 audit(1753568669.949:622): avc: denied { unlink } for pid=10602 comm="syz-executor" name="file0" dev="tmpfs" ino=868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 637.268459][ T30] audit: type=1400 audit(1753568671.019:623): avc: denied { write } for pid=15189 comm="syz.0.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 637.856127][ T30] audit: type=1400 audit(1753568671.609:624): avc: denied { execute } for pid=15216 comm="syz.0.2176" path="/565/cpu.stat" dev="tmpfs" ino=3049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 638.712264][T15232] netlink: 'syz.0.2178': attribute type 4 has an invalid length. [ 638.720008][T15232] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2178'. [ 638.916896][ T30] audit: type=1400 audit(1753568672.669:625): avc: denied { bind } for pid=15236 comm="syz.2.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 638.936200][ C1] vkms_vblank_simulate: vblank timer overrun [ 638.955220][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2180'. [ 640.138259][T15251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2179'. [ 641.142851][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 641.142867][ T30] audit: type=1400 audit(1753568674.889:633): avc: denied { read } for pid=15262 comm="syz.2.2184" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 641.172465][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.100622][ C1] sched: DL replenish lagged too much [ 648.497659][ T30] audit: type=1400 audit(1753568674.889:634): avc: denied { open } for pid=15262 comm="syz.2.2184" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 652.529325][ T30] audit: type=1400 audit(1753568674.889:635): avc: denied { ioctl } for pid=15262 comm="syz.2.2184" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 663.080942][ T30] audit: type=1400 audit(1753568687.999:636): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=34058 daddr=10.128.1.23 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 685.464306][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.659187][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.075451][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.109971][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 794.430565][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 794.437554][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15270/1:b..l [ 794.446013][ C0] rcu: (detected by 0, t=10502 jiffies, g=52977, q=327 ncpus=2) [ 794.453736][ C0] task:syz.4.2186 state:R running task stack:26280 pid:15270 tgid:15270 ppid:5838 task_flags:0x400040 flags:0x00004004 [ 794.468239][ C0] Call Trace: [ 794.471521][ C0] [ 794.474460][ C0] __schedule+0x116a/0x5dd0 [ 794.478980][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 794.483999][ C0] ? __pfx___schedule+0x10/0x10 [ 794.488848][ C0] ? mark_held_locks+0x49/0x80 [ 794.493605][ C0] preempt_schedule_irq+0x51/0x90 [ 794.498637][ C0] irqentry_exit+0x36/0x90 [ 794.503050][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 794.509033][ C0] RIP: 0010:__reset_page_owner+0x5f/0x1a0 [ 794.514760][ C0] Code: 89 c3 e8 44 94 90 ff 4c 8b 3d 0d 16 50 0c 48 b8 00 00 00 00 00 fc ff df 49 01 df 49 8d 7f 08 48 89 fa 48 c1 ea 03 0f b6 04 02 <84> c0 74 08 3c 03 0f 8e 2a 01 00 00 48 89 df 45 8b 7f 08 0f b7 dd [ 794.534365][ C0] RSP: 0018:ffffc9000511f8b0 EFLAGS: 00000a06 [ 794.540439][ C0] RAX: 0000000000000000 RBX: ffff88801d978cc0 RCX: ffffffff822cd3cb [ 794.548409][ C0] RDX: 1ffff11003b2f19a RSI: ffffffff822b544c RDI: ffff88801d978cd0 [ 794.556382][ C0] RBP: 0000000000000002 R08: 0000000000000007 R09: 0000000000000000 [ 794.564342][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffea0000f2d700 [ 794.572285][ C0] R13: 000000a056c6026c R14: 0000000000000002 R15: ffff88801d978cc8 [ 794.580234][ C0] ? lookup_page_ext+0x13b/0x1d0 [ 794.585150][ C0] ? __reset_page_owner+0x3c/0x1a0 [ 794.590239][ C0] __free_frozen_pages+0x7fe/0x1180 [ 794.595414][ C0] qlist_free_all+0x4d/0x120 [ 794.599988][ C0] ? lsm_blob_alloc+0x68/0x90 [ 794.604637][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 794.610073][ C0] __kasan_kmalloc+0x8a/0xb0 [ 794.614640][ C0] __kmalloc_noprof+0x223/0x510 [ 794.619467][ C0] ? __pfx_perf_event_init_task+0x10/0x10 [ 794.625159][ C0] ? audit_alloc+0xa2/0x7b0 [ 794.629637][ C0] lsm_blob_alloc+0x68/0x90 [ 794.634111][ C0] security_task_alloc+0x2d/0x260 [ 794.639107][ C0] copy_process+0x2205/0x7650 [ 794.643763][ C0] ? __pfx_copy_process+0x10/0x10 [ 794.648762][ C0] ? _copy_from_user+0x59/0xd0 [ 794.653496][ C0] kernel_clone+0xfc/0x960 [ 794.657883][ C0] ? find_held_lock+0x2b/0x80 [ 794.662535][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 794.667538][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 794.672452][ C0] __do_sys_clone3+0x212/0x290 [ 794.677187][ C0] ? __pfx___do_sys_clone3+0x10/0x10 [ 794.682465][ C0] do_syscall_64+0xcd/0x4c0 [ 794.686942][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.692804][ C0] RIP: 0033:0x7f1b723c3209 [ 794.697190][ C0] RSP: 002b:00007ffd1dcdcd38 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 794.705570][ C0] RAX: ffffffffffffffda RBX: 00007f1b72345600 RCX: 00007f1b723c3209 [ 794.713523][ C0] RDX: 00007f1b72345600 RSI: 0000000000000058 RDI: 00007ffd1dcdcd80 [ 794.721465][ C0] RBP: 00007f1b732756c0 R08: 00007f1b732756c0 R09: 00007ffd1dcdce67 [ 794.729405][ C0] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 794.737346][ C0] R13: 000000000000006e R14: 00007ffd1dcdcd80 R15: 00007ffd1dcdce68 [ 794.745294][ C0] [ 794.748293][ C0] rcu: rcu_preempt kthread starved for 1170 jiffies! g52977 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 794.759388][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 794.769354][ C0] rcu: RCU grace-period kthread stack dump: [ 794.775235][ C0] task:rcu_preempt state:I stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 794.787156][ C0] Call Trace: [ 794.790430][ C0] [ 794.793367][ C0] __schedule+0x116a/0x5dd0 [ 794.797889][ C0] ? __lock_acquire+0x622/0x1c90 [ 794.802831][ C0] ? __pfx___schedule+0x10/0x10 [ 794.807690][ C0] ? find_held_lock+0x2b/0x80 [ 794.812370][ C0] ? schedule+0x2d7/0x3a0 [ 794.816708][ C0] schedule+0xe7/0x3a0 [ 794.820780][ C0] schedule_timeout+0x123/0x290 [ 794.825633][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 794.831006][ C0] ? __pfx_process_timeout+0x10/0x10 [ 794.836296][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 794.842104][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 794.847575][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 794.852511][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 794.857792][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 794.862993][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 794.867927][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 794.872791][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 794.878619][ C0] rcu_gp_kthread+0x270/0x380 [ 794.883311][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 794.888507][ C0] ? rcu_is_watching+0x12/0xc0 [ 794.893276][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 794.898488][ C0] ? __kthread_parkme+0x19e/0x250 [ 794.903521][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 794.908717][ C0] kthread+0x3c2/0x780 [ 794.912784][ C0] ? __pfx_kthread+0x10/0x10 [ 794.917370][ C0] ? rcu_is_watching+0x12/0xc0 [ 794.922148][ C0] ? __pfx_kthread+0x10/0x10 [ 794.926745][ C0] ret_from_fork+0x5d4/0x6f0 [ 794.931339][ C0] ? __pfx_kthread+0x10/0x10 [ 794.935928][ C0] ret_from_fork_asm+0x1a/0x30 [ 794.940704][ C0] [ 794.943717][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 794.950032][ C0] Sending NMI from CPU 0 to CPUs 1: [ 794.955240][ C1] NMI backtrace for cpu 1 [ 794.955252][ C1] CPU: 1 UID: 0 PID: 5976 Comm: kworker/1:8 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 794.955270][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 794.955279][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 794.955301][ C1] RIP: 0010:stack_trace_consume_entry+0xaf/0x170 [ 794.955321][ C1] Code: c0 03 38 d0 7c 08 84 d2 0f 85 98 00 00 00 8b 43 0c 85 c0 75 57 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 <0f> 85 9a 00 00 00 8d 45 01 89 43 10 48 8b 03 48 8d 2c e8 48 b8 00 [ 794.955334][ C1] RSP: 0018:ffffc90000a08058 EFLAGS: 00000246 [ 794.955346][ C1] RAX: dffffc0000000000 RBX: ffffc90000a08138 RCX: ffffc90000a07fcc [ 794.955355][ C1] RDX: 1ffff92000141027 RSI: ffffffff8962aebf RDI: ffffc90000a08144 [ 794.955364][ C1] RBP: 0000000000000011 R08: 0000000000000001 R09: 0000000000000000 [ 794.955373][ C1] R10: 0000000000000000 R11: 000000000008629f R12: ffffffff81a78d10 [ 794.955382][ C1] R13: ffffc90000a08138 R14: 0000000000000000 R15: ffff888036480000 [ 794.955391][ C1] FS: 0000000000000000(0000) GS:ffff888124820000(0000) knlGS:0000000000000000 [ 794.955406][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 794.955415][ C1] CR2: 00007ffe26061840 CR3: 0000000029113000 CR4: 00000000003526f0 [ 794.955424][ C1] Call Trace: [ 794.955428][ C1] [ 794.955433][ C1] ? unwind_get_return_address+0x59/0xa0 [ 794.955447][ C1] arch_stack_walk+0x85/0x100 [ 794.955463][ C1] ? net_rx_action+0xa9f/0xfe0 [ 794.955483][ C1] stack_trace_save+0x8e/0xc0 [ 794.955500][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 794.955517][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 794.955533][ C1] kasan_save_stack+0x33/0x60 [ 794.955552][ C1] ? kasan_save_stack+0x33/0x60 [ 794.955569][ C1] ? kasan_save_track+0x14/0x30 [ 794.955586][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 794.955604][ C1] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 794.955622][ C1] ? __alloc_skb+0x2b2/0x380 [ 794.955640][ C1] ? synproxy_send_client_synack+0x1af/0x8f0 [ 794.955655][ C1] ? nft_synproxy_do_eval+0xa63/0xd80 [ 794.955677][ C1] ? nft_do_chain+0x2e6/0x1920 [ 794.955692][ C1] ? nft_do_chain_inet+0x18a/0x340 [ 794.955706][ C1] ? nf_hook_slow+0xbb/0x200 [ 794.955718][ C1] ? nf_hook.constprop.0+0x422/0x750 [ 794.955730][ C1] ? ip_local_deliver+0x169/0x1f0 [ 794.955742][ C1] ? ip_rcv+0x2c3/0x5d0 [ 794.955753][ C1] ? __netif_receive_skb_one_core+0x197/0x1e0 [ 794.955771][ C1] ? __netif_receive_skb+0x1d/0x160 [ 794.955788][ C1] ? process_backlog+0x442/0x15e0 [ 794.955804][ C1] ? __napi_poll.constprop.0+0xb7/0x550 [ 794.955833][ C1] kasan_save_track+0x14/0x30 [ 794.955851][ C1] __kasan_slab_alloc+0x89/0x90 [ 794.955870][ C1] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 794.955889][ C1] ? __alloc_skb+0x2b2/0x380 [ 794.955908][ C1] __alloc_skb+0x2b2/0x380 [ 794.955926][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 794.955945][ C1] ? mark_held_locks+0x49/0x80 [ 794.955966][ C1] ? kasan_quarantine_put+0x10a/0x240 [ 794.955985][ C1] synproxy_send_client_synack+0x1af/0x8f0 [ 794.956001][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 794.956016][ C1] ? nft_fib_validate+0x90/0x160 [ 794.956032][ C1] nft_synproxy_do_eval+0xa63/0xd80 [ 794.956049][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 794.956066][ C1] ? debug_object_activate+0x2ec/0x4c0 [ 794.956083][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 794.956097][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 794.956118][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 794.956134][ C1] nft_do_chain+0x2e6/0x1920 [ 794.956153][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 794.956168][ C1] ? mark_held_locks+0x49/0x80 [ 794.956186][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 794.956207][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 794.956226][ C1] ? ipt_do_table+0xd48/0x1ae0 [ 794.956249][ C1] nft_do_chain_inet+0x18a/0x340 [ 794.956264][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 794.956279][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 794.956294][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 794.956312][ C1] ? nf_nat_ipv4_local_in+0x181/0x720 [ 794.956332][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 794.956346][ C1] nf_hook_slow+0xbb/0x200 [ 794.956359][ C1] nf_hook.constprop.0+0x422/0x750 [ 794.956372][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 794.956386][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 794.956398][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 794.956411][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 794.956427][ C1] ip_local_deliver+0x169/0x1f0 [ 794.956439][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 794.956452][ C1] ip_rcv+0x2c3/0x5d0 [ 794.956464][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 794.956475][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 794.956494][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 794.956513][ C1] ? lock_acquire+0x179/0x350 [ 794.956527][ C1] ? process_backlog+0x3f0/0x15e0 [ 794.956545][ C1] __netif_receive_skb+0x1d/0x160 [ 794.956563][ C1] process_backlog+0x442/0x15e0 [ 794.956583][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 794.956603][ C1] net_rx_action+0xa9f/0xfe0 [ 794.956625][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 794.956646][ C1] ? tmigr_handle_remote+0x132/0x380 [ 794.956670][ C1] ? mark_held_locks+0x49/0x80 [ 794.956690][ C1] handle_softirqs+0x219/0x8e0 [ 794.956708][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 794.956724][ C1] ? wg_pubkey_hashtable_lookup+0x19b/0x3f0 [ 794.956744][ C1] do_softirq+0xb2/0xf0 [ 794.956758][ C1] [ 794.956762][ C1] [ 794.956766][ C1] __local_bh_enable_ip+0x100/0x120 [ 794.956782][ C1] ? wg_pubkey_hashtable_lookup+0x19b/0x3f0 [ 794.956800][ C1] wg_pubkey_hashtable_lookup+0x1b0/0x3f0 [ 794.956817][ C1] ? blake2s_final+0x110/0x150 [ 794.956836][ C1] wg_noise_handshake_consume_initiation+0x452/0x880 [ 794.956853][ C1] ? kernel_fpu_end+0x59/0x70 [ 794.956866][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 794.956881][ C1] ? __pfx_wg_noise_handshake_consume_initiation+0x10/0x10 [ 794.956903][ C1] ? find_held_lock+0x2b/0x80 [ 794.956918][ C1] ? __crypto_memneq+0x203/0x430 [ 794.956937][ C1] ? wg_cookie_validate_packet+0x16f/0x360 [ 794.956952][ C1] ? __pfx_wg_cookie_validate_packet+0x10/0x10 [ 794.956969][ C1] wg_receive_handshake_packet+0x219/0xbf0 [ 794.956987][ C1] ? __pfx_wg_receive_handshake_packet+0x10/0x10 [ 794.957007][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 794.957023][ C1] wg_packet_handshake_receive_worker+0x17f/0x3a0 [ 794.957045][ C1] process_one_work+0x9cc/0x1b70 [ 794.957062][ C1] ? __pfx_ovs_dp_masks_rebalance+0x10/0x10 [ 794.957081][ C1] ? __pfx_process_one_work+0x10/0x10 [ 794.957098][ C1] ? assign_work+0x1a0/0x250 [ 794.957112][ C1] worker_thread+0x6c8/0xf10 [ 794.957128][ C1] ? __kthread_parkme+0x19e/0x250 [ 794.957147][ C1] ? __pfx_worker_thread+0x10/0x10 [ 794.957160][ C1] kthread+0x3c2/0x780 [ 794.957173][ C1] ? __pfx_kthread+0x10/0x10 [ 794.957185][ C1] ? rcu_is_watching+0x12/0xc0 [ 794.957202][ C1] ? __pfx_kthread+0x10/0x10 [ 794.957215][ C1] ret_from_fork+0x5d4/0x6f0 [ 794.957232][ C1] ? __pfx_kthread+0x10/0x10 [ 794.957245][ C1] ret_from_fork_asm+0x1a/0x30 [ 794.957262][ C1]