last executing test programs: 6m56.646043265s ago: executing program 2 (id=354): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x8080, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) truncate(&(0x7f00000002c0)='./file0\x00', 0x4) 6m56.488283878s ago: executing program 2 (id=359): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_create1(0x80000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 6m56.385252573s ago: executing program 2 (id=360): timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)) 6m55.769593996s ago: executing program 2 (id=364): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) inotify_init() r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001480)='./file0/../file0/../file0/../file0\x00') 6m55.635979447s ago: executing program 2 (id=365): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) 6m55.448082436s ago: executing program 2 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071107100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 6m55.202562488s ago: executing program 32 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071107100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 4m42.00207535s ago: executing program 0 (id=1006): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 4m41.707214241s ago: executing program 0 (id=1008): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x68, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x460}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x11}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IFLA_GROUP={0x8, 0x1b, 0x7fff}]}, 0x68}}, 0x0) 4m41.111921142s ago: executing program 0 (id=1012): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x38, &(0x7f0000001640)=""/170, &(0x7f0000001700)=0xaa) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r0, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="ebe60a435125d7", 0x7}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000060000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x14, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x4}, @alu={0x4, 0x1, 0x8, 0xf, 0x8, 0x10, 0xfffffffffffffff0}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x8, 0x3d}, 0xc) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r8, 0x0) accept4(r8, 0x0, 0x0, 0x0) connect$netrom(r8, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000000000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 4m39.326329109s ago: executing program 0 (id=1022): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113700000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) 4m39.127089885s ago: executing program 0 (id=1024): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m38.995226256s ago: executing program 0 (id=1025): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 4m23.57686626s ago: executing program 33 (id=1025): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 22.601549482s ago: executing program 1 (id=2564): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 21.706011583s ago: executing program 1 (id=2572): socket$kcm(0x29, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x45885, 0x80, 0x2, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) userfaultfd(0x80001) r3 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0x5, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x9, 0x466, 0xffffffffffffffff}, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 20.827224641s ago: executing program 1 (id=2576): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x270bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20.666059467s ago: executing program 1 (id=2578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 20.298014968s ago: executing program 1 (id=2583): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x0, 0x0, 0x9, 0x1, 0x457, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'}) 19.526442608s ago: executing program 1 (id=2588): socket$kcm(0x29, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x45885, 0x80, 0x2, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) userfaultfd(0x80001) r3 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0x5, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 11.596590604s ago: executing program 3 (id=2611): socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 11.568371418s ago: executing program 5 (id=2612): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="400000000040000000000000f6e4c1376c2417a1b827bc8c935647", @ANYRES32], 0x50) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(0x3) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) 11.394922797s ago: executing program 4 (id=2613): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x14}}, 0x1c, 0x0, 0x0, &(0x7f0000004540)=[@hopopts={{0x18, 0x29, 0x36, {0x1}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x40}, 0x40) 11.293848112s ago: executing program 4 (id=2614): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32d33cd83c2d"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001000)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r4, {0xb, 0x300}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x40, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x34, 0x2, 0x0, 0x1, [{0x4}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x400}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7f}]}]}]}}]}, 0x70}, 0x1, 0x7a00}, 0x4000000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 10.924224584s ago: executing program 5 (id=2615): userfaultfd(0x801) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x40000000015, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) clock_gettime(0x7, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 10.355732749s ago: executing program 6 (id=2619): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200040000000000000000f7ffffff85000000130000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0) 9.481395598s ago: executing program 5 (id=2620): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 9.433659961s ago: executing program 3 (id=2621): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socket(0x2b, 0x80400, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001380)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247d58bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df32850ad06e9601a80113249af8a03bfaed9ed22722e4b3392f159e9936e2fdeb3260853250824c476cd1dd0492f", 0xa4}, {&(0x7f00000003c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc", 0x21}], 0x2}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)="d8f386", 0x3}], 0x1}}], 0x2, 0xc0) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67a", 0x2a, 0x11, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x44, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x44}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x80010, r0, 0x38d97000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL802154_CMD_SET_LBT_MODE(r9, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bfacd5608c7c318}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x9, &(0x7f0000000080)=0x6, 0x4) sendmsg$nl_route(r0, 0x0, 0x0) 9.4219898s ago: executing program 6 (id=2622): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x189202) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r5, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000000)) r6 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x1000, 0x3010, 0x2, 0x2000}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044, 0x1}) io_uring_enter(r6, 0x47b9, 0x3e80, 0xc, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000400)=""/143, 0x80000005, 0x8f}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="880000000b06010200000000000002000600000105000100070000006000078008000a400000005c1800028014000240ff0100000000000000000000000000010c0019400008000000010000060004404e2100001400170063616966300000000000000000000000050007006c0000000a001100000000"], 0x88}}, 0x8000) 6.709395237s ago: executing program 4 (id=2623): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x14}}, 0x1c, 0x0, 0x0, &(0x7f0000004540)=[@hopopts={{0x18, 0x29, 0x36, {0x1}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x40}, 0x40) 6.647832182s ago: executing program 6 (id=2624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x0) fallocate(r3, 0x3, 0x0, 0x8003) lseek(0xffffffffffffffff, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$dsp(0xffffffffffffffff, &(0x7f0000002000), 0x0) getdents64(0xffffffffffffffff, 0x0, 0xfffffffffffffd27) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001900)={{0x0, 0x0, 0x80, {0x6000, 0x6000}}, "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", "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"}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0xffff1000, 0xeeee8000}}, "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", "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"}) 6.553160425s ago: executing program 4 (id=2625): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.538536433s ago: executing program 3 (id=2626): socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, 0x0, 0x0, 0xfff, 0x0) 5.586005917s ago: executing program 3 (id=2627): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5.359192089s ago: executing program 6 (id=2628): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48810}, 0x4048040) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r3, 0x75e7f000) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0x8, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50) 5.265057348s ago: executing program 5 (id=2629): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000002060103000000000000000000000000050004000000000009009cb9d6471beb69860000140007800800124000000000050014000f000000ba6c0500020000000500010006000000110003"], 0x60}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$KVM_VCPU(&(0x7f0000f3d000/0x4000)=nil, 0x930, 0xc, 0x8010, 0xffffffffffffffff, 0x0) syz_usbip_server_init(0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2024) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe0}}, 0x20000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001440)={'ip6erspan0\x00', 0x2}) 4.850664255s ago: executing program 6 (id=2630): userfaultfd(0x801) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x40000000015, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) clock_gettime(0x7, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 4.35694523s ago: executing program 3 (id=2631): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200040000000000000000f7ffffff85000000130000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0) 3.903980558s ago: executing program 3 (id=2632): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8003) lseek(0xffffffffffffffff, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$dsp(0xffffffffffffffff, &(0x7f0000002000), 0x0) getdents64(0xffffffffffffffff, 0x0, 0xfffffffffffffd27) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'some', 0x20, 0x8001, 0x20, 0x8000}, 0x2f) socket$packet(0x11, 0x2, 0x300) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket(0x11, 0x80a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000001900)={{0x0, 0x0, 0x80, {0x6000, 0x6000}}, "cd119ecb949aa232493a2daabd20eb8d0e0ed6a96082289a545618e00515c49f05db8b4edd6f06a01013ac7b108782f891d7ccca684250b1bf93cc178927eedcb8a4d9b81ef5e20273d3c88b4c9163d12af006a9cacd4b3a9cdbd48deec9a320bb3c6b7dae54f9c30ed8790a8eb23ec6bbcf2a0ef8b39c23e7f7d263eff5483234de3e83512564b8a510e64a5a0cbd634408099a64ea051d557fa18c8ef6ed70bba32b15e1baf802b1bab90dd391188acda55734696e0fdc68c76ed66201b00f311c87aaf25a684493544214f10010da3a7acc47bced11d4f1d53e0c276036d9b2047e7b7e38789c9c6559cb71c4dba007631c82cddd92cb5b1b3b620c03cb7bc93d5730c0d6bf5df82eb642dfc44a2d7737daa35e55ef7f4c0de0e2372c05cad755479cb27c9442323e5b6a0769731d2b668a9642293bc5736c2475f89ffa95c5da9dd7f46289ac69eef2895578fc09576717afc0f8726930036ab65459c2d389bc8e47283acea8bf83822060d697b206dfd120c3807a76f7f66ac6135f709267b6c1971763a8b72b471ff88ab85f29d7d21316540e74ac65b629b55a58ea4ad0d3ea384be76f3a792f6d109febfbbed5547f8d8a660044b42dc834d25f28fa0d6922009563cc348a020b085a9fadbc66be281dddb5ea501a9e8186b0d729fbcb2d500c5805b0f1e181af2a8073ad412c59b0cc5aa4343075bceb564247e6c786a0aa15efbdb2a58a0fca8c2dc66da2f8a18feab4d6f843b91b73e08bc52256122937d2ef6975727419897b6f0f853f75c9db24f09c74c0b6f60db56ede16102a313e782381125c66a366843e939de4fe0d4a0a80ad16ca2456f4ce013e8bca1bf633ab49632abba45dad27d640e6d0e15f65efca50d423ffd764883525759d8e912eae8fc9218b8aa4717a4d9557016a348029d96815674bf75fa91f789518cdb08b310c3610e8802d417546be29143bd67cb50597210b154ebd5bd9420bb6fa41d12ee2832a0e1c2d3756e61126e3c938781bb33187b32c5d65fafda2d2e29ba5417a43416e8f6001e8dc926e3a6e04d5c7b5f65d220571830e3e216de369e4576f918753a7e6eb2ecabfe85bd2b36cddd51384ff991a6cf8e52c8dddd69fbf7f4c81441d1b8c98fb3065e19b9f5cd1df71f4bf013d6648b325b1dca6e83843f444595c6938102510c27e79497e1d7447b40c56b64d6d77a2067388090e6722553d0ae13f0b0ef9db98d3924b6c0301f59a920139e276c9843fe553db0bbe2628fb186c5f9206615a416cf2a842a103192770d8cb8f94f7af196a19482b1ddc080b758c63147f553e81b4211c82ed7fe5604b297e9f40ebeae396cf0991b2d1ca1ea4efd440e08f986e1e3171f51296cc6295ae5cf9210587f44bb656a48d998acf8f7e5be9b2fb4b55f0b35dcba9b5aebc9588b7eed34689b642347db90a41ee0d139c66979c34df93ad291c2bb9bd64e5f9f887975b14b3639c1f1055df1d8fde6a775033231d780040cc3b9a3c5ee89c29372f6d362a1982e03d0a966b8921ebc9fa6ff21fe7f8dda5248ae81491f4c09ffe9199aecc116705c65f1004be1e5ca3c9085bd77d422f333af5ac0609b13ff1e1da83c5296dbb2399b4a27f2d39c789fb76ab578f5300aff4d91b8087014debb4e01f49fd6e0faf4a08b86cd342914af2ea27f6375e3358fdb72c292a26138c22a22d38d54a0c82f3ade69ee3b390aaae543a449e9912bad7b6d9731137bae9f5c4f83fb7f320a343a70e84a3c47bf25ed0e884c5770141e00e580ec21ab4a8f794c235aa5af475684875995a40e0c8cb99a06e0188fffd005d91f5e1bda412aabe72adeaf23a6df035d326fa8f93c77c2396b4894b0a49ae46f41f1795aa919cff0460808373fee29e1d35e29f62df6ba6bfcd3712f5154f77789b4051d7e1271d7464a2f636fe1208f4cc6b018648f3a57784dd96d04f6098137de29332e1a26223c8cf636fbd1010956c855533840ffc661bc159d29dbe3910735e9e2e878a38dcf40ab505dd55dc125f75cc5ba954edf1445abfed89f9c8252cb3874ee8013f589f993ed1bb610b1f4e7f6831f4cc2eb027146e1d9ece60b1e8937e4591e391cb03c8de7e6695e274009c0c4f274988cb599af95f134c8549129dca3553bdee64df33dfe11b8a0c2b3517cd8f400b0b1318732b0f1691eb36f47ebb8c09466bda8b59e51fce06921063c0006193e7ea9e014559106cdfe54769f35d24422476449b3b7d96c0a052d48daae62529ec85b1ffabd573265bae48d3e39e35eb97597a0657ee5529920882b9894e647348bfb9a94336a3601b3ec1b23150fa7ecf8b008b384033f05fb677310dc0fdaa32d6864041d0a33bf8aa4cf354227f6bb47c339135433a10a755a49a94496728f77c58c4ece85a2a673df1a353366b593aee9bbd55c1c4b3e90acde34b102a17f15c17d6e1c8710bb10e112800bf5a12ce4ff3d994d092b75370dfde215b0740088fe85b57c88d7240b063fb02e9f8040868d1c8c8a9a9a91b04f21c542f15283ee5e49c3d6637dfd3b635565b2a5ab2e33944e9627fae03c3788919a80f653a5e80af79246c9ff684e005219b7aea5657df2956f566fd5414ed6aeb2e6e4f83120cfa0a123dbf77cff96196a85e8f1cbeafbb5b5aa04adc6fd048a313c466018537c77b8f56eb558724fd64772e610f31ba6ca49b7da49395ee65bc41c41877a165408ad7428ae23653d58fc6b7519aa9363606c3b4cf86da15e02f93b702ea11734a6aa42b58898720f0e5eb6c2b8f456be1faba22e76d325b0a5da4d97e5fffb27378542610244cfd87af777df1cc7a1425e7395185821b467a977e3344690f356bb433676d51f064e33d7d4fe39179e483f2105da6e34f5210d8c75d934cf1f9ad2c87b533a2724131a5a3a217166896847dda0f2199eaf205b5be8d1f26e093605857801e7d6374601d98eda149cc29847857a2d334d8f9e0a12eeba233de2238c350557949d95d0007b664c20d7177ec2deaf4584983fb2e7863379f9a28d2c82e876ab6dcc7a6c5c65e9fcead6d60c32160ae25f2e89787bd64d9c148f9d0bcb2fdacea8379dd58581966063cede6017b076e032b340ae17f75ebe13e205a36e2dc37db2a3523e8c4cdc8a39a438c79a159f955ea920ada7a334fdf734efe1524315e8202abf40e3bad9f584dea003eabb8871670dac42e9570752823a3005566b7dd8c7d2d6839cfbafe9ef8e542c7a1f86d7714a694fe7887e578da0ed1a86fda6a870d2140f6630e33b6cd3b8cb703ed4b691dac40257db6cdba08737f6d66464c1bd3a7fc1b0674189fed76d46df528e93771ed425382799f2da9d8b485dc41e51513e53bf4e28a26efaa9cb0ea016df9ff954ecc795436cb8c01f25613299421d32c00b9518aa3bde982d46dbb2bae366d795451bf6ed6c4da2c2e1cd9e78d00a4aad2edb922384e2f19272327b119fa00fe71e3c987c768ea1848e8f113b9c6e6d32496a089de04089feedbb6908327134bfb7dc6fc8834ca28d20b0708f8444fdc0e906e51a8945e112ebaa3b1a2d5f118f110b05000c616fab32b8a16ed426a4cc3b053f44cc20fd15ad907191a866467930d98cc86bce8b06b2fad6bcd50f7ff34977ae9e4b374bd46efcc6392c2d8ba692b9d9b3d8d93b680ae040b2afd70b51a34f09cfba89a341d9966a7b7ccce371922939939b881af23e189a05c963a27d5d180d0d25c31a78d5ba69539e7c96565f614bc3f1e73e0a44adc72b6a19b72d67f721df74ee2f49877d3ee39b6babd1e056e1017c2e4ca1635c612abccb3d1eeb56f575b770da656b394318a60357da3b28fe70dda820e3c60e777079343da5c71eb7feb8a755b903416db08121069ce520f04c07e9f3171b6093efa3904dbf1c144259c56e23788952d68b71e363874964dd32a6add58e2ea6da05d8c586bf64969c9b6060204e1b4a69185f16d9f57a530c8e02d012f2c90bce450f6b1998a7cd1659529562c3ce5d10665223b89090e11ae39c426c2bc5b14fdc114c483ae77674b3a95da7db6bf5abd93406e4b7948c9601123cb3d3573ff1e85444afba053f14e97d8b166f2ea83810ed3aae1bcd34a07b54a37407836cb8100c1f4eaa55c5922f0f6ebae6d5b4dcabd20be47b2fbfd28ebb257567405de1a3b548962ba390be328b7b05a9e832aeffce33ea1134138e8f78921e55bdb8fd5179f741bb898951a0dfd851ebf27615470062892a6d5c6214b778b68b2a35eabfddb3e102320ddb2c2aa01749f2de2b77568b3592cb12f1ae977831054627cba695bc809252db986215a83047b099c869b5e8aca4fbfd03032a11f4bedd2c860586bc49235f72e0fcde9cdef0ae2213f0c6441ad1751795a9a6052283844eeca4bb5ff4a197760ba4398d6557d5f0db6d3b32db5945ec7681151908da840d548fffd8d32fbcc3d152320f426173d8d1aa4e9abdd093820770a80881c969f5550d205d2df7837bd2fba29087d2f44995d43d87b5e1643f797af83ad6c5d726677c72ed5d87ba298f8d086e674efdbac95e6098ba2844dd3459ca966d33c27248685370a137393120b452830af410271c9bce004da11cc54d53880de29689b9918f60b78ff1218f2bd702d6c23e086929861b8995c169230f475a67418a965408d842939a20e9b098b92f61edac4e994071b9ed96cbcb414c661a368c0656281a319df38e63b3a3fbbbaa8fdaf8004aed07268d493e544fbef8d6d1b3ea614211c79103f326f5b7615b17c98dbbd65ada5e982ed73e0674b8a2420f0b93fea006a422c1e24fffd287e6f145671424fd25a396d9ce4d72c951e43245020b6d321dd105683365adb9eb5a161adc50168a6bb720e8fdbee8ae5f6f4e1ecc4d944425b72085c29d57e8f322c8a01632cb72ffab836794e214402a91b9cc31ce8eff931d930052bf6759b6b1d4d1058bdbfa832593018c7e7be9bc7567c68a8e50d84728ab1cbaa366bef44cc242e4b84b6655738b4532afa0f40de70c784e128bea0ceecea1a5396227559ac2500129bd4553c70c2ca4de347840014b3dc79b554bfaba690b9920451cf21c4e7c228e7c6b7f1a94271dfbc025c8a334511af53dfafacabb078f8b3c2f7bd9a8fe1ba6b88cc96842c696be39f76608d348dec3d3a201601b18c13a099ee6ce4a8256cc3db709bc9cdf66ee4cf2e5a208e6044430aaf2ac6feffd2dc063b620710145a03d7132d4251039b87d3353816f38ae50af032f2707258a8534e44288fca366924e6fa150ea0bdf1889de6a183bc18a9a302ff2ff74668751b5e5a25ca0fc2db5975099e1b850e0e6416eda6eca66aa7f813107b372c0f90fea5ed55f15ef998ed7f6bc74a050fe2ee2d029fc779908bbdeb2e2d850d8dcfcc93071164573b73bcd55487d8788d9fa16967120312f83c3abf5ada737bd53ee1f552c92944621e7b271d7c8cab6aca5f592707a2a2102ac481dfaefd224183f7afc0ccb8a069f135e6771064440d8e8ae4b76c630ea78a1fab1650bfbece7807ec2a0857ab0e51d6d1413cb5da1e48c7b5604f104d698acf447f8a7b02b432a8238be9021d3ee048f2da22939a91e516d7f6c9cf224fbb6f25f38c3e818473f7fee9e6b5aece484ab7951b745ee539109ed868497f84765324503c412dc4bcefb01c55b6da2e5af9755c399d942b3fa1b07c9e4a1b3079af7b531af49fbb68e902cc8e07996c6c0f9fce8289c607fe1ae49ce137dd23d2dc2fdaddd0a72fe5607e5f2f2ac8dcbd43ede5e664ff5cae13cf3d22", "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"}) 3.684885029s ago: executing program 5 (id=2633): openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) 3.430264237s ago: executing program 6 (id=2634): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x8, 0x80000000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a900)=""/102392, 0x18ff8) dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) fallocate(0xffffffffffffffff, 0x3, 0x5000000, 0x8000c62) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000440)={0x28, 0x0, 0x2711, @local}, 0x10) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xb000000c}) 3.423718805s ago: executing program 4 (id=2635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x8, 0x1, 0x9c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) 3.322622751s ago: executing program 5 (id=2636): syz_usb_connect(0x5, 0x36, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000022fb040d80408fdb1590000000109022400"], 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e0d05"], 0x10) fsopen(0x0, 0x0) rename(0x0, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[]) chdir(&(0x7f0000000180)='./file1\x00') setpgid(0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=2637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)) r2 = socket$packet(0x11, 0x3, 0x300) dup(r0) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/254, 0x0, 0x4000}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) kernel console output (not intermixed with test programs): : attribute type 1 has an invalid length. [ 267.964954][ T9391] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 269.611020][ T5817] Bluetooth: hci1: command 0x0405 tx timeout [ 270.010592][ T9425] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 270.612808][ T30] audit: type=1400 audit(1749920799.987:386): avc: denied { getopt } for pid=9428 comm="syz.3.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 270.898573][ T30] audit: type=1400 audit(1749920800.277:387): avc: denied { execute } for pid=9445 comm="syz.4.1090" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 271.785588][ T30] audit: type=1400 audit(1749920801.147:388): avc: denied { create } for pid=9454 comm="syz.4.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 272.022945][ T30] audit: type=1400 audit(1749920801.157:389): avc: denied { create } for pid=9454 comm="syz.4.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 272.518160][ T9468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1095'. [ 272.921049][ T9481] support for the xor transformation has been removed. [ 272.934374][ T9481] input: syz1 as /devices/virtual/input/input15 [ 273.588960][ T9486] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 274.993110][ T30] audit: type=1400 audit(1749920804.367:390): avc: denied { bind } for pid=9511 comm="syz.5.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 275.270029][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1116'. [ 275.448944][ T30] audit: type=1400 audit(1749920804.827:391): avc: denied { listen } for pid=9526 comm="syz.5.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 276.810947][ T30] audit: type=1400 audit(1749920806.177:392): avc: denied { getopt } for pid=9562 comm="syz.1.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 277.662237][ T30] audit: type=1400 audit(1749920807.047:393): avc: denied { create } for pid=9592 comm="syz.4.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 277.693429][ T30] audit: type=1400 audit(1749920807.067:394): avc: denied { setopt } for pid=9592 comm="syz.4.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 277.770597][ T30] audit: type=1400 audit(1749920807.077:395): avc: denied { bind } for pid=9592 comm="syz.4.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 277.984778][ T9609] netlink: 'syz.1.1155': attribute type 1 has an invalid length. [ 278.667000][ T30] audit: type=1400 audit(1749920808.047:396): avc: denied { connect } for pid=9618 comm="syz.4.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 278.750945][ T30] audit: type=1400 audit(1749920808.047:397): avc: denied { ioctl } for pid=9618 comm="syz.4.1161" path="socket:[21160]" dev="sockfs" ino=21160 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 278.870282][ T30] audit: type=1400 audit(1749920808.177:398): avc: denied { write } for pid=9620 comm="syz.4.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 278.992140][ T9627] netlink: 'syz.4.1165': attribute type 1 has an invalid length. [ 279.012101][ T30] audit: type=1400 audit(1749920808.387:399): avc: denied { bind } for pid=9626 comm="syz.4.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 279.103129][ T30] audit: type=1400 audit(1749920808.467:400): avc: denied { ioctl } for pid=9628 comm="syz.3.1166" path="socket:[21864]" dev="sockfs" ino=21864 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 279.280354][ T9640] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 279.323382][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.469557][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.480532][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.489575][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.498147][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.583266][ T30] audit: type=1400 audit(1749920808.967:401): avc: denied { setopt } for pid=9645 comm="syz.4.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 280.990492][ T9641] chnl_net:caif_netlink_parms(): no params data found [ 281.607267][ T5817] Bluetooth: hci5: command tx timeout [ 281.675393][ T9641] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.701850][ T9641] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.791082][ T9641] bridge_slave_0: entered allmulticast mode [ 281.798420][ T9641] bridge_slave_0: entered promiscuous mode [ 281.820475][ T9641] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.827689][ T9641] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.834960][ T9641] bridge_slave_1: entered allmulticast mode [ 281.862474][ T9641] bridge_slave_1: entered promiscuous mode [ 282.017078][ T9641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.063822][ T9641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.084806][ T9725] netlink: 'syz.5.1191': attribute type 1 has an invalid length. [ 282.095699][ T5926] IPVS: starting estimator thread 0... [ 282.191039][ T9727] IPVS: using max 39 ests per chain, 93600 per kthread [ 282.314619][ T9737] netlink: 'syz.4.1190': attribute type 4 has an invalid length. [ 282.322630][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 282.322644][ T30] audit: type=1400 audit(1749920811.697:405): avc: denied { write } for pid=9719 comm="syz.4.1190" path="socket:[22007]" dev="sockfs" ino=22007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 282.351739][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.363797][ T9737] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1190'. [ 282.564280][ T9720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.605812][ T9720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.798104][ T9720] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.819939][ T9720] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.829190][ T9720] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.842331][ T9720] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.059202][ T9641] team0: Port device team_slave_0 added [ 283.109337][ T9641] team0: Port device team_slave_1 added [ 283.223997][ T9641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.242859][ T9641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.275501][ T9641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.307895][ T9641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.315236][ T9641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.398854][ T9641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.510731][ T9641] hsr_slave_0: entered promiscuous mode [ 283.517318][ T9641] hsr_slave_1: entered promiscuous mode [ 283.524102][ T9641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.532017][ T9641] Cannot create hsr debugfs directory [ 283.628678][ T30] audit: type=1400 audit(1749920813.007:406): avc: denied { read } for pid=9781 comm="syz.5.1207" path="socket:[22104]" dev="sockfs" ino=22104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 283.700998][ T5817] Bluetooth: hci5: command tx timeout [ 283.937872][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1209'. [ 284.177712][ T9795] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 284.231094][ T30] audit: type=1400 audit(1749920813.607:407): avc: denied { listen } for pid=9796 comm="syz.1.1212" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 284.368520][ T9641] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 284.428313][ T9641] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 284.488963][ T9641] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 284.559158][ T9641] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 284.812300][ T30] audit: type=1400 audit(1749920814.187:408): avc: denied { bind } for pid=9804 comm="syz.1.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 284.969972][ T9641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.079360][ T9641] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.155186][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.162379][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.222749][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.229912][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.721687][ T9821] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1219'. [ 285.761205][ T5817] Bluetooth: hci5: command tx timeout [ 285.915094][ T9826] netlink: 'syz.1.1220': attribute type 1 has an invalid length. [ 286.174026][ T9828] 8021q: adding VLAN 0 to HW filter on device bond6 [ 286.252377][ T9834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1220'. [ 286.286640][ T9833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1222'. [ 286.339098][ T9828] bond5: (slave bond6): making interface the new active one [ 286.386722][ T9828] bond5: (slave bond6): Enslaving as an active interface with an up link [ 286.706014][ T9641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.896042][ T30] audit: type=1400 audit(1749920816.267:409): avc: denied { create } for pid=9850 comm="syz.1.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 286.949263][ T9861] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 286.977688][ T9858] support for the xor transformation has been removed. [ 286.987437][ T9858] input: syz1 as /devices/virtual/input/input16 [ 287.475260][ T9641] veth0_vlan: entered promiscuous mode [ 287.495811][ T9641] veth1_vlan: entered promiscuous mode [ 287.541715][ T9641] veth0_macvtap: entered promiscuous mode [ 287.551804][ T9641] veth1_macvtap: entered promiscuous mode [ 287.570712][ T9641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.594506][ T9641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.685976][ T9641] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.696084][ T9641] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.705020][ T9641] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.731117][ T9641] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.841010][ T5817] Bluetooth: hci5: command tx timeout [ 288.858243][ T6455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.888105][ T6455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.100012][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.128664][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.302468][ T9960] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 291.754755][ T30] audit: type=1400 audit(1749920821.137:410): avc: denied { bind } for pid=9961 comm="syz.1.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 291.802840][ T30] audit: type=1400 audit(1749920821.167:411): avc: denied { connect } for pid=9961 comm="syz.1.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 291.903372][ T9965] netlink: 'syz.1.1268': attribute type 1 has an invalid length. [ 292.870472][ T9976] netlink: 'syz.1.1271': attribute type 1 has an invalid length. [ 292.925342][ T9976] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1271'. [ 295.266484][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1275'. [ 295.783641][ T30] audit: type=1400 audit(1749920825.167:412): avc: denied { write } for pid=10033 comm="syz.1.1293" path="socket:[22488]" dev="sockfs" ino=22488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 296.107660][T10043] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 298.071546][T10065] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 298.113637][T10065] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 298.597526][T10086] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 299.768039][T10120] batadv_slave_0: entered promiscuous mode [ 299.916277][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1327'. [ 300.307545][T10144] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1335'. [ 300.518336][ T30] audit: type=1400 audit(1749920829.897:413): avc: denied { getopt } for pid=10153 comm="syz.3.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 301.021007][T10178] nbd3: detected capacity change from 0 to 63 [ 301.033824][T10183] block nbd3: NBD_DISCONNECT [ 301.048042][ T30] audit: type=1400 audit(1749920830.427:414): avc: denied { map } for pid=10177 comm="syz.3.1351" path="socket:[23772]" dev="sockfs" ino=23772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 301.053026][T10183] block nbd3: Disconnected due to user request. [ 301.081883][T10183] block nbd3: shutting down sockets [ 301.100612][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.109743][ C1] buffer_io_error: 9 callbacks suppressed [ 301.109754][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 301.123350][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.132400][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 301.140178][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.149256][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 301.157049][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.166125][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 301.197422][ T7102] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.227826][ T7102] Buffer I/O error on dev nbd3, logical block 0, async page read [ 301.241307][ T7102] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.274287][ T7102] Buffer I/O error on dev nbd3, logical block 1, async page read [ 301.293631][ T7102] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.315323][ T7102] Buffer I/O error on dev nbd3, logical block 2, async page read [ 301.336579][ T7102] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.610928][ T7102] Buffer I/O error on dev nbd3, logical block 3, async page read [ 301.641151][ T7102] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.677783][ T7102] Buffer I/O error on dev nbd3, logical block 0, async page read [ 301.688940][ T5829] IPVS: starting estimator thread 0... [ 301.697207][ T7102] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.719016][ T7102] Buffer I/O error on dev nbd3, logical block 1, async page read [ 301.747211][ T7102] ldm_validate_partition_table(): Disk read failed. [ 301.756545][ T7102] Dev nbd3: unable to read RDB block 0 [ 301.768778][T10207] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input17 [ 301.786641][ T7102] nbd3: unable to read partition table [ 301.811030][T10204] IPVS: using max 47 ests per chain, 112800 per kthread [ 301.853983][ T7102] ldm_validate_partition_table(): Disk read failed. [ 301.880159][ T7102] Dev nbd3: unable to read RDB block 0 [ 301.958846][ T7102] nbd3: unable to read partition table [ 302.002406][T10214] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 302.074343][T10219] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 302.186412][T10223] 8021q: VLANs not supported on ip_vti0 [ 302.247099][T10223] vlan2: entered promiscuous mode [ 302.258398][T10223] veth1: entered promiscuous mode [ 302.858765][T10252] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.230229][ T30] audit: type=1400 audit(1749920833.607:415): avc: denied { getopt } for pid=10296 comm="syz.6.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 304.480113][T10309] netlink: 'syz.3.1407': attribute type 1 has an invalid length. [ 304.883725][T10323] xt_CT: No such helper "pptp" [ 305.320098][T10347] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 305.326945][T10347] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 305.346704][T10348] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 305.550237][T10350] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 305.810639][ T30] audit: type=1400 audit(1749920835.187:416): avc: denied { bind } for pid=10365 comm="syz.1.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 305.857231][T10369] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1430'. [ 305.868765][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1431'. [ 306.164242][ T30] audit: type=1400 audit(1749920835.547:417): avc: denied { listen } for pid=10380 comm="syz.3.1435" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 306.780025][ T30] audit: type=1400 audit(1749920836.157:418): avc: denied { accept } for pid=10385 comm="syz.6.1436" lport=54785 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 307.111165][T10404] nbd4: detected capacity change from 0 to 63 [ 307.160501][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1444'. [ 307.181959][T10407] block nbd4: NBD_DISCONNECT [ 307.187179][T10407] block nbd4: Disconnected due to user request. [ 307.198093][T10407] block nbd4: shutting down sockets [ 307.234386][ C0] blk_print_req_error: 138 callbacks suppressed [ 307.234406][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 307.249790][ C0] buffer_io_error: 138 callbacks suppressed [ 307.249804][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 307.264825][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 307.273978][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 307.281802][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 307.290876][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 307.298671][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 307.307751][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 307.321411][ T5834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 307.355878][ T5834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 307.443203][T10420] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 307.837519][T10423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1447'. [ 307.841047][ T5834] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 307.911532][ T5834] Buffer I/O error on dev nbd4, logical block 1, async page read [ 307.920940][ T5834] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 307.930772][ T5834] Buffer I/O error on dev nbd4, logical block 2, async page read [ 307.938937][ T5834] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 307.948590][ T5834] Buffer I/O error on dev nbd4, logical block 3, async page read [ 308.383141][ T5834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 308.392404][ T5834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 308.418062][ T5834] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 308.428584][ T5834] Buffer I/O error on dev nbd4, logical block 1, async page read [ 308.442046][ T5834] ldm_validate_partition_table(): Disk read failed. [ 308.460910][ T5834] Dev nbd4: unable to read RDB block 0 [ 308.497566][ T5834] nbd4: unable to read partition table [ 308.678090][ T5834] ldm_validate_partition_table(): Disk read failed. [ 308.716897][ T5834] Dev nbd4: unable to read RDB block 0 [ 308.781746][ T5834] nbd4: unable to read partition table [ 308.790084][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1451'. [ 311.855963][T10536] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input18 [ 312.180222][ T30] audit: type=1400 audit(1749920841.557:419): avc: denied { write } for pid=10550 comm="syz.6.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 313.588310][ T5817] Bluetooth: hci5: unexpected event 0x04 length: 12 > 10 [ 313.588344][ T5817] Bluetooth: unknown link type 203 [ 313.601714][ T5817] Bluetooth: hci5: connection err: -111 [ 314.895300][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1518'. [ 315.599295][T10606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1523'. [ 316.736679][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.105010][T10639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.818525][T10653] 9pnet_fd: Insufficient options for proto=fd [ 320.512900][T10681] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input19 [ 323.171208][T10727] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 328.240927][ T30] audit: type=1400 audit(1749920857.617:420): avc: denied { read write } for pid=10857 comm="syz.3.1618" name="video9" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 328.318995][ T30] audit: type=1400 audit(1749920857.617:421): avc: denied { open } for pid=10857 comm="syz.3.1618" path="/dev/video9" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 328.515625][ T30] audit: type=1400 audit(1749920857.617:422): avc: denied { ioctl } for pid=10857 comm="syz.3.1618" path="/dev/video9" dev="devtmpfs" ino=958 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 330.386481][T10885] netlink: 'syz.3.1628': attribute type 1 has an invalid length. [ 330.394377][T10885] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1628'. [ 330.706562][T10892] 8021q: VLANs not supported on ip_vti0 [ 330.721000][T10892] vlan2: entered promiscuous mode [ 330.726269][T10892] veth1: entered promiscuous mode [ 333.025637][T10928] netlink: 'syz.4.1643': attribute type 1 has an invalid length. [ 333.972963][T10942] support for the xor transformation has been removed. [ 333.990668][T10942] input: syz1 as /devices/virtual/input/input20 [ 341.442991][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1671'. [ 341.717953][T11043] netlink: 'syz.3.1687': attribute type 1 has an invalid length. [ 341.964517][ T30] audit: type=1400 audit(1749920871.317:423): avc: denied { mount } for pid=11044 comm="syz.6.1688" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 342.235395][ T30] audit: type=1400 audit(1749920871.327:424): avc: denied { mounton } for pid=11044 comm="syz.6.1688" path="/91/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 342.941058][ T30] audit: type=1400 audit(1749920872.237:425): avc: denied { unmount } for pid=9641 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 344.800094][T11078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1699'. [ 345.423390][T11090] 8021q: VLANs not supported on ip_vti0 [ 345.436868][T11090] vlan2: entered promiscuous mode [ 345.524653][T11090] veth1: entered promiscuous mode [ 346.842807][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1715'. [ 347.732433][T11135] syz.5.1717: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 347.791064][T11135] CPU: 1 UID: 0 PID: 11135 Comm: syz.5.1717 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 347.791101][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.791113][T11135] Call Trace: [ 347.791119][T11135] [ 347.791127][T11135] dump_stack_lvl+0x16c/0x1f0 [ 347.791160][T11135] warn_alloc+0x248/0x3a0 [ 347.791187][T11135] ? __pfx_warn_alloc+0x10/0x10 [ 347.791210][T11135] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 347.791236][T11135] ? stack_depot_save_flags+0x3e0/0xa40 [ 347.791266][T11135] ? kasan_save_stack+0x42/0x60 [ 347.791287][T11135] ? kasan_save_stack+0x33/0x60 [ 347.791307][T11135] ? kasan_save_track+0x14/0x30 [ 347.791328][T11135] ? xskq_create+0x52/0x1d0 [ 347.791350][T11135] ? xsk_setsockopt+0x640/0x840 [ 347.791370][T11135] ? do_sock_setsockopt+0x224/0x470 [ 347.791389][T11135] ? xskq_create+0xfb/0x1d0 [ 347.791413][T11135] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 347.791442][T11135] ? xskq_create+0xfb/0x1d0 [ 347.791473][T11135] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 347.791500][T11135] ? xskq_create+0xfb/0x1d0 [ 347.791522][T11135] vmalloc_user_noprof+0x9e/0xe0 [ 347.791540][T11135] ? xskq_create+0xfb/0x1d0 [ 347.791563][T11135] xskq_create+0xfb/0x1d0 [ 347.791587][T11135] xsk_setsockopt+0x640/0x840 [ 347.791609][T11135] ? __pfx_xsk_setsockopt+0x10/0x10 [ 347.791629][T11135] ? __lock_acquire+0x622/0x1c90 [ 347.791657][T11135] ? selinux_socket_setsockopt+0x6a/0x80 [ 347.791679][T11135] ? __pfx_xsk_setsockopt+0x10/0x10 [ 347.791700][T11135] do_sock_setsockopt+0x224/0x470 [ 347.791718][T11135] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 347.791752][T11135] __sys_setsockopt+0x1a0/0x230 [ 347.791780][T11135] __x64_sys_setsockopt+0xbd/0x160 [ 347.791802][T11135] ? do_syscall_64+0x91/0x4c0 [ 347.791827][T11135] ? lockdep_hardirqs_on+0x7c/0x110 [ 347.791850][T11135] do_syscall_64+0xcd/0x4c0 [ 347.791876][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.791892][T11135] RIP: 0033:0x7f9a96d8e929 [ 347.791907][T11135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.791925][T11135] RSP: 002b:00007f9a97b8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 347.791947][T11135] RAX: ffffffffffffffda RBX: 00007f9a96fb5fa0 RCX: 00007f9a96d8e929 [ 347.791960][T11135] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 347.791970][T11135] RBP: 00007f9a96e10b39 R08: 0000000000000004 R09: 0000000000000000 [ 347.791981][T11135] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.791992][T11135] R13: 0000000000000000 R14: 00007f9a96fb5fa0 R15: 00007ffde2492e18 [ 347.792017][T11135] [ 347.792046][T11135] Mem-Info: [ 348.074617][T11135] active_anon:21219 inactive_anon:0 isolated_anon:0 [ 348.074617][T11135] active_file:20686 inactive_file:40689 isolated_file:0 [ 348.074617][T11135] unevictable:768 dirty:116 writeback:0 [ 348.074617][T11135] slab_reclaimable:11887 slab_unreclaimable:115166 [ 348.074617][T11135] mapped:44562 shmem:10906 pagetables:1703 [ 348.074617][T11135] sec_pagetables:0 bounce:0 [ 348.074617][T11135] kernel_misc_reclaimable:0 [ 348.074617][T11135] free:1243028 free_pcp:28568 free_cma:0 [ 348.310648][T11137] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 348.377241][T11135] Node 0 active_anon:108776kB inactive_anon:0kB active_file:82744kB inactive_file:162552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:167748kB dirty:464kB writeback:0kB shmem:65788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14492kB pagetables:6852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 348.555903][T11135] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 348.689372][T11135] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 348.837241][T11135] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 348.843825][T11135] Node 0 DMA32 free:1006136kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:150748kB inactive_anon:0kB active_file:82744kB inactive_file:161236kB unevictable:1536kB writepending:504kB present:3129332kB managed:2540624kB mlocked:0kB bounce:0kB free_pcp:79068kB local_pcp:12272kB free_cma:0kB [ 348.876415][T11135] lowmem_reserve[]: 0 0 1 1 1 [ 348.881233][T11135] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 348.923770][T11135] lowmem_reserve[]: 0 0 0 0 0 [ 348.928533][T11135] Node 1 Normal free:3899068kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20864kB local_pcp:12064kB free_cma:0kB [ 348.959924][T11135] lowmem_reserve[]: 0 0 0 0 0 [ 348.988251][T11135] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 349.001435][T11135] Node 0 DMA32: 2*4kB (UM) 66*8kB (UM) 70*16kB (UME) 125*32kB (UE) 5*64kB (UE) 31*128kB (UME) 32*256kB (UME) 22*512kB (UM) 25*1024kB (UME) 4*2048kB (UM) 230*4096kB (UM) = 1005272kB [ 349.019731][T11153] nbd3: detected capacity change from 0 to 63 [ 349.027870][T11154] block nbd3: NBD_DISCONNECT [ 349.034568][T11135] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 349.047500][T11154] block nbd3: Disconnected due to user request. [ 349.053904][T11135] Node 1 Normal: 191*4kB (UE) 46*8kB (UME) 53*16kB (UME) 74*32kB (UME) 21*64kB (UME) 3*128kB (UME) 5*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 948*4096kB (M) = 3899068kB [ 349.072341][T11154] block nbd3: shutting down sockets [ 349.079061][ C0] blk_print_req_error: 138 callbacks suppressed [ 349.079080][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.094419][ C0] buffer_io_error: 138 callbacks suppressed [ 349.094432][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 349.108108][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.111008][T11135] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 349.117159][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 349.134519][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.143582][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 349.151378][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.160422][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 349.168486][ T7102] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.178324][ T7102] Buffer I/O error on dev nbd3, logical block 0, async page read [ 349.198460][T11135] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 349.208212][ T7102] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.231242][ T7102] Buffer I/O error on dev nbd3, logical block 1, async page read [ 349.265246][T11135] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 349.275334][ T7102] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.298260][ T7102] Buffer I/O error on dev nbd3, logical block 2, async page read [ 349.309166][T11135] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 349.318994][ T7102] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.348891][ T7102] Buffer I/O error on dev nbd3, logical block 3, async page read [ 349.363242][T11135] 86985 total pagecache pages [ 349.367952][T11135] 0 pages in swap cache [ 349.381086][ T7102] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.404862][T11135] Free swap = 124996kB [ 349.420548][ T7102] Buffer I/O error on dev nbd3, logical block 0, async page read [ 349.429279][T11135] Total swap = 124996kB [ 349.443648][T11135] 2097051 pages RAM [ 349.447494][T11135] 0 pages HighMem/MovableOnly [ 349.459722][ T7102] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.476167][T11135] 429917 pages reserved [ 349.480442][ T7102] Buffer I/O error on dev nbd3, logical block 1, async page read [ 349.489230][T11135] 0 pages cma reserved [ 349.495918][ T7102] ldm_validate_partition_table(): Disk read failed. [ 349.514544][ T7102] Dev nbd3: unable to read RDB block 0 [ 349.529110][ T7102] nbd3: unable to read partition table [ 350.494761][ T7102] ldm_validate_partition_table(): Disk read failed. [ 350.502806][ T7102] Dev nbd3: unable to read RDB block 0 [ 350.509914][ T7102] nbd3: unable to read partition table [ 352.160722][T11192] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input21 [ 357.449118][T11270] binder: 11268:11270 ioctl c0306201 200000000540 returned -14 [ 360.231788][T11329] netlink: 'syz.4.1772': attribute type 1 has an invalid length. [ 360.464718][ T5898] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 360.643960][ T5898] usb 7-1: Using ep0 maxpacket: 32 [ 360.651385][ T5898] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 360.671101][ T5898] usb 7-1: config 0 has no interface number 0 [ 360.688294][ T5898] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 360.697518][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.708766][ T5898] usb 7-1: Product: syz [ 360.713492][ T5898] usb 7-1: Manufacturer: syz [ 360.718098][ T5898] usb 7-1: SerialNumber: syz [ 360.731807][ T5898] usb 7-1: config 0 descriptor?? [ 360.744876][ T5898] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 360.754046][ T5898] usb 7-1: selecting invalid altsetting 1 [ 360.759793][ T5898] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 360.783933][ T5898] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 360.795462][ T5898] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 360.810976][ T5898] usb 7-1: media controller created [ 360.848296][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.944685][ T5898] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 361.769266][T11363] netlink: 'syz.6.1784': attribute type 1 has an invalid length. [ 361.910405][ T5898] zl10353_read_register: readreg error (reg=127, ret==-71) [ 361.920516][ T5898] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 361.974166][ T5898] usb 7-1: USB disconnect, device number 2 [ 363.161215][ T5829] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 363.323801][ T5829] usb 4-1: Using ep0 maxpacket: 32 [ 363.336462][ T5829] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 363.349990][ T5829] usb 4-1: config 0 has no interface number 0 [ 363.368515][ T5829] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 363.394377][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.405952][ T5829] usb 4-1: Product: syz [ 363.410216][ T5829] usb 4-1: Manufacturer: syz [ 363.419121][ T5829] usb 4-1: SerialNumber: syz [ 363.432065][ T5829] usb 4-1: config 0 descriptor?? [ 363.454877][ T5829] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 363.467524][ T5829] usb 4-1: selecting invalid altsetting 1 [ 363.476726][ T5829] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 363.495193][ T5829] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 363.509041][ T5829] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 363.526341][ T5829] usb 4-1: media controller created [ 363.549478][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 363.723950][ T5829] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 363.873217][ T5829] zl10353_read_register: readreg error (reg=127, ret==-71) [ 363.949691][ T5829] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 364.175358][ T5829] usb 4-1: USB disconnect, device number 9 [ 370.483527][T11534] 8021q: VLANs not supported on ip_vti0 [ 370.518339][T11534] vlan2: entered promiscuous mode [ 371.756064][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 372.143699][T11567] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 372.351572][T11570] nbd4: detected capacity change from 0 to 63 [ 372.519097][T11574] block nbd4: NBD_DISCONNECT [ 372.524336][T11574] block nbd4: Disconnected due to user request. [ 372.530610][T11574] block nbd4: shutting down sockets [ 372.544218][ C1] blk_print_req_error: 138 callbacks suppressed [ 372.544233][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 372.559593][ C1] buffer_io_error: 138 callbacks suppressed [ 372.559609][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 372.575736][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 372.584821][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 372.592638][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 372.601676][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 372.609439][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 372.618477][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 372.651067][ T5834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 372.685525][ T5834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 372.712310][ T5834] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 372.766661][ T5834] Buffer I/O error on dev nbd4, logical block 1, async page read [ 372.775008][ T5834] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 372.784196][ T5834] Buffer I/O error on dev nbd4, logical block 2, async page read [ 372.792487][ T5834] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 372.801817][ T5834] Buffer I/O error on dev nbd4, logical block 3, async page read [ 372.811133][ T5834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 372.820372][ T5834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 372.828389][ T5834] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 372.837577][ T5834] Buffer I/O error on dev nbd4, logical block 1, async page read [ 372.847639][ T5834] ldm_validate_partition_table(): Disk read failed. [ 372.856360][ T5834] Dev nbd4: unable to read RDB block 0 [ 372.866134][ T5834] nbd4: unable to read partition table [ 372.886372][ T5834] ldm_validate_partition_table(): Disk read failed. [ 372.905121][ T5834] Dev nbd4: unable to read RDB block 0 [ 372.925761][ T5834] nbd4: unable to read partition table [ 373.820945][T11591] sp0: Synchronizing with TNC [ 375.729105][T11631] netlink: 'syz.4.1888': attribute type 1 has an invalid length. [ 378.166547][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.961218][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 379.335629][ T30] audit: type=1326 audit(2000000021.950:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11709 comm="syz.4.1917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fd8b8e929 code=0x0 [ 379.739830][T11727] support for the xor transformation has been removed. [ 379.757378][T11727] input: syz1 as /devices/virtual/input/input22 [ 380.954937][T11741] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 381.301626][ T5975] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 381.386056][T11754] vlan2: entered promiscuous mode [ 381.392049][T11754] veth1: entered promiscuous mode [ 381.511104][ T5975] usb 5-1: Using ep0 maxpacket: 8 [ 381.537378][ T5975] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 381.549430][ T5975] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 381.564886][ T5975] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 381.575012][ T5975] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.592629][ T5975] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 381.605990][ T5975] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 381.618138][ T5975] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 381.630242][ T5975] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.646719][ T5975] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 381.659153][ T5975] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 381.682762][ T5975] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 381.703512][ T5975] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.720500][ T5975] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 381.735470][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.744370][ T5975] usb 5-1: Product: syz [ 381.748967][ T5975] usb 5-1: Manufacturer: syz [ 381.756787][ T5975] usb 5-1: SerialNumber: syz [ 382.022849][ T5975] adutux 5-1:168.0: interrupt endpoints not found [ 382.040736][ T5975] usb 5-1: USB disconnect, device number 9 [ 382.117134][T11778] vlan2: entered promiscuous mode [ 386.480729][T11817] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 388.301146][T11837] vlan2: entered promiscuous mode [ 388.629948][T11837] veth1: entered promiscuous mode [ 389.255919][T11857] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input23 [ 390.237109][T11890] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 391.629654][ T30] audit: type=1400 audit(2000000034.240:427): avc: denied { ioctl } for pid=11908 comm="syz.1.1980" path="socket:[29798]" dev="sockfs" ino=29798 ioctlcmd=0x8970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 393.653823][T11954] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 394.051740][ T30] audit: type=1400 audit(2000000036.660:428): avc: denied { ioctl } for pid=11957 comm="syz.4.1997" path="socket:[29856]" dev="sockfs" ino=29856 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 394.202665][T11961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1997'. [ 395.060261][ T30] audit: type=1400 audit(2000000293.666:429): avc: denied { read write } for pid=11966 comm="syz.5.2000" dev="9p" ino=65538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 395.101273][T11968] netfs: Couldn't get user pages (rc=-14) [ 395.118326][ T30] audit: type=1400 audit(2000000293.666:430): avc: denied { open } for pid=11966 comm="syz.5.2000" path="/308/file0" dev="9p" ino=65538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 395.118367][ T30] audit: type=1400 audit(2000000293.666:431): avc: denied { map } for pid=11966 comm="syz.5.2000" path="/308/file0" dev="9p" ino=65538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 395.168140][ T30] audit: type=1400 audit(2000000293.756:432): avc: denied { unmount } for pid=6991 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 396.450786][T11985] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 396.596486][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 396.835394][T12002] netlink: 'syz.1.2013': attribute type 1 has an invalid length. [ 396.853160][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 2: 253, using maximum allowed: 30 [ 396.964219][ T30] audit: type=1400 audit(2000000295.576:433): avc: denied { mount } for pid=11997 comm="syz.4.2012" name="/" dev="hugetlbfs" ino=29910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 397.454076][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.465166][ T30] audit: type=1400 audit(2000000295.796:434): avc: denied { unmount } for pid=11997 comm="syz.4.2012" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 397.485307][ T24] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 397.498349][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 397.528705][ T24] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 397.540081][T12002] 8021q: adding VLAN 0 to HW filter on device bond7 [ 397.550742][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.562554][T12005] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2013'. [ 397.577876][ T24] usb 6-1: config 0 descriptor?? [ 397.667952][T12002] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 398.088818][ T24] creative-sb0540 0003:041E:3100.000B: unknown main item tag 0x0 [ 398.626557][ T24] creative-sb0540 0003:041E:3100.000B: item fetching failed at offset 4/5 [ 398.635971][ T24] creative-sb0540 0003:041E:3100.000B: parse failed [ 398.643666][ T24] creative-sb0540 0003:041E:3100.000B: probe with driver creative-sb0540 failed with error -22 [ 398.706632][ T5871] usb 6-1: USB disconnect, device number 8 [ 401.245025][ T30] audit: type=1400 audit(2000000299.856:435): avc: denied { read } for pid=12062 comm="syz.3.2030" name="btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 401.315912][ T30] audit: type=1400 audit(2000000299.856:436): avc: denied { open } for pid=12062 comm="syz.3.2030" path="/dev/btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 401.437041][ T30] audit: type=1400 audit(2000000299.856:437): avc: denied { ioctl } for pid=12062 comm="syz.3.2030" path="/dev/btrfs-control" dev="devtmpfs" ino=1310 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 402.861493][T12088] veth0: entered promiscuous mode [ 402.927128][T12088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2042'. [ 403.292439][T12087] veth0: left promiscuous mode [ 405.012682][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 405.071236][ T5975] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 405.274627][ T5975] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 405.292449][ T5975] usb 7-1: config 0 has no interface number 0 [ 405.303643][ T5975] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 405.339414][ T5975] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 405.353912][ T5975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.377708][ T5975] usb 7-1: Product: syz [ 405.387938][ T5975] usb 7-1: Manufacturer: syz [ 405.445889][ T5975] usb 7-1: SerialNumber: syz [ 405.467282][ T5975] usb 7-1: config 0 descriptor?? [ 405.507588][ T5975] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 405.752055][ C1] yurex 7-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 405.954660][ T5829] usb 7-1: USB disconnect, device number 3 [ 405.983119][ T5829] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 407.058305][T12138] vlan2: entered promiscuous mode [ 408.724428][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 408.897637][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 408.973099][ T24] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 409.044657][ T24] usb 7-1: config 0 has no interface number 0 [ 409.110881][ T24] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 409.154373][ T24] usb 7-1: config 0 interface 85 has no altsetting 0 [ 409.174107][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 409.193467][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.237900][ T24] usb 7-1: Product: syz [ 409.253724][ T24] usb 7-1: Manufacturer: syz [ 409.268216][ T24] usb 7-1: SerialNumber: syz [ 409.286687][ T24] usb 7-1: config 0 descriptor?? [ 410.913141][ T24] appletouch 7-1:0.85: Geyser mode initialized. [ 411.042078][T12164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.077914][T12164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.078433][ T24] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input25 [ 411.110561][T12208] syz.5.2084: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 411.150395][T12208] CPU: 0 UID: 0 PID: 12208 Comm: syz.5.2084 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 411.150428][T12208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.150440][T12208] Call Trace: [ 411.150447][T12208] [ 411.150455][T12208] dump_stack_lvl+0x16c/0x1f0 [ 411.150490][T12208] warn_alloc+0x248/0x3a0 [ 411.150516][T12208] ? __pfx_warn_alloc+0x10/0x10 [ 411.150540][T12208] ? __pfx_stack_trace_save+0x10/0x10 [ 411.150567][T12208] ? stack_depot_save_flags+0x28/0xa40 [ 411.150600][T12208] ? kasan_save_stack+0x42/0x60 [ 411.150624][T12208] ? kasan_save_stack+0x33/0x60 [ 411.150646][T12208] ? kasan_save_track+0x14/0x30 [ 411.150669][T12208] ? xskq_create+0x52/0x1d0 [ 411.150692][T12208] ? xsk_setsockopt+0x640/0x840 [ 411.150712][T12208] ? do_sock_setsockopt+0x224/0x470 [ 411.150733][T12208] ? xskq_create+0xfb/0x1d0 [ 411.150757][T12208] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 411.150787][T12208] ? xskq_create+0xfb/0x1d0 [ 411.150820][T12208] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 411.150848][T12208] ? xskq_create+0xfb/0x1d0 [ 411.150872][T12208] vmalloc_user_noprof+0x9e/0xe0 [ 411.150891][T12208] ? xskq_create+0xfb/0x1d0 [ 411.150916][T12208] xskq_create+0xfb/0x1d0 [ 411.150943][T12208] xsk_setsockopt+0x640/0x840 [ 411.150968][T12208] ? __pfx_xsk_setsockopt+0x10/0x10 [ 411.150990][T12208] ? __lock_acquire+0x622/0x1c90 [ 411.151026][T12208] ? selinux_socket_setsockopt+0x6a/0x80 [ 411.151051][T12208] ? __pfx_xsk_setsockopt+0x10/0x10 [ 411.151074][T12208] do_sock_setsockopt+0x224/0x470 [ 411.151091][T12208] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 411.151125][T12208] __sys_setsockopt+0x1a0/0x230 [ 411.151156][T12208] __x64_sys_setsockopt+0xbd/0x160 [ 411.151180][T12208] ? do_syscall_64+0x91/0x4c0 [ 411.151206][T12208] ? lockdep_hardirqs_on+0x7c/0x110 [ 411.151232][T12208] do_syscall_64+0xcd/0x4c0 [ 411.151261][T12208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.151279][T12208] RIP: 0033:0x7f9a96d8e929 [ 411.151296][T12208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.151314][T12208] RSP: 002b:00007f9a97b8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 411.151332][T12208] RAX: ffffffffffffffda RBX: 00007f9a96fb5fa0 RCX: 00007f9a96d8e929 [ 411.151351][T12208] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 411.151361][T12208] RBP: 00007f9a96e10b39 R08: 0000000000000004 R09: 0000000000000000 [ 411.151372][T12208] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.151383][T12208] R13: 0000000000000000 R14: 00007f9a96fb5fa0 R15: 00007ffde2492e18 [ 411.151408][T12208] [ 411.254346][ T24] usb 7-1: USB disconnect, device number 4 [ 411.254462][ C1] appletouch 7-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 411.254533][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.434293][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.440282][ C0] hrtimer: interrupt took 288861652 ns [ 411.464556][ T24] appletouch 7-1:0.85: input: appletouch disconnected [ 411.501115][T12208] Mem-Info: [ 411.540291][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.561263][T12208] active_anon:14716 inactive_anon:0 isolated_anon:0 [ 411.561263][T12208] active_file:20686 inactive_file:40716 isolated_file:0 [ 411.561263][T12208] unevictable:768 dirty:212 writeback:0 [ 411.561263][T12208] slab_reclaimable:12066 slab_unreclaimable:115312 [ 411.561263][T12208] mapped:38463 shmem:4223 pagetables:1732 [ 411.561263][T12208] sec_pagetables:0 bounce:0 [ 411.561263][T12208] kernel_misc_reclaimable:0 [ 411.561263][T12208] free:1248528 free_pcp:29118 free_cma:0 [ 411.618206][T12208] Node 0 active_anon:59024kB inactive_anon:0kB active_file:82744kB inactive_file:162660kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:153884kB dirty:848kB writeback:0kB shmem:15448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14412kB pagetables:6796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 411.651730][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.658118][ T5898] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 411.695638][T12208] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 411.727097][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.736062][T12208] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 411.766360][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.776043][T12208] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 411.787550][T12208] Node 0 DMA32 free:1079168kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58996kB inactive_anon:0kB active_file:82744kB inactive_file:161336kB unevictable:1536kB writepending:448kB present:3129332kB managed:2540624kB mlocked:0kB bounce:0kB free_pcp:96164kB local_pcp:68804kB free_cma:0kB [ 411.819934][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.852288][ T5898] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 411.865528][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.888815][T12209] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 411.889535][ T5898] usb 4-1: config 0 descriptor?? [ 411.921702][T12208] lowmem_reserve[]: 0 0 1 1 1 [ 411.955638][T12208] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 411.990510][T12208] lowmem_reserve[]: 0 0 0 0 0 [ 411.995737][T12208] Node 1 Normal free:3899580kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20352kB local_pcp:8288kB free_cma:0kB [ 412.027726][T12208] lowmem_reserve[]: 0 0 0 0 0 [ 412.051232][T12208] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 412.065118][T12208] Node 0 DMA32: 878*4kB (UM) 1109*8kB (UM) 990*16kB (UME) 595*32kB (UME) 442*64kB (UME) 246*128kB (UME) 111*256kB (UM) 36*512kB (UM) 15*1024kB (UME) 6*2048kB (UM) 219*4096kB (UM) = 1078560kB [ 412.118285][T12208] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 412.131907][T12208] Node 1 Normal: 191*4kB (UE) 46*8kB (UME) 53*16kB (UME) 82*32kB (UME) 23*64kB (UME) 4*128kB (UME) 5*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 948*4096kB (M) = 3899580kB [ 412.151383][T12208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 412.163208][T12208] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 412.173872][T12208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 412.188557][T12208] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 412.205026][T12208] 63644 total pagecache pages [ 412.210352][T12208] 0 pages in swap cache [ 412.214908][T12208] Free swap = 124996kB [ 412.219167][T12208] Total swap = 124996kB [ 412.223837][T12208] 2097051 pages RAM [ 412.227753][T12208] 0 pages HighMem/MovableOnly [ 412.232770][T12208] 429917 pages reserved [ 412.237149][T12208] 0 pages cma reserved [ 412.856182][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2093'. [ 413.024456][ T30] audit: type=1400 audit(2000000311.636:438): avc: denied { create } for pid=12239 comm="syz.5.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 413.121272][T12237] nbd4: detected capacity change from 0 to 63 [ 413.155928][ T30] audit: type=1400 audit(2000000311.766:439): avc: denied { read write } for pid=12239 comm="syz.5.2097" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 413.198233][T12247] program syz.5.2097 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.276332][T12241] block nbd4: NBD_DISCONNECT [ 413.305547][T12241] block nbd4: Disconnected due to user request. [ 413.375980][ T30] audit: type=1400 audit(2000000311.766:440): avc: denied { open } for pid=12239 comm="syz.5.2097" path="/dev/sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 413.428452][T12241] block nbd4: shutting down sockets [ 413.515180][ C1] blk_print_req_error: 138 callbacks suppressed [ 413.515201][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 413.530589][ C1] buffer_io_error: 138 callbacks suppressed [ 413.530602][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 413.544294][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 413.553347][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 413.561120][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 413.570142][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 413.577921][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 413.586967][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 413.651496][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 413.673489][ T7102] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 413.755200][ T30] audit: type=1400 audit(2000000311.826:441): avc: denied { write } for pid=12239 comm="syz.5.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 413.791294][ T7102] Buffer I/O error on dev nbd4, logical block 0, async page read [ 413.936161][ T7102] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 414.005652][ T24] usb 6-1: config 129 has an invalid interface number: 138 but max is 3 [ 414.078039][ T7102] Buffer I/O error on dev nbd4, logical block 1, async page read [ 414.087243][ T5898] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 414.124077][ T24] usb 6-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 414.194305][ T7102] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 414.254024][ T24] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 4 [ 414.294803][ T7102] Buffer I/O error on dev nbd4, logical block 2, async page read [ 414.369608][ T24] usb 6-1: config 129 has no interface number 0 [ 414.442793][ T7102] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 414.495795][ T24] usb 6-1: config 129 has no interface number 1 [ 414.588731][ T7102] Buffer I/O error on dev nbd4, logical block 3, async page read [ 414.636002][ T24] usb 6-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 414.731747][ T7102] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 414.860503][ T24] usb 6-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 414.927169][ T7102] Buffer I/O error on dev nbd4, logical block 0, async page read [ 415.074299][ T7102] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.125120][ T24] usb 6-1: config 129 interface 138 has no altsetting 0 [ 415.207812][ T7102] Buffer I/O error on dev nbd4, logical block 1, async page read [ 415.211787][ T5898] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 415.223050][ T24] usb 6-1: config 129 interface 2 has no altsetting 0 [ 415.226330][ T5898] asix 4-1:0.0: probe with driver asix failed with error -71 [ 415.245480][ T5898] usb 4-1: USB disconnect, device number 10 [ 415.255377][ T7102] ldm_validate_partition_table(): Disk read failed. [ 415.265520][ T7102] Dev nbd4: unable to read RDB block 0 [ 415.272812][ T7102] nbd4: unable to read partition table [ 415.443145][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 415.455369][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.466452][ T24] usb 6-1: Product: 臮휯킄뇋経荥ሡ嬩緪뾪ｰ鷔惎孺荄韈梚䤃뷾ⷺ偰䘽Ṽ˟型笻拡쮂쳐깒ㆅ夅㼿觤䝨☕ι猄⺴턙뛰漆ጒ⇧万⑓ꦛ焈뇝玺鱛缌㣑蒯疣۱鉻賴ꊢ븚혽㛬苼눩倕鮊ႆᏝ▛鱧짮ﶭ╴䶦簿绰鶐钬㎆ [ 415.470407][ T7102] ldm_validate_partition_table(): Disk read failed. [ 415.492146][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.515908][ T7102] Dev nbd4: unable to read RDB block 0 [ 415.521290][ T24] usb 6-1: Manufacturer: Ű为脜䔗෥䄖┾鹮༧Ѫせ䅌ຣแꪧ [ 415.525098][ T7102] nbd4: unable to read partition table [ 415.530213][ T24] usb 6-1: SerialNumber: 荾娳뙍镱寥룻勚쓠黜箿蕴瘬첶⳴ः낍燕㵂젆悸乜䪣뜄蘻꣢몹贪ቛ濪戴⾙瘈凈Գ쓼뷞⻔泭Ⴉ鋜뺤詝ᚓ✏溪㯈ⷕ껭෡٠볾렦督幐祖ʱग़⪮ੲ栮㽠闑磎퀼䤬暆蓿踏灈ᯘ鹆쟁儡쐿句쨃몌 [ 415.562393][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.837049][T12271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2108'. [ 415.908477][ T30] audit: type=1400 audit(2000000314.516:442): avc: denied { setopt } for pid=12239 comm="syz.5.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 415.928405][ T3397] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 415.936642][T12240] No control pipe specified [ 415.974671][ T24] usb 6-1: USB disconnect, device number 9 [ 416.102484][ T3397] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 416.139750][ T3397] usb 4-1: config 0 has no interface number 0 [ 416.227176][ T3397] usb 4-1: config 0 interface 98 has no altsetting 0 [ 416.519918][ T3397] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 416.535114][ T3397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.543816][ T3397] usb 4-1: Product: syz [ 416.548099][ T3397] usb 4-1: Manufacturer: syz [ 416.556365][ T3397] usb 4-1: SerialNumber: syz [ 416.591258][ T3397] usb 4-1: config 0 descriptor?? [ 416.809930][ T3397] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 417.196281][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2119'. [ 417.955622][ T3397] usb 4-1: reset high-speed USB device number 11 using dummy_hcd [ 418.332855][ T3397] usb 4-1: failed to restore interface 98 altsetting 4 (error=-71) [ 418.366901][ T3397] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 418.379570][ T3397] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 418.392551][ T3397] usb 4-1: USB disconnect, device number 11 [ 418.444117][ T24] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 418.474219][ T30] audit: type=1400 audit(2000000317.086:443): avc: denied { firmware_load } for pid=24 comm="kworker/1:0" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 418.474272][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2132'. [ 418.494499][ T24] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 418.494645][ T24] kobject: kobject_add_internal failed for firmware (error: -2 parent: 4-1) [ 418.494717][ T24] firmware ueagle-atm!eagleII.fw: fw_load_sysfs_fallback: device_register failed [ 418.533234][ T24] usb 4-1: [UEAGLE-ATM] firmware is not available [ 419.021293][T12351] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input26 [ 419.689899][T12363] support for the xor transformation has been removed. [ 419.870640][T12363] input: syz1 as /devices/virtual/input/input27 [ 420.158649][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2144'. [ 421.198958][T12386] syz.3.2150: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 421.229180][T12386] CPU: 0 UID: 0 PID: 12386 Comm: syz.3.2150 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 421.229208][T12386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 421.229220][T12386] Call Trace: [ 421.229225][T12386] [ 421.229232][T12386] dump_stack_lvl+0x16c/0x1f0 [ 421.229268][T12386] warn_alloc+0x248/0x3a0 [ 421.229294][T12386] ? __pfx_warn_alloc+0x10/0x10 [ 421.229315][T12386] ? __pfx_stack_trace_save+0x10/0x10 [ 421.229340][T12386] ? stack_depot_save_flags+0x28/0xa40 [ 421.229372][T12386] ? kasan_save_stack+0x42/0x60 [ 421.229393][T12386] ? kasan_save_stack+0x33/0x60 [ 421.229411][T12386] ? kasan_save_track+0x14/0x30 [ 421.229432][T12386] ? xskq_create+0x52/0x1d0 [ 421.229453][T12386] ? xsk_setsockopt+0x640/0x840 [ 421.229472][T12386] ? do_sock_setsockopt+0x224/0x470 [ 421.229493][T12386] ? xskq_create+0xfb/0x1d0 [ 421.229515][T12386] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 421.229543][T12386] ? xskq_create+0xfb/0x1d0 [ 421.229572][T12386] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 421.229603][T12386] ? xskq_create+0xfb/0x1d0 [ 421.229626][T12386] vmalloc_user_noprof+0x9e/0xe0 [ 421.229645][T12386] ? xskq_create+0xfb/0x1d0 [ 421.229668][T12386] xskq_create+0xfb/0x1d0 [ 421.229693][T12386] xsk_setsockopt+0x640/0x840 [ 421.229717][T12386] ? __pfx_xsk_setsockopt+0x10/0x10 [ 421.229737][T12386] ? __lock_acquire+0x622/0x1c90 [ 421.229769][T12386] ? selinux_socket_setsockopt+0x6a/0x80 [ 421.229794][T12386] ? __pfx_xsk_setsockopt+0x10/0x10 [ 421.229815][T12386] do_sock_setsockopt+0x224/0x470 [ 421.229832][T12386] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 421.229870][T12386] __sys_setsockopt+0x1a0/0x230 [ 421.229898][T12386] __x64_sys_setsockopt+0xbd/0x160 [ 421.229921][T12386] ? do_syscall_64+0x91/0x4c0 [ 421.229947][T12386] ? lockdep_hardirqs_on+0x7c/0x110 [ 421.229972][T12386] do_syscall_64+0xcd/0x4c0 [ 421.230002][T12386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.230020][T12386] RIP: 0033:0x7f012a38e929 [ 421.230034][T12386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.230051][T12386] RSP: 002b:00007f01281f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 421.230069][T12386] RAX: ffffffffffffffda RBX: 00007f012a5b5fa0 RCX: 00007f012a38e929 [ 421.230081][T12386] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 421.230091][T12386] RBP: 00007f012a410b39 R08: 0000000000000004 R09: 0000000000000000 [ 421.230102][T12386] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.230112][T12386] R13: 0000000000000000 R14: 00007f012a5b5fa0 R15: 00007fff4d197598 [ 421.230137][T12386] [ 421.230144][T12386] Mem-Info: [ 421.458744][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2155'. [ 421.483505][T12386] active_anon:11831 inactive_anon:0 isolated_anon:0 [ 421.483505][T12386] active_file:20686 inactive_file:40721 isolated_file:0 [ 421.483505][T12386] unevictable:768 dirty:229 writeback:0 [ 421.483505][T12386] slab_reclaimable:11890 slab_unreclaimable:115207 [ 421.483505][T12386] mapped:35633 shmem:1372 pagetables:1771 [ 421.483505][T12386] sec_pagetables:0 bounce:0 [ 421.483505][T12386] kernel_misc_reclaimable:0 [ 421.483505][T12386] free:1263626 free_pcp:17059 free_cma:0 [ 421.604648][T12386] Node 0 active_anon:56024kB inactive_anon:0kB active_file:82744kB inactive_file:162680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:151232kB dirty:916kB writeback:0kB shmem:12652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14356kB pagetables:7024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 421.651920][T12386] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 421.683333][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.690312][T12386] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 421.754483][T12386] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 421.866587][T12386] Node 0 DMA32 free:1131616kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58896kB inactive_anon:0kB active_file:82744kB inactive_file:165460kB unevictable:1536kB writepending:1016kB present:3129332kB managed:2540624kB mlocked:0kB bounce:0kB free_pcp:40484kB local_pcp:24416kB free_cma:0kB [ 421.946217][T12386] lowmem_reserve[]: 0 0 1 1 1 [ 421.967964][T12386] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 422.008225][T12386] lowmem_reserve[]: 0 0 0 0 0 [ 422.018747][T12386] Node 1 Normal free:3899580kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20352kB local_pcp:12064kB free_cma:0kB [ 422.055325][T12386] lowmem_reserve[]: 0 0 0 0 0 [ 422.060278][T12386] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 422.124930][T12386] Node 0 DMA32: 414*4kB (UM) 1139*8kB (UME) 821*16kB (UME) 658*32kB (UME) 502*64kB (UME) 240*128kB (UME) 143*256kB (UM) 68*512kB (UM) 16*1024kB (UME) 3*2048kB (UM) 227*4096kB (UM) = 1131552kB [ 422.192192][T12386] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 422.364178][T12390] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 422.373263][T12386] Node 1 Normal: 191*4kB (UE) 46*8kB (UME) 53*16kB (UME) 82*32kB (UME) 23*64kB (UME) 4*128kB (UME) 5*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 948*4096kB (M) = 3899580kB [ 422.436408][T12386] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 422.525380][T12386] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 422.559356][T12386] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 422.582147][ T30] audit: type=1400 audit(2000000321.196:444): avc: denied { read write } for pid=12416 comm="syz.6.2163" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 422.643144][ T30] audit: type=1400 audit(2000000321.196:445): avc: denied { open } for pid=12416 comm="syz.6.2163" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 422.671377][T12386] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 423.462180][T12386] 66221 total pagecache pages [ 423.466902][T12386] 0 pages in swap cache [ 423.471397][T12386] Free swap = 124996kB [ 423.475572][T12386] Total swap = 124996kB [ 423.479713][T12386] 2097051 pages RAM [ 423.505893][T12386] 0 pages HighMem/MovableOnly [ 423.510645][T12386] 429917 pages reserved [ 423.523594][T12386] 0 pages cma reserved [ 425.939464][T12461] binder: 12460:12461 ioctl c0306201 0 returned -14 [ 426.657746][T12473] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 426.667679][T12473] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 426.936137][T12459] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 430.647675][T12534] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 434.971042][ T30] audit: type=1400 audit(2000000333.526:446): avc: denied { watch } for pid=12589 comm="syz.5.2216" path="/343" dev="tmpfs" ino=1778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 437.121397][T12615] Bluetooth: MGMT ver 1.23 [ 439.133186][T12650] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2231'. [ 439.981469][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.840873][ T5885] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 442.003435][ T5885] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 442.017451][ T5885] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.031415][ T5885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 442.040671][ T5885] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.216030][ T5885] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.448213][ T5885] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 442.670274][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 442.679423][ T5885] usb 4-1: Product: syz [ 442.686333][ T5885] usb 4-1: Manufacturer: syz [ 442.704937][ T5885] cdc_wdm 4-1:1.0: skipping garbage [ 442.710183][ T5885] cdc_wdm 4-1:1.0: skipping garbage [ 442.732606][ T5885] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 442.738529][ T5885] cdc_wdm 4-1:1.0: Unknown control protocol [ 442.957435][T12676] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 442.965634][ T30] audit: type=1400 audit(2000000341.556:447): avc: denied { read write } for pid=12675 comm="syz.3.2241" name="cdc-wdm0" dev="devtmpfs" ino=2970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 443.022120][ T30] audit: type=1400 audit(2000000341.556:448): avc: denied { open } for pid=12675 comm="syz.3.2241" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 443.027315][ T5885] usb 4-1: USB disconnect, device number 12 [ 443.667046][ T30] audit: type=1400 audit(2000000342.276:449): avc: denied { ioctl } for pid=12713 comm="syz.6.2255" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 446.561038][ T30] audit: type=1400 audit(2000000342.666:450): avc: denied { read write } for pid=12721 comm="syz.4.2258" name="rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 446.621024][ T30] audit: type=1400 audit(2000000342.666:451): avc: denied { open } for pid=12721 comm="syz.4.2258" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 446.646136][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.076991][T12738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.655767][ T30] audit: type=1400 audit(2000000347.246:452): avc: denied { override_creds } for pid=12763 comm="syz.1.2276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 448.903473][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2278'. [ 449.411847][ T5830] Bluetooth: hci1: command 0x0405 tx timeout [ 450.321170][ T5871] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 450.668383][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 450.731912][ T5871] usb 4-1: config 5 has an invalid interface number: 105 but max is 0 [ 450.775722][ T5871] usb 4-1: config 5 has no interface number 0 [ 450.898582][ T5871] usb 4-1: config 5 interface 105 altsetting 4 endpoint 0x8 has an invalid bInterval 154, changing to 11 [ 450.962543][ T5871] usb 4-1: config 5 interface 105 has no altsetting 0 [ 450.969509][ T5871] usb 4-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=60.eb [ 451.239594][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.532389][ T5871] usb 4-1: string descriptor 0 read error: -71 [ 451.565836][ T5871] usb 4-1: USB disconnect, device number 13 [ 451.860358][T12812] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 452.261107][ T30] audit: type=1400 audit(2000000350.466:453): avc: denied { mounton } for pid=12808 comm="syz.4.2291" path="/465/file0/file0" dev="ramfs" ino=32273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 452.615688][ T30] audit: type=1400 audit(2000000351.106:454): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 454.381234][ T5871] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 454.561185][ T5871] usb 7-1: Using ep0 maxpacket: 16 [ 454.583492][ T5871] usb 7-1: config 0 has an invalid interface number: 236 but max is 0 [ 454.616300][ T5871] usb 7-1: config 0 has no interface number 0 [ 454.632853][ T5871] usb 7-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=84.33 [ 454.650559][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.668062][ T5871] usb 7-1: Product: syz [ 454.681343][ T5871] usb 7-1: Manufacturer: syz [ 454.690177][ T5871] usb 7-1: SerialNumber: syz [ 454.720646][ T5871] usb 7-1: config 0 descriptor?? [ 454.744046][ T5871] usb-storage 7-1:0.236: USB Mass Storage device detected [ 454.776029][ T5871] usb-storage 7-1:0.236: device ignored [ 455.621696][ T5871] usb 7-1: USB disconnect, device number 5 [ 456.556158][ T5898] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 456.721138][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 456.741726][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.780949][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.798880][ T5898] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 456.830663][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.880661][ T5898] usb 5-1: config 0 descriptor?? [ 456.923714][ T5898] hub 5-1:0.0: USB hub found [ 457.117015][ T5898] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 457.323029][ T5898] usbhid 5-1:0.0: can't add hid device: -71 [ 457.345201][ T5898] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 457.363457][ T5926] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 457.391711][ T5898] usb 5-1: USB disconnect, device number 10 [ 458.006909][ T5926] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 458.016993][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.025116][ T5926] usb 4-1: Product: syz [ 458.029316][ T5926] usb 4-1: Manufacturer: syz [ 458.039462][ T5926] usb 4-1: SerialNumber: syz [ 458.137762][ T5926] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 458.440899][ T30] audit: type=1400 audit(2000000357.046:455): avc: denied { firmware_load } for pid=3397 comm="kworker/1:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 458.467303][ T3397] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 458.802373][T12890] nbd4: detected capacity change from 0 to 63 [ 458.809016][T12895] block nbd4: NBD_DISCONNECT [ 458.815993][T12895] block nbd4: Disconnected due to user request. [ 458.830913][T12895] block nbd4: shutting down sockets [ 458.901149][T12900] lo speed is unknown, defaulting to 1000 [ 458.907580][T12900] lo speed is unknown, defaulting to 1000 [ 458.922619][T12900] lo speed is unknown, defaulting to 1000 [ 458.958981][T12900] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 459.038481][T12900] infiniband sz0: RDMA CMA: cma_listen_on_dev, error -98 [ 459.225638][T12900] lo speed is unknown, defaulting to 1000 [ 459.233655][T12900] lo speed is unknown, defaulting to 1000 [ 459.241298][T12900] lo speed is unknown, defaulting to 1000 [ 459.244366][ T5871] usb 4-1: USB disconnect, device number 14 [ 459.255401][T12900] lo speed is unknown, defaulting to 1000 [ 459.262572][T12900] lo speed is unknown, defaulting to 1000 [ 459.276986][T12900] lo speed is unknown, defaulting to 1000 [ 459.331503][ C0] blk_print_req_error: 138 callbacks suppressed [ 459.331520][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 459.346859][ C0] buffer_io_error: 138 callbacks suppressed [ 459.346874][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 459.360576][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 459.369625][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 459.377426][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 459.386508][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 459.394395][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 459.403464][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 459.441734][ T7102] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 459.479419][ T7102] Buffer I/O error on dev nbd4, logical block 0, async page read [ 459.499466][ T7102] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 459.515071][ T7102] Buffer I/O error on dev nbd4, logical block 1, async page read [ 459.523288][ T3397] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 460.106933][ T7102] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 460.116368][ T3397] ath9k_htc: Failed to initialize the device [ 460.123741][ T7102] Buffer I/O error on dev nbd4, logical block 2, async page read [ 460.135559][ T7102] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 460.137549][ T5871] usb 4-1: ath9k_htc: USB layer deinitialized [ 460.171214][ T7102] Buffer I/O error on dev nbd4, logical block 3, async page read [ 460.254994][ T5898] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 460.468254][ T7102] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 460.487422][ T7102] Buffer I/O error on dev nbd4, logical block 0, async page read [ 460.496502][ T7102] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 460.516376][ T7102] Buffer I/O error on dev nbd4, logical block 1, async page read [ 460.538302][ T7102] ldm_validate_partition_table(): Disk read failed. [ 460.564834][ T7102] Dev nbd4: unable to read RDB block 0 [ 460.585498][ T7102] nbd4: unable to read partition table [ 460.593511][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 460.603414][T12911] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input28 [ 460.617424][ T5898] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 460.624643][ T7102] ldm_validate_partition_table(): Disk read failed. [ 460.646130][ T7102] Dev nbd4: unable to read RDB block 0 [ 460.655867][ T5898] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 460.671550][ T5898] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 460.680857][ T5898] usb 6-1: Product: syz [ 460.685029][ T5898] usb 6-1: Manufacturer: syz [ 460.689597][ T5898] usb 6-1: SerialNumber: syz [ 460.700320][ T7102] nbd4: unable to read partition table [ 461.042233][ T5898] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 461.067324][ T5898] visor 6-1:1.0: probe with driver visor failed with error -110 [ 461.242826][T12923] siw: device registration error -23 [ 461.408638][T12922] warn_alloc: 1 callbacks suppressed [ 461.408709][T12922] syz.3.2328: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 461.690330][T12922] CPU: 0 UID: 0 PID: 12922 Comm: syz.3.2328 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 461.690361][T12922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 461.690374][T12922] Call Trace: [ 461.690382][T12922] [ 461.690391][T12922] dump_stack_lvl+0x16c/0x1f0 [ 461.690424][T12922] warn_alloc+0x248/0x3a0 [ 461.690451][T12922] ? __pfx_warn_alloc+0x10/0x10 [ 461.690474][T12922] ? __schedule+0x1181/0x5de0 [ 461.690498][T12922] ? stack_depot_save_flags+0x28/0xa40 [ 461.690531][T12922] ? kasan_save_stack+0x42/0x60 [ 461.690554][T12922] ? kasan_save_stack+0x33/0x60 [ 461.690575][T12922] ? kasan_save_track+0x14/0x30 [ 461.690601][T12922] ? xskq_create+0xfb/0x1d0 [ 461.690626][T12922] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 461.690656][T12922] ? xskq_create+0xfb/0x1d0 [ 461.690680][T12922] ? irqentry_exit+0x3b/0x90 [ 461.690705][T12922] ? lockdep_hardirqs_on+0x7c/0x110 [ 461.690733][T12922] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 461.690753][T12922] ? xskq_create+0xfb/0x1d0 [ 461.690786][T12922] ? xskq_create+0xfb/0x1d0 [ 461.690808][T12922] vmalloc_user_noprof+0x9e/0xe0 [ 461.690829][T12922] ? xskq_create+0xfb/0x1d0 [ 461.690863][T12922] xskq_create+0xfb/0x1d0 [ 461.690890][T12922] xsk_setsockopt+0x640/0x840 [ 461.690916][T12922] ? __pfx_xsk_setsockopt+0x10/0x10 [ 461.690939][T12922] ? selinux_socket_setsockopt+0x55/0x80 [ 461.690965][T12922] ? selinux_socket_setsockopt+0x6a/0x80 [ 461.690988][T12922] ? __pfx_xsk_setsockopt+0x10/0x10 [ 461.691009][T12922] do_sock_setsockopt+0x224/0x470 [ 461.691027][T12922] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 461.691061][T12922] __sys_setsockopt+0x1a0/0x230 [ 461.691092][T12922] __x64_sys_setsockopt+0xbd/0x160 [ 461.691116][T12922] ? do_syscall_64+0x91/0x4c0 [ 461.691143][T12922] ? lockdep_hardirqs_on+0x7c/0x110 [ 461.691169][T12922] do_syscall_64+0xcd/0x4c0 [ 461.691198][T12922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.691217][T12922] RIP: 0033:0x7f012a38e929 [ 461.691232][T12922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.691251][T12922] RSP: 002b:00007f01281f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 461.691269][T12922] RAX: ffffffffffffffda RBX: 00007f012a5b5fa0 RCX: 00007f012a38e929 [ 461.691281][T12922] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 461.691292][T12922] RBP: 00007f012a410b39 R08: 0000000000000004 R09: 0000000000000000 [ 461.691303][T12922] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.691314][T12922] R13: 0000000000000000 R14: 00007f012a5b5fa0 R15: 00007fff4d197598 [ 461.691342][T12922] [ 461.995629][T12922] Mem-Info: [ 462.083053][T12922] active_anon:22984 inactive_anon:0 isolated_anon:0 [ 462.083053][T12922] active_file:20686 inactive_file:40751 isolated_file:0 [ 462.083053][T12922] unevictable:768 dirty:468 writeback:0 [ 462.083053][T12922] slab_reclaimable:12012 slab_unreclaimable:116143 [ 462.083053][T12922] mapped:38524 shmem:12484 pagetables:1740 [ 462.083053][T12922] sec_pagetables:0 bounce:0 [ 462.083053][T12922] kernel_misc_reclaimable:0 [ 462.083053][T12922] free:1234010 free_pcp:33072 free_cma:0 [ 462.261418][T12924] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 462.289339][T12934] netlink: 'syz.6.2331': attribute type 10 has an invalid length. [ 462.307948][T12934] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 462.360362][T12922] Node 0 active_anon:88736kB inactive_anon:0kB active_file:82744kB inactive_file:162800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:154096kB dirty:1872kB writeback:0kB shmem:45200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14436kB pagetables:6900kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 462.764963][T12922] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 463.563145][T12922] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 463.595397][T12922] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 463.599710][ T3397] usb 6-1: USB disconnect, device number 10 [ 463.601228][T12922] Node 0 DMA32 free:1027156kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:72304kB inactive_anon:0kB active_file:82744kB inactive_file:161484kB unevictable:1536kB writepending:1920kB present:3129332kB managed:2540624kB mlocked:0kB bounce:0kB free_pcp:125200kB local_pcp:47524kB free_cma:0kB [ 463.650823][T12922] lowmem_reserve[]: 0 0 1 1 1 [ 463.671415][T12922] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 463.777134][T12922] lowmem_reserve[]: 0 0 0 0 0 [ 463.790807][T12922] Node 1 Normal free:3899580kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20352kB local_pcp:8288kB free_cma:0kB [ 463.915705][T12922] lowmem_reserve[]: 0 0 0 0 0 [ 463.921843][T12922] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 463.943512][T12922] Node 0 DMA32: 1061*4kB (UME) 703*8kB (UME) 564*16kB (UME) 329*32kB (UME) 153*64kB (UME) 115*128kB (UME) 68*256kB (UM) 57*512kB (UM) 25*1024kB (UME) 5*2048kB (UM) 218*4096kB (UM) = 1029292kB [ 464.045680][T12922] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 464.058344][T12922] Node 1 Normal: 191*4kB (UE) 46*8kB (UME) 53*16kB (UME) 82*32kB (UME) 23*64kB (UME) 4*128kB (UME) 5*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 948*4096kB (M) = 3899580kB [ 464.081720][T12922] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 464.096607][T12922] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 464.106383][T12922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 464.148684][T12922] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 464.185842][T12922] 65697 total pagecache pages [ 464.192490][T12922] 0 pages in swap cache [ 464.197134][T12922] Free swap = 124996kB [ 464.205631][T12922] Total swap = 124996kB [ 464.210000][T12922] 2097051 pages RAM [ 464.214497][T12922] 0 pages HighMem/MovableOnly [ 464.219849][T12922] 429917 pages reserved [ 464.263002][T12922] 0 pages cma reserved [ 467.999959][T12980] vlan2: entered promiscuous mode [ 468.011579][T12980] bridge0: entered promiscuous mode [ 468.017292][T12983] 9pnet_fd: Insufficient options for proto=fd [ 468.682928][T12975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.019355][ T30] audit: type=1400 audit(2000000367.626:456): avc: denied { create } for pid=12996 comm="syz.1.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 469.069004][ T30] audit: type=1400 audit(2000000367.656:457): avc: denied { setopt } for pid=12996 comm="syz.1.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 469.091603][ T30] audit: type=1400 audit(2000000367.656:458): avc: denied { write } for pid=12996 comm="syz.1.2352" path="socket:[32546]" dev="sockfs" ino=32546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 469.387650][T13003] xt_hashlimit: size too large, truncated to 1048576 [ 469.400249][T13001] netlink: 'syz.5.2354': attribute type 3 has an invalid length. [ 469.532251][T13001] netlink: 666 bytes leftover after parsing attributes in process `syz.5.2354'. [ 470.616164][ T5871] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 470.858706][ T5817] Bluetooth: hci4: unexpected cc 0x2029 length: 2 > 1 [ 470.867572][ T5817] Bluetooth: hci4: unexpected event for opcode 0x2029 [ 471.203675][ T5871] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 471.220885][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.243133][ T5871] usb 7-1: config 0 descriptor?? [ 471.601675][T12861] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 471.771154][T12861] usb 4-1: Using ep0 maxpacket: 8 [ 471.822570][T12861] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 471.833904][T12861] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 471.847017][T12861] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 471.882012][T12861] usb 4-1: Product: syz [ 471.887669][T12861] usb 4-1: Manufacturer: syz [ 471.893365][T12861] usb 4-1: SerialNumber: syz [ 472.251061][T12861] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 472.325560][T12861] visor 4-1:1.0: probe with driver visor failed with error -110 [ 472.388488][T13055] siw: device registration error -23 [ 472.975308][ T5871] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 473.982224][ T5871] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 475.277749][ T5871] asix 7-1:0.0: probe with driver asix failed with error -71 [ 475.288157][ T5871] usb 7-1: USB disconnect, device number 6 [ 475.369534][ T5885] usb 4-1: USB disconnect, device number 15 [ 476.280943][ T5871] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 476.504907][ T5871] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 476.525569][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.547230][ T5871] usb 7-1: Product: syz [ 476.560853][ T5871] usb 7-1: Manufacturer: syz [ 476.565572][ T5871] usb 7-1: SerialNumber: syz [ 476.571328][ T30] audit: type=1400 audit(2000000375.176:459): avc: denied { write } for pid=13076 comm="syz.1.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 476.602314][ T5871] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 476.637006][ T5829] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 476.765985][T13085] 9pnet_fd: Insufficient options for proto=fd [ 476.845757][ T5885] usb 7-1: USB disconnect, device number 7 [ 478.523057][ T5829] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 478.530086][ T5829] ath9k_htc: Failed to initialize the device [ 479.326276][ T5885] usb 7-1: ath9k_htc: USB layer deinitialized [ 479.729658][T13126] xt_nfacct: accounting object `syz1' does not exists [ 480.603049][T13133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13133 comm=syz.6.2398 [ 481.442169][ T5885] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 481.693032][ T5885] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 481.705102][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.715389][ T5885] usb 4-1: Product: syz [ 481.883747][ T5885] usb 4-1: Manufacturer: syz [ 481.888384][ T5885] usb 4-1: SerialNumber: syz [ 481.904521][ T5885] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 481.926200][ T5926] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 483.252015][ T3397] usb 4-1: USB disconnect, device number 16 [ 483.597421][T13164] netlink: 'syz.1.2412': attribute type 3 has an invalid length. [ 483.763804][T13164] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2412'. [ 483.853978][ T5926] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 483.856176][ T5926] ath9k_htc: Failed to initialize the device [ 483.857826][ T3397] usb 4-1: ath9k_htc: USB layer deinitialized [ 484.634982][ T5817] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 485.169645][T13191] siw: device registration error -23 [ 485.266679][T13195] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2420'. [ 485.304679][T13195] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2420'. [ 485.468711][T13195] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2420'. [ 485.526179][T13195] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2420'. [ 485.856982][T13207] netlink: 'syz.3.2427': attribute type 3 has an invalid length. [ 485.919580][T13207] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2427'. [ 486.885373][ T5817] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 487.008727][T13225] veth0_vlan: entered allmulticast mode [ 487.196739][T13231] veth0_vlan: left promiscuous mode [ 487.228158][T13231] veth0_vlan: entered promiscuous mode [ 487.816849][T13242] ALSA: mixer_oss: invalid OSS volume 'MON' [ 487.830572][T13242] overlayfs: failed to resolve './file1': -2 [ 488.714427][ T30] audit: type=1326 audit(2000000387.326:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13253 comm="syz.6.2441" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f181df8e929 code=0x0 [ 488.983951][ T5817] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 490.274937][T13284] syzkaller0: entered promiscuous mode [ 490.280567][T13284] syzkaller0: entered allmulticast mode [ 493.442212][ T30] audit: type=1400 audit(2000000392.006:461): avc: denied { write } for pid=13331 comm="syz.6.2455" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 494.461710][ T30] audit: type=1326 audit(2000000393.076:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13339 comm="syz.6.2458" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f181df8e929 code=0x0 [ 494.484503][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.510429][ T5817] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 496.727514][T13383] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2465'. [ 496.748285][T13383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2465'. [ 496.764511][T13383] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2465'. [ 496.779074][T13383] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2465'. [ 498.089629][T13336] netlink: 'syz.5.2457': attribute type 3 has an invalid length. [ 498.102549][T13336] netlink: 666 bytes leftover after parsing attributes in process `syz.5.2457'. [ 498.118240][T13361] @: renamed from vlan0 (while UP) [ 498.814313][T13410] program syz.3.2471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 500.551088][ T5975] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 500.844186][ T5975] usb 4-1: config 129 has an invalid interface number: 138 but max is 3 [ 501.013226][ T5975] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 501.044394][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.160030][ T5975] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 4 [ 501.194331][ T30] audit: type=1326 audit(2000000399.796:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13418 comm="syz.1.2473" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd72998e929 code=0x0 [ 501.239371][ T5975] usb 4-1: config 129 has no interface number 0 [ 501.274559][ T5975] usb 4-1: config 129 has no interface number 1 [ 501.295209][ T5975] usb 4-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 501.320559][ T5975] usb 4-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 501.352120][ T5975] usb 4-1: config 129 interface 138 has no altsetting 0 [ 501.368148][ T5975] usb 4-1: config 129 interface 2 has no altsetting 0 [ 501.395832][ T5975] usb 4-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 501.417754][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.436070][ T5975] usb 4-1: Product: 臮휯킄뇋経荥ሡ嬩緪뾪ｰ鷔惎孺荄韈梚䤃뷾ⷺ偰䘽Ṽ˟型笻拡쮂쳐깒ㆅ夅㼿觤䝨☕ι猄⺴턙뛰漆ጒ⇧万⑓ꦛ焈뇝玺鱛缌㣑蒯疣۱鉻賴ꊢ븚혽㛬苼눩倕鮊ႆᏝ▛鱧짮ﶭ╴䶦簿绰鶐钬㎆ [ 501.472635][T13414] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 501.500854][ T5975] usb 4-1: Manufacturer: Ű为脜䔗෥䄖┾鹮༧Ѫせ䅌ຣแꪧ [ 501.539145][ T5975] usb 4-1: SerialNumber: 荾娳뙍镱寥룻勚쓠黜箿蕴瘬첶⳴ः낍燕㵂젆悸乜䪣뜄蘻꣢몹贪ቛ濪戴⾙瘈凈Գ쓼뷞⻔泭Ⴉ鋜뺤詝ᚓ✏溪㯈ⷕ껭෡٠볾렦督幐祖ʱग़⪮ੲ栮㽠闑磎퀼䤬暆蓿踏灈ᯘ鹆쟁儡쐿句쨃몌 [ 501.651679][T13414] usb 6-1: Using ep0 maxpacket: 16 [ 501.751728][T13414] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 501.834367][T13414] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 501.984573][T13414] usb 6-1: config 0 has no interface number 0 [ 502.009246][ T5975] usb 4-1: can't set config #129, error -71 [ 502.702335][T13414] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 502.770983][ T5975] usb 4-1: USB disconnect, device number 17 [ 502.791463][T13404] udevd[13404]: setting mode of /dev/bus/usb/004/017 to 020664 failed: No such file or directory [ 502.802229][T13414] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.810242][T13414] usb 6-1: Product: syz [ 502.850345][T13404] udevd[13404]: setting owner of /dev/bus/usb/004/017 to uid=0, gid=0 failed: No such file or directory [ 502.880930][T13414] usb 6-1: Manufacturer: syz [ 502.885566][T13414] usb 6-1: SerialNumber: syz [ 502.945288][T13414] usb 6-1: config 0 descriptor?? [ 502.976591][T13445] netlink: 'syz.1.2480': attribute type 3 has an invalid length. [ 502.986624][T13414] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 503.034349][T13445] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2480'. [ 503.054530][T13414] usb 6-1: No valid video chain found. [ 504.252542][ T30] audit: type=1400 audit(2000000402.856:464): avc: denied { connect } for pid=13420 comm="syz.5.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 505.085331][ T5825] Bluetooth: Unexpected continuation frame (len 16) [ 506.346250][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 506.591087][ T5975] usb 6-1: USB disconnect, device number 11 [ 506.919496][ T30] audit: type=1400 audit(2000000405.496:465): avc: denied { execute_no_trans } for pid=13490 comm="syz.3.2492" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 509.358537][T13519] syzkaller0: entered allmulticast mode [ 509.365089][T13519] syzkaller0: entered promiscuous mode [ 509.414995][T13519] syzkaller0 (unregistering): left allmulticast mode [ 509.422013][T13519] syzkaller0 (unregistering): left promiscuous mode [ 509.642838][ T30] audit: type=1400 audit(2000000408.256:466): avc: denied { ioctl } for pid=13524 comm="syz.6.2501" path="/dev/sg0" dev="devtmpfs" ino=759 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 511.540973][T13547] support for the xor transformation has been removed. [ 511.550013][T13547] input: syz1 as /devices/virtual/input/input29 [ 513.865680][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2518'. [ 513.886876][ T30] audit: type=1400 audit(2000000412.486:467): avc: denied { module_request } for pid=13569 comm="syz.1.2517" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 515.051694][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 516.052291][T13595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.177468][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2531'. [ 516.355869][T13628] veth0_vlan: entered allmulticast mode [ 517.141142][T13630] veth0_vlan: left promiscuous mode [ 517.160669][T13630] veth0_vlan: entered promiscuous mode [ 517.657083][T13648] input: syz0 as /devices/virtual/input/input30 [ 517.675973][T13650] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2546'. [ 517.780169][T13659] netlink: 'syz.6.2549': attribute type 3 has an invalid length. [ 517.790945][T13659] netlink: 666 bytes leftover after parsing attributes in process `syz.6.2549'. [ 518.667216][T13674] veth0_vlan: entered allmulticast mode [ 518.809840][T13677] veth0_vlan: left promiscuous mode [ 518.822976][T13677] veth0_vlan: entered promiscuous mode [ 519.430932][T13691] netlink: 'syz.1.2561': attribute type 3 has an invalid length. [ 519.452125][T13691] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2561'. [ 519.578891][T13699] ALSA: mixer_oss: invalid OSS volume 'MON' [ 519.829026][T13711] binder: 13710:13711 ioctl 89f2 0 returned -22 [ 520.397050][T13716] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input31 [ 520.711054][T13723] support for the xor transformation has been removed. [ 520.719436][T13723] input: syz1 as /devices/virtual/input/input32 [ 521.331185][ T30] audit: type=1400 audit(2000000419.936:468): avc: denied { append } for pid=13724 comm="syz.5.2574" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 521.369640][T13729] netlink: 'syz.4.2575': attribute type 3 has an invalid length. [ 521.377993][T13729] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2575'. [ 521.529808][ T30] audit: type=1400 audit(2000000420.136:469): avc: denied { read write } for pid=13724 comm="syz.5.2574" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 521.587642][ T30] audit: type=1400 audit(2000000420.136:470): avc: denied { open } for pid=13724 comm="syz.5.2574" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 522.239473][T13747] binder: 13746:13747 ioctl 89f2 0 returned -22 [ 524.510846][T13414] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 524.725820][T13779] support for the xor transformation has been removed. [ 524.740383][T13779] input: syz1 as /devices/virtual/input/input33 [ 525.180850][T13414] usb 5-1: Using ep0 maxpacket: 16 [ 525.214697][T13414] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 525.225526][T13414] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 525.233219][T13414] usb 5-1: config 0 has no interface number 0 [ 525.244316][T13414] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 525.254446][T13414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.275732][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 525.279226][T13414] usb 5-1: Product: syz [ 525.289847][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 525.299171][T13414] usb 5-1: Manufacturer: syz [ 525.304911][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 525.323327][T13414] usb 5-1: SerialNumber: syz [ 525.324575][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 525.380369][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 525.451823][T13414] usb 5-1: config 0 descriptor?? [ 525.527329][T13414] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 525.551642][T13414] usb 5-1: No valid video chain found. [ 525.569714][T13782] lo speed is unknown, defaulting to 1000 [ 526.757595][T13782] chnl_net:caif_netlink_parms(): no params data found [ 526.760523][T13810] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input34 [ 526.847474][T13813] veth0_vlan: entered allmulticast mode [ 527.230957][T13782] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.238137][T13782] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.247454][T13782] bridge_slave_0: entered allmulticast mode [ 527.268289][T13782] bridge_slave_0: entered promiscuous mode [ 527.540851][ T5817] Bluetooth: hci2: command tx timeout [ 527.752778][T13782] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.759908][T13782] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.767219][T13782] bridge_slave_1: entered allmulticast mode [ 527.779764][T13782] bridge_slave_1: entered promiscuous mode [ 528.241296][ T5871] usb 5-1: USB disconnect, device number 11 [ 528.479914][T13782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.509504][T13782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.838505][T13782] team0: Port device team_slave_0 added [ 528.902961][T13782] team0: Port device team_slave_1 added [ 528.965192][T13782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.976781][T13782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.140104][T13782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.153719][T13782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.209763][T13782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.235809][T13782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.405593][T13782] hsr_slave_0: entered promiscuous mode [ 529.420980][T13782] hsr_slave_1: entered promiscuous mode [ 529.427159][T13782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.435941][T13782] Cannot create hsr debugfs directory [ 529.600828][ T5817] Bluetooth: hci2: command tx timeout [ 530.035597][T13851] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 530.647277][T13782] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.675754][T13782] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.869804][T13782] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.885002][T13782] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.988719][T13782] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.000000][T13782] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.040925][T13414] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 531.188701][T13782] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.220915][T13782] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.250950][T13414] usb 5-1: Using ep0 maxpacket: 16 [ 531.267839][T13414] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 531.298645][T13414] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 531.313727][T13414] usb 5-1: config 0 has no interface number 0 [ 531.325595][T13414] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 531.338784][T13414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.351522][T13414] usb 5-1: Product: syz [ 531.355783][T13414] usb 5-1: Manufacturer: syz [ 531.360716][T13414] usb 5-1: SerialNumber: syz [ 531.387503][T13414] usb 5-1: config 0 descriptor?? [ 531.405378][T13414] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 531.423759][T13414] usb 5-1: No valid video chain found. [ 531.470572][T13867] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input35 [ 531.519748][T13782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 531.568607][T13782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 531.594995][T13782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 531.680892][ T5817] Bluetooth: hci2: command tx timeout [ 531.730643][T13782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 532.678709][T13782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.724460][T13782] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.748400][ T9021] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.756621][ T9021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.772204][ T9021] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.779311][ T9021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.961281][T13887] nbd3: detected capacity change from 0 to 63 [ 533.003462][T13892] block nbd3: NBD_DISCONNECT [ 533.771660][T13899] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2622'. [ 534.108813][ T5825] Bluetooth: hci2: command tx timeout [ 534.141518][ T5817] block nbd3: Receive control failed (result -104) [ 534.145302][T13892] block nbd3: Send disconnect failed -32 [ 535.191065][T13892] block nbd3: Disconnected due to user request. [ 535.197356][T13892] block nbd3: shutting down sockets [ 535.241163][ C0] blk_print_req_error: 138 callbacks suppressed [ 535.241180][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 535.256509][ C0] buffer_io_error: 138 callbacks suppressed [ 535.256518][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 535.270120][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 535.279143][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 535.286985][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 535.296055][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 535.303807][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 535.312826][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 535.366479][ T5975] usb 5-1: USB disconnect, device number 12 [ 535.372610][T13404] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 535.460823][T13404] Buffer I/O error on dev nbd3, logical block 0, async page read [ 535.509270][T13404] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 535.559259][T13404] Buffer I/O error on dev nbd3, logical block 1, async page read [ 535.597716][T13404] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 535.674498][T13404] Buffer I/O error on dev nbd3, logical block 2, async page read [ 535.692441][T13404] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 535.910867][T12861] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 536.201276][T12861] usb 5-1: Using ep0 maxpacket: 32 [ 536.259217][T12861] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 536.358040][T12861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.520239][T12861] usb 5-1: Product: syz [ 536.620880][T12861] usb 5-1: Manufacturer: syz [ 536.660174][T13404] Buffer I/O error on dev nbd3, logical block 3, async page read [ 536.668199][T13404] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.677261][T13404] Buffer I/O error on dev nbd3, logical block 0, async page read [ 536.685382][T13404] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.694427][T13404] Buffer I/O error on dev nbd3, logical block 1, async page read [ 536.704228][T13404] ldm_validate_partition_table(): Disk read failed. [ 536.712421][T13404] Dev nbd3: unable to read RDB block 0 [ 536.712713][T12861] usb 5-1: SerialNumber: syz [ 536.719316][T13404] nbd3: unable to read partition table [ 536.737034][T13404] ldm_validate_partition_table(): Disk read failed. [ 536.762421][T13404] Dev nbd3: unable to read RDB block 0 [ 536.769539][T13404] nbd3: unable to read partition table [ 536.798512][T12861] usb 5-1: config 0 descriptor?? [ 536.814963][T12861] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 536.869921][T13782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.997396][T13782] veth0_vlan: entered promiscuous mode [ 537.249348][T13782] veth1_vlan: entered promiscuous mode [ 537.319185][T13922] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 537.732491][T12861] gspca_stk1135: reg_w 0x3 err -71 [ 537.738674][T12861] gspca_stk1135: serial bus timeout: status=0x00 [ 537.747531][T12861] gspca_stk1135: Sensor write failed [ 537.755525][T12861] gspca_stk1135: serial bus timeout: status=0x00 [ 537.762150][T12861] gspca_stk1135: Sensor write failed [ 537.767463][T12861] gspca_stk1135: serial bus timeout: status=0x00 [ 537.784397][T12861] gspca_stk1135: Sensor read failed [ 537.790827][T12861] gspca_stk1135: serial bus timeout: status=0x00 [ 537.797178][T12861] gspca_stk1135: Sensor read failed [ 537.798963][T13782] veth0_macvtap: entered promiscuous mode [ 537.809841][T12861] gspca_stk1135: Detected sensor type unknown (0x0) [ 537.818010][T13782] veth1_macvtap: entered promiscuous mode [ 538.181574][T13782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.367187][T13782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.604366][T12861] gspca_stk1135: serial bus timeout: status=0x00 [ 538.610836][T12861] gspca_stk1135: Sensor read failed [ 538.616061][T12861] gspca_stk1135: serial bus timeout: status=0x00 [ 538.622684][T12861] gspca_stk1135: Sensor read failed [ 538.623670][T13782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.627891][T12861] gspca_stk1135: serial bus timeout: status=0x00 [ 538.643303][T12861] gspca_stk1135: Sensor write failed [ 538.648632][T12861] gspca_stk1135: serial bus timeout: status=0x00 [ 538.655117][T12861] gspca_stk1135: Sensor write failed [ 538.660459][T12861] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 538.671144][T12861] usb 5-1: USB disconnect, device number 13 [ 538.702923][T13782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.715208][T13782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.724189][T13782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.865065][T13936] netlink: 'syz.3.2632': attribute type 10 has an invalid length. [ 540.454552][T13936] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.462935][T13936] bridge0: port 1(@) entered disabled state [ 540.501331][T13936] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.508625][T13936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.516097][T13936] bridge0: port 1(@) entered blocking state [ 540.522530][T13936] bridge0: port 1(@) entered forwarding state [ 540.553889][T13936] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 541.590119][ T9021] ------------[ cut here ]------------ [ 541.595751][ T9021] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 542.097760][ T9021] WARNING: CPU: 0 PID: 9021 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 542.108362][ T9021] Modules linked in: [ 542.112769][ T9021] CPU: 0 UID: 0 PID: 9021 Comm: kworker/u8:19 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 542.125193][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 542.135378][ T9021] Workqueue: bond0 bond_mii_monitor [ 542.140566][ T9021] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 542.146652][ T9021] Code: 05 ff ff ff e8 34 8b 59 f8 c6 05 49 ec 2d 07 01 90 ba 48 00 00 00 48 c7 c6 c0 90 e3 8c 48 c7 c7 60 90 e3 8c e8 d4 4f 18 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 42 a8 90 e8 2e 5b c0 f8 e9 [ 542.166370][ T9021] RSP: 0018:ffffc90004e8f9f0 EFLAGS: 00010286 [ 542.172506][ T9021] RAX: 0000000000000000 RBX: ffff8880585c2000 RCX: ffffffff817ae248 [ 542.180453][ T9021] RDX: ffff888052c44880 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 542.188606][ T9021] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 542.196743][ T9021] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff920009d1f48 [ 542.205872][ T9021] R13: ffff8880585c2cc5 R14: ffffffff8c5910c0 R15: ffffffff899bcdb0 [ 542.214194][ T9021] FS: 0000000000000000(0000) GS:ffff888124754000(0000) knlGS:0000000000000000 [ 542.223483][ T9021] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 542.230069][ T9021] CR2: 00007fe1b6221837 CR3: 0000000023aa9000 CR4: 00000000003526f0 [ 542.238366][ T9021] Call Trace: [ 542.241969][ T9021] [ 542.244899][ T9021] ethtool_op_get_link+0x1d/0x70 [ 542.249839][ T9021] bond_check_dev_link+0x3fc/0x710 [ 542.255245][ T9021] ? __pfx_bond_check_dev_link+0x10/0x10 [ 542.261131][ T9021] bond_mii_monitor+0x3c0/0x2dc0 [ 542.266092][ T9021] ? __pfx_bond_mii_monitor+0x10/0x10 [ 542.271676][ T9021] ? rcu_is_watching+0x12/0xc0 [ 542.276451][ T9021] process_one_work+0x9cc/0x1b70 [ 542.281620][ T9021] ? __pfx_update_gid_event_work_handler+0x10/0x10 [ 542.288150][ T9021] ? __pfx_process_one_work+0x10/0x10 [ 542.293811][ T9021] ? assign_work+0x1a0/0x250 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 542.298425][ T9021] worker_thread+0x6c8/0xf10 [ 542.303097][ T9021] ? __pfx_worker_thread+0x10/0x10 [ 542.308216][ T9021] kthread+0x3c2/0x780 [ 542.312304][ T9021] ? __pfx_kthread+0x10/0x10 [ 542.316894][ T9021] ? rcu_is_watching+0x12/0xc0 [ 542.321703][ T9021] ? __pfx_kthread+0x10/0x10 [ 542.326947][ T9021] ret_from_fork+0x5d7/0x6f0 [ 542.331578][ T9021] ? __pfx_kthread+0x10/0x10 [ 542.336172][ T9021] ret_from_fork_asm+0x1a/0x30 [ 542.341060][ T9021] [ 542.344084][ T9021] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 542.351352][ T9021] CPU: 0 UID: 0 PID: 9021 Comm: kworker/u8:19 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 542.363568][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 542.373611][ T9021] Workqueue: bond0 bond_mii_monitor [ 542.378798][ T9021] Call Trace: [ 542.382053][ T9021] [ 542.384963][ T9021] dump_stack_lvl+0x3d/0x1f0 [ 542.389534][ T9021] panic+0x71c/0x800 [ 542.393425][ T9021] ? __pfx_panic+0x10/0x10 [ 542.397821][ T9021] ? show_trace_log_lvl+0x29b/0x3e0 [ 542.403015][ T9021] ? check_panic_on_warn+0x1f/0xb0 [ 542.408124][ T9021] ? __linkwatch_sync_dev+0x1ed/0x230 [ 542.413472][ T9021] check_panic_on_warn+0xab/0xb0 [ 542.418389][ T9021] __warn+0xf6/0x3c0 [ 542.422267][ T9021] ? preempt_schedule_notrace+0x62/0xe0 [ 542.427797][ T9021] ? __linkwatch_sync_dev+0x1ed/0x230 [ 542.433147][ T9021] report_bug+0x3c3/0x580 [ 542.437455][ T9021] ? __linkwatch_sync_dev+0x1ed/0x230 [ 542.442803][ T9021] handle_bug+0x184/0x210 [ 542.447107][ T9021] exc_invalid_op+0x17/0x50 [ 542.451597][ T9021] asm_exc_invalid_op+0x1a/0x20 [ 542.456425][ T9021] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 542.462383][ T9021] Code: 05 ff ff ff e8 34 8b 59 f8 c6 05 49 ec 2d 07 01 90 ba 48 00 00 00 48 c7 c6 c0 90 e3 8c 48 c7 c7 60 90 e3 8c e8 d4 4f 18 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 42 a8 90 e8 2e 5b c0 f8 e9 [ 542.481971][ T9021] RSP: 0018:ffffc90004e8f9f0 EFLAGS: 00010286 [ 542.488013][ T9021] RAX: 0000000000000000 RBX: ffff8880585c2000 RCX: ffffffff817ae248 [ 542.495959][ T9021] RDX: ffff888052c44880 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 542.503907][ T9021] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 542.511853][ T9021] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff920009d1f48 [ 542.519809][ T9021] R13: ffff8880585c2cc5 R14: ffffffff8c5910c0 R15: ffffffff899bcdb0 [ 542.527755][ T9021] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 542.533371][ T9021] ? __warn_printk+0x198/0x350 [ 542.538116][ T9021] ? __warn_printk+0x1a5/0x350 [ 542.542862][ T9021] ethtool_op_get_link+0x1d/0x70 [ 542.547775][ T9021] bond_check_dev_link+0x3fc/0x710 [ 542.552863][ T9021] ? __pfx_bond_check_dev_link+0x10/0x10 [ 542.558476][ T9021] bond_mii_monitor+0x3c0/0x2dc0 [ 542.563394][ T9021] ? __pfx_bond_mii_monitor+0x10/0x10 [ 542.568747][ T9021] ? rcu_is_watching+0x12/0xc0 [ 542.573490][ T9021] process_one_work+0x9cc/0x1b70 [ 542.578407][ T9021] ? __pfx_update_gid_event_work_handler+0x10/0x10 [ 542.584889][ T9021] ? __pfx_process_one_work+0x10/0x10 [ 542.590239][ T9021] ? assign_work+0x1a0/0x250 [ 542.594821][ T9021] worker_thread+0x6c8/0xf10 [ 542.599390][ T9021] ? __pfx_worker_thread+0x10/0x10 [ 542.604476][ T9021] kthread+0x3c2/0x780 [ 542.608518][ T9021] ? __pfx_kthread+0x10/0x10 [ 542.613081][ T9021] ? rcu_is_watching+0x12/0xc0 [ 542.617821][ T9021] ? __pfx_kthread+0x10/0x10 [ 542.622394][ T9021] ret_from_fork+0x5d7/0x6f0 [ 542.626969][ T9021] ? __pfx_kthread+0x10/0x10 [ 542.631538][ T9021] ret_from_fork_asm+0x1a/0x30 [ 542.636295][ T9021] [ 542.639483][ T9021] Kernel Offset: disabled [ 542.643803][ T9021] Rebooting in 86400 seconds..