last executing test programs: 8m48.848215448s ago: executing program 4 (id=1310): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)="e8b28f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000730f5a"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00'], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setgroups(0x24, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100}, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x26202) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_DISCONNECT(r3, 0xab08) syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x42000) sched_setscheduler(0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0xffffffffffffffff) 8m45.915579848s ago: executing program 4 (id=1319): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @local, @loopback}}}], 0x20}}], 0x1, 0x0) 8m45.403993648s ago: executing program 4 (id=1320): sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, 0x0, 0x0) 8m45.3666236s ago: executing program 4 (id=1321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[], 0x50) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, r4, r7, 0xf8, 0x8, 0x7ff, 0x6, {0x8, 0x8, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x0, 0xffff, 0x8, 0x7c0, 0xffffffff, 0x77, "ba9a42184edc4097e01b52f22e2cbb318719fb31f6699332292cc81f89f07580"}}) 8m44.304130106s ago: executing program 4 (id=1323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 8m43.403333517s ago: executing program 4 (id=1326): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x17) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x31b}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc058534b, &(0x7f0000000080)={{}, {0x85}}) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r3, &(0x7f0000019540)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='memory.stat\x00', 0x26e1, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 8m27.5266798s ago: executing program 32 (id=1326): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x17) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x31b}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc058534b, &(0x7f0000000080)={{}, {0x85}}) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r3, &(0x7f0000019540)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='memory.stat\x00', 0x26e1, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 41.625171108s ago: executing program 1 (id=3121): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000006df54598244a4e"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = socket(0x2, 0x80805, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000140)={0x2, 0x0, [{0x4001ff}, {}]}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, &(0x7f0000000380)) 40.805689431s ago: executing program 1 (id=3122): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x7, 0x4) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="320000006ed3"], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004a40)=""/102400, 0x19000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = dup(0xffffffffffffffff) setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r5) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@loopback, @in=@empty}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f0000000f40)=0xe8) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f00000003c0)) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000240)={0x7, 0x3, 0x9, 0x2, 0xb, "06d407045da43174f5a9b03c2963dd4f123c07"}) syz_open_dev$media(0x0, 0xa6, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000280)=@add_del={0x2, &(0x7f0000000200)='team_slave_1\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'vlan0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "4f2e6ba215a4803e00197689c61d80fd77082da016ed6f57e335e66d992ecc0b", "ec2515b759b3f5332ab4b469d66cbcc85b36df0ce1b01672f2ee843e2f878f46", "f3a20e5218b94366490ccbc409a5574b309e6fb6413ddb14e88ab477c18c9dec", "4dcb3dc94ee568b0d592043ac4a986a87af55cb7f7e6f6ed4a35537a28122aba", "74a475c88c7796c5b0a2782159038caa0c0ba9cd03a86df4e81c9532e116be11", "86f56374ac0b296e321a4281", 0x3, 0x6, 0x1, 0x6, 0x7fff}}) 37.293381954s ago: executing program 1 (id=3130): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xcc657405ba8b63ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r4, &(0x7f000000cb00)={0x2020}, 0x2020) write$FUSE_INIT(r4, 0x0, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x5) open(&(0x7f0000000100)='./file0\x00', 0x8100, 0x31) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x98, 0x20, 0x8d, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x4}, 0xe) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) (fail_nth: 1) 36.236873704s ago: executing program 1 (id=3132): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100003400010000000000000000000101"], 0x114}], 0x1}, 0x0) 35.599973351s ago: executing program 1 (id=3133): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xb144, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x80, 0xa81) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) gettid() ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) write$P9_RGETLOCK(r4, 0x0, 0xffffff6a) socket$inet_udplite(0x2, 0x2, 0x88) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r6 = syz_open_dev$radio(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x10007d50}) 32.481380881s ago: executing program 1 (id=3139): socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) poll(&(0x7f0000000a00)=[{0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x50}, {0xffffffffffffffff, 0x40}], 0x3, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) recvmmsg(r5, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 9.452901702s ago: executing program 2 (id=3196): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r2, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000324, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x200b61c, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000240)={0xb, 0x1, 0x0, "f85a03f073e22f000000780000000000000000000000000000000000ffff00", 0x56555959}) 8.439724532s ago: executing program 2 (id=3199): r0 = socket(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r1, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xa, &(0x7f0000000580)=ANY=[@ANYRES64=r2, @ANYRES32=r3, @ANYRESOCT=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_DELETE_BATCH(0x18, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bind$xdp(r9, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x3, r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 7.378083768s ago: executing program 0 (id=3202): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0xff1f, 0x8000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000740)={0xffff1e9d, 0x8e, 0xf, 0x2, 0x2}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.114139548s ago: executing program 3 (id=3203): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0xff1f, 0x8000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x200000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.033215587s ago: executing program 0 (id=3204): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) (fail_nth: 2) 6.816883884s ago: executing program 3 (id=3205): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800300600fc000000000000000000000000000001fe8000000000000000000000000000aa00024001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES8=r0], 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) msgget(0x0, 0x240) pipe(&(0x7f0000000080)) msgget(0x2, 0x400) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x34d1d0f8, 0x8}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x6576, 0x2000000f}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x3, 0x6576, 0xd, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000000c0)={r4}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000380)={0x6, 0x1, 0x0, "eef38fa706178749cb4dfd93e33c9b6b7bdc52e35ed734fc2ad17dcb4f1891e2", 0x43353039}) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)) lsm_set_self_attr(0x0, 0x0, 0x3e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.903475586s ago: executing program 0 (id=3206): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r4, &(0x7f0000001740)={0x2020}, 0x2020) io_submit(0x0, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0x1}]) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) writev(r6, &(0x7f0000000840), 0x0) r7 = syz_clone(0x99a1cfb1edd42446, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x301540, 0xc0) lstat(0x0, 0x0) stat(&(0x7f0000000580)='./cgroup\x00', 0x0) lstat(&(0x7f0000000180)='./cgroup\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000740)={{0x0, 0x0, 0x0, 0x0, r8, 0x13, 0x6}, 0x0, 0x0, 0x4, 0x9, 0x0, 0x1, 0xeb4f, 0xff, 0x4, 0x8, r7, r7}) syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) 5.902605708s ago: executing program 3 (id=3207): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0xff1f, 0x8000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.575177355s ago: executing program 3 (id=3208): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_io_uring_setup(0x9ee, &(0x7f0000000180)={0x0, 0xa5e9, 0x100, 0x3, 0xfffffffe}, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000280)={0x2020}, 0x2020) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000380)={0x6, 0x8000, 0x1, 0xd, 0xfffffffe, 0xfdfffffa}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00') pread64(r5, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pidfd_send_signal(r7, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x2, 0x4, 0x4, 0x2007, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x50) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000022c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x41000}, 0xc, &(0x7f0000000140)={&(0x7f0000002380)={0xd4, r8, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x74, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1e0000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x68}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20004000}, 0x40010) 4.657021051s ago: executing program 3 (id=3210): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402312073f0000000000010902"], 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) creat(&(0x7f0000000000)='./file0\x00', 0x60) socket$netlink(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r3], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r6, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 4.587065621s ago: executing program 2 (id=3212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, 0x0, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b52, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000010280)={0x0, 0x9, 0x0, 0x5}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbf8100000008004700001c000000000000907800000000ffffffff9007ff"], 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x6, 0x3}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) sendmmsg$inet6(r5, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="ae5d41c61790a7c951eea7fc6ba3ee9d3dba25663da55fbed0fd56edb7dd618d247b282ba97dd6ea6877733ca435d40279b0b7f746d77510f0525605e699476c87047b087ab1f478da0154f354682190c07d099836a2b4118f01a641b34a7338a90ea530c280880d21723d9e8733369289c81199ec5b434e757003c5b64aa964decc7df5e603ec36345d06a6a8b6f323273bac67f8e79b39c7eee7020457f97d82facc46bbae70657726cbce4ce5e56369dc693a7d683f58fbd5ce6cb2eae2a157cee32e34b37f85531810", 0xcb}, {&(0x7f0000000580)="2b64e4704d71b95b130b495a40b5c5c5676b1e03f564bbd2b1e9cc81dd8946006f243e4308b046623697ebe9a1b64d504409f482d4ef8592fac1ee7261bea618db3391e0cdc48959c52fc1b8cf2b0bffadc53da59bceb83a644a068323d7fca246aa4de53a23296398f0a224b0fb3319b0eae7b04e0e61510dae1063bc2f629a6c3707ee0aa7e075bbc455e816831ec8a7a94843fe9fdd189ff179a8e9956763b92cdff0da48d7747fa6362d7f1508f9483ea815fe11f8e2def12f11cf86a36507465713763d78d50231e3e9c40bb8ed00", 0xd1}, {&(0x7f0000000480)="230d0d2c0890639b63de67b2d8caf06173e6fae6431acee4cd1b4d56cfe5f40e0f7436b869421d4764d369fbc9728ab87bd29693b60367ab58c1a1739d5aafa1363ad0480de95ac263ec7d9d00e2497dfbd307e7f7e1cf9ac9ae939c19a43a6cf8b8471a720f07b95480a081025883a05a3fb5a5ae7a2f393aaacb765e6de919016f76b96a7edd98b652a8b8e3", 0x8d}], 0x3, &(0x7f0000000280)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x18}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x7ed, @loopback, 0x7fffffff}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="6b536245586dd48a4082ebe59055a2c2a6", 0x11}, {&(0x7f00000016c0)="c38c992a2e14bfd21cb55a4e633d2bf9e285d3e7877b9e0d69c0bd7f557b990c89d551f826698365761e498ddfd52a2965dded2ebf9999e47e42823211732888b9360501e99f2613b995063e956ed830b0fc4932d1233cfd1fbe37b3e4c7448f0c866aaaa6f05bfc869121177a6967defb35f585adf31aec1c9df66ee92f1a245627ccecf86fbc26bb380a949642b6177a392446764d809af3eedd1977b26e31a659cb94216e4ee618ad4bb44596074044b47c24bd32704ef50d29c7eb8f81722ec1c957032df41d184a54344e26e975e95a", 0xd2}, {&(0x7f00000017c0)="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", 0xfa}, {&(0x7f00000018c0)="d2099f996fc41ec17634d115bb722047bf59fd1f87972a1ab103c14e69b9ffb982ff40333000ab5560536e182b2c1de5f0b8d6ffbf3181cfe61a9699800f0523774245432b2c375645c0b5e1ec2c6e03a8a9821f2ac6e289a6b13e800d69676157aa4e24ec8623435bc0e4e4da39b6c5e3d9b1538417f317416a92bafd0cc7c301838cbf5f62a7af5f647d8b5efaf2728fbc8b7e1d18c67cd3b86169b63942a393513b3bf38108c6ea4ab640a7", 0xad}], 0x5, &(0x7f0000003200)=ANY=[@ANYBLOB="7800000000000000290000003900000084ac4f103b0000000000000000436f6905dcfe1175d73091a4b30491590000000000ffffe0000002fc01000000000000000000000000000000005ab479b1b359c221ffffe01b0001fc00000000000000000000000000000100000000000000000000ffffac1e0101fe80000000000000000000000000002a140000000000000029000000430000000800000000000000140000000000000029000000080000000300000000000000"], 0xa8}}, {{&(0x7f0000001ac0)={0xa, 0x4e23, 0x240, @remote, 0x3}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000001b00)="9e9dc007beaa", 0x6}, {&(0x7f0000001b40)="e917abc2b364fc3b7dba52f8e52027dbcbaddeea2c2e7b4b564461241ec3a0b488bc3f15a2073f7caddfed9a8d4e5194d1b127c21228b1fcb6da525f809f611b1b800b85e4552da3e7cde6aa88520388888d0d49dd6c8d88ea4df0b3682184b8ac18fa5245e73e1e28fbbbab68d05796efbdcab118ca9f4e4dbda96db5cd15d34eafa5996f4c3818e0aa185f108ba9e872688abe23196777bbd579a68727e8286f5c05a9abd8fed4b87fd2c3f514072d5b7ccbf6d82c632f24ac67c8efe1ae0f6687", 0xc2}], 0x2}}, {{&(0x7f0000001c80)={0xa, 0x4e20, 0x10000, @empty, 0x800}, 0x1c, &(0x7f0000003140)=[{&(0x7f0000001cc0)="cfe4912a66eff9e6bbcbb76f48bbdca1b99d74cc116510ca583e3f7df6bf38e94f4835170d3626d2a3f1c2fa8d75b329e5196673cf92dbb76611ddaff981114bb195dd312c1dc6ee6fda8e342a0220e078cfc8e778661e5e2b825e4be1d657692354bc6009d06fe4325096259e7120f7d43331d6f22bcda3af2bc36e6411c43956c5d7f2460d02606bcdbc1a4e9b09c875f2d1d745183735a0141ee82c3d7a4eebed3070ccd0d5900de59178e9e1c3fb8dcab53adc149d17f5bb370a71fae9b73ce7687fd1f2207ac4b69ca75b9de9e2e7cc0d4a95bc6e8eb2af273d97c5db377e99e8598892badaaff0ef840f0e784f462b9bc5", 0xf4}, {&(0x7f0000001dc0)="b749868485abb79840f02a78380d81ef394c2a0547f0efa3de3f8524387eff67a82fe37e7fd84c7fb33c559b8a288d24080a410bc2ce3070116e75c979842f9fd486a081d6b2576839cbac3e7464657429b1eed372fb25ccc7a8b1ec0fb1d0b2c97c9b3240cf375e54adc09420fc4b096140953a8d687eb3042211cf965e92207683d0119ee448a88eb9be4adc99a590c9df2de515664a31eb152272b5dd73", 0x9f}, {&(0x7f0000001e80)="c2111d3e6d5fa97cfdaf10ede71f77b14ef30b82b98ccce3bc9e5732dff8868cc4bfe4d76a802516a94bc0bfc06acabbdc881db5fa4dec3fc57475c9ae5ead03ae038c5bc4be6e9b93e4079cdaa4acaddbaae3e8009632ce6e56b20aa05d5928fcad98f1c5db8e2294db415ef1a5d7cf2a309de5bb434128629203f7319a56b108007fee78168b06aee12ae229d8667de8635043ce6086e198d1678100b988382fee728bbd121e20d5fc30a6", 0xac}, {&(0x7f0000001f40)="dbee3373f21f9031494d807dc00b6164f4055dba50ef199bac39dc53ffaab76d95340b7afcabd918f2228ca5860d1562a07f13304da168024c5828dccd8464c36745ca9f1397728ea72031196f745cf7dabddcdf967795e381f2539fd2a362ab583af73c1f5f4ed77845e427770c464bf91099d5e1da22af209f1ca827a2c42ad623ea5e55f861545847803dec8c6419f57e4bed2f7a33a4b216", 0x9a}, {&(0x7f0000002000)="cb0ec97bbfc85228648d33606c6b2a1fd30f44c1cbc3d720624f8120fede2383df306b3eb9749779b5c06959d7cfb756fc099b930635a298ce727f2891e263f517ac5f0c4db05c1cd85bfe5713f877e751b88b15a525fb161e05df1fcaf15afa3bda687827b4fd81030c594abb9a7e8a466306205f73de2b8a5f805bc1868efeaf45", 0x82}, {&(0x7f00000020c0)="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", 0x1000}, {&(0x7f00000030c0)="17d555f8e1f93f2f1f4ef0d7678790df57586433a3630e076426acfd372e345625c8787ba39cb5d69a3bfcb6386224bfd4cf1281c16ba641b0ac713f5176824ba7ac577e745e5223cc3e0067bb0ff0b142431fcc1479", 0x56}], 0x7, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], 0x260}}], 0x4, 0x4000040) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r6, 0x6, 0xb, 0x0, &(0x7f00000031c0)) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x9, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r7, 0x80045515, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="02aaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000000000000000000000aa2c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 3.590502492s ago: executing program 2 (id=3213): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0xff1f, 0x8000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000740)={0xffff1e9d, 0x8e, 0xf, 0x2, 0x2}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.532697152s ago: executing program 5 (id=3214): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0xff1f, 0x8000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x200000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.283437115s ago: executing program 2 (id=3215): socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$vim2m(0x0, 0xff, 0x2) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x1, r0, &(0x7f0000000080), 0x4000000000004) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80222, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000240)="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", 0x104, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="c14f7bdb3d904c4230838a2e0c6b812f55924c6b69091e3fe8ad31cb22", 0x1d, 0x44, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @loopback}, 0x1c) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) stat(0x0, 0x0) msgget$private(0x0, 0x101) write$rfkill(r1, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) syz_open_dev$video(0x0, 0x7ff, 0x0) r3 = socket(0x10, 0x80002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x80000000, 0x0, 0x7, 0xcd2}, 0x14) r4 = socket(0x200000000000011, 0x2, 0xfffffffd) prctl$PR_SCHED_CORE(0x4a, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52", 0xef}], 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 3.268783902s ago: executing program 5 (id=3216): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x13, r2}) 3.00740589s ago: executing program 0 (id=3217): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0xff1f, 0x8000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.864245329s ago: executing program 5 (id=3218): r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x20008880) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0xfff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(r1, &(0x7f0000032680)={0x2020}, 0xd46) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, 0x0) memfd_create(0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x4) mount$nfs(&(0x7f0000001080)='@\x00', &(0x7f00000010c0)='./file5\x00', 0x0, 0x100000, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="100000001314110208000000000000005007d7ed584dd07cc48d8b36d959c3fec0a9e3021a4f2b2f6052da1bc21b829afde5246b3090083f759d1309fcd7588625f6a5aaf0642a3fbfb21ff79466bfaa2a0da1b4f281390e46c416384a5877"], 0x10}, 0x2}, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000300)='./file5\x00', 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e26, @loopback}}) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40400d0}, 0x2400c144) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0x800, 0x2, "ec28a144f13d7607"}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1, 0xf}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2.142243909s ago: executing program 0 (id=3219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) open_tree(0xffffffffffffffff, 0x0, 0x89901) r3 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r3, 0x7000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = dup(r3) preadv2(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0) 2.007778888s ago: executing program 5 (id=3220): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) syz_io_uring_setup(0x10d, 0x0, 0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) getpid() ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000003c0)={0x9, r0, 0x1}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000001", @ANYRES16=r2, @ANYBLOB="02002bbd7000ffdbdf25140000000c000600030000000000000008001d00", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x8052}, 0x4010871) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000080)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a30006200000800410073697700140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x20000004) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) 1.127331806s ago: executing program 0 (id=3221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x302) syz_usb_connect(0x1, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x13, 0x29, 0xb3, 0x8, 0x12d6, 0x444, 0xf997, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x8, 0x40, 0x7, [{{0x9, 0x4, 0xb6, 0x3, 0x0, 0xe2, 0x41, 0xe4, 0x4}}]}}]}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) open_tree(0xffffffffffffffff, 0x0, 0x89901) r4 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r4, 0x7000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = dup(r4) preadv2(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0) 1.047711493s ago: executing program 5 (id=3222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, 0x0, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b52, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000010280)={0x0, 0x9, 0x0, 0x5}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbf8100000008004700001c000000000000907800000000ffffffff9007ff"], 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x6, 0x3}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) sendmmsg$inet6(r5, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="ae5d41c61790a7c951eea7fc6ba3ee9d3dba25663da55fbed0fd56edb7dd618d247b282ba97dd6ea6877733ca435d40279b0b7f746d77510f0525605e699476c87047b087ab1f478da0154f354682190c07d099836a2b4118f01a641b34a7338a90ea530c280880d21723d9e8733369289c81199ec5b434e757003c5b64aa964decc7df5e603ec36345d06a6a8b6f323273bac67f8e79b39c7eee7020457f97d82facc46bbae70657726cbce4ce5e56369dc693a7d683f58fbd5ce6cb2eae2a157cee32e34b37f85531810", 0xcb}, {&(0x7f0000000580)="2b64e4704d71b95b130b495a40b5c5c5676b1e03f564bbd2b1e9cc81dd8946006f243e4308b046623697ebe9a1b64d504409f482d4ef8592fac1ee7261bea618db3391e0cdc48959c52fc1b8cf2b0bffadc53da59bceb83a644a068323d7fca246aa4de53a23296398f0a224b0fb3319b0eae7b04e0e61510dae1063bc2f629a6c3707ee0aa7e075bbc455e816831ec8a7a94843fe9fdd189ff179a8e9956763b92cdff0da48d7747fa6362d7f1508f9483ea815fe11f8e2def12f11cf86a36507465713763d78d50231e3e9c40bb8ed00", 0xd1}, {&(0x7f0000000480)="230d0d2c0890639b63de67b2d8caf06173e6fae6431acee4cd1b4d56cfe5f40e0f7436b869421d4764d369fbc9728ab87bd29693b60367ab58c1a1739d5aafa1363ad0480de95ac263ec7d9d00e2497dfbd307e7f7e1cf9ac9ae939c19a43a6cf8b8471a720f07b95480a081025883a05a3fb5a5ae7a2f393aaacb765e6de919016f76b96a7edd98b652a8b8e3", 0x8d}], 0x3, &(0x7f0000000280)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x18}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x7ed, @loopback, 0x7fffffff}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="6b536245586dd48a4082ebe59055a2c2a6", 0x11}, {&(0x7f00000016c0)="c38c992a2e14bfd21cb55a4e633d2bf9e285d3e7877b9e0d69c0bd7f557b990c89d551f826698365761e498ddfd52a2965dded2ebf9999e47e42823211732888b9360501e99f2613b995063e956ed830b0fc4932d1233cfd1fbe37b3e4c7448f0c866aaaa6f05bfc869121177a6967defb35f585adf31aec1c9df66ee92f1a245627ccecf86fbc26bb380a949642b6177a392446764d809af3eedd1977b26e31a659cb94216e4ee618ad4bb44596074044b47c24bd32704ef50d29c7eb8f81722ec1c957032df41d184a54344e26e975e95a", 0xd2}, {&(0x7f00000017c0)="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", 0xfa}, {&(0x7f00000018c0)="d2099f996fc41ec17634d115bb722047bf59fd1f87972a1ab103c14e69b9ffb982ff40333000ab5560536e182b2c1de5f0b8d6ffbf3181cfe61a9699800f0523774245432b2c375645c0b5e1ec2c6e03a8a9821f2ac6e289a6b13e800d69676157aa4e24ec8623435bc0e4e4da39b6c5e3d9b1538417f317416a92bafd0cc7c301838cbf5f62a7af5f647d8b5efaf2728fbc8b7e1d18c67cd3b86169b63942a393513b3bf38108c6ea4ab640a7", 0xad}], 0x5, &(0x7f0000003200)=ANY=[@ANYBLOB="7800000000000000290000003900000084ac4f103b0000000000000000436f6905dcfe1175d73091a4b30491590000000000ffffe0000002fc01000000000000000000000000000000005ab479b1b359c221ffffe01b0001fc00000000000000000000000000000100000000000000000000ffffac1e0101fe80000000000000000000000000002a140000000000000029000000430000000800000000000000140000000000000029000000080000000300000000000000"], 0xa8}}, {{&(0x7f0000001ac0)={0xa, 0x4e23, 0x240, @remote, 0x3}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000001b00)="9e9dc007beaa", 0x6}, {&(0x7f0000001b40)="e917abc2b364fc3b7dba52f8e52027dbcbaddeea2c2e7b4b564461241ec3a0b488bc3f15a2073f7caddfed9a8d4e5194d1b127c21228b1fcb6da525f809f611b1b800b85e4552da3e7cde6aa88520388888d0d49dd6c8d88ea4df0b3682184b8ac18fa5245e73e1e28fbbbab68d05796efbdcab118ca9f4e4dbda96db5cd15d34eafa5996f4c3818e0aa185f108ba9e872688abe23196777bbd579a68727e8286f5c05a9abd8fed4b87fd2c3f514072d5b7ccbf6d82c632f24ac67c8efe1ae0f6687", 0xc2}], 0x2}}, {{&(0x7f0000001c80)={0xa, 0x4e20, 0x10000, @empty, 0x800}, 0x1c, &(0x7f0000003140)=[{&(0x7f0000001cc0)="cfe4912a66eff9e6bbcbb76f48bbdca1b99d74cc116510ca583e3f7df6bf38e94f4835170d3626d2a3f1c2fa8d75b329e5196673cf92dbb76611ddaff981114bb195dd312c1dc6ee6fda8e342a0220e078cfc8e778661e5e2b825e4be1d657692354bc6009d06fe4325096259e7120f7d43331d6f22bcda3af2bc36e6411c43956c5d7f2460d02606bcdbc1a4e9b09c875f2d1d745183735a0141ee82c3d7a4eebed3070ccd0d5900de59178e9e1c3fb8dcab53adc149d17f5bb370a71fae9b73ce7687fd1f2207ac4b69ca75b9de9e2e7cc0d4a95bc6e8eb2af273d97c5db377e99e8598892badaaff0ef840f0e784f462b9bc5", 0xf4}, {&(0x7f0000001dc0)="b749868485abb79840f02a78380d81ef394c2a0547f0efa3de3f8524387eff67a82fe37e7fd84c7fb33c559b8a288d24080a410bc2ce3070116e75c979842f9fd486a081d6b2576839cbac3e7464657429b1eed372fb25ccc7a8b1ec0fb1d0b2c97c9b3240cf375e54adc09420fc4b096140953a8d687eb3042211cf965e92207683d0119ee448a88eb9be4adc99a590c9df2de515664a31eb152272b5dd73", 0x9f}, {&(0x7f0000001e80)="c2111d3e6d5fa97cfdaf10ede71f77b14ef30b82b98ccce3bc9e5732dff8868cc4bfe4d76a802516a94bc0bfc06acabbdc881db5fa4dec3fc57475c9ae5ead03ae038c5bc4be6e9b93e4079cdaa4acaddbaae3e8009632ce6e56b20aa05d5928fcad98f1c5db8e2294db415ef1a5d7cf2a309de5bb434128629203f7319a56b108007fee78168b06aee12ae229d8667de8635043ce6086e198d1678100b988382fee728bbd121e20d5fc30a6", 0xac}, {&(0x7f0000001f40)="dbee3373f21f9031494d807dc00b6164f4055dba50ef199bac39dc53ffaab76d95340b7afcabd918f2228ca5860d1562a07f13304da168024c5828dccd8464c36745ca9f1397728ea72031196f745cf7dabddcdf967795e381f2539fd2a362ab583af73c1f5f4ed77845e427770c464bf91099d5e1da22af209f1ca827a2c42ad623ea5e55f861545847803dec8c6419f57e4bed2f7a33a4b216", 0x9a}, {&(0x7f0000002000)="cb0ec97bbfc85228648d33606c6b2a1fd30f44c1cbc3d720624f8120fede2383df306b3eb9749779b5c06959d7cfb756fc099b930635a298ce727f2891e263f517ac5f0c4db05c1cd85bfe5713f877e751b88b15a525fb161e05df1fcaf15afa3bda687827b4fd81030c594abb9a7e8a466306205f73de2b8a5f805bc1868efeaf45", 0x82}, {&(0x7f00000020c0)="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", 0x1000}, {&(0x7f00000030c0)="17d555f8e1f93f2f1f4ef0d7678790df57586433a3630e076426acfd372e345625c8787ba39cb5d69a3bfcb6386224bfd4cf1281c16ba641b0ac713f5176824ba7ac577e745e5223cc3e0067bb0ff0b142431fcc1479", 0x56}], 0x7, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], 0x260}}], 0x4, 0x4000040) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r6, 0x6, 0xb, 0x0, &(0x7f00000031c0)) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x9, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r7, 0x80045515, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="02aaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000000000000000000000aa2c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 211.809451ms ago: executing program 2 (id=3223): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800", "e7198360", "f7a5c1777af05eaa"}, 0x38) sendto$inet6(r4, 0x0, 0x0, 0x8040, 0x0, 0x0) write$binfmt_elf64(r4, 0x0, 0x78) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x1) (fail_nth: 2) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x4) ioctl$TIOCSTI(r5, 0x5412, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x1c) r7 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001200210300"], 0x1c}], 0x1}, 0x0) recvmmsg(r7, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 211.38557ms ago: executing program 3 (id=3224): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040800) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x500000000, 0x40000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}]}, 0x10) sendmmsg(r5, &(0x7f0000019080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x88}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) poll(0x0, 0x0, 0x7) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r8, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000019340)={r8, 0xe0, &(0x7f0000019240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000019080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f00000190c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000019100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f0000019140)=[{}], 0x8, 0x10, &(0x7f0000019180), &(0x7f00000191c0), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000019200)}}, 0x10) ioctl$SCSI_IOCTL_DOORUNLOCK(r8, 0x5381) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 0s ago: executing program 5 (id=3225): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0xff1f, 0x8000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000740)={0xffff1e9d, 0x8e, 0xf, 0x2, 0x2}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): ECT [ 986.094285][ T9] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 986.124515][T16141] block nbd5: Disconnected due to user request. [ 986.206422][T16141] block nbd5: shutting down sockets [ 986.285813][ T9] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 986.519254][T16149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2828'. [ 986.565289][T15373] ldm_validate_partition_table(): Disk read failed. [ 986.605806][T15373] Dev nbd5: unable to read RDB block 0 [ 986.707063][T16134] bond1: entered promiscuous mode [ 986.713047][T16134] bond1: entered allmulticast mode [ 986.723378][T16134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 986.784211][T16149] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.802203][T15373] nbd5: unable to read partition table [ 986.808281][T16149] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.815426][T16149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.832957][T15373] ldm_validate_partition_table(): Disk read failed. [ 986.855359][T15373] Dev nbd5: unable to read RDB block 0 [ 986.869889][T15373] nbd5: unable to read partition table [ 986.886468][ T9] usb 2-1: USB disconnect, device number 44 [ 989.307523][ T5977] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 989.489654][ T5977] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 989.516179][ T5977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 989.639154][ T5977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 989.657007][ T5977] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 989.675881][ T5977] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 989.691051][ T5977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.847850][ T5977] usb 1-1: config 0 descriptor?? [ 989.853637][T16190] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 989.918471][T16203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2851'. [ 990.094670][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2851'. [ 990.198050][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2851'. [ 990.208252][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2851'. [ 990.217970][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2851'. [ 990.777840][ T5977] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd [ 990.805981][ T5977] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 992.068372][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2846'. [ 992.169456][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 992.169474][ T30] audit: type=1326 audit(1757417675.567:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16214 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096bf8ebe9 code=0x7ffc0000 [ 992.879682][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.093134][ T30] audit: type=1326 audit(1757417675.567:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16214 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f096bf8ebe9 code=0x7ffc0000 [ 993.126924][ T30] audit: type=1326 audit(1757417675.567:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16214 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096bf8ebe9 code=0x7ffc0000 [ 993.165351][ T30] audit: type=1326 audit(1757417675.567:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16214 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f096bf8ebe9 code=0x7ffc0000 [ 993.189364][ T30] audit: type=1326 audit(1757417675.567:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16214 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096bf8ebe9 code=0x7ffc0000 [ 993.212808][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.221906][ T30] audit: type=1326 audit(1757417675.567:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16214 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f096bf8ebe9 code=0x7ffc0000 [ 993.245267][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.298355][ T6003] usb 1-1: reset high-speed USB device number 51 using dummy_hcd [ 993.396511][ T30] audit: type=1326 audit(1757417675.577:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16214 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096bf8ebe9 code=0x7ffc0000 [ 993.493379][ T30] audit: type=1326 audit(1757417675.577:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16214 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f096bf8ebe9 code=0x7ffc0000 [ 994.017299][ T30] audit: type=1326 audit(1757417676.507:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16214 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096bf8ebe9 code=0x7ffc0000 [ 994.040808][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.479913][ T30] audit: type=1326 audit(1757417676.507:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16214 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096bf8ebe9 code=0x7ffc0000 [ 994.514314][ T9] usb 1-1: USB disconnect, device number 51 [ 997.928706][T16283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2873'. [ 998.241816][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2873'. [ 998.255737][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2873'. [ 998.265790][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2873'. [ 1000.058371][T16302] syzkaller0: entered promiscuous mode [ 1000.147901][T16302] syzkaller0: entered allmulticast mode [ 1000.430051][T16318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2884'. [ 1003.219993][T14432] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1003.231984][T14432] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1003.328455][T14432] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1003.341936][T14432] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1003.352248][T14432] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1005.161131][ T5861] syz_tun (unregistering): left allmulticast mode [ 1005.528503][T14432] Bluetooth: hci4: command tx timeout [ 1005.663553][T16335] lo speed is unknown, defaulting to 1000 [ 1006.549017][T16359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1006.801623][T16367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2898'. [ 1007.627540][T14432] Bluetooth: hci4: command tx timeout [ 1008.100869][T16381] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2903'. [ 1008.134807][T16381] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1008.141356][T16381] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1008.307760][T16381] vhci_hcd vhci_hcd.0: Device attached [ 1008.580921][ T5977] usb 44-1: SetAddress Request (2) to port 0 [ 1008.587003][ T5977] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1008.612490][T16388] syzkaller0: entered promiscuous mode [ 1008.618328][T16388] syzkaller0: entered allmulticast mode [ 1008.850619][T16381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1009.097894][T16382] vhci_hcd: connection reset by peer [ 1009.617523][ T6658] vhci_hcd: stop threads [ 1009.621805][ T6658] vhci_hcd: release socket [ 1009.638335][ T6658] vhci_hcd: disconnect device [ 1009.687488][T14432] Bluetooth: hci4: command tx timeout [ 1010.906568][T16416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1011.759158][T14432] Bluetooth: hci4: command tx timeout [ 1013.014614][T16335] chnl_net:caif_netlink_parms(): no params data found [ 1013.754932][ T5977] usb 44-1: device descriptor read/8, error -110 [ 1014.730969][ T5977] usb usb44-port1: attempt power cycle [ 1015.086231][T16335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.096981][T16335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.104881][T16335] bridge_slave_0: entered allmulticast mode [ 1015.113582][T16335] bridge_slave_0: entered promiscuous mode [ 1015.124609][T16335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.136913][T16335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.146064][T16335] bridge_slave_1: entered allmulticast mode [ 1015.154387][T16335] bridge_slave_1: entered promiscuous mode [ 1015.380645][ T5977] usb usb44-port1: unable to enumerate USB device [ 1015.385453][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1015.385470][ T30] audit: type=1326 audit(1757417698.687:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d878ebe9 code=0x7ffc0000 [ 1015.422403][ T30] audit: type=1326 audit(1757417698.697:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d878ebe9 code=0x7ffc0000 [ 1015.446189][ T30] audit: type=1326 audit(1757417698.697:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc3d878ebe9 code=0x7ffc0000 [ 1015.456331][T15324] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1015.470189][ T30] audit: type=1326 audit(1757417698.697:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d878ebe9 code=0x7ffc0000 [ 1015.549168][T16335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.657499][T15324] usb 6-1: Using ep0 maxpacket: 8 [ 1015.792151][T16335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.953361][T16459] nbd2: detected capacity change from 0 to 63 [ 1015.987151][T16460] block nbd2: NBD_DISCONNECT [ 1015.993372][T16460] block nbd2: Disconnected due to user request. [ 1015.999874][T16460] block nbd2: shutting down sockets [ 1016.126048][ T30] audit: type=1326 audit(1757417698.707:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3d878ebe9 code=0x7ffc0000 [ 1016.409440][ T30] audit: type=1326 audit(1757417698.707:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d878ebe9 code=0x7ffc0000 [ 1016.437454][ C1] blk_print_req_error: 281 callbacks suppressed [ 1016.437476][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1016.452798][ C1] buffer_io_error: 286 callbacks suppressed [ 1016.452820][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1016.466584][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1016.475649][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1016.483467][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1016.492533][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1016.500340][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1016.509409][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1016.517255][T16336] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1016.549756][T15324] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1016.558989][T15324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.569131][T15324] usb 6-1: Product: syz [ 1016.573320][T15324] usb 6-1: Manufacturer: syz [ 1016.578012][T15324] usb 6-1: SerialNumber: syz [ 1016.621977][ T30] audit: type=1326 audit(1757417698.717:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3d878ebe9 code=0x7ffc0000 [ 1016.654547][T16336] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1016.666211][T16336] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1016.687268][T15324] usb 6-1: config 0 descriptor?? [ 1016.695103][ T30] audit: type=1326 audit(1757417698.787:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d878ebe9 code=0x7ffc0000 [ 1016.718555][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.727760][ T30] audit: type=1326 audit(1757417698.787:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d878ebe9 code=0x7ffc0000 [ 1016.751265][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.759874][T15324] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1016.766618][ T30] audit: type=1326 audit(1757417698.857:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3d878ebe9 code=0x7ffc0000 [ 1016.770505][T16336] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1016.803374][T16459] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1016.809646][T16336] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1016.859511][T16336] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1016.872459][T16336] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1016.882004][T16336] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1016.890360][T16336] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1016.930515][T16335] team0: Port device team_slave_0 added [ 1016.961887][T16336] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1016.974906][T16335] team0: Port device team_slave_1 added [ 1017.019493][T16336] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1017.426379][T16336] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1017.488507][T16336] ldm_validate_partition_table(): Disk read failed. [ 1017.527123][T16336] Dev nbd2: unable to read RDB block 0 [ 1017.558300][T16336] nbd2: unable to read partition table [ 1017.572222][T16335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.584304][T16335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.759148][T16479] nbd: nbd2 already in use [ 1017.770827][T16479] block nbd2: NBD_DISCONNECT [ 1017.775592][T16479] block nbd2: Send disconnect failed -32 [ 1017.841702][T16335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.009056][T15324] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 1018.036620][T15324] sq905 6-1:0.0: probe with driver sq905 failed with error -71 [ 1018.062152][T16335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.153309][T16335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.288136][T15324] usb 6-1: USB disconnect, device number 8 [ 1018.515660][T16335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.691062][T16336] ldm_validate_partition_table(): Disk read failed. [ 1018.797561][T16488] block nbd1: Attempted send on invalid socket [ 1018.804445][T16488] MINIX-fs: unable to read superblock [ 1019.134635][T16479] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1019.216186][T16477] lo speed is unknown, defaulting to 1000 [ 1019.220383][T16336] Dev nbd2: unable to read RDB block 0 [ 1019.260139][T16336] nbd2: unable to read partition table [ 1019.729229][T16335] hsr_slave_0: entered promiscuous mode [ 1019.746119][T16335] hsr_slave_1: entered promiscuous mode [ 1019.787879][T16335] debugfs: 'hsr0' already exists in 'hsr' [ 1019.794166][T16335] Cannot create hsr debugfs directory [ 1020.404849][T16335] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.241150][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2937'. [ 1021.400546][T16335] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.084757][T16524] nbd0: detected capacity change from 0 to 63 [ 1022.100133][T16525] block nbd0: NBD_DISCONNECT [ 1022.105140][T16525] block nbd0: Disconnected due to user request. [ 1022.111945][T16525] block nbd0: shutting down sockets [ 1022.723142][T16335] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.807083][T16524] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1022.822760][T16523] lo speed is unknown, defaulting to 1000 [ 1022.874376][T16335] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.485210][T16335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1023.770293][T16546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2946'. [ 1024.753126][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1024.753141][ T30] audit: type=1326 audit(1757417708.167:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16543 comm="syz.1.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d878ebe9 code=0x7ffc0000 [ 1024.754343][T16335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1024.767656][ T30] audit: type=1326 audit(1757417708.177:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16543 comm="syz.1.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc3d878ebe9 code=0x7ffc0000 [ 1024.813779][ C0] vkms_vblank_simulate: vblank timer overrun [ 1024.823109][T16335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1024.847467][T14432] block nbd2: Receive control failed (result -32) [ 1024.857102][ T30] audit: type=1326 audit(1757417708.207:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16543 comm="syz.1.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d878ebe9 code=0x7ffc0000 [ 1024.862090][T16554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1024.880626][ C0] vkms_vblank_simulate: vblank timer overrun [ 1024.881242][ T30] audit: type=1326 audit(1757417708.207:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16543 comm="syz.1.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d878ebe9 code=0x7ffc0000 [ 1024.917289][ C0] vkms_vblank_simulate: vblank timer overrun [ 1024.923950][ T30] audit: type=1326 audit(1757417708.247:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16543 comm="syz.1.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3d878ebe9 code=0x7ffc0000 [ 1024.947427][ C0] vkms_vblank_simulate: vblank timer overrun [ 1024.955482][T16550] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1024.965576][T16547] lo speed is unknown, defaulting to 1000 [ 1025.002671][T16335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1025.005691][T16548] nbd2: detected capacity change from 0 to 63 [ 1025.016314][ T30] audit: type=1326 audit(1757417708.247:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16543 comm="syz.1.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d878ebe9 code=0x7ffc0000 [ 1025.048522][T16549] block nbd2: NBD_DISCONNECT [ 1025.054234][T16466] block nbd2: Dead connection, failed to find a fallback [ 1025.094160][T16549] block nbd2: Send disconnect failed -32 [ 1025.100233][T16466] block nbd2: shutting down sockets [ 1025.105827][T16466] blk_print_req_error: 139 callbacks suppressed [ 1025.105841][T16466] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1025.124329][ T30] audit: type=1326 audit(1757417708.247:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16543 comm="syz.1.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d878ebe9 code=0x7ffc0000 [ 1025.147789][ C0] vkms_vblank_simulate: vblank timer overrun [ 1025.169736][T16466] buffer_io_error: 138 callbacks suppressed [ 1025.169755][T16466] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1025.204832][ T30] audit: type=1326 audit(1757417708.247:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16543 comm="syz.1.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3d878ebe9 code=0x7ffc0000 [ 1025.259320][ T30] audit: type=1326 audit(1757417708.247:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16543 comm="syz.1.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d878ebe9 code=0x7ffc0000 [ 1025.260470][ T9239] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1025.282802][ C0] vkms_vblank_simulate: vblank timer overrun [ 1025.298456][ T30] audit: type=1326 audit(1757417708.247:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16543 comm="syz.1.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d878ebe9 code=0x7ffc0000 [ 1025.299829][ T9239] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1025.331591][ T9239] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1025.340012][ T9239] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1025.350282][T16466] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1025.378313][T16466] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1025.396454][T16466] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1025.414591][T16466] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1025.423142][T16466] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1025.436273][T16466] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1025.444609][T16562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2949'. [ 1025.456880][T16466] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.241804][T16466] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1026.269862][T16466] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.287633][T16466] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1026.295559][T16466] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.304663][T16466] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1026.317840][T16466] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.337697][T16466] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1026.351070][T16466] ldm_validate_partition_table(): Disk read failed. [ 1026.365974][T16466] Dev nbd2: unable to read RDB block 0 [ 1026.375573][T16466] nbd2: unable to read partition table [ 1026.395402][T16568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2949'. [ 1026.409513][T16466] ldm_validate_partition_table(): Disk read failed. [ 1026.430759][T16466] Dev nbd2: unable to read RDB block 0 [ 1026.442623][T16466] nbd2: unable to read partition table [ 1026.451894][T16570] tipc: Enabled bearer , priority 0 [ 1026.470618][T16568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2949'. [ 1026.583058][T16568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2949'. [ 1026.601497][T16572] tipc: Resetting bearer [ 1026.641321][T16569] tipc: Disabling bearer [ 1027.226141][T16580] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2954'. [ 1027.259889][T16335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.321258][T16335] 8021q: adding VLAN 0 to HW filter on device team0 [ 1027.451777][T16587] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2956'. [ 1027.484997][ T8776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.492199][ T8776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.505144][ T8776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.506507][T16587] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1027.512349][ T8776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.518692][T16587] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1027.548173][T16587] vhci_hcd vhci_hcd.0: Device attached [ 1027.653781][T16335] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1027.717041][T16335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1027.988730][T15324] usb 36-1: SetAddress Request (6) to port 0 [ 1028.073226][T15324] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1028.503936][T16605] tipc: Enabled bearer , priority 0 [ 1028.531265][T16605] syzkaller0: entered promiscuous mode [ 1028.598327][T16605] syzkaller0: entered allmulticast mode [ 1028.698459][T16611] tipc: Resetting bearer [ 1028.737289][T16604] tipc: Resetting bearer [ 1028.921725][T16604] tipc: Disabling bearer [ 1029.003789][T16594] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1029.013658][T16335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.069144][T16335] veth0_vlan: entered promiscuous mode [ 1029.200993][T16590] vhci_hcd: connection reset by peer [ 1029.221944][ T1085] vhci_hcd: stop threads [ 1029.226219][ T1085] vhci_hcd: release socket [ 1029.769344][ T1085] vhci_hcd: disconnect device [ 1030.588029][T16335] veth1_vlan: entered promiscuous mode [ 1030.725478][T16335] veth0_macvtap: entered promiscuous mode [ 1030.733857][T16627] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2965'. [ 1030.756485][T16335] veth1_macvtap: entered promiscuous mode [ 1030.824987][T16335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1030.875778][T16335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.913577][T10028] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.951427][T10028] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.983461][T10028] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.026365][T10028] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.287145][ T9579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.401653][ T9579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.732294][ T9579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.798133][ T9579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.348736][T16639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2968'. [ 1033.118539][T15324] usb 36-1: device descriptor read/8, error -110 [ 1033.386395][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2975'. [ 1033.587875][T16665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2975'. [ 1033.603349][T16665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2975'. [ 1033.613275][T16665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2975'. [ 1033.658153][T15324] usb usb36-port1: attempt power cycle [ 1035.218616][T15324] usb usb36-port1: unable to enumerate USB device [ 1036.156967][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1036.170452][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1036.184466][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1036.195366][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1036.205542][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1036.300762][T16694] lo speed is unknown, defaulting to 1000 [ 1036.951111][ T9705] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.163375][ T9705] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.318899][ T5859] Bluetooth: hci3: command tx timeout [ 1038.351872][ T9705] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.333481][ T9705] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.434333][ T8776] Bluetooth: hci5: Frame reassembly failed (-84) [ 1039.441664][T16737] tipc: Enabled bearer , priority 0 [ 1039.450939][T16737] syzkaller0: entered promiscuous mode [ 1039.461689][T16737] syzkaller0: entered allmulticast mode [ 1039.603466][T16737] tipc: Resetting bearer [ 1039.613349][T16736] tipc: Resetting bearer [ 1039.678685][T16736] tipc: Disabling bearer [ 1040.397668][T14432] Bluetooth: hci3: command tx timeout [ 1040.543180][ T9705] bridge_slave_1: left allmulticast mode [ 1040.551035][ T9705] bridge_slave_1: left promiscuous mode [ 1040.556804][ T9705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.621151][ T9705] bridge_slave_0: left allmulticast mode [ 1040.695640][ T9705] bridge_slave_0: left promiscuous mode [ 1040.885080][ T9705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.517829][ T5847] Bluetooth: hci5: command 0x1003 tx timeout [ 1041.526189][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1042.490226][ T5859] Bluetooth: hci3: command tx timeout [ 1042.616785][ T9705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1042.627106][ T9705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.638780][ T9705] bond0 (unregistering): Released all slaves [ 1042.777178][ T9705] bond1 (unregistering): Released all slaves [ 1042.909858][ T9705] bond2 (unregistering): Released all slaves [ 1043.033814][ T9705] bond3 (unregistering): Released all slaves [ 1043.173813][ T9705] bond4 (unregistering): Released all slaves [ 1043.234680][T16694] chnl_net:caif_netlink_parms(): no params data found [ 1043.931248][ T9705] tipc: Disabling bearer [ 1044.467573][ T9705] tipc: Disabling bearer [ 1044.580376][ T5859] Bluetooth: hci3: command tx timeout [ 1044.606024][ T9705] tipc: Left network mode [ 1045.427935][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1045.700837][T16694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.718490][T16694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.751307][T16694] bridge_slave_0: entered allmulticast mode [ 1045.759957][T16694] bridge_slave_0: entered promiscuous mode [ 1045.859801][ T9] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 1045.859880][T16694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.875103][T16694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.887805][T16694] bridge_slave_1: entered allmulticast mode [ 1045.905970][T16694] bridge_slave_1: entered promiscuous mode [ 1046.338859][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1046.358305][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1046.369761][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1046.511143][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1046.521600][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.128301][ T9] usb 4-1: config 0 descriptor?? [ 1047.147847][T16807] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1047.380763][T16694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.394364][T16694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.560992][T16694] team0: Port device team_slave_0 added [ 1047.586249][ T9] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd [ 1047.631033][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1047.954613][T16694] team0: Port device team_slave_1 added [ 1047.966458][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3015'. [ 1047.977061][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1048.081324][T16844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1048.317167][ T9] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1048.834770][ T1085] Bluetooth: hci5: Frame reassembly failed (-84) [ 1048.901651][T16807] veth0_macvtap: left promiscuous mode [ 1048.954722][T16847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.995654][T16847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.002897][T16847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.020360][T16694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.029184][T16694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.067503][T16694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.134230][ T9705] hsr_slave_0: left promiscuous mode [ 1049.142776][ T9705] hsr_slave_1: left promiscuous mode [ 1049.148339][ T5911] usb 4-1: USB disconnect, device number 41 [ 1049.158768][ T9705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1049.183822][ T9705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1049.309319][ T9705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1049.328970][ T9705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.110066][ T9705] veth1_macvtap: left promiscuous mode [ 1050.128401][ T9705] veth1_vlan: left promiscuous mode [ 1050.877807][T14432] Bluetooth: hci5: command 0x1003 tx timeout [ 1050.890203][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1052.411412][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1052.411425][ T30] audit: type=1326 audit(1757417735.827:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16894 comm="syz.5.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f4b8ebe9 code=0x7ffc0000 [ 1052.457113][ T30] audit: type=1326 audit(1757417735.857:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16894 comm="syz.5.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f52f4b8ebe9 code=0x7ffc0000 [ 1052.480577][ C0] vkms_vblank_simulate: vblank timer overrun [ 1052.493053][ T30] audit: type=1326 audit(1757417735.857:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16894 comm="syz.5.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f4b8ebe9 code=0x7ffc0000 [ 1052.516572][ C0] vkms_vblank_simulate: vblank timer overrun [ 1052.522963][ T30] audit: type=1326 audit(1757417735.857:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16894 comm="syz.5.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f4b8ebe9 code=0x7ffc0000 [ 1052.546464][ C0] vkms_vblank_simulate: vblank timer overrun [ 1052.668771][ T30] audit: type=1326 audit(1757417735.857:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16894 comm="syz.5.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52f4b8ebe9 code=0x7ffc0000 [ 1052.766060][ T30] audit: type=1326 audit(1757417735.857:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16894 comm="syz.5.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f4b8ebe9 code=0x7ffc0000 [ 1052.828417][ T30] audit: type=1326 audit(1757417735.857:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16894 comm="syz.5.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f4b8ebe9 code=0x7ffc0000 [ 1052.859746][ T30] audit: type=1326 audit(1757417735.867:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16894 comm="syz.5.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f52f4b8ebe9 code=0x7ffc0000 [ 1052.883159][ C0] vkms_vblank_simulate: vblank timer overrun [ 1052.890259][ T30] audit: type=1326 audit(1757417735.967:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16894 comm="syz.5.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f4b8ebe9 code=0x7ffc0000 [ 1052.913800][ C0] vkms_vblank_simulate: vblank timer overrun [ 1052.920224][ T30] audit: type=1326 audit(1757417735.967:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16894 comm="syz.5.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f4b8ebe9 code=0x7ffc0000 [ 1053.294453][T16694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.307559][T16694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.334409][T16694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.351556][T16898] 8021q: VLANs not supported on ip_vti0 [ 1053.478766][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3041'. [ 1053.733743][T16915] FAULT_INJECTION: forcing a failure. [ 1053.733743][T16915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.747538][T16915] CPU: 0 UID: 0 PID: 16915 Comm: syz.3.3043 Not tainted syzkaller #0 PREEMPT(full) [ 1053.747566][T16915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1053.747578][T16915] Call Trace: [ 1053.747586][T16915] [ 1053.747593][T16915] dump_stack_lvl+0x16c/0x1f0 [ 1053.747627][T16915] should_fail_ex+0x512/0x640 [ 1053.747658][T16915] _copy_to_user+0x32/0xd0 [ 1053.747691][T16915] simple_read_from_buffer+0xcb/0x170 [ 1053.747715][T16915] proc_fail_nth_read+0x197/0x240 [ 1053.747741][T16915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1053.747768][T16915] ? rw_verify_area+0xcf/0x6c0 [ 1053.747805][T16915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1053.747829][T16915] vfs_read+0x1e1/0xcf0 [ 1053.747854][T16915] ? __pfx___mutex_lock+0x10/0x10 [ 1053.747881][T16915] ? __pfx_vfs_read+0x10/0x10 [ 1053.747910][T16915] ? __fget_files+0x20e/0x3c0 [ 1053.747942][T16915] ksys_read+0x12a/0x250 [ 1053.747960][T16915] ? __pfx_ksys_read+0x10/0x10 [ 1053.747982][T16915] ? fput+0x9b/0xd0 [ 1053.748013][T16915] do_syscall_64+0xcd/0x4c0 [ 1053.748042][T16915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.748063][T16915] RIP: 0033:0x7f685cb8d5fc [ 1053.748080][T16915] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1053.748100][T16915] RSP: 002b:00007f685d930030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1053.748119][T16915] RAX: ffffffffffffffda RBX: 00007f685cdc6180 RCX: 00007f685cb8d5fc [ 1053.748133][T16915] RDX: 000000000000000f RSI: 00007f685d9300a0 RDI: 0000000000000009 [ 1053.748146][T16915] RBP: 00007f685d930090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.748159][T16915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.748174][T16915] R13: 00007f685cdc6218 R14: 00007f685cdc6180 R15: 00007ffea3b271c8 [ 1053.748203][T16915] [ 1053.931180][ C0] vkms_vblank_simulate: vblank timer overrun [ 1054.417349][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.458798][T16694] hsr_slave_0: entered promiscuous mode [ 1054.508334][T16694] hsr_slave_1: entered promiscuous mode [ 1054.514608][T16694] debugfs: 'hsr0' already exists in 'hsr' [ 1054.520596][T16694] Cannot create hsr debugfs directory [ 1054.593257][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3041'. [ 1054.626979][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3041'. [ 1054.650690][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3041'. [ 1055.576246][T16941] lo speed is unknown, defaulting to 1000 [ 1055.955692][ T9705] IPVS: stop unused estimator thread 0... [ 1056.167501][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1056.407500][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1056.488235][ T9] usb 1-1: config 0 has an invalid interface number: 207 but max is 0 [ 1056.575755][ T9] usb 1-1: config 0 has no interface number 0 [ 1056.607064][ T9] usb 1-1: config 0 interface 207 has no altsetting 0 [ 1056.642523][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=ee.45 [ 1056.686847][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.856360][ T9] usb 1-1: Product: syz [ 1056.880148][ T9] usb 1-1: Manufacturer: syz [ 1056.955166][ T9] usb 1-1: SerialNumber: syz [ 1056.980482][ T9] usb 1-1: config 0 descriptor?? [ 1057.024030][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 1057.694287][ T9] gspca_zc3xx: reg_w_i err -110 [ 1057.713396][ T9] gspca_zc3xx 1-1:0.207: probe with driver gspca_zc3xx failed with error -110 [ 1058.145030][T16694] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1058.157755][ T44] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1058.176837][T16694] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1058.210175][T16694] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1058.233562][T16694] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1058.472794][ T44] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1058.555392][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1058.617904][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1058.691214][ T44] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1058.769451][ T44] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1058.823321][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.863092][ T44] usb 6-1: config 0 descriptor?? [ 1058.881675][T16973] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1058.996312][T16694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.029155][T16694] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.052551][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.059752][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.089741][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.096955][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.517461][ T44] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd [ 1059.532374][ T5911] usb 1-1: USB disconnect, device number 52 [ 1059.578431][ T44] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1059.610960][T16694] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1059.678637][T16694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1059.805503][T17005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3056'. [ 1060.357231][T17018] FAULT_INJECTION: forcing a failure. [ 1060.357231][T17018] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.421887][T17005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.443899][T17005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.451061][T17005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.467858][T17018] CPU: 1 UID: 0 PID: 17018 Comm: syz.0.3063 Not tainted syzkaller #0 PREEMPT(full) [ 1060.467887][T17018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1060.467898][T17018] Call Trace: [ 1060.467906][T17018] [ 1060.467914][T17018] dump_stack_lvl+0x16c/0x1f0 [ 1060.467944][T17018] should_fail_ex+0x512/0x640 [ 1060.467969][T17018] ? fs_reclaim_acquire+0xae/0x150 [ 1060.467999][T17018] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1060.468029][T17018] should_failslab+0xc2/0x120 [ 1060.468053][T17018] __kmalloc_noprof+0xd2/0x510 [ 1060.468081][T17018] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1060.468113][T17018] ? tomoyo_profile+0x47/0x60 [ 1060.468136][T17018] tomoyo_path_number_perm+0x245/0x580 [ 1060.468161][T17018] ? tomoyo_path_number_perm+0x237/0x580 [ 1060.468188][T17018] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1060.468215][T17018] ? find_held_lock+0x2b/0x80 [ 1060.468267][T17018] ? find_held_lock+0x2b/0x80 [ 1060.468290][T17018] ? hook_file_ioctl_common+0x145/0x410 [ 1060.468319][T17018] ? __fget_files+0x20e/0x3c0 [ 1060.468347][T17018] security_file_ioctl+0x9b/0x240 [ 1060.468385][T17018] __x64_sys_ioctl+0xb7/0x210 [ 1060.468418][T17018] do_syscall_64+0xcd/0x4c0 [ 1060.468447][T17018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.468468][T17018] RIP: 0033:0x7fbfb018ebe9 [ 1060.468484][T17018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1060.468504][T17018] RSP: 002b:00007fbfb10b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1060.468523][T17018] RAX: ffffffffffffffda RBX: 00007fbfb03c5fa0 RCX: 00007fbfb018ebe9 [ 1060.468537][T17018] RDX: 0000200000000240 RSI: 0000000000000720 RDI: 0000000000000003 [ 1060.468549][T17018] RBP: 00007fbfb10b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.468562][T17018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.468575][T17018] R13: 00007fbfb03c6038 R14: 00007fbfb03c5fa0 R15: 00007ffdd3625d48 [ 1060.468605][T17018] [ 1060.468614][T17018] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1061.463176][ T44] usb 6-1: USB disconnect, device number 9 [ 1062.662856][T16694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.147857][T17045] FAULT_INJECTION: forcing a failure. [ 1063.147857][T17045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1063.183523][T16694] veth0_vlan: entered promiscuous mode [ 1063.190059][T17045] CPU: 1 UID: 0 PID: 17045 Comm: syz.1.3070 Not tainted syzkaller #0 PREEMPT(full) [ 1063.190088][T17045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1063.190101][T17045] Call Trace: [ 1063.190119][T17045] [ 1063.190127][T17045] dump_stack_lvl+0x16c/0x1f0 [ 1063.190159][T17045] should_fail_ex+0x512/0x640 [ 1063.190190][T17045] _copy_from_user+0x2e/0xd0 [ 1063.190217][T17045] input_event_from_user+0x133/0x3b0 [ 1063.190239][T17045] ? __pfx_input_event_from_user+0x10/0x10 [ 1063.190258][T17045] ? __lock_acquire+0x62e/0x1ce0 [ 1063.190295][T17045] evdev_write+0x37b/0x750 [ 1063.190320][T17045] ? __pfx_evdev_write+0x10/0x10 [ 1063.190343][T17045] ? bpf_lsm_file_permission+0x9/0x10 [ 1063.190368][T17045] ? security_file_permission+0x71/0x210 [ 1063.190401][T17045] ? rw_verify_area+0xcf/0x6c0 [ 1063.190432][T17045] ? __pfx_evdev_write+0x10/0x10 [ 1063.190450][T17045] vfs_writev+0x5df/0xde0 [ 1063.190478][T17045] ? __pfx_vfs_writev+0x10/0x10 [ 1063.190521][T17045] ? __fget_files+0x20e/0x3c0 [ 1063.190543][T17045] ? __fget_files+0x140/0x3c0 [ 1063.190573][T17045] ? do_writev+0x28c/0x340 [ 1063.190589][T17045] do_writev+0x28c/0x340 [ 1063.190608][T17045] ? __pfx_do_writev+0x10/0x10 [ 1063.190634][T17045] do_syscall_64+0xcd/0x4c0 [ 1063.190661][T17045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.190683][T17045] RIP: 0033:0x7fc3d878ebe9 [ 1063.190700][T17045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1063.190720][T17045] RSP: 002b:00007fc3d955f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1063.190740][T17045] RAX: ffffffffffffffda RBX: 00007fc3d89c5fa0 RCX: 00007fc3d878ebe9 [ 1063.190755][T17045] RDX: 0000000000000001 RSI: 0000200000000b00 RDI: 0000000000000003 [ 1063.190768][T17045] RBP: 00007fc3d955f090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.190781][T17045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.190794][T17045] R13: 00007fc3d89c6038 R14: 00007fc3d89c5fa0 R15: 00007fffa46bbe28 [ 1063.190824][T17045] [ 1063.210985][T17044] netlink: 'syz.0.3068': attribute type 5 has an invalid length. [ 1063.565170][T16694] veth1_vlan: entered promiscuous mode [ 1063.811498][T16694] veth0_macvtap: entered promiscuous mode [ 1063.851833][T16694] veth1_macvtap: entered promiscuous mode [ 1063.949823][T16694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.026062][T16694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.120507][ T7110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.298839][ T7110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.355718][ T7110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.416424][ T7110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.815970][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.854071][ T8776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.914483][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.027454][ T8776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.044799][T17106] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3080'. [ 1066.127742][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1066.127760][ T30] audit: type=1400 audit(1757417749.477:1590): avc: denied { getopt } for pid=17099 comm="syz.5.3080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1066.154579][ C0] vkms_vblank_simulate: vblank timer overrun [ 1068.346270][T14432] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1068.357569][T14432] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1068.371491][T14432] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1068.381101][T14432] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1068.388660][T14432] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1068.420451][T10028] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1068.470551][ T30] audit: type=1400 audit(1757417751.867:1591): avc: denied { setopt } for pid=17126 comm="syz.5.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1068.493698][T10028] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1068.597461][ T30] audit: type=1400 audit(1757417751.877:1592): avc: denied { getopt } for pid=17126 comm="syz.5.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1068.798380][T17129] syzkaller0: entered promiscuous mode [ 1068.804074][T17129] syzkaller0: entered allmulticast mode [ 1069.232289][T17151] FAULT_INJECTION: forcing a failure. [ 1069.232289][T17151] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.245017][T17151] CPU: 0 UID: 0 PID: 17151 Comm: syz.3.3090 Not tainted syzkaller #0 PREEMPT(full) [ 1069.245047][T17151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1069.245059][T17151] Call Trace: [ 1069.245066][T17151] [ 1069.245075][T17151] dump_stack_lvl+0x16c/0x1f0 [ 1069.245107][T17151] should_fail_ex+0x512/0x640 [ 1069.245133][T17151] ? fs_reclaim_acquire+0xae/0x150 [ 1069.245164][T17151] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1069.245195][T17151] should_failslab+0xc2/0x120 [ 1069.245220][T17151] __kmalloc_noprof+0xd2/0x510 [ 1069.245256][T17151] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1069.245302][T17151] ? tomoyo_profile+0x47/0x60 [ 1069.245333][T17151] tomoyo_path_number_perm+0x245/0x580 [ 1069.245363][T17151] ? tomoyo_path_number_perm+0x237/0x580 [ 1069.245405][T17151] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1069.245447][T17151] ? find_held_lock+0x2b/0x80 [ 1069.245509][T17151] ? find_held_lock+0x2b/0x80 [ 1069.245538][T17151] ? hook_file_ioctl_common+0x145/0x410 [ 1069.245567][T17151] ? __fget_files+0x20e/0x3c0 [ 1069.245595][T17151] security_file_ioctl+0x9b/0x240 [ 1069.245627][T17151] __x64_sys_ioctl+0xb7/0x210 [ 1069.245665][T17151] do_syscall_64+0xcd/0x4c0 [ 1069.245698][T17151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.245720][T17151] RIP: 0033:0x7f685cb8ebe9 [ 1069.245738][T17151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1069.245758][T17151] RSP: 002b:00007f685d930038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1069.245779][T17151] RAX: ffffffffffffffda RBX: 00007f685cdc6180 RCX: 00007f685cb8ebe9 [ 1069.245793][T17151] RDX: 0000200000000040 RSI: 000000008050640a RDI: 0000000000000003 [ 1069.245807][T17151] RBP: 00007f685d930090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.245820][T17151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1069.245832][T17151] R13: 00007f685cdc6218 R14: 00007f685cdc6180 R15: 00007ffea3b271c8 [ 1069.245861][T17151] [ 1069.245894][T17151] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1069.914920][T10028] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1069.926843][ T5977] IPVS: starting estimator thread 0... [ 1069.935415][T10028] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1069.945449][ T1560] IPVS: starting estimator thread 0... [ 1070.017741][T17152] IPVS: using max 36 ests per chain, 86400 per kthread [ 1070.024878][T17130] lo speed is unknown, defaulting to 1000 [ 1070.057033][T17153] IPVS: using max 38 ests per chain, 91200 per kthread [ 1070.574135][T17176] program syz.2.3091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1070.820653][T14432] Bluetooth: hci2: command tx timeout [ 1072.882816][T14432] Bluetooth: hci2: command tx timeout [ 1073.345584][T17156] tipc: Enabling of bearer rejected, failed to enable media [ 1073.358891][T10028] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1073.377835][T10028] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1073.940542][T10028] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1073.959652][T10028] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1074.957608][T14432] Bluetooth: hci2: command tx timeout [ 1075.108545][T17202] bond1: entered promiscuous mode [ 1075.113758][T17202] bond1: entered allmulticast mode [ 1075.119695][T17202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1075.126459][T14432] block nbd2: Receive control failed (result -32) [ 1075.164564][T17199] lo speed is unknown, defaulting to 1000 [ 1075.221136][T17200] nbd2: detected capacity change from 0 to 63 [ 1075.254738][T17201] block nbd2: NBD_DISCONNECT [ 1075.284300][T17201] block nbd2: Send disconnect failed -32 [ 1075.329467][T17201] block nbd2: shutting down sockets [ 1075.767282][T10028] bridge0: port 3(macsec0) entered disabled state [ 1075.834751][T10028] bridge_slave_1: left allmulticast mode [ 1075.851509][T10028] bridge_slave_1: left promiscuous mode [ 1075.872432][T10028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.969618][T10028] : left allmulticast mode [ 1075.981251][T10028] : left promiscuous mode [ 1075.985988][T10028] bridge0: port 1() entered disabled state [ 1076.422118][T10028] bond0 (unregistering): (slave gretap1): Releasing active interface [ 1076.487540][ T1560] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1076.667463][ T1560] usb 4-1: Using ep0 maxpacket: 8 [ 1076.676118][ T1560] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1076.700360][ T1560] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.708750][ T1560] usb 4-1: Product: syz [ 1076.723918][ T1560] usb 4-1: Manufacturer: syz [ 1076.742319][ T1560] usb 4-1: SerialNumber: syz [ 1076.749864][ T1560] usb 4-1: config 0 descriptor?? [ 1076.783485][ T1560] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1076.907807][T10028]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1076.918769][T10028]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1076.929818][T10028]  (unregistering): (slave dummy0): Releasing backup interface [ 1076.942699][T10028]  (unregistering): Released all slaves [ 1077.039256][T14432] Bluetooth: hci2: command tx timeout [ 1077.150573][T10028] bond1 (unregistering): Released all slaves [ 1077.365678][T10028] bond2 (unregistering): Released all slaves [ 1077.580185][T10028] bond3 (unregistering): Released all slaves [ 1077.603055][T10028] bond0 (unregistering): Released all slaves [ 1077.815880][ T1560] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 1077.831929][ T1560] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 1077.851248][ T1560] usb 4-1: USB disconnect, device number 42 [ 1077.914022][T10028] bond4 (unregistering): Released all slaves [ 1078.118705][T10028] bond5 (unregistering): Released all slaves [ 1078.151227][T17224] netlink: 'syz.1.3102': attribute type 5 has an invalid length. [ 1078.256851][T17226] lo speed is unknown, defaulting to 1000 [ 1078.433885][T10028] tipc: Left network mode [ 1079.543951][T17130] chnl_net:caif_netlink_parms(): no params data found [ 1079.875305][T17267] FAULT_INJECTION: forcing a failure. [ 1079.875305][T17267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1079.903792][T17267] CPU: 0 UID: 0 PID: 17267 Comm: syz.3.3110 Not tainted syzkaller #0 PREEMPT(full) [ 1079.903819][T17267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1079.903830][T17267] Call Trace: [ 1079.903837][T17267] [ 1079.903846][T17267] dump_stack_lvl+0x16c/0x1f0 [ 1079.903874][T17267] should_fail_ex+0x512/0x640 [ 1079.903900][T17267] _copy_from_user+0x2e/0xd0 [ 1079.903926][T17267] copy_msghdr_from_user+0x98/0x160 [ 1079.903949][T17267] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1079.903982][T17267] ___sys_sendmsg+0xfe/0x1d0 [ 1079.904004][T17267] ? __pfx____sys_sendmsg+0x10/0x10 [ 1079.904056][T17267] __sys_sendmsg+0x16d/0x220 [ 1079.904078][T17267] ? __pfx___sys_sendmsg+0x10/0x10 [ 1079.904115][T17267] do_syscall_64+0xcd/0x4c0 [ 1079.904139][T17267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.904157][T17267] RIP: 0033:0x7f685cb8ebe9 [ 1079.904172][T17267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1079.904196][T17267] RSP: 002b:00007f685d972038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1079.904213][T17267] RAX: ffffffffffffffda RBX: 00007f685cdc5fa0 RCX: 00007f685cb8ebe9 [ 1079.904225][T17267] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1079.904236][T17267] RBP: 00007f685d972090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.904246][T17267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1079.904256][T17267] R13: 00007f685cdc6038 R14: 00007f685cdc5fa0 R15: 00007ffea3b271c8 [ 1079.904281][T17267] [ 1080.377490][ T1560] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1080.495816][T17130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.506342][T17130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.556847][T17130] bridge_slave_0: entered allmulticast mode [ 1080.577962][T11850] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1080.579385][ T1560] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 1080.601029][ T1560] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1080.615144][T17130] bridge_slave_0: entered promiscuous mode [ 1080.646918][T17130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.654250][ T1560] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1080.670361][T17130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.680727][ T1560] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1080.697684][T17130] bridge_slave_1: entered allmulticast mode [ 1080.713261][ T1560] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1080.725141][T17130] bridge_slave_1: entered promiscuous mode [ 1080.744375][ T1560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.761189][T11850] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1080.763546][ T1560] usb 4-1: config 0 descriptor?? [ 1080.772790][T11850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1080.785176][T17274] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1080.786310][T11850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1080.804720][T11850] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1080.818514][T11850] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1080.829023][T11850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.847562][T17290] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1080.858713][T17290] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1080.871541][T17130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1080.895127][ T30] audit: type=1400 audit(1757417764.307:1593): avc: denied { connect } for pid=17288 comm="syz.2.3114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1080.915991][T10028] hsr_slave_0: left promiscuous mode [ 1080.924805][T10028] hsr_slave_1: left promiscuous mode [ 1080.933839][T11850] usb 2-1: config 0 descriptor?? [ 1080.946679][T17283] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1080.966635][T10028] veth1_macvtap: left allmulticast mode [ 1080.972538][T10028] veth1_macvtap: left promiscuous mode [ 1080.978437][T10028] veth1_vlan: left promiscuous mode [ 1081.223703][ T1560] plantronics 0003:047F:FFFF.0015: reserved main item tag 0xd [ 1081.247550][ T1560] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1081.397258][T11850] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xd [ 1081.415887][T11850] plantronics 0003:047F:FFFF.0016: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1081.572162][T17295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3111'. [ 1081.700905][T17283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3113'. [ 1082.231212][T17130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.353168][T17297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.356482][T17302] FAULT_INJECTION: forcing a failure. [ 1082.356482][T17302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.370178][T17297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.381493][T17297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1082.396099][T17302] CPU: 0 UID: 0 PID: 17302 Comm: syz.2.3115 Not tainted syzkaller #0 PREEMPT(full) [ 1082.396126][T17302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1082.396140][T17302] Call Trace: [ 1082.396147][T17302] [ 1082.396155][T17302] dump_stack_lvl+0x16c/0x1f0 [ 1082.396187][T17302] should_fail_ex+0x512/0x640 [ 1082.396219][T17302] _copy_from_user+0x2e/0xd0 [ 1082.396251][T17302] copy_msghdr_from_user+0x98/0x160 [ 1082.396278][T17302] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1082.396318][T17302] ___sys_sendmsg+0xfe/0x1d0 [ 1082.396345][T17302] ? __pfx____sys_sendmsg+0x10/0x10 [ 1082.396407][T17302] __sys_sendmsg+0x16d/0x220 [ 1082.396433][T17302] ? __pfx___sys_sendmsg+0x10/0x10 [ 1082.396478][T17302] do_syscall_64+0xcd/0x4c0 [ 1082.396507][T17302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.396529][T17302] RIP: 0033:0x7f28cdf8ebe9 [ 1082.396546][T17302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1082.396566][T17302] RSP: 002b:00007f28ced36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1082.396586][T17302] RAX: ffffffffffffffda RBX: 00007f28ce1c5fa0 RCX: 00007f28cdf8ebe9 [ 1082.396601][T17302] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 1082.396613][T17302] RBP: 00007f28ced36090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.396627][T17302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.396639][T17302] R13: 00007f28ce1c6038 R14: 00007f28ce1c5fa0 R15: 00007ffdc2c0b3a8 [ 1082.396668][T17302] [ 1082.418806][T17299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.463626][ T5977] usb 4-1: USB disconnect, device number 43 [ 1082.524526][T17299] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.574119][T17299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1082.635097][ T6003] usb 2-1: USB disconnect, device number 45 [ 1082.649079][T17130] team0: Port device team_slave_0 added [ 1082.716819][T17130] team0: Port device team_slave_1 added [ 1082.737888][T17304] netlink: 'syz.2.3116': attribute type 5 has an invalid length. [ 1083.139788][T17311] nbd2: detected capacity change from 0 to 63 [ 1083.154964][T17312] block nbd2: NBD_DISCONNECT [ 1083.160162][T17312] block nbd2: Disconnected due to user request. [ 1083.166427][T17312] block nbd2: shutting down sockets [ 1083.306776][ T94] blk_print_req_error: 136 callbacks suppressed [ 1083.306829][ T94] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1083.337497][ T94] buffer_io_error: 138 callbacks suppressed [ 1083.337516][ T94] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1083.361186][ T94] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1083.373777][ T94] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1083.382096][ T94] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1083.396240][T17216] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1083.481978][T17130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.494557][T17216] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1083.630136][T17130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.696320][T17216] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1083.825326][T17216] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1083.937597][T17130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.939216][T17216] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1083.999533][T17216] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1084.008799][T17216] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1084.018038][T17216] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1084.030467][T17216] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1084.050650][T17311] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1084.050840][T17216] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1084.078778][T17216] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1084.093219][T17310] lo speed is unknown, defaulting to 1000 [ 1084.108786][T17130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.115787][T17130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1084.118494][T17216] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1084.158156][T17216] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1084.186410][T17216] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1084.241950][T17216] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1084.289680][T17216] ldm_validate_partition_table(): Disk read failed. [ 1084.339428][T17216] Dev nbd2: unable to read RDB block 0 [ 1084.344309][T17130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.366456][T10028] IPVS: stop unused estimator thread 0... [ 1084.389222][T17216] nbd2: unable to read partition table [ 1084.405422][T17216] ldm_validate_partition_table(): Disk read failed. [ 1084.416455][T17216] Dev nbd2: unable to read RDB block 0 [ 1084.424876][T17216] nbd2: unable to read partition table [ 1085.303015][T17130] hsr_slave_0: entered promiscuous mode [ 1085.334733][T17341] block nbd1: Attempted send on invalid socket [ 1086.387182][T17130] hsr_slave_1: entered promiscuous mode [ 1086.393338][T17130] debugfs: 'hsr0' already exists in 'hsr' [ 1086.399290][T17130] Cannot create hsr debugfs directory [ 1086.439032][T17341] block nbd1: Attempted send on invalid socket [ 1086.445415][T17341] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1086.470644][ T9239] block nbd1: Attempted send on invalid socket [ 1086.478996][T17341] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1086.511292][T17341] block nbd1: Attempted send on invalid socket [ 1086.566767][T17341] block nbd1: Attempted send on invalid socket [ 1086.651250][T17341] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1086.712619][T17341] block nbd1: Attempted send on invalid socket [ 1086.719936][T17341] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1086.736214][T17341] block nbd1: Attempted send on invalid socket [ 1086.744598][T17341] block nbd1: Attempted send on invalid socket [ 1086.751756][T17341] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 1086.770687][T17341] block nbd1: Attempted send on invalid socket [ 1086.980161][T17341] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 1087.104306][T17341] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 1087.326599][T17356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3126'. [ 1088.249519][T17358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3126'. [ 1088.260099][T17358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3126'. [ 1088.271755][T17358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3126'. [ 1088.683570][ T30] audit: type=1400 audit(1757417772.097:1594): avc: denied { ioctl } for pid=17366 comm="syz.5.3129" path="socket:[57622]" dev="sockfs" ino=57622 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1088.710545][T11886] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1088.747653][ T30] audit: type=1400 audit(1757417772.127:1595): avc: denied { setopt } for pid=17366 comm="syz.5.3129" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1088.889334][T11886] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 1088.904314][T11886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1088.969702][T11886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1089.022565][T17379] FAULT_INJECTION: forcing a failure. [ 1089.022565][T17379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1089.035750][T17379] CPU: 1 UID: 0 PID: 17379 Comm: syz.1.3130 Not tainted syzkaller #0 PREEMPT(full) [ 1089.035779][T17379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1089.035792][T17379] Call Trace: [ 1089.035801][T17379] [ 1089.035810][T17379] dump_stack_lvl+0x16c/0x1f0 [ 1089.035843][T17379] should_fail_ex+0x512/0x640 [ 1089.035875][T17379] _copy_from_user+0x2e/0xd0 [ 1089.035906][T17379] copy_msghdr_from_user+0x98/0x160 [ 1089.035934][T17379] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1089.035965][T17379] ? __pfx_bpf_trace_run4+0x10/0x10 [ 1089.035996][T17379] ___sys_sendmsg+0xfe/0x1d0 [ 1089.036023][T17379] ? __pfx____sys_sendmsg+0x10/0x10 [ 1089.036064][T17379] ? find_held_lock+0x2b/0x80 [ 1089.036110][T17379] __sys_sendmmsg+0x200/0x420 [ 1089.036140][T17379] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1089.036173][T17379] ? lockdep_hardirqs_on+0x7c/0x110 [ 1089.036233][T17379] __x64_sys_sendmmsg+0x9c/0x100 [ 1089.036260][T17379] do_syscall_64+0xcd/0x4c0 [ 1089.036295][T17379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.036317][T17379] RIP: 0033:0x7fc3d878ebe9 [ 1089.036334][T17379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1089.036354][T17379] RSP: 002b:00007fc3d69f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1089.036375][T17379] RAX: ffffffffffffffda RBX: 00007fc3d89c6180 RCX: 00007fc3d878ebe9 [ 1089.036389][T17379] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000009 [ 1089.036402][T17379] RBP: 00007fc3d69f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1089.036415][T17379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1089.036428][T17379] R13: 00007fc3d89c6218 R14: 00007fc3d89c6180 R15: 00007fffa46bbe28 [ 1089.036457][T17379] [ 1089.305922][T17130] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1089.315334][T11886] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1089.330414][T11886] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1089.358001][T17130] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1089.365398][T11886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.376897][T17130] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1089.388182][T11886] usb 4-1: config 0 descriptor?? [ 1089.394760][T17363] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1089.410232][T17130] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1089.756727][T17130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.785946][T17130] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.795129][T17397] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3132'. [ 1090.254966][T11886] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xd [ 1090.302784][ T8776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.309975][ T8776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.323631][T11886] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1090.362318][ T7110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.369514][ T7110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.466608][T17130] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1090.497875][T17130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1090.570586][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3128'. [ 1091.254487][T17407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.291098][T17407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.298361][T17407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.344085][T15324] usb 4-1: USB disconnect, device number 44 [ 1091.473248][ T30] audit: type=1326 audit(1757417774.837:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17412 comm="syz.2.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cdf8ebe9 code=0x7ffc0000 [ 1091.531791][ T30] audit: type=1326 audit(1757417774.837:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17412 comm="syz.2.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f28cdf8ebe9 code=0x7ffc0000 [ 1091.557083][ T30] audit: type=1326 audit(1757417774.837:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17412 comm="syz.2.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cdf8ebe9 code=0x7ffc0000 [ 1091.592978][ T30] audit: type=1326 audit(1757417774.837:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17412 comm="syz.2.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f28cdf8ebe9 code=0x7ffc0000 [ 1092.150963][ T30] audit: type=1326 audit(1757417774.837:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17412 comm="syz.2.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cdf8ebe9 code=0x7ffc0000 [ 1092.251309][ T30] audit: type=1326 audit(1757417774.837:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17412 comm="syz.2.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f28cdf8ebe9 code=0x7ffc0000 [ 1092.300349][ T30] audit: type=1326 audit(1757417774.927:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17412 comm="syz.2.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cdf8ebe9 code=0x7ffc0000 [ 1092.392560][ T30] audit: type=1326 audit(1757417774.927:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17412 comm="syz.2.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cdf8ebe9 code=0x7ffc0000 [ 1092.445425][T17130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1092.679696][T17417] loop6: detected capacity change from 0 to 63 [ 1092.754709][T17216] buffer_io_error: 138 callbacks suppressed [ 1092.754721][T17216] Buffer I/O error on dev loop6, logical block 0, async page read [ 1092.774000][T17130] veth0_vlan: entered promiscuous mode [ 1092.786311][T17130] veth1_vlan: entered promiscuous mode [ 1092.814855][T17130] veth0_macvtap: entered promiscuous mode [ 1092.823333][T17130] veth1_macvtap: entered promiscuous mode [ 1092.836744][T17130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1093.142692][T17130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1093.162023][T17216] Buffer I/O error on dev loop6, logical block 0, async page read [ 1093.170753][T17216] Buffer I/O error on dev loop6, logical block 0, async page read [ 1093.184336][T17216] Buffer I/O error on dev loop6, logical block 0, async page read [ 1093.193106][T17216] Buffer I/O error on dev loop6, logical block 0, async page read [ 1093.469821][T10028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.534399][T17437] nbd3: detected capacity change from 0 to 63 [ 1093.542079][T17438] block nbd3: NBD_DISCONNECT [ 1093.548272][T17438] block nbd3: Disconnected due to user request. [ 1093.555505][T17438] block nbd3: shutting down sockets [ 1093.846832][T10028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.859123][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1093.859149][ T30] audit: type=1326 audit(1757417777.277:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17441 comm="syz.5.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f4b8ebe9 code=0x7ffc0000 [ 1093.902645][ T30] audit: type=1326 audit(1757417777.277:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17441 comm="syz.5.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f4b8ebe9 code=0x7ffc0000 [ 1093.927891][ T30] audit: type=1326 audit(1757417777.277:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17441 comm="syz.5.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f52f4b8ebe9 code=0x7ffc0000 [ 1093.960299][ T30] audit: type=1326 audit(1757417777.277:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17441 comm="syz.5.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f4b8ebe9 code=0x7ffc0000 [ 1093.984898][T17440] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1093.992509][T17436] lo speed is unknown, defaulting to 1000 [ 1093.998464][T10028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.081117][ T30] audit: type=1326 audit(1757417777.317:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17441 comm="syz.5.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f52f4b8ebe9 code=0x7ffc0000 [ 1094.148120][T10028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.285117][ T30] audit: type=1326 audit(1757417777.317:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17441 comm="syz.5.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f4b8ebe9 code=0x7ffc0000 [ 1094.476611][ T30] audit: type=1326 audit(1757417777.317:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17441 comm="syz.5.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f4b8ebe9 code=0x7ffc0000 [ 1094.564642][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.587774][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.693057][ T4520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.708693][ T4520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.877136][T17463] FAULT_INJECTION: forcing a failure. [ 1094.877136][T17463] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.949101][T17463] CPU: 0 UID: 0 PID: 17463 Comm: syz.5.3141 Not tainted syzkaller #0 PREEMPT(full) [ 1094.949131][T17463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1094.949145][T17463] Call Trace: [ 1094.949152][T17463] [ 1094.949160][T17463] dump_stack_lvl+0x16c/0x1f0 [ 1094.949179][T17463] should_fail_ex+0x512/0x640 [ 1094.949194][T17463] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1094.949209][T17463] should_failslab+0xc2/0x120 [ 1094.949222][T17463] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1094.949234][T17463] ? __alloc_skb+0x2b2/0x380 [ 1094.949249][T17463] __alloc_skb+0x2b2/0x380 [ 1094.949261][T17463] ? __pfx___alloc_skb+0x10/0x10 [ 1094.949276][T17463] ? find_held_lock+0x2b/0x80 [ 1094.949292][T17463] tcp_stream_alloc_skb+0x34/0x570 [ 1094.949312][T17463] tcp_sendmsg_locked+0x12d0/0x42a0 [ 1094.949327][T17463] ? __lock_acquire+0xb97/0x1ce0 [ 1094.949348][T17463] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1094.949360][T17463] ? do_raw_spin_lock+0x12c/0x2b0 [ 1094.949373][T17463] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1094.949389][T17463] ? __local_bh_enable_ip+0xa4/0x120 [ 1094.949407][T17463] tcp_sendmsg+0x2e/0x50 [ 1094.949416][T17463] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1094.949426][T17463] inet_sendmsg+0xb9/0x140 [ 1094.949439][T17463] __sys_sendto+0x43c/0x520 [ 1094.949453][T17463] ? __pfx___sys_sendto+0x10/0x10 [ 1094.949478][T17463] ? ksys_write+0x1ac/0x250 [ 1094.949489][T17463] ? __pfx_ksys_write+0x10/0x10 [ 1094.949503][T17463] __x64_sys_sendto+0xe0/0x1c0 [ 1094.949514][T17463] ? do_syscall_64+0x91/0x4c0 [ 1094.949529][T17463] ? lockdep_hardirqs_on+0x7c/0x110 [ 1094.949542][T17463] do_syscall_64+0xcd/0x4c0 [ 1094.949557][T17463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.949569][T17463] RIP: 0033:0x7f52f4b8ebe9 [ 1094.949579][T17463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1094.949590][T17463] RSP: 002b:00007f52f5ae6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1094.949601][T17463] RAX: ffffffffffffffda RBX: 00007f52f4dc5fa0 RCX: 00007f52f4b8ebe9 [ 1094.949609][T17463] RDX: 0000000000001d4c RSI: 0000200000000580 RDI: 0000000000000003 [ 1094.949620][T17463] RBP: 00007f52f5ae6090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.949627][T17463] R10: 0000000010048095 R11: 0000000000000246 R12: 0000000000000001 [ 1094.949634][T17463] R13: 00007f52f4dc6038 R14: 00007f52f4dc5fa0 R15: 00007ffd15321328 [ 1094.949649][T17463] [ 1095.412280][T17466] lo speed is unknown, defaulting to 1000 [ 1096.009408][T17469] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1096.243717][T17478] tmpfs: Bad value for 'nr_blocks' [ 1096.265562][T14432] block nbd0: Receive control failed (result -32) [ 1096.457949][T17467] nbd0: detected capacity change from 0 to 63 [ 1096.470280][T17468] block nbd0: NBD_DISCONNECT [ 1096.531952][T17216] block nbd0: Dead connection, failed to find a fallback [ 1096.618915][T17468] block nbd0: Send disconnect failed -32 [ 1096.740526][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1096.781214][T17216] block nbd0: shutting down sockets [ 1096.822144][T17216] blk_print_req_error: 144 callbacks suppressed [ 1096.822162][T17216] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1097.306940][T17216] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1097.407796][T16435] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1097.418595][T16435] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1097.426423][T16435] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1097.434477][T16435] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1097.444603][T17216] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1097.455661][T17216] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1097.476069][T17216] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1097.491647][T17216] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1097.511928][T17216] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1097.537639][T17216] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1097.563770][ T24] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 1097.583277][T17216] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1097.687485][ T24] usb 3-1: config 0 has no interface number 0 [ 1097.693689][ T24] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1097.705963][T17216] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1097.744971][T17216] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1097.777433][ T24] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 1097.834452][T17216] buffer_io_error: 6 callbacks suppressed [ 1097.834470][T17216] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1097.879393][ T24] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 1098.021199][ T24] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1098.031346][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.031476][T17216] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1098.505523][T17216] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1098.515809][T17216] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1098.562013][ T24] usb 3-1: config 0 descriptor?? [ 1098.577692][T17216] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1098.592917][T17216] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1098.602556][T17216] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1098.610529][T17216] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1098.627581][T17216] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1098.666832][T17216] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1098.787450][T17216] ldm_validate_partition_table(): Disk read failed. [ 1098.813172][ T24] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input32 [ 1098.814070][T17216] Dev nbd0: unable to read RDB block 0 [ 1098.864291][T17216] nbd0: unable to read partition table [ 1099.584823][T17505] netlink: 'syz.5.3149': attribute type 5 has an invalid length. [ 1099.607293][T17216] ldm_validate_partition_table(): Disk read failed. [ 1099.752299][T17216] Dev nbd0: unable to read RDB block 0 [ 1099.841353][T17216] nbd0: unable to read partition table [ 1099.994146][ T5859] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1100.016300][ T5859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1100.027591][ T5859] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1100.037977][ T5859] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1100.049937][ T5859] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1100.315858][ T5911] usb 3-1: USB disconnect, device number 45 [ 1100.475098][T17526] FAULT_INJECTION: forcing a failure. [ 1100.475098][T17526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1100.559617][ T9705] Bluetooth: hci0: Frame reassembly failed (-84) [ 1100.592685][T17526] CPU: 1 UID: 0 PID: 17526 Comm: syz.2.3151 Not tainted syzkaller #0 PREEMPT(full) [ 1100.592712][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1100.592722][T17526] Call Trace: [ 1100.592728][T17526] [ 1100.592735][T17526] dump_stack_lvl+0x16c/0x1f0 [ 1100.592762][T17526] should_fail_ex+0x512/0x640 [ 1100.592792][T17526] _copy_from_user+0x2e/0xd0 [ 1100.592821][T17526] core_sys_select+0x2c8/0xc10 [ 1100.592851][T17526] ? __pfx_core_sys_select+0x10/0x10 [ 1100.592897][T17526] ? set_user_sigmask+0x21b/0x2b0 [ 1100.592921][T17526] ? __pfx_set_user_sigmask+0x10/0x10 [ 1100.592950][T17526] do_pselect.constprop.0+0x19f/0x1e0 [ 1100.592972][T17526] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 1100.593004][T17526] __x64_sys_pselect6+0x182/0x240 [ 1100.593025][T17526] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 1100.593044][T17526] do_syscall_64+0xcd/0x4c0 [ 1100.593060][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.593079][T17526] RIP: 0033:0x7f28cdf8ebe9 [ 1100.593089][T17526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1100.593099][T17526] RSP: 002b:00007f28ced36038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1100.593110][T17526] RAX: ffffffffffffffda RBX: 00007f28ce1c5fa0 RCX: 00007f28cdf8ebe9 [ 1100.593118][T17526] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1100.593125][T17526] RBP: 00007f28ced36090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.593131][T17526] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1100.593138][T17526] R13: 00007f28ce1c6038 R14: 00007f28ce1c5fa0 R15: 00007ffdc2c0b3a8 [ 1100.593153][T17526] [ 1100.761278][ C1] vkms_vblank_simulate: vblank timer overrun [ 1101.000294][T17515] lo speed is unknown, defaulting to 1000 [ 1101.351002][T10028] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.423278][T17541] syz_tun: entered allmulticast mode [ 1101.433298][T17537] syz_tun: left allmulticast mode [ 1101.540735][T10028] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.651450][T10028] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.082685][T10028] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.169386][ T5859] Bluetooth: hci5: command tx timeout [ 1102.557624][ T5859] Bluetooth: hci0: command 0x1003 tx timeout [ 1102.565577][T14432] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1103.071997][T17560] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3156'. [ 1103.305544][T17566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3158'. [ 1104.237933][T14432] Bluetooth: hci5: command tx timeout [ 1104.354847][T17577] FAULT_INJECTION: forcing a failure. [ 1104.354847][T17577] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.470748][T17577] CPU: 0 UID: 0 PID: 17577 Comm: syz.5.3160 Not tainted syzkaller #0 PREEMPT(full) [ 1104.470775][T17577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1104.470785][T17577] Call Trace: [ 1104.470792][T17577] [ 1104.470799][T17577] dump_stack_lvl+0x16c/0x1f0 [ 1104.470828][T17577] should_fail_ex+0x512/0x640 [ 1104.470852][T17577] ? fs_reclaim_acquire+0xae/0x150 [ 1104.470877][T17577] ? tomoyo_encode2+0x100/0x3e0 [ 1104.470904][T17577] should_failslab+0xc2/0x120 [ 1104.470926][T17577] __kmalloc_noprof+0xd2/0x510 [ 1104.470954][T17577] tomoyo_encode2+0x100/0x3e0 [ 1104.470983][T17577] tomoyo_encode+0x29/0x50 [ 1104.471008][T17577] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1104.471039][T17577] ? tomoyo_profile+0x47/0x60 [ 1104.471062][T17577] tomoyo_path_number_perm+0x245/0x580 [ 1104.471086][T17577] ? tomoyo_path_number_perm+0x237/0x580 [ 1104.471124][T17577] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1104.471151][T17577] ? find_held_lock+0x2b/0x80 [ 1104.471200][T17577] ? find_held_lock+0x2b/0x80 [ 1104.471223][T17577] ? hook_file_ioctl_common+0x145/0x410 [ 1104.471250][T17577] ? __fget_files+0x20e/0x3c0 [ 1104.471278][T17577] security_file_ioctl+0x9b/0x240 [ 1104.471306][T17577] __x64_sys_ioctl+0xb7/0x210 [ 1104.471337][T17577] do_syscall_64+0xcd/0x4c0 [ 1104.471364][T17577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.471385][T17577] RIP: 0033:0x7f52f4b8ebe9 [ 1104.471402][T17577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1104.471419][T17577] RSP: 002b:00007f52f5ae6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1104.471436][T17577] RAX: ffffffffffffffda RBX: 00007f52f4dc5fa0 RCX: 00007f52f4b8ebe9 [ 1104.471449][T17577] RDX: 0000200000000480 RSI: 0000000000008918 RDI: 0000000000000003 [ 1104.471461][T17577] RBP: 00007f52f5ae6090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.471472][T17577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.471483][T17577] R13: 00007f52f4dc6038 R14: 00007f52f4dc5fa0 R15: 00007ffd15321328 [ 1104.471511][T17577] [ 1104.471529][T17577] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1104.730805][T10028] macvlan2: left promiscuous mode [ 1104.750002][T10028] bond0: left promiscuous mode [ 1104.766105][T10028] bridge0: port 3(macvlan2) entered disabled state [ 1104.817685][ T30] audit: type=1326 audit(1757417788.207:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17578 comm="syz.3.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685cb8ebe9 code=0x7ffc0000 [ 1104.873048][T10028] bridge_slave_1: left allmulticast mode [ 1104.897919][T10028] bridge_slave_1: left promiscuous mode [ 1104.920751][ T30] audit: type=1326 audit(1757417788.207:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17578 comm="syz.3.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685cb8ebe9 code=0x7ffc0000 [ 1104.945531][T10028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.983161][T10028] bridge_slave_0: left allmulticast mode [ 1105.006769][T10028] bridge_slave_0: left promiscuous mode [ 1105.020568][ T30] audit: type=1326 audit(1757417788.217:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17578 comm="syz.3.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f685cb8ebe9 code=0x7ffc0000 [ 1105.055704][T10028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.147426][ T30] audit: type=1326 audit(1757417788.217:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17578 comm="syz.3.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685cb8ebe9 code=0x7ffc0000 [ 1105.236348][T10028] bond_slave_0: left promiscuous mode [ 1105.268910][T10028] bond_slave_1: left promiscuous mode [ 1105.288833][ T30] audit: type=1326 audit(1757417788.227:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17578 comm="syz.3.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f685cb8ebe9 code=0x7ffc0000 [ 1105.393677][ T30] audit: type=1326 audit(1757417788.227:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17578 comm="syz.3.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685cb8ebe9 code=0x7ffc0000 [ 1105.437586][ T44] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1105.475233][ T30] audit: type=1326 audit(1757417788.227:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17578 comm="syz.3.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f685cb8ebe9 code=0x7ffc0000 [ 1105.508193][ T30] audit: type=1326 audit(1757417788.387:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17578 comm="syz.3.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685cb8ebe9 code=0x7ffc0000 [ 1105.536103][ T30] audit: type=1326 audit(1757417788.387:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17578 comm="syz.3.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685cb8ebe9 code=0x7ffc0000 [ 1105.567897][ T30] audit: type=1326 audit(1757417788.467:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17578 comm="syz.3.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f685cb8ebe9 code=0x7ffc0000 [ 1105.647696][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 1105.669980][ T44] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1105.720053][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.728518][ T44] usb 3-1: Product: syz [ 1105.732896][ T44] usb 3-1: Manufacturer: syz [ 1105.737600][ T44] usb 3-1: SerialNumber: syz [ 1105.746152][ T44] usb 3-1: config 0 descriptor?? [ 1105.755895][ T44] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1106.238045][T10028] bond0 (unregistering): left allmulticast mode [ 1106.244451][T10028] bond_slave_0: left allmulticast mode [ 1106.250263][T10028] bond_slave_1: left allmulticast mode [ 1106.273257][T10028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1106.285639][T10028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1106.297840][T10028] bond0 (unregistering): Released all slaves [ 1106.312262][T10028] bond1 (unregistering): Released all slaves [ 1106.318516][T14432] Bluetooth: hci5: command tx timeout [ 1106.492711][T10028] bond2 (unregistering): Released all slaves [ 1106.668373][T10028] bond3 (unregistering): Released all slaves [ 1106.739065][T17515] chnl_net:caif_netlink_parms(): no params data found [ 1106.780201][ T44] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 1106.787849][ T44] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 1106.809286][ T44] usb 3-1: USB disconnect, device number 46 [ 1106.970218][T10028] tipc: Left network mode [ 1108.130541][T17515] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.202727][T17515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.237420][T17515] bridge_slave_0: entered allmulticast mode [ 1108.254302][T17515] bridge_slave_0: entered promiscuous mode [ 1108.314263][T17515] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.344789][T17515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.360950][T17515] bridge_slave_1: entered allmulticast mode [ 1108.405338][T17515] bridge_slave_1: entered promiscuous mode [ 1108.415128][T14432] Bluetooth: hci5: command tx timeout [ 1109.714467][T17515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.821774][T17515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1110.938616][T10028] hsr_slave_0: left promiscuous mode [ 1110.973375][T10028] hsr_slave_1: left promiscuous mode [ 1111.005431][T10028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.051532][T10028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.098843][T10028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.106257][T10028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.137076][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1111.137088][ T30] audit: type=1400 audit(1757417794.547:1648): avc: denied { map } for pid=17672 comm="syz.3.3181" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1111.262721][ T30] audit: type=1400 audit(1757417794.547:1649): avc: denied { execute } for pid=17672 comm="syz.3.3181" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1111.286740][ C0] vkms_vblank_simulate: vblank timer overrun [ 1111.351020][T10028] veth1_vlan: left promiscuous mode [ 1111.477454][ T5911] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1111.544890][T17682] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1111.592436][ T30] audit: type=1400 audit(1757417794.727:1650): avc: denied { setattr } for pid=17672 comm="syz.3.3181" name="L2TP/IPv6" dev="sockfs" ino=59333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1111.661410][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1111.687320][ T5911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1111.698876][ T5911] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1111.712515][ T5911] usb 3-1: config 1 interface 0 has no altsetting 1 [ 1111.739272][ T5911] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1111.797799][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.805840][ T5911] usb 3-1: Product: syz [ 1111.863056][ T5911] usb 3-1: Manufacturer: syz [ 1111.903455][ T5911] usb 3-1: SerialNumber: syz [ 1111.955514][ T5911] smsusb:smsusb_probe: board id=8, interface number 0 [ 1113.138453][T10028] team0 (unregistering): Port device team_slave_1 removed [ 1113.225484][T10028] team0 (unregistering): Port device team_slave_0 removed [ 1113.236123][ T4520] smc: removing ib device syz! [ 1114.013544][T17515] team0: Port device team_slave_0 added [ 1114.054741][T17515] team0: Port device team_slave_1 added [ 1114.160563][ T5911] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 1114.181277][ T5911] smsusb 3-1:1.0: probe with driver smsusb failed with error -71 [ 1114.219653][ T5911] usb 3-1: USB disconnect, device number 47 [ 1114.338629][T17713] FAULT_INJECTION: forcing a failure. [ 1114.338629][T17713] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.369551][T17713] CPU: 0 UID: 0 PID: 17713 Comm: syz.0.3190 Not tainted syzkaller #0 PREEMPT(full) [ 1114.369575][T17713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1114.369585][T17713] Call Trace: [ 1114.369591][T17713] [ 1114.369597][T17713] dump_stack_lvl+0x16c/0x1f0 [ 1114.369621][T17713] should_fail_ex+0x512/0x640 [ 1114.369642][T17713] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1114.369669][T17713] should_failslab+0xc2/0x120 [ 1114.369688][T17713] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1114.369706][T17713] ? __alloc_skb+0x2b2/0x380 [ 1114.369727][T17713] __alloc_skb+0x2b2/0x380 [ 1114.369745][T17713] ? __pfx___alloc_skb+0x10/0x10 [ 1114.369764][T17713] ? __lock_acquire+0x62e/0x1ce0 [ 1114.369794][T17713] alloc_skb_with_frags+0xe0/0x860 [ 1114.369820][T17713] sock_alloc_send_pskb+0x7fb/0x990 [ 1114.369846][T17713] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1114.369869][T17713] ? __lock_acquire+0x62e/0x1ce0 [ 1114.369897][T17713] __ip_append_data+0x2149/0x41c0 [ 1114.369925][T17713] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1114.369944][T17713] ? find_held_lock+0x2b/0x80 [ 1114.369962][T17713] ? ip_dst_mtu_maybe_forward.constprop.0+0x30a/0x6e0 [ 1114.369989][T17713] ? ip_dst_mtu_maybe_forward.constprop.0+0x314/0x6e0 [ 1114.370012][T17713] ? __pfx___ip_append_data+0x10/0x10 [ 1114.370037][T17713] ip_make_skb+0x27f/0x300 [ 1114.370059][T17713] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1114.370082][T17713] ? __pfx_ip_make_skb+0x10/0x10 [ 1114.370108][T17713] ? ipv4_dst_check+0x1a8/0x3b0 [ 1114.370136][T17713] ? udp_sendmsg+0x17d7/0x2870 [ 1114.370158][T17713] udp_sendmsg+0x17d7/0x2870 [ 1114.370183][T17713] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1114.370204][T17713] ? avc_has_perm_noaudit+0x90/0x3b0 [ 1114.370220][T17713] ? __pfx_udp_sendmsg+0x10/0x10 [ 1114.370243][T17713] ? avc_has_perm+0x144/0x1f0 [ 1114.370264][T17713] ? do_user_addr_fault+0x829/0x1370 [ 1114.370302][T17713] ? __import_iovec+0x1dd/0x650 [ 1114.370330][T17713] ? __pfx_udp_sendmsg+0x10/0x10 [ 1114.370354][T17713] inet_sendmsg+0x105/0x140 [ 1114.370373][T17713] ____sys_sendmsg+0x973/0xc70 [ 1114.370400][T17713] ? copy_msghdr_from_user+0x10a/0x160 [ 1114.370422][T17713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1114.370449][T17713] ? __pfx__kstrtoull+0x10/0x10 [ 1114.370472][T17713] ___sys_sendmsg+0x134/0x1d0 [ 1114.370494][T17713] ? __pfx____sys_sendmsg+0x10/0x10 [ 1114.370522][T17713] ? find_held_lock+0x2b/0x80 [ 1114.370554][T17713] __sys_sendmmsg+0x200/0x420 [ 1114.370575][T17713] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1114.370604][T17713] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1114.370637][T17713] ? fput+0x9b/0xd0 [ 1114.370751][T17713] ? ksys_write+0x1ac/0x250 [ 1114.370775][T17713] ? __pfx_ksys_write+0x10/0x10 [ 1114.370801][T17713] __x64_sys_sendmmsg+0x9c/0x100 [ 1114.370827][T17713] ? lockdep_hardirqs_on+0x7c/0x110 [ 1114.370852][T17713] do_syscall_64+0xcd/0x4c0 [ 1114.370881][T17713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.370903][T17713] RIP: 0033:0x7f2f9318ebe9 [ 1114.370920][T17713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1114.370939][T17713] RSP: 002b:00007f2f93f9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1114.370956][T17713] RAX: ffffffffffffffda RBX: 00007f2f933c5fa0 RCX: 00007f2f9318ebe9 [ 1114.370969][T17713] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 1114.370981][T17713] RBP: 00007f2f93f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.370993][T17713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.371006][T17713] R13: 00007f2f933c6038 R14: 00007f2f933c5fa0 R15: 00007ffe727c95a8 [ 1114.371035][T17713] [ 1114.373896][T15324] IPVS: starting estimator thread 0... [ 1114.499386][T17515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.812751][T17515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.843346][T17515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.855234][T17709] tipc: Started in network mode [ 1114.907589][T17715] IPVS: using max 63 ests per chain, 151200 per kthread [ 1114.917313][T17709] tipc: Node identity 8267386fe883, cluster identity 4711 [ 1114.927561][T17709] tipc: Enabled bearer , priority 0 [ 1114.934834][T17717] syzkaller0: entered promiscuous mode [ 1114.977951][T17717] syzkaller0: entered allmulticast mode [ 1115.006113][T17515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.063910][T17515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1115.089883][ C0] vkms_vblank_simulate: vblank timer overrun [ 1115.145070][T17515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.346610][T17721] tipc: Resetting bearer [ 1115.457743][T17708] tipc: Resetting bearer [ 1115.499250][T17736] FAULT_INJECTION: forcing a failure. [ 1115.499250][T17736] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.537943][T17736] CPU: 0 UID: 0 PID: 17736 Comm: syz.0.3193 Not tainted syzkaller #0 PREEMPT(full) [ 1115.537972][T17736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1115.537985][T17736] Call Trace: [ 1115.537992][T17736] [ 1115.538001][T17736] dump_stack_lvl+0x16c/0x1f0 [ 1115.538032][T17736] should_fail_ex+0x512/0x640 [ 1115.538058][T17736] ? fs_reclaim_acquire+0xae/0x150 [ 1115.538087][T17736] ? tomoyo_encode2+0x100/0x3e0 [ 1115.538116][T17736] should_failslab+0xc2/0x120 [ 1115.538140][T17736] __kmalloc_noprof+0xd2/0x510 [ 1115.538170][T17736] tomoyo_encode2+0x100/0x3e0 [ 1115.538203][T17736] tomoyo_encode+0x29/0x50 [ 1115.538232][T17736] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1115.538265][T17736] ? tomoyo_profile+0x47/0x60 [ 1115.538298][T17736] tomoyo_path_number_perm+0x245/0x580 [ 1115.538323][T17736] ? tomoyo_path_number_perm+0x237/0x580 [ 1115.538352][T17736] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1115.538380][T17736] ? find_held_lock+0x2b/0x80 [ 1115.538432][T17736] ? find_held_lock+0x2b/0x80 [ 1115.538456][T17736] ? hook_file_ioctl_common+0x145/0x410 [ 1115.538485][T17736] ? __fget_files+0x20e/0x3c0 [ 1115.538515][T17736] security_file_ioctl+0x9b/0x240 [ 1115.538545][T17736] __x64_sys_ioctl+0xb7/0x210 [ 1115.538578][T17736] do_syscall_64+0xcd/0x4c0 [ 1115.538608][T17736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.538630][T17736] RIP: 0033:0x7f2f9318ebe9 [ 1115.538647][T17736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1115.538668][T17736] RSP: 002b:00007f2f93f9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1115.538688][T17736] RAX: ffffffffffffffda RBX: 00007f2f933c5fa0 RCX: 00007f2f9318ebe9 [ 1115.538702][T17736] RDX: 00002000000000c0 RSI: 0000000000008931 RDI: 0000000000000005 [ 1115.538715][T17736] RBP: 00007f2f93f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.538728][T17736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1115.538741][T17736] R13: 00007f2f933c6038 R14: 00007f2f933c5fa0 R15: 00007ffe727c95a8 [ 1115.538770][T17736] [ 1115.538789][T17736] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1115.760045][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.875156][T17708] tipc: Disabling bearer [ 1116.388030][T17749] netlink: 'syz.0.3195': attribute type 1 has an invalid length. [ 1116.545146][T17515] hsr_slave_0: entered promiscuous mode [ 1116.598751][T17515] hsr_slave_1: entered promiscuous mode [ 1116.646343][T17515] debugfs: 'hsr0' already exists in 'hsr' [ 1116.656008][T17753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1116.682780][T17515] Cannot create hsr debugfs directory [ 1117.580820][T10028] IPVS: stop unused estimator thread 0... [ 1117.837668][T15324] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1118.037589][T15324] usb 6-1: Using ep0 maxpacket: 16 [ 1118.516561][T15324] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1118.525629][T15324] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1118.536367][T15324] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1118.595182][T15324] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1118.662765][T15324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.697415][T15324] usb 6-1: Product: syz [ 1118.720009][T15324] usb 6-1: Manufacturer: syz [ 1118.740600][T15324] usb 6-1: SerialNumber: syz [ 1118.987215][T17764] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3200'. [ 1119.090396][T17792] FAULT_INJECTION: forcing a failure. [ 1119.090396][T17792] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.188680][T17792] CPU: 1 UID: 0 PID: 17792 Comm: syz.0.3204 Not tainted syzkaller #0 PREEMPT(full) [ 1119.188710][T17792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1119.188724][T17792] Call Trace: [ 1119.188731][T17792] [ 1119.188740][T17792] dump_stack_lvl+0x16c/0x1f0 [ 1119.188771][T17792] should_fail_ex+0x512/0x640 [ 1119.188798][T17792] ? fs_reclaim_acquire+0xae/0x150 [ 1119.188828][T17792] ? tomoyo_encode2+0x100/0x3e0 [ 1119.188857][T17792] should_failslab+0xc2/0x120 [ 1119.188881][T17792] __kmalloc_noprof+0xd2/0x510 [ 1119.188911][T17792] tomoyo_encode2+0x100/0x3e0 [ 1119.188945][T17792] tomoyo_encode+0x29/0x50 [ 1119.188974][T17792] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1119.189009][T17792] ? tomoyo_profile+0x47/0x60 [ 1119.189033][T17792] tomoyo_path_number_perm+0x245/0x580 [ 1119.189058][T17792] ? tomoyo_path_number_perm+0x237/0x580 [ 1119.189087][T17792] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1119.189116][T17792] ? find_held_lock+0x2b/0x80 [ 1119.189170][T17792] ? find_held_lock+0x2b/0x80 [ 1119.189194][T17792] ? hook_file_ioctl_common+0x145/0x410 [ 1119.189223][T17792] ? __fget_files+0x20e/0x3c0 [ 1119.189252][T17792] security_file_ioctl+0x9b/0x240 [ 1119.189286][T17792] __x64_sys_ioctl+0xb7/0x210 [ 1119.189325][T17792] do_syscall_64+0xcd/0x4c0 [ 1119.189355][T17792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.189376][T17792] RIP: 0033:0x7f2f9318ebe9 [ 1119.189393][T17792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1119.189413][T17792] RSP: 002b:00007f2f93f9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1119.189434][T17792] RAX: ffffffffffffffda RBX: 00007f2f933c5fa0 RCX: 00007f2f9318ebe9 [ 1119.189448][T17792] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 1119.189461][T17792] RBP: 00007f2f93f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.189474][T17792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.189487][T17792] R13: 00007f2f933c6038 R14: 00007f2f933c5fa0 R15: 00007ffe727c95a8 [ 1119.189517][T17792] [ 1119.189538][T17792] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1119.765523][T17801] lo speed is unknown, defaulting to 1000 [ 1120.409213][T17515] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1120.479909][T17515] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1120.540793][T17515] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1120.956113][T17515] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1120.987716][T15324] usb 6-1: 0:2 : does not exist [ 1121.086801][T15324] usb 6-1: USB disconnect, device number 10 [ 1121.338566][T17216] udevd[17216]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1121.751200][T17842] FAULT_INJECTION: forcing a failure. [ 1121.751200][T17842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1121.751234][T17842] CPU: 0 UID: 0 PID: 17842 Comm: syz.5.3211 Not tainted syzkaller #0 PREEMPT(full) [ 1121.751260][T17842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1121.751272][T17842] Call Trace: [ 1121.751280][T17842] [ 1121.751288][T17842] dump_stack_lvl+0x16c/0x1f0 [ 1121.751319][T17842] should_fail_ex+0x512/0x640 [ 1121.751350][T17842] _copy_to_user+0x32/0xd0 [ 1121.751381][T17842] simple_read_from_buffer+0xcb/0x170 [ 1121.751406][T17842] proc_fail_nth_read+0x197/0x240 [ 1121.751433][T17842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1121.751459][T17842] ? rw_verify_area+0xcf/0x6c0 [ 1121.751489][T17842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1121.751513][T17842] vfs_read+0x1e1/0xcf0 [ 1121.751539][T17842] ? __pfx___mutex_lock+0x10/0x10 [ 1121.751566][T17842] ? __pfx_vfs_read+0x10/0x10 [ 1121.751595][T17842] ? __fget_files+0x20e/0x3c0 [ 1121.751627][T17842] ksys_read+0x12a/0x250 [ 1121.751648][T17842] ? __pfx_ksys_read+0x10/0x10 [ 1121.751677][T17842] do_syscall_64+0xcd/0x4c0 [ 1121.751706][T17842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.751728][T17842] RIP: 0033:0x7f52f4b8d5fc [ 1121.751744][T17842] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1121.751764][T17842] RSP: 002b:00007f52f5aa4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1121.751783][T17842] RAX: ffffffffffffffda RBX: 00007f52f4dc6180 RCX: 00007f52f4b8d5fc [ 1121.751797][T17842] RDX: 000000000000000f RSI: 00007f52f5aa40a0 RDI: 0000000000000007 [ 1121.751810][T17842] RBP: 00007f52f5aa4090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.751823][T17842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.751835][T17842] R13: 00007f52f4dc6218 R14: 00007f52f4dc6180 R15: 00007ffd15321328 [ 1121.751864][T17842] [ 1122.083149][T17515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1122.172562][T17515] 8021q: adding VLAN 0 to HW filter on device team0 [ 1122.240292][ T9705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.247560][ T9705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1122.277761][ T44] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1122.400921][ T9705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.408120][ T9705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1122.533963][ T44] usb 4-1: config 0 has no interfaces? [ 1122.539655][ T44] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1122.617429][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.688896][ T44] usb 4-1: config 0 descriptor?? [ 1122.861141][T17861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1123.671184][T17866] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1123.715133][T17866] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1123.732538][T17869] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1123.749385][T17869] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1123.767201][T17876] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1124.181763][T17515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1124.461131][T17869] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1124.640350][T17884] lo speed is unknown, defaulting to 1000 [ 1124.646187][T17884] lo speed is unknown, defaulting to 1000 [ 1124.654548][T17884] lo speed is unknown, defaulting to 1000 [ 1124.668449][T17884] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1124.706081][T17515] veth0_vlan: entered promiscuous mode [ 1124.715397][T17884] lo speed is unknown, defaulting to 1000 [ 1124.723053][T17884] lo speed is unknown, defaulting to 1000 [ 1124.780955][T17884] lo speed is unknown, defaulting to 1000 [ 1124.787728][T17884] lo speed is unknown, defaulting to 1000 [ 1124.794442][T17884] lo speed is unknown, defaulting to 1000 [ 1124.801159][T17884] lo speed is unknown, defaulting to 1000 [ 1124.830210][T17869] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1124.838259][T17866] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1124.849321][T17869] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1124.874673][T17866] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1124.907673][T17515] veth1_vlan: entered promiscuous mode [ 1124.944753][T17869] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1125.002188][T17869] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1125.024289][T17866] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1125.054407][T17515] veth0_macvtap: entered promiscuous mode [ 1125.062380][T17869] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1125.076751][T17866] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1125.108989][T17515] veth1_macvtap: entered promiscuous mode [ 1125.120405][T17869] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1125.149691][T17869] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1125.157100][T17515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1125.171442][T17866] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1125.173246][T17869] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1125.502289][T17866] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1125.582120][T17515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.590529][T17869] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1125.610551][T17866] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1125.628238][T17866] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1125.640572][ T4520] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.680266][ T4520] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.703327][T15324] usb 4-1: USB disconnect, device number 45 [ 1125.704494][ T4520] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.761952][ T4520] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.006371][ T5911] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 1126.131905][T17910] FAULT_INJECTION: forcing a failure. [ 1126.131905][T17910] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.144756][T17910] CPU: 0 UID: 0 PID: 17910 Comm: syz.2.3223 Not tainted syzkaller #0 PREEMPT(full) [ 1126.144793][T17910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1126.144806][T17910] Call Trace: [ 1126.144814][T17910] [ 1126.144822][T17910] dump_stack_lvl+0x16c/0x1f0 [ 1126.144855][T17910] should_fail_ex+0x512/0x640 [ 1126.144882][T17910] ? fs_reclaim_acquire+0xae/0x150 [ 1126.144912][T17910] ? tomoyo_encode2+0x100/0x3e0 [ 1126.144942][T17910] should_failslab+0xc2/0x120 [ 1126.144967][T17910] __kmalloc_noprof+0xd2/0x510 [ 1126.144989][T17910] ? d_absolute_path+0x136/0x1a0 [ 1126.145025][T17910] tomoyo_encode2+0x100/0x3e0 [ 1126.145059][T17910] tomoyo_encode+0x29/0x50 [ 1126.145088][T17910] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1126.145128][T17910] tomoyo_path_number_perm+0x245/0x580 [ 1126.145154][T17910] ? tomoyo_path_number_perm+0x237/0x580 [ 1126.145184][T17910] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1126.145210][T17910] ? find_held_lock+0x2b/0x80 [ 1126.145266][T17910] ? find_held_lock+0x2b/0x80 [ 1126.145291][T17910] ? hook_file_ioctl_common+0x145/0x410 [ 1126.145320][T17910] ? __fget_files+0x20e/0x3c0 [ 1126.145349][T17910] security_file_ioctl+0x9b/0x240 [ 1126.145381][T17910] __x64_sys_ioctl+0xb7/0x210 [ 1126.145415][T17910] do_syscall_64+0xcd/0x4c0 [ 1126.145444][T17910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.145466][T17910] RIP: 0033:0x7f28cdf8ebe9 [ 1126.145484][T17910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1126.145504][T17910] RSP: 002b:00007f28cc1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1126.145525][T17910] RAX: ffffffffffffffda RBX: 00007f28ce1c6180 RCX: 00007f28cdf8ebe9 [ 1126.145539][T17910] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000008 [ 1126.145552][T17910] RBP: 00007f28cc1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.145565][T17910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.145579][T17910] R13: 00007f28ce1c6218 R14: 00007f28ce1c6180 R15: 00007ffdc2c0b3a8 [ 1126.145609][T17910] [ 1126.145708][T17910] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1126.362347][T17907] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI [ 1126.374409][T17907] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 1126.382800][T17907] CPU: 0 UID: 0 PID: 17907 Comm: syz.2.3223 Not tainted syzkaller #0 PREEMPT(full) [ 1126.392156][T17907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1126.402205][T17907] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 1126.407318][T17907] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 4a f3 40 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 1126.426940][T17907] RSP: 0018:ffffc90004b9fbf0 EFLAGS: 00010293 [ 1126.432996][T17907] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff887a9b3a [ 1126.440956][T17907] RDX: ffff88805ade4880 RSI: ffffffff887a9b86 RDI: 0000000000000005 [ 1126.448917][T17907] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1126.456928][T17907] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90004b9fd88 [ 1126.464890][T17907] R13: ffffc90004b9fd88 R14: 0000000000000001 R15: ffff88805de5b400 [ 1126.472881][T17907] FS: 00007f28cc1f66c0(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000 [ 1126.481825][T17907] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1126.488410][T17907] CR2: 00007f28cc1d4f98 CR3: 000000005f6ef000 CR4: 00000000003526f0 [ 1126.496660][T17907] Call Trace: [ 1126.499940][T17907] [ 1126.502870][T17907] ? __pfx_bcsp_recv+0x10/0x10 [ 1126.507743][T17907] hci_uart_tty_receive+0x251/0x7e0 [ 1126.513125][T17907] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 1126.518869][T17907] tty_ioctl+0x580/0x1680 [ 1126.523366][T17907] ? __pfx_tty_ioctl+0x10/0x10 [ 1126.528127][T17907] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1126.534989][T17907] ? hook_file_ioctl_common+0x145/0x410 [ 1126.540541][T17907] ? selinux_file_ioctl+0x180/0x270 [ 1126.545736][T17907] ? selinux_file_ioctl+0xb4/0x270 [ 1126.550840][T17907] ? __pfx_tty_ioctl+0x10/0x10 [ 1126.555602][T17907] __x64_sys_ioctl+0x18b/0x210 [ 1126.560750][T17907] do_syscall_64+0xcd/0x4c0 [ 1126.565266][T17907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.571170][T17907] RIP: 0033:0x7f28cdf8ebe9 [ 1126.575568][T17907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1126.595176][T17907] RSP: 002b:00007f28cc1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1126.603615][T17907] RAX: ffffffffffffffda RBX: 00007f28ce1c6090 RCX: 00007f28cdf8ebe9 [ 1126.611590][T17907] RDX: 0000200000000040 RSI: 0000000000005412 RDI: 0000000000000008 [ 1126.619555][T17907] RBP: 00007f28ce011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1126.627519][T17907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1126.635490][T17907] R13: 00007f28ce1c6128 R14: 00007f28ce1c6090 R15: 00007ffdc2c0b3a8 [ 1126.643478][T17907] [ 1126.646493][T17907] Modules linked in: [ 1126.651344][T17907] ---[ end trace 0000000000000000 ]--- [ 1126.656804][T17907] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 1126.661943][T17907] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 4a f3 40 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1126.681565][T17907] RSP: 0018:ffffc90004b9fbf0 EFLAGS: 00010293 [ 1126.687644][T17907] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff887a9b3a [ 1126.695605][T17907] RDX: ffff88805ade4880 RSI: ffffffff887a9b86 RDI: 0000000000000005 [ 1126.704356][T17907] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1126.712391][T17907] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90004b9fd88 [ 1126.720548][T17907] R13: ffffc90004b9fd88 R14: 0000000000000001 R15: ffff88805de5b400 [ 1126.728524][T17907] FS: 00007f28cc1f66c0(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000 [ 1126.737455][T17907] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1126.744167][T17907] CR2: 00007f28cc1d4f98 CR3: 000000005f6ef000 CR4: 00000000003526f0 [ 1126.752173][T17907] Kernel panic - not syncing: Fatal exception [ 1126.758464][T17907] Kernel Offset: disabled [ 1126.762777][T17907] Rebooting in 86400 seconds..