last executing test programs: 14m10.323797363s ago: executing program 3 (id=3736): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000140)={0x8, 0x0, 0xf, 0x80000001, 0xfe1c, 0x6, "72a0a977db089b60fd94c5bd97abc150", 0x70, 0x3, 0xf5, 0x7, 0x8, 0x0, 0x1}) 14m10.194982485s ago: executing program 3 (id=3738): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0xf3, 0x1bc, 0x3, 0x3, 0xa, 0x5, 0x40}, 0xc) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x2161, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r6, 0xfffffff9, 0x4, 0x1}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000400)={r6, @in={{0x2, 0x4e22, @empty}}, 0x40, 0x4}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x5, 0xf, 0x10, 0x2, 0x4, 0x2, 0x13, 0x6, 0x5, 0x5, 0x0, 0x4, 0x10, 0x4], 0x3, [0x9c6, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x4, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xfffb, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x34, 0x25, 0x101, 0x70bd22, 0xfffffffc, {0xa}, [@typed={0x1f, 0x10d, 0x0, 0x0, @binary="b669019f45719e4c0d95279ada9acc12578a68efbd1c4ede47f193"}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c992}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r2, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 14m9.550437375s ago: executing program 3 (id=3740): creat(&(0x7f0000000c00)='./file0\x00', 0x84) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000007a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0xf2a8, 0x0, {0x5, 0x0, 0x8, 0x80000001, 0x4, 0x1, 0x9e7, 0x35741062, 0x0, 0x8000, 0x9e7, 0xffffffffffffffff, r1, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000000)='./file0\x00', 0x100) 14m8.287027431s ago: executing program 3 (id=3744): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x189f865, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x68}}, 0x4010) r1 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x20008040) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x6, 0x10087, 0x0, 0x40}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfffa0000}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800000000e9ffffff00000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a09080000000000000000020000000900020073797a30000000000900010073797a30000000001c00038018000380090001006261746164765f736c6176655f31000014000000110001"], 0x70}}, 0x24040880) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x0, @empty}}, 0x0, 0x0, 0x37, 0x0, "4a8553ada03d7382480334deea90815d9df4fdd0840b387404d9b33a2e0b7cff541f02cc6a1482ebbd6d2732b0ed21c9ccedb3c51f9dc3d402810abe40b42c7c0352df734a8d3ea44b42da86129ca4f2"}, 0xd8) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 14m7.075914977s ago: executing program 3 (id=3748): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000140)={0x8, 0x0, 0xf, 0x80000001, 0xfe1c, 0x6, "72a0a977db089b60fd94c5bd97abc150", 0x70, 0x3, 0xf5, 0x7, 0x8, 0x0, 0x1}) 14m5.164657935s ago: executing program 3 (id=3753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() process_vm_writev(r0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/162, 0xa2}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000000580)=""/97, 0x61}, {&(0x7f0000002b80)=""/4096, 0x1000}, {0x0}], 0x6, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/165, 0xa5}, {&(0x7f0000000700)=""/102, 0x66}, {0x0}, {&(0x7f0000003b80)=""/4096, 0x1000}], 0x4, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r3, &(0x7f00000000c0)=@abs, &(0x7f0000000240)=0x6e) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe681}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000400c) 14m3.280760135s ago: executing program 32 (id=3753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() process_vm_writev(r0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/162, 0xa2}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000000580)=""/97, 0x61}, {&(0x7f0000002b80)=""/4096, 0x1000}, {0x0}], 0x6, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/165, 0xa5}, {&(0x7f0000000700)=""/102, 0x66}, {0x0}, {&(0x7f0000003b80)=""/4096, 0x1000}], 0x4, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r3, &(0x7f00000000c0)=@abs, &(0x7f0000000240)=0x6e) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe681}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000400c) 3m13.971028691s ago: executing program 1 (id=6571): r0 = open(&(0x7f0000000380)='./bus\x00', 0xeb40, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000314000454bd119ffcd926f7347e3eed77dbdf250900020073b935580e9c211d3935dbd9797a320000000041007278e76223a1fd72cb16a27e7aa8355d626174616476000000"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0xd0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_open_dev$video(0x0, 0x1d24, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = io_uring_setup(0x3c93, &(0x7f00000001c0)={0x0, 0x7b61, 0x80, 0x400003, 0x60}) dup2(r3, r3) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x800) close_range(r3, 0xffffffffffffffff, 0x0) getgid() ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) syz_usb_connect(0x6, 0x7e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010003"], 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e"], 0xec) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f00000003c0)={0x140, 0x400, 0x2000, 0x11dc, 0x96, 0x101, 0x18, 0x0, {0x4, 0x8}, {0x7, 0xb, 0x1}, {0x9, 0x2, 0x1}, {0x4}, 0x0, 0x100, 0x1, 0xa, 0x1, 0x7, 0x6, 0x7, 0x200, 0x9, 0xcf3, 0x8, 0xc, 0x303, 0x3}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32], 0x2b) sendfile(r4, r0, 0x0, 0x4000000053d2) 3m12.313528672s ago: executing program 1 (id=6582): io_submit(0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff8000}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) lseek(r3, 0x2, 0x3) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0xb10b5351d1a5373f}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x50, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000881) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x200000c, 0x200000006c832, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) sendmsg$AUDIT_DEL_RULE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x4810}, 0x400c890) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r7) read$FUSE(r7, &(0x7f00000036c0)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, 0x0, 0x0) 3m12.104598152s ago: executing program 1 (id=6585): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 3m12.103745028s ago: executing program 1 (id=6586): socket$kcm(0x2, 0x5, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000042c0)=ANY=[@ANYBLOB="ec050000", @ANYRES16=0x0, @ANYBLOB="200027bd7000ffdbdf254a0000000800010067000000080003", @ANYRES32=0x0, @ANYRESOCT=r0], 0x5ec}, 0x1, 0x0, 0x0, 0x20020080}, 0x20004004) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x15, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="06003800d8510000040049800400e0801a165c80f928efeadc95a00c88d81d8d36eb021f05e357ce0cc80496d946a14b733a0b75dc0e0fe7ec451e3304efabb148cf7740d92633549fc799efeffbb500bf6a3db52cb6551af05b9d13a338392b5a8a8a21422903ac79280ba0651419590f6126813018282ea112a8c697e421a55ef2aac7340a5736e3d51504d8c7f023ee72b55ab9a1a1195cf9edf01e30447d1e000ce0ec914a9a6ae232498e74bcd19c01b7086e3fec56b754ab12185fda15b9525dec81f973a9c4bc9e3346f077651b64733a62e0536a41b5d896c07d71bb8b256ff30493694ca27c654b9cdfd0721dcef4726d97a2974dc7d8e373b0a60174bb0800ee00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x7a1781, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000080)=[{&(0x7f00000003c0)="c7e5cfbab00094885d5fa2fc3586aa8295867baa0c6424be5109967880b0f2cc9ba7061075c103cff2ffb1a3dd88c59dc1b4434b38ce048eac1210d8daff2c61950182c96c5256d4a6945fb0788e01e2bb4f7a", 0x53}, {&(0x7f0000000500)="84e14329e23d53a707e93857f55e86c5a4b53310a174796adb54071fa068d821458513fa5b5216071709bb6b2df6076f159af94d68dfba61a887887e97156782b90b329f8d7996ced608a5cf5baf76ed44668f212348fb6a069cc9a91e11332b3c489bd79d4ab2592f35fc321e9979c57ad634fe5a35623a3d6ad5197314e0439c68c788d0ea6f269165a5095e750900", 0x90}, {&(0x7f0000000440)="21c4ea1bd4b3bbeef978db187a960ce3830cc952500a96253eddf20a27989966868c5d312db262f784fd11867f0b4dac65e40eefb9842dd653a6c9b88834633479d28d74fcaafcaac171d104b78a518d9fee16b3f238e8db34809bc110f2", 0x5e}, {&(0x7f00000005c0)="ddb0aaf799f78fcef7915174a8d30aa403b59ab8c76c9245d1246e59a2c2a71ea36bf034d01ba68fe37024d02b881e594a41e6f5a420881f3526b4228ead377c1c0ea50071795ae0bbdc0720af4b5f940c65ffe0e6591407d013a7668df0201afb3c0d690e506f286aa94a30b21f1f574ef19fa9f983567d643ec068b59e89e0b5b19ca73e821f2ac41a0d49972bcfdc71b38698455a83e7831311ba24deb4fd75676ffd2b2b313a5ee7e591e5f46ec4f271a0bbef55d030e63852e64a1833c2e32702054166c52f454197b8fe6ce31227a025e93e68aa2a67fb4a39fc2c4e90413b9be03873dc", 0xe7}], 0x4) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) (async) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$rxrpc(0x21, 0x2, 0xa) 3m11.709752721s ago: executing program 1 (id=6588): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0xe, 0xa, 0xbb9b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x2b) mount$bind(&(0x7f0000000140)='./file1\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000500), 0x322, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) open_tree(r2, &(0x7f0000000300)='./file1\x00', 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) prlimit64(r3, 0xf, &(0x7f0000000180)={0xa0000000000000, 0x8}, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000540)={0x2572d8929a6d88f2, 0x0, {0x100, 0x7, 0x200a, 0x5, 0x2, 0x1, 0x2, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r7, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) 3m8.766827603s ago: executing program 1 (id=6600): syz_emit_ethernet(0x23, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81003000000400ab"], 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000580)="e2", 0x20000}], 0x11) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x300, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000140), &(0x7f0000000200)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1e5, 0x0, 0x0, 0x0, 0xf64}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) 2m53.370592383s ago: executing program 33 (id=6600): syz_emit_ethernet(0x23, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81003000000400ab"], 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000580)="e2", 0x20000}], 0x11) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x300, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000140), &(0x7f0000000200)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1e5, 0x0, 0x0, 0x0, 0xf64}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) 2m31.205910653s ago: executing program 5 (id=6724): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x181) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e74, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff2d76}, 0x1c) listen(r0, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r0, r0, 0x100000000000000) 2m31.018949003s ago: executing program 5 (id=6725): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 2m30.958867603s ago: executing program 5 (id=6726): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000300)=@isdn={0x22, 0x81, 0x6, 0x1, 0xc}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)="31d91687b3240724724aaa01582efe49dae6908a8f5583600f93325291944102a7fc47b0960c06b3175cb3382af9ddc84af745ee733a5b156f4bee9befc7dc1ad541c5047019f97869c4e8a46290cd490d35706ec93eb9913474937ffaa008cc615268c2d8272075cde8f10617fff1b7", 0x70}, {&(0x7f0000000100)="2215fbc7a5ad8f334b5856fc4aa20f0bc9659e258e17c58f921c57367ed8fabb710d9e15358060c7abcf0b57609048a62386e3b9cc0d7963631e3fbbc4", 0x3d}], 0x2}, 0x8080) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/4096, 0xe078}], 0x1}, 0x21) 2m29.866750973s ago: executing program 5 (id=6729): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd02fe02e8fe50a10a000725250000000c600e41b0000900ac0008032500000004000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee409", 0x5a}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000003b0009002bbd7000fbdbdf250200000008000180"], 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x4000014) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'virt_wifi0\x00'}}, 0x1e) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffffffffff20, 0x4040, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8}, 0xd) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4008094) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000ae0000000000050095000000000000007a56fc1ae848b06639d21d47042e3f821399e8994b6d32ca69d4d639040871f4e5e759ae77784bea50c38101ac4544aeb584882b"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x2}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r3 = syz_pidfd_open(0x0, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e65772064656661756c7420747275737465642a73797a203030303030303030303030303030303030323033002f0def238babd9148515fa1c68e917f56e73357b94ed79fd5e643c6a524993af9419a075f01d3b75812001e3ab1122c8fae142b90d57a874312bb59322ae2be1177f0da18e7a8246802649162635443285b45970d1e04a0078c9a07122dac978a8429c19b130ba0817c84b73d4c665e6000d95b79cf27760144c2bfd230676a2ff9947c55002b21b339b55253b5e9a12ebf31060805e5a"], 0x2d, 0xfffffffffffffff9) socket$inet6_sctp(0xa, 0x5, 0x84) 2m29.185477607s ago: executing program 5 (id=6730): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001540)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x18, 0x11, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7f}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}]}, &(0x7f0000001040)='syzkaller\x00', 0xc6ac, 0x0, &(0x7f0000001080), 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001100)={0x0, 0x7, 0x10001, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000013c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001400)=[{0x1, 0x1, 0x6, 0xc}, {0x4, 0x2, 0xf, 0x7}, {0x1, 0x2, 0x7, 0x3}, {0x2, 0x4, 0x1, 0x8}, {0x1, 0x5, 0xa, 0x3}, {0x3, 0x1, 0x9, 0x5}], 0x10, 0xf}, 0x94) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r6) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000001140)={0x250, 0x7d, 0x0, {{0x500, 0x10f, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x4b, ' nod\xeck{cvfox\x93\xff\xff\xff\x81\x02\x00\x00\xe2\xff\x001\xff\xce\xbc\x92\x00\x00\x00(\xe7W$\xc2\xe5\x7f\x9f\xcb\xed\x84\xdc),\xb6^\x86AP\x8eMZ\x95fV4\xc5\xe3I\xeb\xe7/\xaa\x00'/75, 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x250) keyctl$clear(0x7, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x27, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x2a}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x13b4}}, 0xc010) 2m28.973242269s ago: executing program 5 (id=6732): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x82}}}}}}}, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x400, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x7f}]}}}}}}}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x701400, 0xf0, 0x2c}, 0x18) openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000080)={@hyper}) 2m27.799104092s ago: executing program 34 (id=6732): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x82}}}}}}}, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x400, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x7f}]}}}}}}}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x701400, 0xf0, 0x2c}, 0x18) openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000080)={@hyper}) 11.444975723s ago: executing program 4 (id=7195): syz_open_dev$radio(&(0x7f0000000100), 0x1, 0x2) r0 = syz_io_uring_setup(0x61df, 0x0, &(0x7f0000000000)=0x0, &(0x7f00000008c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r0, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) 11.236766291s ago: executing program 4 (id=7198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_LABELS_MASK={0x24, 0x17, [0xffff, 0x3, 0x719, 0x5b, 0x1, 0x5, 0x5, 0x1]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 32) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000cc0)=ANY=[@ANYBLOB="2400000076001f0300000000000000000800a100", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0c000d80080003"], 0x24}], 0x1}, 0x2404c8c0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r5, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) socket(0x27, 0x6, 0x6) (async) read(r6, &(0x7f0000000740)=""/384, 0x200008c0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x1b) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid\x00') ioctl$BTRFS_IOC_RM_DEV(r7, 0x8008b705, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r6, @ANYBLOB="7941080000010000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x2404c84c}, 0x4040800) (rerun: 64) 10.798746743s ago: executing program 4 (id=7200): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffff61) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) flock(0xffffffffffffffff, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000040)={@loopback, 0x2}) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x9}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x77}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x0) 10.120462648s ago: executing program 0 (id=7201): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 10.101207837s ago: executing program 4 (id=7202): socket(0x10, 0x80003, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x463) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r8 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_usb_connect$cdc_ncm(0x2, 0xb6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x81, 0x0, 0x3, 0x8, 0x1}, 0x60, &(0x7f0000000240)={0x5, 0xf, 0x60, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x8806, 0xf, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "3ae62d7f6a271f9591f97e9225194859"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0xb, 0xf000, 0x6, [0xff00]}, @ssp_cap={0x14, 0x10, 0xa, 0xf, 0x2, 0x5, 0xf00f, 0xc, [0xf, 0x0]}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x6, 0xf0f, 0xc800}, @wireless={0xb, 0x10, 0x1, 0xc, 0x26, 0x4, 0x8, 0x9, 0xa1}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41b}}, {0x34, &(0x7f0000000440)=@string={0x34, 0x3, "8d7ac877fa21fd37dbadef389634a9f9ec2fffb2ca45ae8187144b5d579ac35fcc7bcd90aa06544d823d1ad70dc44bfd9018"}}, {0x4a, &(0x7f0000000480)=@string={0x4a, 0x3, "91c5a31a228e57603c4e75af27baed04eeb37692f37afafdc3f5016982ce48450b91d18f20af0c255feabcc6b25b32d683e4977870ed476ad1a647a75499cd067c46c56e99ce14f3"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x444}}]}) ioctl$I2C_RDWR(r9, 0x707, &(0x7f00000003c0)={0x0}) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) 9.834449379s ago: executing program 6 (id=7205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) socket(0x23, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r8 = fanotify_init(0xf00, 0x1) fanotify_mark(r8, 0x105, 0x40009975, r2, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) 9.365496018s ago: executing program 0 (id=7206): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c74c24022063800000002c24f30f556797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4d}], 0x1, 0x3c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000040)=0x4, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.09870287s ago: executing program 2 (id=7207): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1800, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x404c801}, 0x4008090) syz_genetlink_get_family_id$smc(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) io_setup(0x8, &(0x7f0000000380)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2, r6}]) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="a4000000", @ANYRESOCT=r9, @ANYRES16=r9, @ANYRES32=0x0, @ANYRESDEC=r8], 0x2c}}, 0x20040084) socket$qrtr(0x2a, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) 7.378207019s ago: executing program 2 (id=7209): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x80, 0x1, 0x4, 0x8, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x3, 0x3, 0x0, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) 7.298612015s ago: executing program 6 (id=7210): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x202, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES8=r0], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x1, 0x9, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}}, 0x40000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r9 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r9, 0x1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r9, 0x1}) 7.269465049s ago: executing program 0 (id=7212): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffff61) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) flock(0xffffffffffffffff, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000040)={@loopback, 0x2}) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x9}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x77}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x0) 7.07468243s ago: executing program 2 (id=7213): fstat(0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000280)=""/180, 0xb4}], 0x2, 0x91, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xdbc97000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r5 = socket$kcm(0x2, 0x922000000001, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) sendmsg$inet(r5, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x200000c4) setsockopt$sock_attach_bpf(r5, 0x1, 0x24, &(0x7f0000000000), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000001c0)=0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000440), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@verity_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_off}], [{@euid_eq={'euid', 0x3d, r7}}, {@obj_role}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r4) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0xcc, r8, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xb3}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0xd1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}, {0x8}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) chdir(&(0x7f00000003c0)='./bus\x00') ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000040)) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 6.062993428s ago: executing program 6 (id=7215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_mr_cache\x00') syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x40000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffff9c, 0x0, 0x8202) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x4001) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r4, r5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000), 0x0) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a0ec33367b5cc888e1fd5182ae2d3d05f251f8d49025ceab4152b6e6d87cc6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) 6.010665054s ago: executing program 4 (id=7216): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00160c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="2009280000008f3985f107de822c0ed4d442a1a0485e8d6f88be40f672518fe223b0e88593d5b7ee7d18f5e58c31"], 0x0, 0x0, 0x0, 0x0}) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=0x3) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000005000000008000005c00000000000000", @ANYRES32, @ANYBLOB="0000d0452e"], 0x50) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x41c902, 0xa6, 0x9}, 0x18) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r8, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x1000000d, 0x240, 0x9, '\x00=\x00'}) r9 = syz_open_pts(r8, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x17) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x1, 0xfffffffe, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 5.31644304s ago: executing program 2 (id=7217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0xffffffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) socket$tipc(0x1e, 0x5, 0x0) close(0xffffffffffffffff) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000080)=0x401, 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x8000000000000001, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r3, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) read$char_usb(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fchdir(0xffffffffffffffff) syz_clone3(&(0x7f00000005c0)={0x80000000, 0x0, &(0x7f0000000380), &(0x7f00000003c0), {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r2}}, 0x58) timer_delete(r4) 4.826601261s ago: executing program 0 (id=7218): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010007c00000000000060000003f4ff0914000000000a0000011400000011002000040000000000000001000024daf36c1ba86d99e01a6d580a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) write$P9_RMKNOD(r3, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r4 = shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = gettid() sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x4009fc, 0x25dfdbf6, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f00000000c0)=""/74, 0x4a}], 0x2) tkill(r5, 0x8) shmctl$IPC_RMID(r4, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000100)={0x0, 0x0, 0x4}) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) 4.52826779s ago: executing program 2 (id=7219): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1800, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x404c801}, 0x4008090) syz_genetlink_get_family_id$smc(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) io_setup(0x8, &(0x7f0000000380)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2, r6}]) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="a4000000", @ANYRESOCT=r9, @ANYRES16=r9, @ANYRES32=0x0, @ANYRESDEC=r8], 0x2c}}, 0x20040084) r10 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 3.875753275s ago: executing program 7 (id=7220): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1ff, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xff}, 0x1c) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x8d8, 0x5, 0x50424752, 0x6, 0x8000002, 0xb, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x4}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r7], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.37055843s ago: executing program 2 (id=7221): socket(0x2a, 0x3, 0x3b) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) select(0x0, 0x0, &(0x7f0000000080)={0x3, 0x2, 0x0, 0x0, 0x4, 0x1000000000000000, 0x0, 0x7ffeffff}, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000d, 0x11, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0xb, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe04, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000400), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x4}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023893) shutdown(r5, 0x2) recvmmsg(r2, &(0x7f0000003740), 0x0, 0x12142, 0x0) 2.892916064s ago: executing program 7 (id=7222): rename(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x10000000000001, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1a", @ANYRES16=r2, @ANYRES8], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = userfaultfd(0x80001) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0xa, 0x2002) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r5, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) sendto$inet(r4, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) 2.365203896s ago: executing program 7 (id=7223): syz_open_dev$radio(&(0x7f0000000100), 0x1, 0x2) r0 = syz_io_uring_setup(0x61df, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x2, 0x13a}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r0, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) 2.23899254s ago: executing program 7 (id=7224): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.192710698s ago: executing program 6 (id=7225): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffff61) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) flock(0xffffffffffffffff, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth0_virt_wifi\x00', &(0x7f0000002500)=@ethtool_gfeatures}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2.154172153s ago: executing program 0 (id=7226): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94946fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) (async) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a"], 0x7c}}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) (async) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) (async) fanotify_init(0x0, 0x400) (async) r5 = socket(0x1, 0x2, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r5}, 0x20) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r8, 0x560b, 0x0) (async) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000100)={0x1, 0x8, 0x6, 0x80, 0x9, "efa25ba54a99c5ea267ff8beae91ff741dab5d"}) (async) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.138860306s ago: executing program 7 (id=7227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() process_vm_writev(r0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/162, 0xa2}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000000580)=""/97, 0x61}, {&(0x7f0000000600)=""/94, 0x5e}, {&(0x7f0000000680)=""/93, 0x5d}, {&(0x7f0000002b80)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/165, 0xa5}, {&(0x7f0000000700)=""/102, 0x66}, {0x0}, {&(0x7f0000003b80)=""/4096, 0x1000}], 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r3, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r3, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$IPC_RMID(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) 1.754721102s ago: executing program 4 (id=7228): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffff61) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) flock(0xffffffffffffffff, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000040)={@loopback, 0x2}) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x9}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x77}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1.50991973s ago: executing program 6 (id=7229): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=local=relativu:4,7,\x00']) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) r10 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc00c64d2, &(0x7f0000000180)={0x0, 0x80000}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r11, 0x0, 0x25, 0x8}, 0x14) 1.001505938s ago: executing program 0 (id=7230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffff31, 0x0, 0x0}) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000440)=0x14) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f000001a580)=[@free_buffer], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x0, 0x1}, @fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x2, 0x0, 0x0, 0x1, 0x17}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = mq_open(&(0x7f0000019300)='batadV_\x00\b\x00\x00\xaa\xbc`Qu(7,y\x80\xd5\x9a\x05b \xcfK\xd2}\x8d[\x8f\rW\xf8\x99\xf3\xda\xdd;\xf0W\x94j\xc7 \xd1*\xdd\xdf\a)\xc8\xa4\xd8\xfa\x16\x16)wLML\xe8\x8e\x87\x7f\xadJm\xa3\xb5nJ\x9df\xba(\xc6\xfc\x9e\x90\xe7\xa2\x81i<\xa3\b\x1b\xee\xed\v\xbf1Le\xde\t%\xe6\x9a\x8fw\xec\x10\xb3+\xa7\t\x05\xc4;8q\xd8\xd4\x9f\xc2\x8f\x06h>\xc4\xc9\xa84)\xcd\x1c\xa5\x9c\n\toh\x97#P\x92\x96\xaa\x11\xd1\x14x#\x9b\x9c\xfb+\xcc\xbc\xd5\xfa\xc1>\xefw\xc07c\x9a\xc6X\x93\xe6\x8c\xd2+\xa0\x8d\xee\a\xcf\x13\xd73J\xcfC\x97\x1d\xbc\x18\x9dD\x9a\x8aW_\x918\xb4\xfd\x1e^\xaf\x93\xba\x04\x1f\xa0\x89\x11\x89\xc7\xc1\x05y\xea\x03q\xeb$O_\xf9\x9a\xcd\xa6\xe5\x16\xa8\xcb\xe3\xb3w\x91\v\xc9\xf6\x9e\"\xde\xd5}\xbfb\x00'/257, 0x8c3, 0x30, &(0x7f0000000280)={0x5, 0xb, 0x8, 0xc05}) mq_getsetattr(r8, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x0, 0x1}, 0x18, 0x0) 840.531153ms ago: executing program 7 (id=7231): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x159140, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x2, 0x6, 0x5, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd9d, &(0x7f0000000300)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) 0s ago: executing program 6 (id=7232): syz_usb_connect(0x0, 0x38, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) listen(r3, 0xfffffff8) creat(&(0x7f0000000240)='./file0\x00', 0x100) r4 = fanotify_init(0xf00, 0x40000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r4, 0x541, 0x40001019, r5, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0xff92cb39d00385b6, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x62) listen(r6, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x5ac0}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143142) kernel console output (not intermixed with test programs): [T29931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1820.107831][T29931] RSP: 002b:00007f6e9bdf5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1820.107848][T29931] RAX: ffffffffffffffda RBX: 00007f6e9b1e6090 RCX: 00007f6e9af8f749 [ 1820.107859][T29931] RDX: 0000200000000340 RSI: 00000000000089e2 RDI: 0000000000000008 [ 1820.107869][T29931] RBP: 00007f6e9bdf5090 R08: 0000000000000000 R09: 0000000000000000 [ 1820.107879][T29931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1820.107889][T29931] R13: 00007f6e9b1e6128 R14: 00007f6e9b1e6090 R15: 00007fff9d6d2678 [ 1820.107914][T29931] [ 1820.107944][T29931] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1820.761045][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1821.624477][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1821.885159][T29559] Bluetooth: hci3: command tx timeout [ 1822.289626][T29946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6756'. [ 1823.181510][T29876] hsr_slave_0: entered promiscuous mode [ 1823.188081][T29876] hsr_slave_1: entered promiscuous mode [ 1823.194183][T29876] debugfs: 'hsr0' already exists in 'hsr' [ 1823.199972][T29876] Cannot create hsr debugfs directory [ 1823.252340][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1823.422756][T29957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6759'. [ 1823.754813][T29876] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1823.766853][T29876] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1823.778415][T29876] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1823.790051][T29876] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1823.794802][T17913] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1823.967522][T29559] Bluetooth: hci3: command tx timeout [ 1823.983529][T17913] usb 3-1: Using ep0 maxpacket: 8 [ 1824.033125][T17913] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1824.288120][T17913] usb 3-1: config 0 has no interface number 0 [ 1824.290260][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1824.302613][T17913] usb 3-1: too many endpoints for config 0 interface 41 altsetting 22: 88, using maximum allowed: 30 [ 1824.311480][T25398] udevd[25398]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1824.317765][T17913] usb 3-1: config 0 interface 41 altsetting 22 has 0 endpoint descriptors, different from the interface descriptor's value: 88 [ 1824.347782][T29971] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6761'. [ 1824.360797][T17913] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1824.372660][T29876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1824.402021][T17913] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1824.415290][T17913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.432885][T17913] usb 3-1: Product: syz [ 1824.434631][T29876] 8021q: adding VLAN 0 to HW filter on device team0 [ 1824.786410][T17913] usb 3-1: Manufacturer: syz [ 1824.791830][T17603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.798927][T17603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1824.820652][T17603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1824.822709][T17913] usb 3-1: SerialNumber: syz [ 1824.827837][T17603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1824.881317][T17913] usb 3-1: config 0 descriptor?? [ 1824.927382][T17913] gspca_main: se401-2.14.0 probing 047d:5003 [ 1824.934632][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1824.960294][ T30] audit: type=1400 audit(2000003152.701:1633): avc: denied { map } for pid=29977 comm="syz.0.6763" path="socket:[107658]" dev="sockfs" ino=107658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1825.031079][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1825.132242][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1825.306291][T29876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1825.437202][T17913] gspca_se401: ExtraFeatures: 195 [ 1825.442534][T17913] gspca_se401: Frame size: 0x512 bayer [ 1825.466210][T17913] gspca_se401: Frame size: 22579x10101 bayer [ 1825.653251][T17913] gspca_se401: Frame size: 10267x10595 bayer [ 1825.690509][T17913] gspca_se401: Frame size: 27089x17043 bayer [ 1825.722047][T17913] gspca_se401: Frame size: 64904x39544 bayer [ 1825.760005][T17913] gspca_se401: Frame size: 32163x39022 bayer [ 1825.800594][T17913] gspca_se401: Frame size: 9394x17661 bayer [ 1825.840603][T17913] gspca_se401: Frame size: 23478x13105 bayer [ 1825.873820][T17913] gspca_se401: Frame size: 64591x52309 bayer [ 1825.963429][T17913] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input92 [ 1826.050375][T29876] veth0_vlan: entered promiscuous mode [ 1826.097031][T29876] veth1_vlan: entered promiscuous mode [ 1826.172640][T29996] fuse: Unknown parameter 'maxq ' [ 1826.227023][T29876] veth0_macvtap: entered promiscuous mode [ 1826.259266][T29876] veth1_macvtap: entered promiscuous mode [ 1826.288295][T29876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1826.317686][T29876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1826.337994][T24621] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.350230][T24621] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.362238][T24621] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.387033][T24621] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.412186][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1826.458858][T13077] usb 3-1: USB disconnect, device number 78 [ 1826.501832][T29991] usb usb8: usbfs: process 29991 (syz.6.6764) did not claim interface 0 before use [ 1827.414835][T24591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1827.424126][T24591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1827.521258][T24591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1827.572608][T24591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1827.613844][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1827.654179][T30013] FAULT_INJECTION: forcing a failure. [ 1827.654179][T30013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1828.028572][T30024] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6735'. [ 1828.046619][T30013] CPU: 1 UID: 0 PID: 30013 Comm: syz.2.6772 Not tainted syzkaller #0 PREEMPT(full) [ 1828.046642][T30013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1828.046652][T30013] Call Trace: [ 1828.046658][T30013] [ 1828.046665][T30013] dump_stack_lvl+0x16c/0x1f0 [ 1828.046688][T30013] should_fail_ex+0x512/0x640 [ 1828.046713][T30013] _copy_from_user+0x2e/0xd0 [ 1828.046736][T30013] copy_msghdr_from_user+0x98/0x160 [ 1828.046760][T30013] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1828.046786][T30013] ? __pfx__kstrtoull+0x10/0x10 [ 1828.046815][T30013] ___sys_sendmsg+0xfe/0x1d0 [ 1828.046838][T30013] ? __pfx____sys_sendmsg+0x10/0x10 [ 1828.046872][T30013] ? find_held_lock+0x2b/0x80 [ 1828.046910][T30013] __sys_sendmmsg+0x200/0x420 [ 1828.046936][T30013] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1828.046983][T30013] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1828.047012][T30013] ? fput+0x9b/0xd0 [ 1828.047035][T30013] ? ksys_write+0x1ac/0x250 [ 1828.047052][T30013] ? __pfx_ksys_write+0x10/0x10 [ 1828.047073][T30013] __x64_sys_sendmmsg+0x9c/0x100 [ 1828.047096][T30013] ? lockdep_hardirqs_on+0x7c/0x110 [ 1828.047112][T30013] do_syscall_64+0xcd/0xfa0 [ 1828.047130][T30013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.047147][T30013] RIP: 0033:0x7f6e9af8f749 [ 1828.047162][T30013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1828.047178][T30013] RSP: 002b:00007f6e9be16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1828.047195][T30013] RAX: ffffffffffffffda RBX: 00007f6e9b1e5fa0 RCX: 00007f6e9af8f749 [ 1828.047205][T30013] RDX: 00000000000003e8 RSI: 0000200000002340 RDI: 0000000000000003 [ 1828.047215][T30013] RBP: 00007f6e9be16090 R08: 0000000000000000 R09: 0000000000000000 [ 1828.047226][T30013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1828.047236][T30013] R13: 00007f6e9b1e6038 R14: 00007f6e9b1e5fa0 R15: 00007fff9d6d2678 [ 1828.047260][T30013] [ 1828.064946][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1829.326891][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1829.704994][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1830.149332][T25398] udevd[25398]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1830.275993][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1830.357756][T30062] input: syz0 as /devices/virtual/input/input93 [ 1830.378209][T30062] syzkaller1: entered promiscuous mode [ 1830.384531][T30062] syzkaller1: entered allmulticast mode [ 1830.850951][T13077] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1831.124775][T17913] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1831.414965][T17913] usb 7-1: Using ep0 maxpacket: 16 [ 1831.434427][T17913] usb 7-1: config 253 has an invalid interface number: 184 but max is 0 [ 1831.452290][T17904] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1831.465220][T17913] usb 7-1: config 253 has no interface number 0 [ 1831.473587][T17913] usb 7-1: config 253 interface 184 has no altsetting 0 [ 1831.498181][T17913] usb 7-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1831.507373][T17913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.515571][T17913] usb 7-1: Product: syz [ 1831.519742][T17913] usb 7-1: Manufacturer: syz [ 1831.524360][T17913] usb 7-1: SerialNumber: syz [ 1831.533795][T17913] go7007 7-1:253.184: probe with driver go7007 failed with error -12 [ 1831.563871][T13077] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1831.581152][T25398] udevd[25398]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1831.594368][T13077] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1831.608002][T13077] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 1831.619539][T13077] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1831.634563][T13077] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1831.641987][T17904] usb 3-1: Using ep0 maxpacket: 32 [ 1831.644396][T13077] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.657458][T13077] usb 5-1: Product: syz [ 1831.661864][T13077] usb 5-1: Manufacturer: syz [ 1831.667286][T13077] usb 5-1: SerialNumber: syz [ 1831.667383][T17904] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1831.687801][T13077] usb 5-1: config 0 descriptor?? [ 1831.697323][T30061] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1831.708402][T17904] usb 3-1: config 56 has an invalid interface number: 222 but max is 0 [ 1831.725120][T17904] usb 3-1: config 56 has no interface number 0 [ 1831.734870][T17904] usb 3-1: config 56 interface 222 has no altsetting 0 [ 1831.829607][T17904] usb 3-1: New USB device found, idVendor=2020, idProduct=2031, bcdDevice=3b.23 [ 1831.872320][T17904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.880389][T17904] usb 3-1: Product: syz [ 1831.886374][T17904] usb 3-1: Manufacturer: syz [ 1832.396229][T17904] usb 3-1: SerialNumber: syz [ 1832.398686][T30061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1832.440188][T30061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1832.462451][T13077] rc_core: IR keymap rc-imon-rsc not found [ 1832.469374][T13077] Registered IR keymap rc-empty [ 1832.480364][T13077] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1832.498268][T30061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1832.525130][T13077] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input94 [ 1832.525176][T30061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1832.574717][T13077] usb 5-1: USB disconnect, device number 62 [ 1832.863871][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1832.943309][T30090] vxfs: unable to read disk superblock at 1 [ 1832.950382][T30090] vxfs: unable to read disk superblock at 8 [ 1832.956611][T30090] vxfs: can't find superblock. [ 1833.396056][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1833.466087][T17913] usb 7-1: USB disconnect, device number 2 [ 1833.483146][T13077] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1833.506879][T25394] udevd[25394]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1833.666977][T13077] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1833.677266][T13077] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.696908][T13077] usb 5-1: config 0 descriptor?? [ 1833.758723][T17904] option 3-1:56.222: GSM modem (1-port) converter detected [ 1833.814826][T17904] usb 3-1: USB disconnect, device number 79 [ 1833.844397][T17904] option 3-1:56.222: device disconnected [ 1833.845241][T13077] cp210x 5-1:0.0: cp210x converter detected [ 1833.967927][T30103] binder: 30102:30103 ioctl c0306201 0 returned -14 [ 1834.029898][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1834.153629][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1834.166468][T13077] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1834.383247][T13077] cp210x 5-1:0.0: GPIO initialisation failed: -524 [ 1834.419705][T13077] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1834.446938][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1834.500662][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1834.595879][T30119] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6796'. [ 1834.597001][T11573] usb 5-1: USB disconnect, device number 63 [ 1834.641063][T11573] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1834.747545][T11573] cp210x 5-1:0.0: device disconnected [ 1835.158974][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1835.481766][T17913] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1835.537351][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1835.681496][T17913] usb 5-1: Using ep0 maxpacket: 8 [ 1835.696457][T17913] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1835.718691][T17913] usb 5-1: config 9 has an invalid interface number: 5 but max is 0 [ 1835.737404][T17913] usb 5-1: config 9 has no interface number 0 [ 1835.747646][T17913] usb 5-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x1, skipping [ 1835.758331][T17913] usb 5-1: config 9 interface 5 has no altsetting 0 [ 1835.769734][T17913] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 1835.783166][T17913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.804000][T17913] usb 5-1: Product: syz [ 1835.810274][T17913] usb 5-1: Manufacturer: syz [ 1835.816589][T13077] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1835.832600][T17913] usb 5-1: SerialNumber: syz [ 1835.972020][T13077] usb 7-1: Using ep0 maxpacket: 16 [ 1835.983514][T13077] usb 7-1: config 253 has an invalid interface number: 184 but max is 0 [ 1835.993482][T13077] usb 7-1: config 253 has no interface number 0 [ 1836.002186][T13077] usb 7-1: config 253 interface 184 has no altsetting 0 [ 1836.012582][T13077] usb 7-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1836.022901][T13077] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.034647][T13077] usb 7-1: Product: syz [ 1836.039099][T13077] usb 7-1: Manufacturer: syz [ 1836.046114][T13077] usb 7-1: SerialNumber: syz [ 1836.055989][T17913] usb 5-1: USB disconnect, device number 64 [ 1836.117620][T13077] go7007 7-1:253.184: probe with driver go7007 failed with error -12 [ 1836.245842][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1837.401628][T24592] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.596850][T24592] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.741955][T17617] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1837.786595][T24592] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.901850][T17617] usb 5-1: Using ep0 maxpacket: 16 [ 1837.909444][T17617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1837.934927][T17617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1837.969294][T17617] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1837.998822][T24592] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1838.009957][T17617] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1838.145934][T17617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.354607][T17617] usb 5-1: config 0 descriptor?? [ 1838.520514][T30163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.590576][T11573] usb 7-1: USB disconnect, device number 3 [ 1838.631442][T30162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.672440][T30163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.692876][T30162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.882866][T24592] bridge_slave_1: left allmulticast mode [ 1838.900288][T24592] bridge_slave_1: left promiscuous mode [ 1838.908986][T30171] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6814'. [ 1838.933689][T24592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1838.980375][T24592] bridge_slave_0: left allmulticast mode [ 1839.034442][T24592] bridge_slave_0: left promiscuous mode [ 1839.048557][T17617] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002C/input/input95 [ 1839.053052][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1839.076871][T24592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1839.102016][T11573] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1839.138767][T17617] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1839.264467][T11573] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1839.304544][T11573] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.321386][T23932] Bluetooth: hci4: command 0x0406 tx timeout [ 1839.403085][T11573] usb 7-1: config 0 descriptor?? [ 1839.424819][T11573] cp210x 7-1:0.0: cp210x converter detected [ 1839.548538][T25398] udevd[25398]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1839.874960][T11573] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1840.053596][T30185] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1840.132252][T11573] cp210x 7-1:0.0: GPIO initialisation failed: -524 [ 1840.179741][T11573] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1840.312345][T17617] usb 5-1: reset high-speed USB device number 65 using dummy_hcd [ 1840.348547][T17904] usb 7-1: USB disconnect, device number 4 [ 1840.357397][T17904] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1840.366347][T17904] cp210x 7-1:0.0: device disconnected [ 1840.454391][T24592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1840.494330][T24592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1840.515608][T24592] bond0 (unregistering): Released all slaves [ 1841.496763][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1841.674388][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1841.792206][T30194] FAULT_INJECTION: forcing a failure. [ 1841.792206][T30194] name failslab, interval 1, probability 0, space 0, times 0 [ 1841.830716][T30194] CPU: 0 UID: 0 PID: 30194 Comm: syz.6.6818 Not tainted syzkaller #0 PREEMPT(full) [ 1841.830741][T30194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1841.830751][T30194] Call Trace: [ 1841.830759][T30194] [ 1841.830766][T30194] dump_stack_lvl+0x16c/0x1f0 [ 1841.830789][T30194] should_fail_ex+0x512/0x640 [ 1841.830811][T30194] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1841.830842][T30194] should_failslab+0xc2/0x120 [ 1841.830865][T30194] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1841.830891][T30194] ? ib_device_get_by_netdev+0x1c2/0x520 [ 1841.830914][T30194] ? __alloc_skb+0x2b2/0x380 [ 1841.830941][T30194] ? vxlan_netdevice_event+0x11f/0x370 [ 1841.830972][T30194] ? __alloc_skb+0x2b2/0x380 [ 1841.830992][T30194] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1841.831015][T30194] __alloc_skb+0x2b2/0x380 [ 1841.831037][T30194] ? __pfx___alloc_skb+0x10/0x10 [ 1841.831057][T30194] ? ndisc_netdev_event+0xa1/0x560 [ 1841.831083][T30194] ? notifier_call_chain+0x369/0x410 [ 1841.831110][T30194] ? __pfx_ip6_route_dev_notify+0x10/0x10 [ 1841.831134][T30194] team_nl_send_options_get+0x10f/0xe50 [ 1841.831161][T30194] ? __pfx_team_nl_send_multicast+0x10/0x10 [ 1841.831184][T30194] ? netdev_lower_state_changed+0xb7/0x140 [ 1841.831212][T30194] ? __pfx_team_nl_send_options_get+0x10/0x10 [ 1841.831238][T30194] ? __team_carrier_check+0x135/0x1d0 [ 1841.831262][T30194] ? team_user_linkup_en_option_set+0x1ad/0x310 [ 1841.831288][T30194] ? __pfx_team_user_linkup_en_option_set+0x10/0x10 [ 1841.831314][T30194] ? __nla_parse+0x40/0x60 [ 1841.831344][T30194] team_nl_options_set_doit+0x9f2/0xe60 [ 1841.831370][T30194] ? __nla_validate_parse+0x600/0x2880 [ 1841.831404][T30194] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 1841.831436][T30194] ? rcu_is_watching+0x12/0xc0 [ 1841.831469][T30194] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1841.831490][T30194] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1841.831515][T30194] ? genl_family_rcv_msg_doit+0x209/0x2f0 [ 1841.831531][T30194] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1841.831552][T30194] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1841.831579][T30194] ? bpf_lsm_capable+0x9/0x10 [ 1841.831599][T30194] ? security_capable+0x7e/0x260 [ 1841.831633][T30194] genl_rcv_msg+0x55c/0x800 [ 1841.831655][T30194] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1841.831674][T30194] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 1841.831712][T30194] netlink_rcv_skb+0x158/0x420 [ 1841.831738][T30194] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1841.831758][T30194] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1841.831794][T30194] ? netlink_deliver_tap+0x1ae/0xd30 [ 1841.831824][T30194] genl_rcv+0x28/0x40 [ 1841.831838][T30194] netlink_unicast+0x5aa/0x870 [ 1841.831868][T30194] ? __pfx_netlink_unicast+0x10/0x10 [ 1841.831904][T30194] netlink_sendmsg+0x8c8/0xdd0 [ 1841.831942][T30194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1841.831979][T30194] ____sys_sendmsg+0xa98/0xc70 [ 1841.831999][T30194] ? copy_msghdr_from_user+0x10a/0x160 [ 1841.832022][T30194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1841.832053][T30194] ___sys_sendmsg+0x134/0x1d0 [ 1841.832079][T30194] ? __pfx____sys_sendmsg+0x10/0x10 [ 1841.832101][T30194] ? __lock_acquire+0x622/0x1c90 [ 1841.832150][T30194] __sys_sendmsg+0x16d/0x220 [ 1841.832176][T30194] ? __pfx___sys_sendmsg+0x10/0x10 [ 1841.832216][T30194] do_syscall_64+0xcd/0xfa0 [ 1841.832236][T30194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1841.832255][T30194] RIP: 0033:0x7f8acbb8f749 [ 1841.832270][T30194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1841.832287][T30194] RSP: 002b:00007f8acca50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1841.832304][T30194] RAX: ffffffffffffffda RBX: 00007f8acbde5fa0 RCX: 00007f8acbb8f749 [ 1841.832316][T30194] RDX: 0000000000040000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1841.832326][T30194] RBP: 00007f8acca50090 R08: 0000000000000000 R09: 0000000000000000 [ 1841.832337][T30194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1841.832347][T30194] R13: 00007f8acbde6038 R14: 00007f8acbde5fa0 R15: 00007ffd2f119708 [ 1841.832373][T30194] [ 1842.272832][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1842.304786][T24592] hsr_slave_0: left promiscuous mode [ 1842.311807][T24592] hsr_slave_1: left promiscuous mode [ 1842.317784][T24592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1842.326413][T24592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1842.334983][T24592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1842.737765][T24592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1842.828521][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1843.875073][T24592] veth1_macvtap: left promiscuous mode [ 1843.888188][T24592] veth0_macvtap: left promiscuous mode [ 1844.275119][T24592] veth1_vlan: left allmulticast mode [ 1844.291802][T24592] veth1_vlan: left promiscuous mode [ 1844.744393][T24592] veth0_vlan: left promiscuous mode [ 1844.843700][ T30] audit: type=1400 audit(2000003172.424:1634): avc: denied { mounton } for pid=30211 comm="syz.6.6825" path="/" dev="configfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1844.955015][T11573] usb 5-1: USB disconnect, device number 65 [ 1845.006796][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1845.069161][ T30] audit: type=1326 audit(2000003172.794:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30222 comm="syz.0.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ffc0000 [ 1845.099970][ T30] audit: type=1326 audit(2000003172.794:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30222 comm="syz.0.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ffc0000 [ 1845.165404][ T30] audit: type=1326 audit(2000003172.794:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30222 comm="syz.0.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f60e738f749 code=0x7ffc0000 [ 1845.253405][ T30] audit: type=1326 audit(2000003172.794:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30222 comm="syz.0.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ffc0000 [ 1845.310682][T25398] udevd[25398]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1845.360294][ T30] audit: type=1326 audit(2000003172.794:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30222 comm="syz.0.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ffc0000 [ 1845.936753][ T30] audit: type=1326 audit(2000003172.794:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30222 comm="syz.0.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f60e738df90 code=0x7ffc0000 [ 1846.126185][T24592] pim6reg (unregistering): left allmulticast mode [ 1846.149969][ T30] audit: type=1326 audit(2000003172.794:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30222 comm="syz.0.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ffc0000 [ 1846.175904][ T30] audit: type=1326 audit(2000003172.804:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30222 comm="syz.0.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ffc0000 [ 1846.299307][ T30] audit: type=1326 audit(2000003172.804:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30222 comm="syz.0.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f60e738f749 code=0x7ffc0000 [ 1846.519211][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1846.536088][T24592] macvlan0 (unregistering): left allmulticast mode [ 1846.551700][T30246] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1846.771890][T24592] team0 (unregistering): Port device team_slave_1 removed [ 1846.807169][T24592] team0 (unregistering): Port device team_slave_0 removed [ 1846.862204][T17904] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1847.021057][T17904] usb 7-1: Using ep0 maxpacket: 32 [ 1847.039055][T17904] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1847.049257][T17904] usb 7-1: config 0 has no interface number 0 [ 1847.053044][T30251] 9pnet_fd: Insufficient options for proto=fd [ 1847.072067][T17904] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1847.086597][T17904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.098237][T17904] usb 7-1: Product: syz [ 1847.103445][T17904] usb 7-1: Manufacturer: syz [ 1847.108257][T17904] usb 7-1: SerialNumber: syz [ 1847.117801][T17904] usb 7-1: config 0 descriptor?? [ 1847.141173][T17904] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1847.535345][T30235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1847.666296][T25398] udevd[25398]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1847.698118][T17904] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1847.738046][T17904] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1847.742822][T30254] macvlan0: entered allmulticast mode [ 1847.820633][T30254] veth1_vlan: entered allmulticast mode [ 1847.908780][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1847.916518][T17904] usb 7-1: USB disconnect, device number 5 [ 1847.928709][T17904] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1847.954969][T17904] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1847.986891][T17904] quatech2 7-1:0.51: device disconnected [ 1848.044923][T30262] block nbd7: shutting down sockets [ 1848.047859][T30265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6837'. [ 1848.531206][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1849.343801][T30279] bond1 (unregistering): Released all slaves [ 1849.915661][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1851.097802][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1851.234169][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1851.665610][T30313] overlayfs: failed to resolve './file1': -2 [ 1852.224666][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1852.247349][T25398] udevd[25398]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1852.710149][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.716487][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.920312][T30337] overlayfs: failed to resolve './file1': -2 [ 1854.190998][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1855.239173][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1855.388531][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1855.412545][T30362] FAULT_INJECTION: forcing a failure. [ 1855.412545][T30362] name failslab, interval 1, probability 0, space 0, times 0 [ 1855.491987][T30362] CPU: 0 UID: 0 PID: 30362 Comm: syz.2.6864 Not tainted syzkaller #0 PREEMPT(full) [ 1855.492002][T30362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1855.492009][T30362] Call Trace: [ 1855.492013][T30362] [ 1855.492017][T30362] dump_stack_lvl+0x16c/0x1f0 [ 1855.492033][T30362] should_fail_ex+0x512/0x640 [ 1855.492046][T30362] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1855.492064][T30362] should_failslab+0xc2/0x120 [ 1855.492077][T30362] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1855.492094][T30362] ? ptlock_alloc+0x1f/0x70 [ 1855.492110][T30362] ? ptlock_alloc+0x1f/0x70 [ 1855.492123][T30362] ptlock_alloc+0x1f/0x70 [ 1855.492137][T30362] pte_alloc_one+0x84/0x350 [ 1855.492150][T30362] __pte_alloc+0x6d/0x380 [ 1855.492161][T30362] ? __pfx___pte_alloc+0x10/0x10 [ 1855.492173][T30362] ? do_raw_spin_lock+0x12c/0x2b0 [ 1855.492187][T30362] do_pte_missing+0x282c/0x3ba0 [ 1855.492202][T30362] ? do_raw_spin_unlock+0x172/0x230 [ 1855.492214][T30362] ? _raw_spin_unlock+0x28/0x50 [ 1855.492229][T30362] ? __pmd_alloc+0x64f/0x8b0 [ 1855.492243][T30362] __handle_mm_fault+0x1556/0x2aa0 [ 1855.492259][T30362] ? mt_find+0x3e2/0xa20 [ 1855.492271][T30362] ? __pfx___handle_mm_fault+0x10/0x10 [ 1855.492285][T30362] ? __pfx_mt_find+0x10/0x10 [ 1855.492302][T30362] ? find_vma+0xbf/0x140 [ 1855.492313][T30362] ? __pfx_find_vma+0x10/0x10 [ 1855.492325][T30362] handle_mm_fault+0x589/0xd10 [ 1855.492340][T30362] ? __pkru_allows_pkey+0x21/0xb0 [ 1855.492351][T30362] do_user_addr_fault+0x7a6/0x1370 [ 1855.492363][T30362] ? rcu_is_watching+0x12/0xc0 [ 1855.492379][T30362] exc_page_fault+0x64/0xc0 [ 1855.492396][T30362] asm_exc_page_fault+0x26/0x30 [ 1855.492407][T30362] RIP: 0010:__put_user_4+0xd/0x20 [ 1855.492417][T30362] Code: 66 89 01 31 c9 0f 01 ca e9 c0 80 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 97 80 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 1855.492427][T30362] RSP: 0018:ffffc9000534fbd8 EFLAGS: 00050202 [ 1855.492437][T30362] RAX: 0000000000034000 RBX: 0000000000000000 RCX: 0000200000000080 [ 1855.492443][T30362] RDX: ffff888020b18000 RSI: ffffffff8b445e79 RDI: ffffffff8bf07440 [ 1855.492450][T30362] RBP: ffffc9000534fcb0 R08: 90d693dff7278c67 R09: 0000000000000000 [ 1855.492456][T30362] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000a69f7c [ 1855.492462][T30362] R13: ffff8881436a44c0 R14: 0000200000000080 R15: ffff8881436a4764 [ 1855.492473][T30362] ? qrtr_ioctl+0x369/0x3f0 [ 1855.492486][T30362] qrtr_ioctl+0x378/0x3f0 [ 1855.492496][T30362] ? __pfx_qrtr_ioctl+0x10/0x10 [ 1855.492508][T30362] ? tomoyo_path_number_perm+0x18d/0x580 [ 1855.492523][T30362] sock_do_ioctl+0x118/0x280 [ 1855.492535][T30362] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1855.492548][T30362] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1855.492564][T30362] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1855.492579][T30362] sock_ioctl+0x227/0x6b0 [ 1855.492590][T30362] ? __pfx_sock_ioctl+0x10/0x10 [ 1855.492600][T30362] ? hook_file_ioctl_common+0x145/0x410 [ 1855.492618][T30362] ? selinux_file_ioctl+0x180/0x270 [ 1855.492629][T30362] ? selinux_file_ioctl+0xb4/0x270 [ 1855.492641][T30362] ? __pfx_sock_ioctl+0x10/0x10 [ 1855.492653][T30362] __x64_sys_ioctl+0x18e/0x210 [ 1855.492668][T30362] do_syscall_64+0xcd/0xfa0 [ 1855.492679][T30362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1855.492689][T30362] RIP: 0033:0x7f6e9af8f749 [ 1855.492698][T30362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1855.492707][T30362] RSP: 002b:00007f6e9be16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1855.492716][T30362] RAX: ffffffffffffffda RBX: 00007f6e9b1e5fa0 RCX: 00007f6e9af8f749 [ 1855.492723][T30362] RDX: 0000200000000080 RSI: 0000000000005411 RDI: 0000000000000003 [ 1855.492729][T30362] RBP: 00007f6e9be16090 R08: 0000000000000000 R09: 0000000000000000 [ 1855.492735][T30362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1855.492741][T30362] R13: 00007f6e9b1e6038 R14: 00007f6e9b1e5fa0 R15: 00007fff9d6d2678 [ 1855.492755][T30362] [ 1855.986923][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1856.040834][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1856.329847][T17617] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1856.480229][T17617] usb 7-1: Using ep0 maxpacket: 16 [ 1856.488674][T17617] usb 7-1: config 253 has an invalid interface number: 184 but max is 0 [ 1856.497867][T17617] usb 7-1: config 253 has no interface number 0 [ 1856.504580][T17617] usb 7-1: config 253 interface 184 has no altsetting 0 [ 1856.514157][T17617] usb 7-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1856.523718][T17617] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.532522][T11573] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1856.540404][T17617] usb 7-1: Product: syz [ 1856.544681][T17617] usb 7-1: Manufacturer: syz [ 1856.549979][T17617] usb 7-1: SerialNumber: syz [ 1856.575225][T17617] go7007 7-1:253.184: probe with driver go7007 failed with error -12 [ 1856.702002][T11573] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1856.711771][T11573] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.727925][T11573] usb 5-1: config 0 descriptor?? [ 1856.740882][T11573] cp210x 5-1:0.0: cp210x converter detected [ 1856.753393][T30389] geneve2: entered promiscuous mode [ 1856.758683][T30389] geneve2: entered allmulticast mode [ 1856.930702][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1856.930713][ T30] audit: type=1400 audit(2000003184.665:1651): avc: denied { override_creds } for pid=30388 comm="syz.2.6874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1857.534046][T11573] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1857.756094][T11573] cp210x 5-1:0.0: GPIO initialisation failed: -524 [ 1857.920545][T11573] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1858.016782][T11573] usb 5-1: USB disconnect, device number 66 [ 1858.027905][T11573] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1858.051820][T11573] cp210x 5-1:0.0: device disconnected [ 1858.515829][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1859.160056][T24266] usb 7-1: USB disconnect, device number 6 [ 1859.224400][T25398] udevd[25398]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1859.284979][T30419] ptrace attach of "./syz-executor exec"[29876] was attempted by "./syz-executor exec"[30419] [ 1860.108175][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1860.128008][T25398] udevd[25398]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1861.473314][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1861.832262][T30454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6893'. [ 1861.943726][T30454] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1862.072617][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1862.213867][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1862.339190][T17908] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1862.353964][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1862.405362][T25398] udevd[25398]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1862.530484][T17908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1862.546619][T17908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1863.077273][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1863.091514][T17908] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1863.101765][T17908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.207327][T30485] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1863.224153][T30485] pim6reg: entered allmulticast mode [ 1863.243092][T17908] usb 5-1: config 0 descriptor?? [ 1863.592485][T30491] netlink: 5052 bytes leftover after parsing attributes in process `syz.2.6904'. [ 1863.602401][T30491] netlink: 5052 bytes leftover after parsing attributes in process `syz.2.6904'. [ 1864.126276][T30494] program syz.2.6904 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1864.389396][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1864.404221][T17908] usbhid 5-1:0.0: can't add hid device: -71 [ 1864.410835][T17908] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1864.456723][T30174] udevd[30174]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1864.511501][T17908] usb 5-1: USB disconnect, device number 67 [ 1864.640353][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1865.043654][T17908] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1865.259883][T17908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1865.298631][T17908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1865.322284][T25394] udevd[25394]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1865.348883][T17908] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice= 0.40 [ 1865.359217][T17908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.501189][T17908] usb 5-1: config 0 descriptor?? [ 1865.508094][T17913] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1865.512129][T17908] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1865.708090][T17913] usb 7-1: Using ep0 maxpacket: 16 [ 1865.709566][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1865.735208][T30524] tmpfs: Bad value for 'mpol' [ 1865.747558][T17913] usb 7-1: config 253 has an invalid interface number: 184 but max is 0 [ 1865.859735][T30526] fuse: Unknown parameter 'maxq ' [ 1865.865409][T17908] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1865.878635][T17908] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1865.892831][T17913] usb 7-1: config 253 has no interface number 0 [ 1865.911009][T17908] usbhid 5-1:0.0: can't add hid device: -71 [ 1865.917331][T17908] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1866.344754][T30522] usb usb8: usbfs: process 30522 (syz.7.6912) did not claim interface 0 before use [ 1866.354343][T17913] usb 7-1: config 253 interface 184 has no altsetting 0 [ 1866.360935][T17908] usb 5-1: USB disconnect, device number 68 [ 1866.363740][T17913] usb 7-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1866.378662][T17913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.447122][T17913] usb 7-1: Product: syz [ 1866.456320][T17913] usb 7-1: Manufacturer: syz [ 1866.462732][T17913] usb 7-1: SerialNumber: syz [ 1866.479543][T17913] go7007 7-1:253.184: probe with driver go7007 failed with error -12 [ 1866.666435][ T30] audit: type=1326 audit(2000003194.406:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30530 comm="syz.0.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ff00000 [ 1866.671556][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1866.729528][ T30] audit: type=1326 audit(2000003194.406:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30530 comm="syz.0.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ff00000 [ 1866.856547][ T30] audit: type=1326 audit(2000003194.406:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30530 comm="syz.0.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ff00000 [ 1867.082067][ T30] audit: type=1326 audit(2000003194.406:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30530 comm="syz.0.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ff00000 [ 1867.117231][ T30] audit: type=1326 audit(2000003194.406:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30530 comm="syz.0.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ff00000 [ 1867.159797][ T30] audit: type=1326 audit(2000003194.406:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30530 comm="syz.0.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ff00000 [ 1867.708444][ T30] audit: type=1326 audit(2000003194.406:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30530 comm="syz.0.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ff00000 [ 1867.949296][ T30] audit: type=1326 audit(2000003194.406:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30530 comm="syz.0.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ff00000 [ 1867.972769][ C1] vkms_vblank_simulate: vblank timer overrun [ 1867.988683][ T30] audit: type=1326 audit(2000003194.406:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30530 comm="syz.0.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ff00000 [ 1868.018382][ T30] audit: type=1326 audit(2000003194.406:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30530 comm="syz.0.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ff00000 [ 1868.042479][ C1] vkms_vblank_simulate: vblank timer overrun [ 1868.077239][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1868.334563][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1868.808482][T17908] usb 7-1: USB disconnect, device number 7 [ 1868.873490][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1869.044152][T30552] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1869.272911][T17908] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1869.393984][T30559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6923'. [ 1869.489987][T17908] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1869.505753][T17908] usb 7-1: config 9 has an invalid interface number: 64 but max is 0 [ 1869.528311][T17908] usb 7-1: config 9 has no interface number 0 [ 1869.553488][T17908] usb 7-1: config 9 interface 64 has no altsetting 0 [ 1869.609954][T30565] FAULT_INJECTION: forcing a failure. [ 1869.609954][T30565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1869.626689][T17908] usb 7-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=1e.21 [ 1869.645078][T30565] CPU: 1 UID: 0 PID: 30565 Comm: syz.7.6925 Not tainted syzkaller #0 PREEMPT(full) [ 1869.645105][T30565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1869.645115][T30565] Call Trace: [ 1869.645121][T30565] [ 1869.645127][T30565] dump_stack_lvl+0x16c/0x1f0 [ 1869.645144][T30565] should_fail_ex+0x512/0x640 [ 1869.645160][T30565] _copy_from_user+0x2e/0xd0 [ 1869.645174][T30565] iommufd_fops_ioctl+0x2f5/0x540 [ 1869.645192][T30565] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1869.645208][T30565] ? hook_file_ioctl_common+0x145/0x410 [ 1869.645228][T30565] ? selinux_file_ioctl+0x180/0x270 [ 1869.645239][T30565] ? selinux_file_ioctl+0xb4/0x270 [ 1869.645252][T30565] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1869.645268][T30565] __x64_sys_ioctl+0x18e/0x210 [ 1869.645285][T30565] do_syscall_64+0xcd/0xfa0 [ 1869.645296][T30565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.645307][T30565] RIP: 0033:0x7fa35b38f749 [ 1869.645316][T30565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1869.645327][T30565] RSP: 002b:00007fa35c259038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1869.645337][T30565] RAX: ffffffffffffffda RBX: 00007fa35b5e5fa0 RCX: 00007fa35b38f749 [ 1869.645344][T30565] RDX: 0000200000000440 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 1869.645350][T30565] RBP: 00007fa35c259090 R08: 0000000000000000 R09: 0000000000000000 [ 1869.645357][T30565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1869.645363][T30565] R13: 00007fa35b5e6038 R14: 00007fa35b5e5fa0 R15: 00007ffe0597a0a8 [ 1869.645377][T30565] [ 1869.809261][ C1] vkms_vblank_simulate: vblank timer overrun [ 1869.815414][T17908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.868420][T17908] usb 7-1: Product: syz [ 1869.890324][T17908] usb 7-1: Manufacturer: syz [ 1869.900453][T17908] usb 7-1: SerialNumber: syz [ 1869.916187][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1870.286113][T25398] udevd[25398]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1870.337543][T17913] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 1870.694291][T17908] cxacru 7-1:9.64: cxacru_bind: interface has incorrect endpoints [ 1870.703553][T17908] cxacru 7-1:9.64: usbatm_usb_probe: bind failed: -19! [ 1870.715625][T17908] usb 7-1: USB disconnect, device number 8 [ 1870.749589][T17913] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1870.764589][T17913] usb 3-1: not running at top speed; connect to a high speed hub [ 1870.800417][T17913] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1870.839881][T17913] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1870.876503][T17913] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1870.908602][T17913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.926164][T17913] usb 3-1: Product: syz [ 1870.930507][T17913] usb 3-1: Manufacturer: syz [ 1870.938952][T17913] usb 3-1: SerialNumber: syz [ 1871.272030][T25398] udevd[25398]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1871.371643][T30563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.380886][T30563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.735513][T25398] udevd[25398]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1872.249369][T30589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1873.554906][T17913] usb 3-1: USB disconnect, device number 80 [ 1873.564268][T30173] udevd[30173]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1873.681615][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1873.711958][T25398] udevd[25398]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1874.772850][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1875.255293][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1875.320081][T30614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1875.340806][T30614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1875.894520][T30629] macvlan0: entered allmulticast mode [ 1875.900862][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1875.928281][T30629] veth1_vlan: entered allmulticast mode [ 1875.964788][T30632] netlink: 'syz.2.6946': attribute type 10 has an invalid length. [ 1876.035412][T30632] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1876.265439][T30637] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1876.329835][T30637] pim6reg: entered allmulticast mode [ 1877.029953][T25398] udevd[25398]: symlink '../../loop0' '/dev/disk/by-diskseq/94.tmp-b7:0' failed: Read-only file system [ 1878.785384][T25380] block device autoloading is deprecated and will be removed. [ 1878.790023][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1878.822232][T25394] udevd[25394]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1879.588341][T25398] udevd[25398]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1879.694069][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1880.190875][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1880.192365][T25398] udevd[25398]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1880.269133][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1880.484270][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1880.531742][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1880.544102][T17908] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1881.083743][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1881.175731][T17908] usb 3-1: Using ep0 maxpacket: 8 [ 1881.500235][T17908] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1881.517120][T17908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.549762][T17908] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1881.560482][T17908] pvrusb2: ********** [ 1881.573303][T17908] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1881.602359][T17908] pvrusb2: Important functionality might not be entirely working. [ 1881.622462][T17908] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1881.635282][T17908] pvrusb2: ********** [ 1881.650017][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1881.784861][ T2336] pvrusb2: Invalid write control endpoint [ 1881.795325][T30706] o2cb: This node has not been configured. [ 1881.802024][T30706] o2cb: Cluster check failed. Fix errors before retrying. [ 1881.809527][T30706] (syz.4.6967,30706,0):user_dlm_register:674 ERROR: status = -22 [ 1881.817601][T30706] (syz.4.6967,30706,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 1881.831704][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 1881.831717][ T30] audit: type=1400 audit(2000003209.538:1718): avc: denied { associate } for pid=30705 comm="syz.4.6967" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1881.859873][T30706] xt_hashlimit: size too large, truncated to 1048576 [ 1882.619792][ T2336] pvrusb2: Invalid write control endpoint [ 1882.626816][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1882.641327][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1882.687656][T30689] sctp: [Deprecated]: syz.2.6960 (pid 30689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1882.687656][T30689] Use struct sctp_sack_info instead [ 1882.706712][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1882.727708][ T2336] pvrusb2: Device being rendered inoperable [ 1882.742829][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1882.754750][T13075] usb 3-1: USB disconnect, device number 81 [ 1882.762160][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1882.775248][ T2336] pvrusb2: Attached sub-driver cx25840 [ 1882.783278][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1882.797499][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1882.862619][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1883.037737][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1883.439599][ T13] bridge_slave_1: left allmulticast mode [ 1883.450176][ T13] bridge_slave_1: left promiscuous mode [ 1883.450987][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1883.554444][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1883.595055][ T13] bridge_slave_0: left allmulticast mode [ 1883.604332][ T13] bridge_slave_0: left promiscuous mode [ 1883.611759][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1883.699399][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1884.393066][T25398] udevd[25398]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1885.673011][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1885.824580][T30767] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1886.339470][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1886.446425][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1886.457431][ T13] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1886.485194][ T13] bond0 (unregistering): Released all slaves [ 1887.064644][ T13] bond1 (unregistering): Released all slaves [ 1887.084488][T30767] pim6reg: entered allmulticast mode [ 1887.162843][ T13] tipc: Left network mode [ 1887.237727][ T30] audit: type=1400 audit(2000003214.978:1719): avc: denied { write } for pid=30783 comm="syz.2.6987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1887.272817][T25398] udevd[25398]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1887.844335][T30795] fuse: Bad value for 'user_id' [ 1887.862515][T30795] fuse: Bad value for 'user_id' [ 1888.047388][ T30] audit: type=1400 audit(2000003215.799:1720): avc: denied { map } for pid=30797 comm="syz.4.6991" path="/dev/ttyS3" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1888.085120][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1888.495442][ T13] hsr_slave_0: left promiscuous mode [ 1888.550317][T30796] infiniband syz2: set active [ 1888.555048][T30796] infiniband syz2: added veth0_vlan [ 1888.574548][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1888.584965][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1888.604288][ T13] batman_adv: batadv0: Interface deactivated: macvlan2 [ 1888.604758][T30796] RDS/IB: syz2: added [ 1888.616683][ T13] batman_adv: batadv0: Removing interface: macvlan2 [ 1888.666421][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1888.694257][T30796] smc: adding ib device syz2 with port count 1 [ 1888.718951][T30796] smc: ib device syz2 port 1 has pnetid ßßßß (user defined) [ 1889.114777][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1889.338195][ T13] macvlan0 (unregistering): left allmulticast mode [ 1890.213360][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1890.406556][T17908] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1890.415683][T30820] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1890.650107][T17908] usb 3-1: Using ep0 maxpacket: 16 [ 1890.932276][T17908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1890.939620][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1890.961519][T17908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1890.971728][T17908] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1890.992930][T17908] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1891.112341][T17908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.123652][T17908] usb 3-1: config 0 descriptor?? [ 1891.312782][ T13] lo (unregistering): left allmulticast mode [ 1891.495765][T25398] udevd[25398]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1891.604154][T17908] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002D/input/input97 [ 1891.851168][T17904] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1891.885139][T17908] microsoft 0003:045E:07DA.002D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1892.047190][T17904] usb 5-1: Using ep0 maxpacket: 8 [ 1892.074106][T17904] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1892.086092][T25394] udevd[25394]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1892.101542][T17904] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 1892.159797][ T13] IPVS: stop unused estimator thread 0... [ 1892.167670][T17904] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 118, changing to 10 [ 1892.179670][T17904] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 24940, setting to 1024 [ 1892.256083][T17904] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1892.297963][T17904] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1892.321961][T17904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.330494][T17904] usb 5-1: Product: syz [ 1892.334743][T17904] usb 5-1: Manufacturer: syz [ 1892.339816][T17904] usb 5-1: SerialNumber: syz [ 1892.354345][T30834] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1892.368280][T17904] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1892.381520][T17904] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 1892.388370][T17904] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 1892.445363][T11573] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1892.595073][T11573] usb 7-1: Using ep0 maxpacket: 16 [ 1892.604024][T11573] usb 7-1: config 253 has an invalid interface number: 184 but max is 0 [ 1892.639285][T11573] usb 7-1: config 253 has no interface number 0 [ 1892.653389][T11573] usb 7-1: config 253 interface 184 has no altsetting 0 [ 1892.683633][T11573] usb 7-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1892.715051][T11573] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.741830][T11573] usb 7-1: Product: syz [ 1892.751799][T11573] usb 7-1: Manufacturer: syz [ 1892.764251][T11573] usb 7-1: SerialNumber: syz [ 1892.796931][T11573] go7007 7-1:253.184: probe with driver go7007 failed with error -12 [ 1892.879106][T17617] usb 5-1: USB disconnect, device number 69 [ 1893.288535][T29559] Bluetooth: hci3: connection err: -111 [ 1893.585563][T11573] usb 3-1: USB disconnect, device number 82 [ 1893.611930][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1894.242913][T30867] overlayfs: failed to resolve './file1': -2 [ 1895.117968][T24266] usb 7-1: USB disconnect, device number 9 [ 1895.380344][T25398] udevd[25398]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1895.406859][T30876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11468 sclass=netlink_route_socket pid=30876 comm=syz.7.7010 [ 1895.407939][T25394] udevd[25394]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1895.743278][ T30] audit: type=1326 audit(2000003223.489:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ffc0000 [ 1895.798370][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1895.836786][ T30] audit: type=1326 audit(2000003223.489:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ffc0000 [ 1895.946800][ T30] audit: type=1326 audit(2000003223.529:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f60e738f749 code=0x7ffc0000 [ 1895.989673][ T30] audit: type=1326 audit(2000003223.529:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ffc0000 [ 1896.467543][ T30] audit: type=1326 audit(2000003223.529:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ffc0000 [ 1896.491071][ T30] audit: type=1326 audit(2000003223.539:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f60e738f749 code=0x7ffc0000 [ 1896.528170][ T30] audit: type=1326 audit(2000003223.539:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ffc0000 [ 1896.566328][ T30] audit: type=1326 audit(2000003223.539:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ffc0000 [ 1896.591782][ T30] audit: type=1326 audit(2000003223.539:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f60e738f749 code=0x7ffc0000 [ 1896.622842][ T30] audit: type=1326 audit(2000003223.539:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30879 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e738f749 code=0x7ffc0000 [ 1896.659255][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1896.694613][T30896] netlink: 'syz.6.7016': attribute type 2 has an invalid length. [ 1896.738322][T30896] !: entered promiscuous mode [ 1896.746617][T29559] Bluetooth: hci1: hcon ffff888037084000 sent 1 < count 6 [ 1896.753983][T29559] Bluetooth: hci1: hcon ffff888037084000 sent 0 < count 5 [ 1896.765469][T29559] Bluetooth: hci1: hcon ffff888037080000 sent 1 < count 3 [ 1896.772784][T29559] Bluetooth: hci1: hcon ffff888037084000 sent 0 < count 30128 [ 1896.799527][T29559] Bluetooth: hci1: hcon ffff888037080000 sent 0 < count 64965 [ 1896.824554][T13075] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1896.999240][T25398] udevd[25398]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1897.160241][T13075] usb 5-1: Using ep0 maxpacket: 16 [ 1897.172852][T13075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1897.201255][T13075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1897.222757][T13075] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1897.272599][T13075] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1897.282466][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1897.309545][T13075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.336457][T13075] usb 5-1: config 0 descriptor?? [ 1897.371632][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1897.446457][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1897.470991][T30910] bridge_slave_0: left allmulticast mode [ 1897.486919][T30910] bridge_slave_0: left promiscuous mode [ 1897.494785][T30910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1897.505954][T30910] bridge_slave_1: left allmulticast mode [ 1897.511616][T30910] bridge_slave_1: left promiscuous mode [ 1897.519095][T30910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1897.531159][T30910] bond0: (slave bond_slave_0): Releasing backup interface [ 1897.544211][T30910] bond0: (slave bond_slave_1): Releasing backup interface [ 1897.567140][T30910] team0: Port device team_slave_0 removed [ 1897.578228][T30910] team0: Port device team_slave_1 removed [ 1897.585758][T30910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1897.593155][T30910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1897.602310][T30910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1897.609875][T30910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1897.619460][T30910] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1897.771507][T13075] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002E/input/input98 [ 1897.790466][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1897.875775][T13075] microsoft 0003:045E:07DA.002E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1897.966791][T30924] overlayfs: failed to resolve './file1': -2 [ 1898.419233][T30925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1898.567941][T13075] usb 5-1: USB disconnect, device number 70 [ 1898.773937][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1899.622293][T17904] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1900.195097][T17904] usb 7-1: Using ep0 maxpacket: 8 [ 1900.207176][T17904] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1900.215775][T17904] usb 7-1: config 0 has no interface number 0 [ 1900.242898][T17904] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1900.252549][T17904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.260747][T17904] usb 7-1: Product: syz [ 1900.268218][T17904] usb 7-1: Manufacturer: syz [ 1900.272864][T17904] usb 7-1: SerialNumber: syz [ 1900.301401][T17904] usb 7-1: config 0 descriptor?? [ 1900.573730][T17904] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1900.587442][T17904] uvcvideo 7-1:0.31: Entity type for entity Output 6 was not initialized! [ 1900.613868][T17904] uvcvideo 7-1:0.31: Failed to create links for entity 5 [ 1900.631391][T17904] uvcvideo 7-1:0.31: Failed to register entities (-22). [ 1900.657978][T29003] udevd[29003]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1900.691945][T17904] usb 7-1: USB disconnect, device number 10 [ 1900.812612][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1900.894262][T13075] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1901.117387][T13075] usb 5-1: device descriptor read/64, error -71 [ 1901.176999][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1901.405722][T13075] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1901.645063][T13075] usb 5-1: device descriptor read/64, error -71 [ 1901.755337][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1901.784895][T13075] usb usb5-port1: attempt power cycle [ 1902.019646][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1902.230312][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1902.264166][T13075] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1902.285761][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1902.297999][T13075] usb 5-1: device descriptor read/8, error -71 [ 1902.423937][T17908] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1902.915477][T13075] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1902.943890][T17908] usb 7-1: Using ep0 maxpacket: 16 [ 1902.949645][T13075] usb 5-1: device descriptor read/8, error -71 [ 1902.957726][T17908] usb 7-1: config 253 has an invalid interface number: 184 but max is 0 [ 1902.966587][T17908] usb 7-1: config 253 has no interface number 0 [ 1902.972899][T17908] usb 7-1: config 253 interface 184 has no altsetting 0 [ 1902.985499][T17908] usb 7-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1902.994741][T17908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.007163][T17908] usb 7-1: Product: syz [ 1903.017072][T17908] usb 7-1: Manufacturer: syz [ 1903.021702][T17908] usb 7-1: SerialNumber: syz [ 1903.036464][T17908] go7007 7-1:253.184: probe with driver go7007 failed with error -12 [ 1903.064162][T13075] usb usb5-port1: unable to enumerate USB device [ 1903.191900][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1904.042512][T31009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7049'. [ 1904.158602][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1904.254889][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1904.548898][T31025] overlayfs: failed to resolve './file1': -2 [ 1905.177498][T24266] usb 7-1: USB disconnect, device number 11 [ 1905.250698][T31028] !: renamed from dummy0 (while UP) [ 1905.569488][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1905.674212][T31041] tmpfs: Bad value for 'mpol' [ 1906.800155][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1906.870468][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1907.538738][T31048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1908.178059][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1908.386969][T31076] tmpfs: Bad value for 'mpol' [ 1909.473923][T11573] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1909.653137][T11573] usb 5-1: Using ep0 maxpacket: 16 [ 1909.672692][T11573] usb 5-1: config 253 has an invalid interface number: 184 but max is 0 [ 1909.698047][T11573] usb 5-1: config 253 has no interface number 0 [ 1909.702517][T25398] udevd[25398]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1909.707860][T11573] usb 5-1: config 253 interface 184 has no altsetting 0 [ 1909.942674][T11573] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1909.953740][T11573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.028635][T11573] usb 5-1: Product: syz [ 1910.045547][T11573] usb 5-1: Manufacturer: syz [ 1910.050391][T11573] usb 5-1: SerialNumber: syz [ 1910.069070][T11573] go7007 5-1:253.184: probe with driver go7007 failed with error -12 [ 1910.132921][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1910.177722][T31091] ip6t_rpfilter: unknown options [ 1910.648764][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1911.028338][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1911.058509][T25398] udevd[25398]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1911.425588][T13077] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1911.495371][T17908] usb 5-1: USB disconnect, device number 75 [ 1911.888432][T13077] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1911.905177][T13077] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.913742][T13077] usb 7-1: Product: syz [ 1911.917939][T13077] usb 7-1: Manufacturer: syz [ 1911.923102][T13077] usb 7-1: SerialNumber: syz [ 1912.058835][T25398] udevd[25398]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1912.352416][T31125] Cannot find add_set index 3 as target [ 1912.449129][T13077] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1912.504445][T13077] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1912.593226][T31130] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7080'. [ 1912.813904][T31130] fuse: Unknown parameter 'maxq ' [ 1912.848230][T31130] usb usb8: usbfs: process 31130 (syz.4.7080) did not claim interface 0 before use [ 1913.180727][T25398] udevd[25398]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1913.792716][T17908] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1914.046719][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.066070][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.432593][T17908] usb 5-1: Using ep0 maxpacket: 16 [ 1914.462422][T17908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1914.483670][T17908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1914.499541][T17908] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1914.513304][T17908] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1914.523121][T17908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1914.540383][T17908] usb 5-1: config 0 descriptor?? [ 1914.567856][T31100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1914.578398][T31100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1915.655009][T17913] IPVS: starting estimator thread 0... [ 1915.702627][T17908] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002F/input/input99 [ 1915.744384][T13077] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 1915.762669][T13077] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 1915.795106][T17908] microsoft 0003:045E:07DA.002F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1915.800546][T31157] IPVS: using max 43 ests per chain, 103200 per kthread [ 1915.842176][T13077] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1915.910325][T13077] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1915.944807][T30174] udevd[30174]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1916.132402][T29559] Bluetooth: hci1: command 0x0406 tx timeout [ 1916.547716][T13077] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1916.625673][T31165] syz_tun: entered allmulticast mode [ 1916.677709][T13077] usb 7-1: USB disconnect, device number 12 [ 1916.775953][T31165] netlink: 'syz.6.7092': attribute type 1 has an invalid length. [ 1916.880414][T31165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1916.894923][T25398] udevd[25398]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1916.963595][T31161] syz_tun: left allmulticast mode [ 1916.972415][T17908] usb 5-1: reset high-speed USB device number 76 using dummy_hcd [ 1917.419105][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1917.471934][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1918.442389][T31185] fuse: Unknown parameter 'maxq ' [ 1918.442532][T31197] usb usb8: usbfs: process 31197 (syz.2.7098) did not claim interface 0 before use [ 1918.487523][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1918.606663][T13075] usb 5-1: USB disconnect, device number 76 [ 1919.881202][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1920.058341][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1920.124249][T31222] bridge0: port 1(netdevsim0) entered blocking state [ 1920.130997][T31222] bridge0: port 1(netdevsim0) entered disabled state [ 1920.138113][T31222] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1920.147200][T31222] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1920.155668][T31222] bridge0: port 1(netdevsim0) entered blocking state [ 1920.162378][T31222] bridge0: port 1(netdevsim0) entered forwarding state [ 1921.090512][T25398] udevd[25398]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1921.499273][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1921.499284][ T30] audit: type=1326 audit(2000003249.242:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.4.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d758f749 code=0x7ffc0000 [ 1921.533793][ T30] audit: type=1326 audit(2000003249.282:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.4.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d758f749 code=0x7ffc0000 [ 1921.646090][ T30] audit: type=1326 audit(2000003249.292:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.4.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72d758f749 code=0x7ffc0000 [ 1921.669958][ T30] audit: type=1326 audit(2000003249.292:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.4.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d758f749 code=0x7ffc0000 [ 1921.726353][ T30] audit: type=1326 audit(2000003249.292:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.4.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d758f749 code=0x7ffc0000 [ 1922.242038][ T30] audit: type=1326 audit(2000003249.292:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.4.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f72d758f749 code=0x7ffc0000 [ 1922.296503][ T30] audit: type=1326 audit(2000003249.292:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.4.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d758f749 code=0x7ffc0000 [ 1922.320594][ T30] audit: type=1326 audit(2000003249.292:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.4.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d758f749 code=0x7ffc0000 [ 1922.360501][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1922.464597][ T30] audit: type=1326 audit(2000003249.292:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.4.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f72d758f749 code=0x7ffc0000 [ 1922.507153][T31239] tmpfs: Bad value for 'mpol' [ 1922.628983][ T30] audit: type=1326 audit(2000003249.292:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.4.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d758f749 code=0x7ffc0000 [ 1923.086283][T31245] random: crng reseeded on system resumption [ 1923.411010][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1923.611571][T11573] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1923.660852][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1923.704591][T31260] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1923.731554][T31260] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1923.917603][T11573] usb 3-1: Using ep0 maxpacket: 32 [ 1923.924588][T11573] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1923.932865][T11573] usb 3-1: config 0 has no interface number 0 [ 1923.939446][T11573] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1923.951683][T11573] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1923.964558][T31260] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1923.964614][T11573] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.981444][T11573] usb 3-1: Product: syz [ 1924.454678][T11573] usb 3-1: Manufacturer: syz [ 1924.461840][T11573] usb 3-1: SerialNumber: syz [ 1924.463035][T31260] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1924.468464][T11573] usb 3-1: config 0 descriptor?? [ 1924.497527][T31260] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1924.497952][T11573] smsc75xx v1.0.0 [ 1924.605215][T31260] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1924.672529][T31260] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1924.871790][T31260] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1925.313957][T11573] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1925.325974][T11573] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1925.340787][T11573] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1925.361304][T11573] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1925.370985][T11573] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1925.381359][T11573] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1925.394115][T11573] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 1925.922902][T17904] usb 3-1: USB disconnect, device number 83 [ 1927.091026][T25398] udevd[25398]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1927.245505][T25398] udevd[25398]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1927.309315][T31293] FAULT_INJECTION: forcing a failure. [ 1927.309315][T31293] name failslab, interval 1, probability 0, space 0, times 0 [ 1927.323615][T31293] CPU: 0 UID: 0 PID: 31293 Comm: syz.6.7131 Not tainted syzkaller #0 PREEMPT(full) [ 1927.323639][T31293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1927.323650][T31293] Call Trace: [ 1927.323657][T31293] [ 1927.323664][T31293] dump_stack_lvl+0x16c/0x1f0 [ 1927.323685][T31293] should_fail_ex+0x512/0x640 [ 1927.323706][T31293] ? __kmalloc_noprof+0xca/0x880 [ 1927.323734][T31293] should_failslab+0xc2/0x120 [ 1927.323756][T31293] __kmalloc_noprof+0xdd/0x880 [ 1927.323778][T31293] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1927.323804][T31293] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1927.323829][T31293] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1927.323848][T31293] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1927.323868][T31293] ? __mutex_lock+0x1c5/0x1060 [ 1927.323889][T31293] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1927.323909][T31293] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1927.323926][T31293] ? genl_get_cmd+0x194/0x580 [ 1927.323962][T31293] ? __radix_tree_lookup+0x21f/0x2c0 [ 1927.323992][T31293] genl_rcv_msg+0x55c/0x800 [ 1927.324013][T31293] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1927.324032][T31293] ? __pfx_hwsim_tx_info_frame_received_nl+0x10/0x10 [ 1927.324067][T31293] netlink_rcv_skb+0x158/0x420 [ 1927.324093][T31293] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1927.324112][T31293] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1927.324150][T31293] ? netlink_deliver_tap+0x1ae/0xd30 [ 1927.324184][T31293] genl_rcv+0x28/0x40 [ 1927.324199][T31293] netlink_unicast+0x5aa/0x870 [ 1927.324228][T31293] ? __pfx_netlink_unicast+0x10/0x10 [ 1927.324252][T31293] ? __asan_memset+0x23/0x50 [ 1927.324280][T31293] ? __build_skb_around+0x278/0x3b0 [ 1927.324307][T31293] netlink_sendmsg+0x8c8/0xdd0 [ 1927.324337][T31293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1927.324374][T31293] ____sys_sendmsg+0xa98/0xc70 [ 1927.324392][T31293] ? copy_msghdr_from_user+0x10a/0x160 [ 1927.324416][T31293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1927.324447][T31293] ___sys_sendmsg+0x134/0x1d0 [ 1927.324473][T31293] ? __pfx____sys_sendmsg+0x10/0x10 [ 1927.324494][T31293] ? __lock_acquire+0x622/0x1c90 [ 1927.324544][T31293] __sys_sendmsg+0x16d/0x220 [ 1927.324568][T31293] ? __pfx___sys_sendmsg+0x10/0x10 [ 1927.324610][T31293] do_syscall_64+0xcd/0xfa0 [ 1927.324629][T31293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1927.324648][T31293] RIP: 0033:0x7f8acbb8f749 [ 1927.324662][T31293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1927.324679][T31293] RSP: 002b:00007f8acca50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1927.324697][T31293] RAX: ffffffffffffffda RBX: 00007f8acbde5fa0 RCX: 00007f8acbb8f749 [ 1927.324709][T31293] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1927.324719][T31293] RBP: 00007f8acca50090 R08: 0000000000000000 R09: 0000000000000000 [ 1927.324729][T31293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1927.324740][T31293] R13: 00007f8acbde6038 R14: 00007f8acbde5fa0 R15: 00007ffd2f119708 [ 1927.324766][T31293] [ 1927.628602][ C0] vkms_vblank_simulate: vblank timer overrun [ 1928.966242][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1929.234098][T25398] udevd[25398]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1930.411841][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1930.428244][T25398] udevd[25398]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1933.098731][T31336] FAULT_INJECTION: forcing a failure. [ 1933.098731][T31336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1933.175627][T31336] CPU: 0 UID: 0 PID: 31336 Comm: syz.6.7136 Not tainted syzkaller #0 PREEMPT(full) [ 1933.175653][T31336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1933.175664][T31336] Call Trace: [ 1933.175671][T31336] [ 1933.175679][T31336] dump_stack_lvl+0x16c/0x1f0 [ 1933.175703][T31336] should_fail_ex+0x512/0x640 [ 1933.175728][T31336] _copy_to_iter+0x29f/0x1710 [ 1933.175754][T31336] ? rcu_is_watching+0x12/0xc0 [ 1933.175777][T31336] ? irqentry_exit+0x3b/0x90 [ 1933.175794][T31336] ? lockdep_hardirqs_on+0x7c/0x110 [ 1933.175811][T31336] ? __pfx__copy_to_iter+0x10/0x10 [ 1933.175831][T31336] ? preempt_schedule_thunk+0x16/0x30 [ 1933.175860][T31336] ? preempt_schedule_common+0x44/0xc0 [ 1933.175889][T31336] ? preempt_schedule_thunk+0x16/0x30 [ 1933.175921][T31336] timerfd_read_iter+0x4b1/0x9c0 [ 1933.175952][T31336] ? __pfx_timerfd_read_iter+0x10/0x10 [ 1933.175975][T31336] ? finish_task_switch.isra.0+0x22a/0xc10 [ 1933.176000][T31336] ? inode_has_perm+0x183/0x1d0 [ 1933.176028][T31336] ? file_has_perm+0x27d/0x350 [ 1933.176056][T31336] ? __pfx_file_has_perm+0x10/0x10 [ 1933.176086][T31336] do_iter_readv_writev+0x743/0x9e0 [ 1933.176122][T31336] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1933.176148][T31336] ? selinux_file_permission+0x126/0x660 [ 1933.176171][T31336] ? bpf_lsm_file_permission+0x9/0x10 [ 1933.176189][T31336] ? security_file_permission+0x71/0x210 [ 1933.176212][T31336] ? rw_verify_area+0xcf/0x6c0 [ 1933.176240][T31336] vfs_readv+0x4cb/0x8b0 [ 1933.176273][T31336] ? __pfx_vfs_readv+0x10/0x10 [ 1933.176298][T31336] ? lockdep_hardirqs_on+0x7c/0x110 [ 1933.176332][T31336] ? __fget_files+0x20e/0x3c0 [ 1933.176349][T31336] ? __fget_files+0x1e0/0x3c0 [ 1933.176374][T31336] ? do_readv+0x132/0x340 [ 1933.176397][T31336] do_readv+0x132/0x340 [ 1933.176423][T31336] ? __pfx_do_readv+0x10/0x10 [ 1933.176456][T31336] do_syscall_64+0xcd/0xfa0 [ 1933.176475][T31336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1933.176493][T31336] RIP: 0033:0x7f8acbb8f749 [ 1933.176507][T31336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1933.176524][T31336] RSP: 002b:00007f8acca0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1933.176541][T31336] RAX: ffffffffffffffda RBX: 00007f8acbde6180 RCX: 00007f8acbb8f749 [ 1933.176553][T31336] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000007 [ 1933.176564][T31336] RBP: 00007f8acca0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1933.176574][T31336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1933.176584][T31336] R13: 00007f8acbde6218 R14: 00007f8acbde6180 R15: 00007ffd2f119708 [ 1933.176609][T31336] [ 1933.812462][T31338] FAULT_INJECTION: forcing a failure. [ 1933.812462][T31338] name failslab, interval 1, probability 0, space 0, times 0 [ 1933.845610][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1933.871902][T31338] CPU: 0 UID: 0 PID: 31338 Comm: syz.7.7143 Not tainted syzkaller #0 PREEMPT(full) [ 1933.871927][T31338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1933.871937][T31338] Call Trace: [ 1933.871944][T31338] [ 1933.871951][T31338] dump_stack_lvl+0x16c/0x1f0 [ 1933.871972][T31338] should_fail_ex+0x512/0x640 [ 1933.871993][T31338] ? fs_reclaim_acquire+0xae/0x150 [ 1933.872016][T31338] should_failslab+0xc2/0x120 [ 1933.872037][T31338] __kmalloc_noprof+0xdd/0x880 [ 1933.872062][T31338] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1933.872089][T31338] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1933.872114][T31338] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1933.872138][T31338] ? tomoyo_profile+0x47/0x60 [ 1933.872164][T31338] tomoyo_path_number_perm+0x245/0x580 [ 1933.872180][T31338] ? tomoyo_path_number_perm+0x237/0x580 [ 1933.872199][T31338] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1933.872218][T31338] ? find_held_lock+0x2b/0x80 [ 1933.872265][T31338] ? find_held_lock+0x2b/0x80 [ 1933.872287][T31338] ? hook_file_ioctl_common+0x145/0x410 [ 1933.872317][T31338] ? __fget_files+0x20e/0x3c0 [ 1933.872341][T31338] security_file_ioctl+0x9b/0x240 [ 1933.872363][T31338] __x64_sys_ioctl+0xb7/0x210 [ 1933.872390][T31338] do_syscall_64+0xcd/0xfa0 [ 1933.872410][T31338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1933.872428][T31338] RIP: 0033:0x7fa35b38f749 [ 1933.872443][T31338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1933.872459][T31338] RSP: 002b:00007fa35c259038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1933.872477][T31338] RAX: ffffffffffffffda RBX: 00007fa35b5e5fa0 RCX: 00007fa35b38f749 [ 1933.872489][T31338] RDX: 0000200000000140 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 1933.872500][T31338] RBP: 00007fa35c259090 R08: 0000000000000000 R09: 0000000000000000 [ 1933.872510][T31338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1933.872520][T31338] R13: 00007fa35b5e6038 R14: 00007fa35b5e5fa0 R15: 00007ffe0597a0a8 [ 1933.872546][T31338] [ 1933.872554][T31338] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1933.996867][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1934.142953][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1935.705815][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1935.705832][ T30] audit: type=1400 audit(2000003263.454:1774): avc: denied { recv } for pid=11310 comm="kworker/1:0H" saddr=10.128.0.169 src=30006 daddr=10.128.1.137 dest=54880 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1937.290195][ T30] audit: type=1400 audit(2000003264.194:1775): avc: denied { write } for pid=31359 comm="syz.4.7150" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1937.402144][ T30] audit: type=1400 audit(2000003265.104:1776): avc: denied { create } for pid=31359 comm="syz.4.7150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1937.425153][ T30] audit: type=1400 audit(2000003265.114:1777): avc: denied { read write } for pid=29876 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1937.450763][ T30] audit: type=1400 audit(2000003265.114:1778): avc: denied { open } for pid=29876 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1937.459338][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1937.488310][ T30] audit: type=1400 audit(2000003265.114:1779): avc: denied { ioctl } for pid=29876 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1937.517450][ T30] audit: type=1400 audit(2000003265.124:1780): avc: denied { getopt } for pid=31359 comm="syz.4.7150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1937.537303][ T30] audit: type=1400 audit(2000003265.124:1781): avc: denied { module_request } for pid=31359 comm="syz.4.7150" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1937.563972][ T30] audit: type=1400 audit(2000003265.314:1782): avc: denied { allowed } for pid=31359 comm="syz.4.7150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1937.565831][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1937.598866][ T30] audit: type=1400 audit(2000003265.344:1783): avc: denied { prog_load } for pid=31359 comm="syz.4.7150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1937.882244][T31377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1937.902560][T31377] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1938.190086][T17913] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1938.349087][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1938.438116][T17913] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1938.453114][T17913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1938.493908][T17913] usb 7-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 1938.509745][T17913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.751817][T17913] usb 7-1: Product: syz [ 1938.814514][T17913] usb 7-1: Manufacturer: syz [ 1938.817653][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1938.819257][T17913] usb 7-1: SerialNumber: syz [ 1938.865915][T17913] usb 7-1: config 0 descriptor?? [ 1938.877267][T31377] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1938.962587][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1939.191441][T31397] 9pnet_fd: Insufficient options for proto=fd [ 1939.775613][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1940.823889][T17913] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 1941.177314][T17913] input: Griffin PowerMate as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input100 [ 1941.195200][T30174] udevd[30174]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1941.244431][ C1] powermate: config urb returned -71 [ 1941.250100][ C1] powermate: config urb returned -71 [ 1941.255430][ C1] powermate: config urb returned -71 [ 1941.260845][ C1] powermate: config urb returned -71 [ 1941.383608][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1941.383623][ T30] audit: type=1400 audit(2000003269.134:1825): avc: denied { create } for pid=31413 comm="syz.2.7166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1941.425296][T17913] usb 7-1: USB disconnect, device number 13 [ 1941.431317][ C1] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1941.840867][ T30] audit: type=1400 audit(2000003269.134:1826): avc: denied { bind } for pid=31413 comm="syz.2.7166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1942.004665][ T30] audit: type=1400 audit(2000003269.175:1827): avc: denied { create } for pid=31412 comm="syz.6.7165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1942.033729][ T30] audit: type=1400 audit(2000003269.175:1828): avc: denied { setopt } for pid=31412 comm="syz.6.7165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1942.135217][T31425] overlayfs: failed to resolve './file1': -2 [ 1942.584881][ T30] audit: type=1400 audit(2000003270.335:1829): avc: denied { read } for pid=31428 comm="syz.7.7169" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1942.797851][T30174] udevd[30174]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1942.809159][ T30] audit: type=1400 audit(2000003270.335:1830): avc: denied { open } for pid=31428 comm="syz.7.7169" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1942.898199][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1942.922933][ T30] audit: type=1400 audit(2000003270.375:1831): avc: denied { ioctl } for pid=31428 comm="syz.7.7169" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1943.002275][ T30] audit: type=1400 audit(2000003270.455:1832): avc: denied { create } for pid=31430 comm="syz.0.7170" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1943.093532][ T30] audit: type=1400 audit(2000003270.495:1833): avc: denied { read write } for pid=31430 comm="syz.0.7170" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1943.160680][T24266] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 1943.188368][ T30] audit: type=1400 audit(2000003270.495:1834): avc: denied { open } for pid=31430 comm="syz.0.7170" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1943.249549][T24266] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1943.413278][T30174] udevd[30174]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1943.493110][T31441] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31441 comm=syz.0.7174 [ 1943.629332][T24266] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1943.635692][T31441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7174'. [ 1943.678135][T31441] bridge_slave_1: left allmulticast mode [ 1943.690340][T31441] bridge_slave_1: left promiscuous mode [ 1943.696172][T31441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1943.813266][T24266] usb 5-1: Using ep0 maxpacket: 8 [ 1943.834586][T31441] bridge_slave_0: left allmulticast mode [ 1943.840626][T31441] bridge_slave_0: left promiscuous mode [ 1943.848462][T31441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1943.854021][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1944.054910][T24266] usb 5-1: config 125 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1944.076524][T24266] usb 5-1: config 125 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1944.093230][T24266] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1944.108907][T24266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1944.617149][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1944.675243][T25398] udevd[25398]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1944.883762][T24266] kone 0003:1E7D:2CED.0031: item fetching failed at offset 2/5 [ 1944.894829][T24266] kone 0003:1E7D:2CED.0031: parse failed [ 1944.900835][T24266] kone 0003:1E7D:2CED.0031: probe with driver kone failed with error -22 [ 1945.561432][T13075] usb 5-1: USB disconnect, device number 77 [ 1946.019743][T25394] udevd[25394]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1946.040868][T31469] FAULT_INJECTION: forcing a failure. [ 1946.040868][T31469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1946.053920][T31469] CPU: 1 UID: 0 PID: 31469 Comm: syz.0.7181 Not tainted syzkaller #0 PREEMPT(full) [ 1946.053934][T31469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1946.053941][T31469] Call Trace: [ 1946.053945][T31469] [ 1946.053949][T31469] dump_stack_lvl+0x16c/0x1f0 [ 1946.053963][T31469] should_fail_ex+0x512/0x640 [ 1946.053979][T31469] _copy_from_user+0x2e/0xd0 [ 1946.053994][T31469] move_addr_to_kernel+0x65/0x170 [ 1946.054006][T31469] __copy_msghdr+0x386/0x470 [ 1946.054021][T31469] copy_msghdr_from_user+0xc1/0x160 [ 1946.054034][T31469] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1946.054054][T31469] ___sys_sendmsg+0xfe/0x1d0 [ 1946.054069][T31469] ? __pfx____sys_sendmsg+0x10/0x10 [ 1946.054082][T31469] ? __lock_acquire+0x622/0x1c90 [ 1946.054108][T31469] __sys_sendmsg+0x16d/0x220 [ 1946.054122][T31469] ? __pfx___sys_sendmsg+0x10/0x10 [ 1946.054144][T31469] do_syscall_64+0xcd/0xfa0 [ 1946.054155][T31469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1946.054166][T31469] RIP: 0033:0x7f60e738f749 [ 1946.054175][T31469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1946.054186][T31469] RSP: 002b:00007f60e8157038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1946.054196][T31469] RAX: ffffffffffffffda RBX: 00007f60e75e5fa0 RCX: 00007f60e738f749 [ 1946.054202][T31469] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 1946.054208][T31469] RBP: 00007f60e8157090 R08: 0000000000000000 R09: 0000000000000000 [ 1946.054215][T31469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1946.054221][T31469] R13: 00007f60e75e6038 R14: 00007f60e75e5fa0 R15: 00007fffbae52078 [ 1946.054234][T31469] [ 1946.228202][ C1] vkms_vblank_simulate: vblank timer overrun [ 1946.296799][T30174] udevd[30174]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1946.301130][T24266] IPVS: starting estimator thread 0... [ 1946.435955][T31472] IPVS: using max 44 ests per chain, 105600 per kthread [ 1946.557422][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1946.557439][ T30] audit: type=1400 audit(2000003274.305:1874): avc: denied { mounton } for pid=31479 comm="syz.4.7184" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1946.592070][T31480] tmpfs: Bad value for 'mpol' [ 1947.670463][T31489] ubi: mtd0 is already attached to ubi0 [ 1948.224057][T31489] batman_adv: batadv: cannot create tp meter kthread [ 1948.363240][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1948.399479][ T30] audit: type=1400 audit(2000003276.135:1875): avc: denied { getopt } for pid=31456 comm="syz.7.7179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1948.419152][ T30] audit: type=1400 audit(2000003276.145:1876): avc: denied { map } for pid=31487 comm="syz.4.7186" path="socket:[113651]" dev="sockfs" ino=113651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1948.460597][ T30] audit: type=1400 audit(2000003276.215:1877): avc: denied { create } for pid=31497 comm="syz.6.7187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1948.498366][ T30] audit: type=1400 audit(2000003276.245:1878): avc: denied { name_bind } for pid=31487 comm="syz.4.7186" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1948.638977][ T30] audit: type=1400 audit(2000003276.245:1879): avc: denied { node_bind } for pid=31487 comm="syz.4.7186" saddr=::ffff:100.1.1.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1948.661782][ C1] vkms_vblank_simulate: vblank timer overrun [ 1948.682326][ T30] audit: type=1400 audit(2000003276.435:1880): avc: denied { read } for pid=31497 comm="syz.6.7187" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1948.993531][ T30] audit: type=1400 audit(2000003276.435:1881): avc: denied { open } for pid=31497 comm="syz.6.7187" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1949.041851][ T30] audit: type=1400 audit(2000003276.435:1882): avc: denied { ioctl } for pid=31497 comm="syz.6.7187" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1949.117416][ T30] audit: type=1400 audit(2000003276.465:1883): avc: denied { bind } for pid=31492 comm="syz.2.7188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1949.445800][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1951.082778][T25398] udevd[25398]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1951.148492][T13077] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1951.160994][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1951.323265][T13077] usb 3-1: Using ep0 maxpacket: 8 [ 1951.348766][T13077] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1951.383453][T13077] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1951.571890][T13077] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1951.596550][T13077] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.696006][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1951.697306][T13077] usb 3-1: Product: syz [ 1951.780582][T13077] usb 3-1: Manufacturer: syz [ 1951.793271][T13077] usb 3-1: SerialNumber: syz [ 1952.192234][T13077] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1952.200277][T13077] cdc_ncm 3-1:1.0: bind() failure [ 1952.212652][T13077] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1952.219578][T13077] cdc_ncm 3-1:1.1: bind() failure [ 1952.243119][T13077] usb 3-1: USB disconnect, device number 84 [ 1952.356039][T25398] udevd[25398]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1952.424449][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1952.515421][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1952.515437][ T30] audit: type=1400 audit(2000003280.266:1897): avc: denied { setopt } for pid=31543 comm="syz.6.7203" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1953.190813][T25398] udevd[25398]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1953.205275][ T30] audit: type=1400 audit(2000003280.266:1898): avc: denied { getopt } for pid=31543 comm="syz.6.7203" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1953.214018][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1953.397729][ T30] audit: type=1400 audit(2000003280.266:1899): avc: denied { execute } for pid=31543 comm="syz.6.7203" path="/101/cpuacct.usage_percpu" dev="tmpfs" ino=560 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1953.489445][T24266] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1953.499062][ T30] audit: type=1400 audit(2000003280.266:1900): avc: denied { getopt } for pid=31543 comm="syz.6.7203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1953.624929][ T30] audit: type=1326 audit(2000003281.266:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31553 comm="syz.2.7207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9af8f749 code=0x7ffc0000 [ 1953.649288][ T30] audit: type=1326 audit(2000003281.266:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31553 comm="syz.2.7207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9af8f749 code=0x7ffc0000 [ 1953.698182][T24266] usb 5-1: Using ep0 maxpacket: 8 [ 1954.181959][ T30] audit: type=1326 audit(2000003281.286:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31553 comm="syz.2.7207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e9af8f749 code=0x7ffc0000 [ 1954.212906][T24266] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1954.213973][ T30] audit: type=1326 audit(2000003281.286:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31553 comm="syz.2.7207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9af8f749 code=0x7ffc0000 [ 1954.256204][T24266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.272862][ T30] audit: type=1326 audit(2000003281.286:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31553 comm="syz.2.7207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9af8f749 code=0x7ffc0000 [ 1954.296308][ C1] vkms_vblank_simulate: vblank timer overrun [ 1954.313808][T24266] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1954.321866][T24266] pvrusb2: ********** [ 1954.326270][ T30] audit: type=1326 audit(2000003281.286:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31553 comm="syz.2.7207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6e9af8f749 code=0x7ffc0000 [ 1954.350263][T24266] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1954.361142][T24266] pvrusb2: Important functionality might not be entirely working. [ 1954.369924][T24266] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1954.391477][T24266] pvrusb2: ********** [ 1954.540850][ T2336] pvrusb2: Invalid write control endpoint [ 1955.062325][T31541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1955.071278][T31541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1955.175560][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1955.215443][T25394] udevd[25394]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1955.252728][ T2336] pvrusb2: Invalid write control endpoint [ 1955.277138][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1955.320621][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1955.328484][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1955.338736][ T2336] pvrusb2: Device being rendered inoperable [ 1955.347953][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1955.358638][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1955.897900][ T2336] pvrusb2: Attached sub-driver cx25840 [ 1955.903445][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1955.913910][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1956.211683][T31546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1956.250470][T17908] usb 5-1: USB disconnect, device number 78 [ 1956.727932][T17908] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1957.060365][T25394] udevd[25394]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1957.299796][T17908] usb 5-1: Using ep0 maxpacket: 32 [ 1957.523045][T17908] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1957.555198][T17908] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1957.575301][T17908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.584593][T17908] usb 5-1: Product: syz [ 1957.592063][T17908] usb 5-1: Manufacturer: syz [ 1957.600070][T17908] usb 5-1: SerialNumber: syz [ 1957.601649][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1957.645851][T17908] usb 5-1: config 0 descriptor?? [ 1957.662376][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1957.662404][ T30] audit: type=1400 audit(2000003285.416:1937): avc: denied { setopt } for pid=31594 comm="syz.0.7218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1957.846941][ T30] audit: type=1400 audit(2000003285.586:1938): avc: denied { name_bind } for pid=31594 comm="syz.0.7218" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1958.004447][ T30] audit: type=1326 audit(2000003285.636:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31598 comm="syz.2.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9af8f749 code=0x7ffc0000 [ 1958.478815][T17908] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1958.528602][ T30] audit: type=1326 audit(2000003285.636:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31598 comm="syz.2.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9af8f749 code=0x7ffc0000 [ 1958.617127][ T30] audit: type=1326 audit(2000003285.646:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31598 comm="syz.2.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e9af8f749 code=0x7ffc0000 [ 1958.662728][ T30] audit: type=1326 audit(2000003285.646:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31598 comm="syz.2.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9af8f749 code=0x7ffc0000 [ 1958.787212][T31608] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7220'. [ 1958.862990][ T30] audit: type=1326 audit(2000003285.646:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31598 comm="syz.2.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9af8f749 code=0x7ffc0000 [ 1959.000830][ T30] audit: type=1326 audit(2000003285.646:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31598 comm="syz.2.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6e9af8f749 code=0x7ffc0000 [ 1959.024699][ T30] audit: type=1326 audit(2000003285.646:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31598 comm="syz.2.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9af8f749 code=0x7ffc0000 [ 1959.048680][ T30] audit: type=1326 audit(2000003285.646:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31598 comm="syz.2.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9af8f749 code=0x7ffc0000 [ 1959.178543][T31614] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7220'. [ 1959.233502][T31610] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1959.259291][T31614] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 1959.282569][T31614] bond1 (unregistering): Released all slaves [ 1959.888189][T17908] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 1960.202325][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1960.443089][T25367] udevd[25367]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1960.706681][T17908] usb 5-1: USB disconnect, device number 79 [ 1960.882403][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1961.428843][T31647] tmpfs: Bad value for 'mpol' [ 1962.399894][T25398] udevd[25398]: symlink '../../loop0' '/dev/disk/by-diskseq/98.tmp-b7:0' failed: Read-only file system [ 1962.436170][T25367] udevd[25367]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1962.684603][T31658] ================================================================== [ 1962.692691][T31658] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 1962.700668][T31658] Read of size 8 at addr ffff88806376fa30 by task syz.7.7231/31658 [ 1962.708546][T31658] [ 1962.710861][T31658] CPU: 1 UID: 0 PID: 31658 Comm: syz.7.7231 Not tainted syzkaller #0 PREEMPT(full) [ 1962.710883][T31658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1962.710895][T31658] Call Trace: [ 1962.710902][T31658] [ 1962.710910][T31658] dump_stack_lvl+0x116/0x1f0 [ 1962.710934][T31658] print_report+0xcd/0x630 [ 1962.710955][T31658] ? __virt_addr_valid+0x81/0x610 [ 1962.710982][T31658] ? __phys_addr+0xe8/0x180 [ 1962.711009][T31658] ? sysfs_remove_file_ns+0x63/0x70 [ 1962.711030][T31658] kasan_report+0xe0/0x110 [ 1962.711052][T31658] ? sysfs_remove_file_ns+0x63/0x70 [ 1962.711076][T31658] sysfs_remove_file_ns+0x63/0x70 [ 1962.711098][T31658] driver_remove_file+0x4a/0x60 [ 1962.711121][T31658] bus_remove_driver+0x224/0x2c0 [ 1962.711149][T31658] driver_unregister+0x76/0xb0 [ 1962.711170][T31658] comedi_device_detach_locked+0x12f/0xa50 [ 1962.711198][T31658] do_devconfig_ioctl+0x555/0x710 [ 1962.711225][T31658] ? __mutex_lock+0x1c5/0x1060 [ 1962.711245][T31658] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1962.711284][T31658] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1962.711308][T31658] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1962.711330][T31658] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1962.711355][T31658] ? do_vfs_ioctl+0x128/0x14f0 [ 1962.711381][T31658] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1962.711407][T31658] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1962.711434][T31658] ? hook_file_ioctl_common+0x145/0x410 [ 1962.711463][T31658] ? selinux_file_ioctl+0x180/0x270 [ 1962.711483][T31658] ? selinux_file_ioctl+0xb4/0x270 [ 1962.711509][T31658] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1962.711530][T31658] __x64_sys_ioctl+0x18e/0x210 [ 1962.711556][T31658] do_syscall_64+0xcd/0xfa0 [ 1962.711575][T31658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1962.711595][T31658] RIP: 0033:0x7fa35b38f749 [ 1962.711610][T31658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1962.711629][T31658] RSP: 002b:00007fa35c217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1962.711647][T31658] RAX: ffffffffffffffda RBX: 00007fa35b5e6180 RCX: 00007fa35b38f749 [ 1962.711660][T31658] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000006 [ 1962.711672][T31658] RBP: 00007fa35b413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1962.711683][T31658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1962.711695][T31658] R13: 00007fa35b5e6218 R14: 00007fa35b5e6180 R15: 00007ffe0597a0a8 [ 1962.711714][T31658] [ 1962.711721][T31658] [ 1962.958312][T31658] Allocated by task 25380: [ 1962.962693][T31658] kasan_save_stack+0x33/0x60 [ 1962.967343][T31658] kasan_save_track+0x14/0x30 [ 1962.971986][T31658] __kasan_kmalloc+0xaa/0xb0 [ 1962.976551][T31658] __kmalloc_noprof+0x32f/0x880 [ 1962.981373][T31658] security_inode_init_security+0x13f/0x390 [ 1962.987243][T31658] shmem_mknod+0x22e/0x450 [ 1962.991648][T31658] shmem_mkdir+0x31/0x80 [ 1962.995862][T31658] vfs_mkdir+0x593/0x8c0 [ 1963.000076][T31658] do_mkdirat+0x304/0x3e0 [ 1963.004389][T31658] __x64_sys_mkdirat+0x83/0xb0 [ 1963.009133][T31658] do_syscall_64+0xcd/0xfa0 [ 1963.013614][T31658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1963.019475][T31658] [ 1963.021768][T31658] Freed by task 25380: [ 1963.025800][T31658] kasan_save_stack+0x33/0x60 [ 1963.030442][T31658] kasan_save_track+0x14/0x30 [ 1963.035085][T31658] __kasan_save_free_info+0x3b/0x60 [ 1963.040253][T31658] __kasan_slab_free+0x5f/0x80 [ 1963.044985][T31658] kfree+0x2b8/0x6d0 [ 1963.048851][T31658] security_inode_init_security+0x2eb/0x390 [ 1963.054714][T31658] shmem_mknod+0x22e/0x450 [ 1963.059099][T31658] shmem_mkdir+0x31/0x80 [ 1963.063316][T31658] vfs_mkdir+0x593/0x8c0 [ 1963.067529][T31658] do_mkdirat+0x304/0x3e0 [ 1963.071824][T31658] __x64_sys_mkdirat+0x83/0xb0 [ 1963.076555][T31658] do_syscall_64+0xcd/0xfa0 [ 1963.081023][T31658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1963.086884][T31658] [ 1963.089178][T31658] The buggy address belongs to the object at ffff88806376fa00 [ 1963.089178][T31658] which belongs to the cache kmalloc-256 of size 256 [ 1963.103197][T31658] The buggy address is located 48 bytes inside of [ 1963.103197][T31658] freed 256-byte region [ffff88806376fa00, ffff88806376fb00) [ 1963.116869][T31658] [ 1963.119163][T31658] The buggy address belongs to the physical page: [ 1963.125538][T31658] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806376e400 pfn:0x6376e [ 1963.135564][T31658] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1963.144026][T31658] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1963.152492][T31658] page_type: f5(slab) [ 1963.156445][T31658] raw: 00fff00000000240 ffff88813ffa6b40 ffffea0001ee3710 ffffea0001e39910 [ 1963.164994][T31658] raw: ffff88806376e400 0000000000100009 00000000f5000000 0000000000000000 [ 1963.173544][T31658] head: 00fff00000000240 ffff88813ffa6b40 ffffea0001ee3710 ffffea0001e39910 [ 1963.182179][T31658] head: ffff88806376e400 0000000000100009 00000000f5000000 0000000000000000 [ 1963.190816][T31658] head: 00fff00000000001 ffffea00018ddb81 00000000ffffffff 00000000ffffffff [ 1963.199453][T31658] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1963.208087][T31658] page dumped because: kasan: bad access detected [ 1963.214462][T31658] page_owner tracks the page as allocated [ 1963.220140][T31658] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 25590, tgid 25590 (syz-executor), ts 1530184670376, free_ts 1530108606037 [ 1963.241199][T31658] post_alloc_hook+0x1af/0x220 [ 1963.245934][T31658] get_page_from_freelist+0x10a3/0x3a30 [ 1963.251449][T31658] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1963.257316][T31658] alloc_pages_mpol+0x1fb/0x550 [ 1963.262134][T31658] new_slab+0x24a/0x360 [ 1963.266259][T31658] ___slab_alloc+0xd79/0x1a50 [ 1963.270917][T31658] __slab_alloc.constprop.0+0x63/0x110 [ 1963.276345][T31658] __kmalloc_noprof+0x501/0x880 [ 1963.281166][T31658] security_inode_init_security+0x13f/0x390 [ 1963.287033][T31658] shmem_symlink+0x135/0x9f0 [ 1963.291596][T31658] vfs_symlink+0x403/0x680 [ 1963.295985][T31658] do_symlinkat+0x261/0x310 [ 1963.300457][T31658] __x64_sys_symlinkat+0x93/0xc0 [ 1963.305371][T31658] do_syscall_64+0xcd/0xfa0 [ 1963.309841][T31658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1963.315701][T31658] page last free pid 25380 tgid 25380 stack trace: [ 1963.322163][T31658] __free_frozen_pages+0x7df/0x1160 [ 1963.327332][T31658] qlist_free_all+0x4d/0x120 [ 1963.331889][T31658] kasan_quarantine_reduce+0x195/0x1e0 [ 1963.337312][T31658] __kasan_slab_alloc+0x69/0x90 [ 1963.342131][T31658] __kmalloc_node_track_caller_noprof+0x2fd/0x8a0 [ 1963.348514][T31658] kmemdup_noprof+0x29/0x60 [ 1963.352981][T31658] __devinet_sysctl_register+0xbc/0x360 [ 1963.358494][T31658] devinet_sysctl_register+0x17b/0x200 [ 1963.363923][T31658] inetdev_event+0x1638/0x18a0 [ 1963.368652][T31658] notifier_call_chain+0xbc/0x410 [ 1963.373661][T31658] call_netdevice_notifiers_info+0xbe/0x140 [ 1963.379522][T31658] netif_change_name+0x557/0x920 [ 1963.384427][T31658] do_setlink.constprop.0+0x3362/0x4380 [ 1963.389942][T31658] rtnl_newlink+0x1446/0x2000 [ 1963.394590][T31658] rtnetlink_rcv_msg+0x95e/0xe90 [ 1963.399498][T31658] netlink_rcv_skb+0x158/0x420 [ 1963.404234][T31658] [ 1963.406524][T31658] Memory state around the buggy address: [ 1963.412129][T31658] ffff88806376f900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1963.420156][T31658] ffff88806376f980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1963.428182][T31658] >ffff88806376fa00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1963.436207][T31658] ^ [ 1963.441800][T31658] ffff88806376fa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1963.449827][T31658] ffff88806376fb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1963.457853][T31658] ================================================================== [ 1963.466365][T31658] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1963.473560][T31658] CPU: 1 UID: 0 PID: 31658 Comm: syz.7.7231 Not tainted syzkaller #0 PREEMPT(full) [ 1963.482922][T31658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1963.492962][T31658] Call Trace: [ 1963.496217][T31658] [ 1963.499121][T31658] dump_stack_lvl+0x3d/0x1f0 [ 1963.503683][T31658] vpanic+0x640/0x6f0 [ 1963.507644][T31658] panic+0xca/0xd0 [ 1963.511340][T31658] ? __pfx_panic+0x10/0x10 [ 1963.515732][T31658] ? sysfs_remove_file_ns+0x63/0x70 [ 1963.520903][T31658] ? preempt_schedule_common+0x44/0xc0 [ 1963.526339][T31658] ? preempt_schedule_thunk+0x16/0x30 [ 1963.531687][T31658] check_panic_on_warn+0xab/0xb0 [ 1963.536594][T31658] end_report+0x107/0x170 [ 1963.540896][T31658] kasan_report+0xee/0x110 [ 1963.545283][T31658] ? sysfs_remove_file_ns+0x63/0x70 [ 1963.550453][T31658] sysfs_remove_file_ns+0x63/0x70 [ 1963.555448][T31658] driver_remove_file+0x4a/0x60 [ 1963.560272][T31658] bus_remove_driver+0x224/0x2c0 [ 1963.565183][T31658] driver_unregister+0x76/0xb0 [ 1963.569916][T31658] comedi_device_detach_locked+0x12f/0xa50 [ 1963.575696][T31658] do_devconfig_ioctl+0x555/0x710 [ 1963.580704][T31658] ? __mutex_lock+0x1c5/0x1060 [ 1963.585447][T31658] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1963.590971][T31658] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1963.596400][T31658] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1963.602176][T31658] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1963.608041][T31658] ? do_vfs_ioctl+0x128/0x14f0 [ 1963.612778][T31658] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1963.617776][T31658] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1963.624598][T31658] ? hook_file_ioctl_common+0x145/0x410 [ 1963.630128][T31658] ? selinux_file_ioctl+0x180/0x270 [ 1963.635321][T31658] ? selinux_file_ioctl+0xb4/0x270 [ 1963.640433][T31658] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1963.646236][T31658] __x64_sys_ioctl+0x18e/0x210 [ 1963.651010][T31658] do_syscall_64+0xcd/0xfa0 [ 1963.655510][T31658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1963.661400][T31658] RIP: 0033:0x7fa35b38f749 [ 1963.665810][T31658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1963.685411][T31658] RSP: 002b:00007fa35c217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1963.693794][T31658] RAX: ffffffffffffffda RBX: 00007fa35b5e6180 RCX: 00007fa35b38f749 [ 1963.701735][T31658] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000006 [ 1963.709676][T31658] RBP: 00007fa35b413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1963.717631][T31658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1963.725572][T31658] R13: 00007fa35b5e6218 R14: 00007fa35b5e6180 R15: 00007ffe0597a0a8 [ 1963.733518][T31658] [ 1963.736796][T31658] Kernel Offset: disabled [ 1963.741090][T31658] Rebooting in 86400 seconds..