last executing test programs: 9m22.861464691s ago: executing program 4 (id=79): fanotify_init(0x1, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) 9m22.782819186s ago: executing program 4 (id=82): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 9m22.640605737s ago: executing program 4 (id=88): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000100000000000000000010e442874e32c770000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) 9m22.493233667s ago: executing program 4 (id=92): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r1 = inotify_init1(0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000271) lseek(r0, 0x50000000, 0x1) getdents64(r0, 0x0, 0x4f) getdents64(r0, 0x0, 0x0) 9m22.345237798s ago: executing program 4 (id=96): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000731111000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) 9m21.849497241s ago: executing program 4 (id=99): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='$\xad\xe4\\)\xc6\n\x00\x00\x00\x00\x00\x00/r\xfa\xc3\xd7\xff\x0f\xf8\b\x16+g\xcc\xe1\xabs\f\x98v\x98\xd0V\xd0\xf7h\xb9\xf1\xa6\xd9l \xd8\xea\xd7\x8a]k\xb5\xfd(\xa3\xc22MF') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 9m21.5151739s ago: executing program 32 (id=99): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='$\xad\xe4\\)\xc6\n\x00\x00\x00\x00\x00\x00/r\xfa\xc3\xd7\xff\x0f\xf8\b\x16+g\xcc\xe1\xabs\f\x98v\x98\xd0V\xd0\xf7h\xb9\xf1\xa6\xd9l \xd8\xea\xd7\x8a]k\xb5\xfd(\xa3\xc22MF') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 32.889620585s ago: executing program 3 (id=1895): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = io_uring_setup(0x6137, &(0x7f0000000000)={0x0, 0xb673, 0x200, 0x1, 0xa}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000080)={0x8000, 0x7, 0x8}, 0x0) userfaultfd(0x80001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x8, 0x6}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, 0x0, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40080c0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES64=r3], 0x2c2) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080), 0x0) 32.70548476s ago: executing program 3 (id=1896): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea04d67f57f20ba61b493db439cbecd0b94f64c8b3b5c6a07985410415d594935f1c2cc683828735f0ac"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x2}, {0xfffa, 0x6}, @period={0x59, 0x4, 0x4, 0x7, 0x81, {0x7, 0x3, 0x5, 0x1}, 0x4, &(0x7f0000000340)=[0x4, 0x0, 0xfffc, 0x0]}}) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x105401, 0x8) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x5, 0xf1, &(0x7f0000000000)=""/241, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"}) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x73}, 0x0, 0x0, &(0x7f0000000480)=""/115) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f0000000300)={0x8, r9}) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000280)={0xf7, 0x6}, 0x2) socket$kcm(0x10, 0x2, 0x0) 32.394492384s ago: executing program 1 (id=1900): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r0}, 0x10) syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x2003993, 0x400, 0x0, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x220, 0x2f0, 0xfeffffff, 0x2f0, 0x220, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r3, 0x8b22, &(0x7f0000000040)) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="50484f4e4558db30d8494e0a545245424c4520274d6173746572c7b0f7a7ae284a1dffe5c920506c61796261636b20536e2f74"], 0xa8) close(r4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@random="c5dd908770e4", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r6}) r8 = socket$isdn_base(0x22, 0x3, 0x0) accept4(r8, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r9}) 32.313822579s ago: executing program 2 (id=1901): syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x62, 0x0, 0x7}]}}}], 0x18}}], 0x1, 0x1) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xfd44) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0xf) ioctl$UI_DEV_CREATE(r4, 0x5501) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) 30.901326317s ago: executing program 1 (id=1903): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000002c0)=0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, &(0x7f0000000080)={@desc={0xffff8000, 0x0, @desc2}}) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x40000, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e0e0000108000300", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x24084854}, 0x400c810) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/cgroup.procs\x00', 0x100, 0x40) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="100000000200000019"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'bond0\x00'}) pread64(r4, &(0x7f0000000040)=""/152, 0x98, 0x7) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) pselect6(0x40, &(0x7f0000000400)={0xffffffffffffff81, 0x600, 0x100000001, 0x26, 0xffffffff, 0x7, 0x400, 0x7}, &(0x7f0000000440)={0x2, 0x2f, 0x75, 0x2, 0xffff, 0x0, 0x5, 0xffffffffffffff81}, &(0x7f0000000480)={0x800000000, 0x9, 0x1, 0x7, 0x100000000000002, 0x8, 0x6c, 0x400}, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000540)={&(0x7f0000000500)={[0x100000001]}, 0x8}) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xfffff6bd}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r3, &(0x7f00000000c0)="e9", 0xfffffffffffffe86, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) mount$bind(0x0, &(0x7f00000004c0)='./file1\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file1/file0\x00', 0x0, 0x110c48c, 0x0) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f00000006c0), 0x3031824, &(0x7f0000000740)=ANY=[@ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRES16=r2]) move_mount(r7, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') 30.494077546s ago: executing program 2 (id=1904): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000007000000000000000000c7518043d1000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41eff81b67f5f957, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) socket$igmp(0x2, 0x3, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x6}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r6, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 27.204584744s ago: executing program 2 (id=1907): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() mknod(&(0x7f0000000480)='./bus\x00', 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r2, &(0x7f0000001240)=[{{&(0x7f0000000b40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)="bc212da5b75e098c1477bfc676a11ed823bff3542a8c40c91575b7bf3ac2f9633b7f71917cf9c5138f7770be9df8b23c698b3aa8f596a06ecb6ebb1935a405e615009e0540f4e36991eb8e9d8b4cc4014c48b8e221cc7acd02e849773ce8ebd9c11ceb6fc4052df71c30772b941073b74f49cae10fba6bad9f83b30538a021cf559e0e7b762f325dbdf541ea55bae566c2720c7d9aa67327c9fbe57a2d12094ff57a616bfba603b84d15dc896870e81f3f761ff2c91cebb2eacde836ff7be2f95f3226e72e225fa9d69b", 0xca}, {&(0x7f0000000cc0)="40eac7fd9212eb7ac39b430908fac5b25a51d1e81663645df38096f95ea364e852662d2602f064d316cb2cb4af51a1e2165055a1032283bc2ca0bd9abe5bae759062ccc7cf7a7892241f15bfd935c355e737ba69e16d3061935fb1998b464e7d2c2cd8a2d8cf4c41b890c76a8285aa4a3da8376a9c7469ff81a55f94649d8b95fb77ce80e04022f739bf2290072f1f59b55ee639fc8bcb7dd949b98da9c86b38660e853704fe49f65fb141c962a43c0ec7924d40e4049c6bff4eddbcb56b", 0xbe}, {&(0x7f0000000d80)="ecdb810e001bf7539cb109308edd5065ecdc9989b1bde2c01032bdc9d215462e6511f6f230ee42a7e70e3d1b042b7a5e01fccfec76eb1813a72e03c3466c557b89e4333e1e5775e256b6d2eb1b6fe277b15f3a57ea0bf352fe277765be2beb7c6ac74c3c46db52107fcf7ee392", 0x6d}, {&(0x7f0000000a80)}, {&(0x7f0000000e80)="788e82a62c51b558bda25e2e4469022d31ca4a04a8967a42bc7241b839214234c003fcd97b8cfa320c6e1a4b78cfa08496c002dc1f13400fdbbc2d9c97cd192a14673924526bd2895c8d131a06410efe3208262de162f4f4709f033fb547993bee1650469ace86a583c147b1b6c97f0c764bdf8242ba9487a83f13ab14d5712ac8de73d246d485b26779c8235ddfec3df5cb5f42ada7428156c9cde55a6dfa52995224ab044d5cbcb30f3bb688256e8a27eabe55064b2a624eb25ff2ae2eeac9", 0xc0}, {&(0x7f0000000f40)="eebcdc8aa2ba64f1b8c84c4aa3c1fc9d8d0124a3cbd1eb6c6dfd4f4f9c", 0x1d}, {&(0x7f0000000f80)="0955c2dd5985c7", 0x7}], 0x7, &(0x7f0000001080)=[@cred={{0x1c, 0x1, 0x2, {r0, r3}}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r2, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x50, 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(&(0x7f0000000000)='upperdir', 0x1, 0x6, &(0x7f0000000040)={0x480000000, 0x3, 0x1, 0x8}) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) inotify_rm_watch(0xffffffffffffffff, r5) chdir(&(0x7f00000001c0)='./bus\x00') syz_emit_ethernet(0x5e, &(0x7f0000000ac0)={@random="011e5c5dbbc1", @local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "91eb00", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2}}}}}}, 0x0) 26.550008207s ago: executing program 3 (id=1908): r0 = add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0xfffff, 0xffffffffffffffff) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x0, 0x3, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xf}, 0x10, 0x700, 0xc8a, 0x4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r3, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeb6}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x6) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x4}, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xdd, 0xbd, 0x73, 0x10, 0x582, 0x7d, 0xa385, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x97, 0x69, 0x58}}]}}]}}, 0x0) 25.161287213s ago: executing program 2 (id=1910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r4, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880), 0x8, 0x80, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="0500180000000000080006002300000008000d000600000008000600"], 0x70}, 0x1, 0x0, 0x0, 0xc014}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_socket_connect_nvme_tcp() getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @multicast1}, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000a, 0x13, r6, 0x0) 23.80547669s ago: executing program 0 (id=1914): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/sockstat\x00') ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x1, 0xffffffff, 0x3, 0x1, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/sockstat\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000300)={0x1, 0x980900, 0x6ff7365bd9e46a6f}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x22}], 0x1) 23.223067505s ago: executing program 3 (id=1915): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (fail_nth: 5) writev(r0, &(0x7f0000000340)=[{&(0x7f00000003c0)="087529fb1ea8ad32b66471375499c6e33079fe0712f227ec9c698f08ab3647c1ea004bf23cc6db2327f56cb616747631d5d8f5daff11ffc39ba37d19c963d202e5b7d7ffb256", 0x46}, {0x0}], 0x2) 22.537039888s ago: executing program 1 (id=1916): syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x62, 0x0, 0x7}]}}}], 0x18}}], 0x1, 0x1) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xfd44) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0xf) ioctl$UI_DEV_CREATE(r4, 0x5501) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) 22.335068266s ago: executing program 5 (id=1917): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(r5, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000780), 0x433d}, 0x38) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 22.203377058s ago: executing program 0 (id=1918): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e", 0x5}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) (async) r3 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) (async) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feef", 0x21) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) (async) shutdown(r4, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r6, 0x0, 0xffffffff004) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) (async) unlinkat(0xffffffffffffffff, 0x0, 0x200) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 12.903187375s ago: executing program 5 (id=1919): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'team_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xe}, {{&(0x7f0000001a40)=@rc={0x1f, @fixed}, 0x80, 0x0}, 0xffffff80}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x60, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x8000000000000c, &(0x7f0000000600)='u', 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r5 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000280)=0xcd27, &(0x7f00000002c0)=0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) 12.458755382s ago: executing program 3 (id=1920): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() mknod(&(0x7f0000000480)='./bus\x00', 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r2, &(0x7f0000001240)=[{{&(0x7f0000000b40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)="bc212da5b75e098c1477bfc676a11ed823bff3542a8c40c91575b7bf3ac2f9633b7f71917cf9c5138f7770be9df8b23c698b3aa8f596a06ecb6ebb1935a405e615009e0540f4e36991eb8e9d8b4cc4014c48b8e221cc7acd02e849773ce8ebd9c11ceb6fc4052df71c30772b941073b74f49cae10fba6bad9f83b30538a021cf559e0e7b762f325dbdf541ea55bae566c2720c7d9aa67327c9fbe57a2d12094ff57a616bfba603b84d15dc896870e81f3f761ff2c91cebb2eacde836ff7be2f95f3226e72e225fa9d69b", 0xca}, {&(0x7f0000000cc0)="40eac7fd9212eb7ac39b430908fac5b25a51d1e81663645df38096f95ea364e852662d2602f064d316cb2cb4af51a1e2165055a1032283bc2ca0bd9abe5bae759062ccc7cf7a7892241f15bfd935c355e737ba69e16d3061935fb1998b464e7d2c2cd8a2d8cf4c41b890c76a8285aa4a3da8376a9c7469ff81a55f94649d8b95fb77ce80e04022f739bf2290072f1f59b55ee639fc8bcb7dd949b98da9c86b38660e853704fe49f65fb141c962a43c0ec7924d40e4049c6bff4eddbcb56b", 0xbe}, {&(0x7f0000000d80)="ecdb810e001bf7539cb109308edd5065ecdc9989b1bde2c01032bdc9d215462e6511f6f230ee42a7e70e3d1b042b7a5e01fccfec76eb1813a72e03c3466c557b89e4333e1e5775e256b6d2eb1b6fe277b15f3a57ea0bf352fe277765be2beb7c6ac74c3c46db52107fcf7ee392e2b033e535e45b939fc75c51e9a0ef6e0f44f15e22df63fc40ee098857fb182b88b4981f5caaf10fdf1e20e8b0cd869848702ab4769d", 0xa3}, {&(0x7f0000000a80)}, {&(0x7f0000000e80)="788e82a62c51b558bda25e2e4469022d31ca4a04a8967a42bc7241b839214234c003fcd97b8cfa320c6e1a4b78cfa08496c002dc1f13400fdbbc2d9c97cd192a14673924526bd2895c8d131a06410efe3208262de162f4f4709f033fb547993bee1650469ace86a583c147b1b6c97f0c764bdf8242ba9487a83f13ab14d5712ac8de73d246d485b26779c8235ddfec3df5cb5f42ada7428156c9cde55a6dfa52995224ab044d5cbcb30f3bb688256e8a27eabe55064b2a624eb25ff2ae2eeac9", 0xc0}, {&(0x7f0000000f40)="eebcdc8aa2ba64f1b8c84c4aa3c1fc9d8d0124a3cbd1eb6c6dfd4f4f9c", 0x1d}, {&(0x7f0000000f80)="0955c2dd5985c7", 0x7}], 0x7, &(0x7f0000001080)=[@cred={{0x1c, 0x1, 0x2, {r0, r3}}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r2, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x50, 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(&(0x7f0000000000)='upperdir', 0x1, 0x6, &(0x7f0000000040)={0x480000000, 0x3, 0x1, 0x8}) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) inotify_rm_watch(0xffffffffffffffff, r5) chdir(&(0x7f00000001c0)='./bus\x00') syz_emit_ethernet(0x5e, &(0x7f0000000ac0)={@random="011e5c5dbbc1", @local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "91eb00", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2}}}}}}, 0x0) 12.327927134s ago: executing program 2 (id=1921): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000680040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x30202, 0x0) setrlimit(0x3, &(0x7f0000000040)={0x2, 0x6}) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0xb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) 12.170974717s ago: executing program 0 (id=1922): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000), 0x0, 0x1001}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 12.158280204s ago: executing program 1 (id=1923): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 11.869529248s ago: executing program 5 (id=1924): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x101882, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0xff) socket$packet(0x11, 0x3, 0x300) msgctl$IPC_SET(0x0, 0x1, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, 0x0, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r7}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x401, 0x0, 0x1000000000000000, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x80, 0x7fffffff, 0x7}, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x54}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100), 0x0, 0x0}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1e000000", @ANYRES16=0x0, @ANYBLOB="20002abd7000fbdbdf250300000005001200020000000c0009000202aaaaaaaaaaaa0c0009000200aaaaaaaaaaaa"], 0x34}, 0x1, 0x0, 0x0, 0x4000841}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x7, {0x0, r1}}, 0xfffffd64) 11.4864874s ago: executing program 1 (id=1925): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000509022400010000a0000904"], 0x0) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x1a, 0x0, 0x0) syz_io_uring_setup(0x4276, &(0x7f0000000240)={0x0, 0x5ff8, 0x8000, 0x4, 0x277}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x3b7, &(0x7f0000000340)={0x0, 0xcbe, 0x100, 0x1, 0x376}, 0x0, &(0x7f0000000400)=0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r9, 0x0, 0x7}, 0x18) r10 = syz_open_dev$video4linux(&(0x7f0000000440), 0x5, 0x400) ioctl$VIDIOC_SUBDEV_G_SELECTION(r10, 0xc040563d, &(0x7f0000000480)={0x0, 0x1000000, 0x100, 0x1, {0xdf, 0x4, 0x1e3cf851, 0xf2}}) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x6, 0x8c, 0x22820}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r13}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(r7, r8, &(0x7f0000000580)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3c, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r11}}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x56, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x30}, 0x0, 0x0, 0x1, {0x0, r11}}) io_uring_enter(r3, 0x3519, 0x637d, 0x10, 0x0, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) sendmsg$L2TP_CMD_SESSION_DELETE(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000009a51a828b776b8c97b5ee28c91dad476a80800"/48, @ANYRES16=r2, @ANYBLOB="01002cbd70004400000005000000080009000200000008000c00a80a0000060001000800000008000b0002000000"], 0x34}}, 0x4) 11.011633152s ago: executing program 0 (id=1926): r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000001c0), 0x97, 0x20000000) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001a00110028bd70000000000002202000000000000000000008000300", @ANYRES32=r7, @ANYBLOB="c5c2ad3372d250c4f52d257c4315d21933ab31f38c81ab0dc0f059903c15e7f89d24b55e3da09e22bce2387bf9b9f7260c7e270e6c6551c878712943b405f91ed8ff9cb33ee52685291840c2fe41417874dae17673f0449e03cd7b60936f95caaee01e0af57ce02c47930cd36fe727dd0a3c7e3b66d46eebab3f9e8e233ebafbe6d79c5b027bd5576918061e4f4eab8c3a766cb924129dd29623b419cdeb5b92b937a93803fae29a3ab1"], 0x24}}, 0x0) socket$phonet(0x23, 0x2, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000036000701040000000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b000100000000090400390009"], 0x0) 10.000362628s ago: executing program 2 (id=1927): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x4f3, &(0x7f0000000200)={0x0, 0x80ff, 0x1000, 0x1, 0xba}, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x12021, 0x1}) io_uring_enter(r5, 0x47bc, 0xf5, 0x0, 0x0, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x1000000}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) 9.047526568s ago: executing program 3 (id=1928): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000280)=@l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x400, 0x2}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)="470783c0782022bc7095c6e2ca526f047de0f909cdef3b2e1731ea17296e4f55bff18c4d4fd17f79ee7f57854f95acac56e4c51a0f69280c5d3e450f98a69d9a7b4117212b6d5f0f5cdb932e1606478d167cef0f3c6513b1cf642372fe24deae91302cddbca6b579d4b7ed6f23a3d7f0b0b8231b23e86f5458f54788f2b0a4a1052ad17405c61f6d9307bcba546823649cc07628cbb34720d60735bc8d66c3f6e873811eae1d8b6b7fa3c7e9018a1b7680dd85bdecc19930278ecd149152c8fdd296dba85f164ac1cb06ffc401d2c7ee3ae7aff8b6a895b19c917f23fb90dc0bb540cc56", 0xe4}, {&(0x7f0000000440)}], 0x2, &(0x7f0000000600)=[{0x108, 0x1, 0x3, "6379c5b3a810d1593cc06a6e189d5a1a910ef0151b76b2b3fbb65b2a044f0aac0951bc6a135657e80a82d97dd6fcb8c463ca36499cae0d4f57fe2ca7500a58afdac28e559668bd93e7058cae08b32583edf78da285993327e478df6e5078c13956767698db0306350eae39f0621ef6679a6186d224c817f21639c42ff510af806b676cd930883930c2a133229590ef0b75d02157c7537813aa7f2794fb8e18094017339f0b0c1f9094d662b0f3df6ee0f1373f5751033a14a0e6a2a17cb5d940cf39050e34689e272fd476ebc4eb04d3143d3c6f2e9a63480059d15e6223bd5ab957d61b674dbd9ff18d4134363c762388"}, {0x20, 0x109, 0x8, "bcac25fc2e150c493d"}, {0x58, 0x107, 0x3ff, "ac2c94764d4e6d771ca7d2e77fa92c6795eaec396f614a989089df86285b64e5ba8c3e5db15cee49b39aaa17617a9b42c059a7860afdb4f2e1cd13457e6c65266358b011a185d178"}], 0x180}, 0x8000) name_to_handle_at(r3, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@reiserfs_2={0x8, 0x2, {0x7, 0x9}}, &(0x7f0000000240), 0x400) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r5 = socket(0x22, 0x4, 0x0) getsockopt$bt_hci(r5, 0x84, 0x2, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x805) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000007c0)={r6, 0x689, {0x0, 0x0, 0x0, 0x8, 0xfff, 0x0, 0x4, 0x1d, 0x0, "ed40670367de12a9d7fcabfc6d054539a6ada68968c14507c311468632911c2918d74257ca72693455ecf631a71c8d5c25c4b3fe16e6c9c0c42d09204e2f42f1", "51f3e31b3ec087705c097f5bdb28bb8c625018c1381dfee818aa009e85672aa8af1becc2ad82e3f39c50b6c7288c5e3cf10c00230aed801c6139636c9b8762f8", "b1f4813c59e422280767a2f5a25f9ca7ace66f77f0dd6a3fe9e5dbdcacb1ba4e", [0x400, 0x8]}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r7) ioctl$KVM_RUN(r7, 0xae80, 0x0) 8.989266482s ago: executing program 5 (id=1929): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x5, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESOCT, @ANYBLOB="37dad97661d9e7df4547b4cce3c84bb123e316b4054841faca4fe8feb46473a5632aab862694488f9df17863eca25a3d301e93ee02fd0220be690cd87e6001abe8ca0eb50827a03b7e699cb51fbd7e6e43969df13160584afcf10149314f34656872b046218fb4d17930a64f9b0e55b0d7b81c414ae8edca2b3adfc62ed0007efb787cedc8dbbfb3edc971638bcdf5d38641e3bd1a024c5dc1a3ba446190aa5e3347fc", @ANYRESOCT, @ANYRES8=r0], &(0x7f0000000300)='syzkaller\x00', 0x200, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x65dd}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf80800d7cc6c3f0500000009019078ac"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, 0x0, 0x4) prlimit64(0x0, 0x4, &(0x7f0000000480)={0x80000009, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 6.914278184s ago: executing program 5 (id=1930): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000007280)={0x2020}, 0x2020) getresgid(&(0x7f0000000c00)=0x0, &(0x7f0000000c40), &(0x7f0000000c80)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in6=@empty}}, {{@in6=@private1}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000003c0)=0x6, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f00)={0x0, &(0x7f00000001c0)={0x18, 0x0, 0x6, {0x9}}, &(0x7f0000000400)={0x18, 0x0, 0x3, {0x9}}, &(0x7f0000000440)={0x18, 0xfffffffffffffffe, 0x6, {0x9}}, 0x0, 0x0, &(0x7f0000000500)={0x60, 0x0, 0xffff, {{0x8000000000000000, 0x0, 0x5, 0x2, 0x5, 0x7, 0x2, 0x6b}}}, &(0x7f00000005c0)={0x18, 0xfffffffffffffff5, 0xfffffffffffffffe, {0x10000}}, &(0x7f0000000600)={0x17, 0xffffffffffffffda, 0x1, {'|-@\'!]\x00'}}, 0x0, &(0x7f0000000740)={0x78, 0xfffffffffffffff5, 0x3, {0xffff, 0x1, 0x0, {0x2, 0xa, 0x6, 0x82d, 0x6, 0x4, 0x2, 0x9, 0x4291, 0x8000, 0x2, 0x0, 0x0, 0x401, 0x3}}}, &(0x7f00000008c0)={0x90, 0x0, 0x2, {0x0, 0x2, 0x2, 0x8000, 0x2, 0x80, {0x1, 0x1, 0x4, 0x8, 0xaea, 0x0, 0x8, 0x1, 0x9, 0xc000, 0x5, 0x0, 0x0, 0x8, 0xc}}}, &(0x7f0000000980)={0x28, 0xfffffffffffffff5, 0xd, [{0x5, 0x4}]}, &(0x7f0000000a80)=ANY=[], &(0x7f0000000cc0)={0xa0, 0xfffffffffffffffe, 0x0, {{0x5, 0x1, 0x1, 0x8, 0x6, 0x2, {0x3, 0xffffffffffffffff, 0x6, 0x5, 0x9, 0x2, 0x81, 0x3, 0xf, 0xa000, 0x5, 0x0, r5, 0x2, 0x3}}, {0x0, 0xe}}}, 0x0, 0x0}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) socket$alg(0x26, 0x5, 0x0) gettid() timer_create(0x1, 0x0, &(0x7f0000000000)) r7 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r7, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="53340081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b35", 0x14}, {&(0x7f0000000800)="696b487a92e473bb265f9a7a", 0xc}], 0x2}}], 0x2, 0x4004040) 6.621048758s ago: executing program 1 (id=1931): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, r3, 0xb97534d5fe9704cf, 0x800, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x30}}, 0x8008) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r6 = fspick(r5, &(0x7f0000000000)='.\x00', 0x0) setreuid(0x0, 0xee00) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) sendmsg$unix(r5, &(0x7f0000000140)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000003c0)="6c556c708635e3c49a8d90dcd09b988ab8f2e3b8bb98114b98c113c175b7f778fd88ece9693de2c572e6fdfb3f34e6c0f91a125e8c91d15859201c9b09db7153dc619070819772a9dcfab6d244d2b78e07eeccc48af92f6f66cbf93550215d7a59da4437fa3e7baeece25601709a2109d5c39519181173fec06e14f4273d52656e80c7e50041fba6da45e691dc01a1ddb2dfe7ff546a0bd7f0effc0e4703dd94bc4689ab81349d2ab40da0690a006fcb96df587e06df9a7f02bdfa351a8f8e0e05aa17cba9be6777c00329cd5569a1a1075117472aebb91e348f9b55b96a24b65abc9596", 0xe4}], 0x1, 0x0, 0x0, 0x800}, 0x4) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r8, 0x10e, 0x5, 0x0, &(0x7f0000000380)) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 6.61320381s ago: executing program 0 (id=1932): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x2c8, r1, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x521}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x95, 0x3, "f93ae5cdcdef2229c2cc1a7a00bf96fbfa12e9abfba6e638dc6146e3c84889f4c12de359def6099c0177274abd3535e3974f36af1ac28f4bae168e569f08af56106bb88c07ff2880654994c7f7d71c155cd681063a59c62d4e04499f7d98fe0135f7a8a2b8c169cbdbfdbb42fc7b76a2cbb6f7b71a3420803b9dc7b31c7e91b8afd5cfe4d6fe85f349acf004ec1e2c8ac3"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "ac9b44ac3c368abbb958340b45af0afaf094f8671ae08b98087323"}}]}, @TIPC_NLA_BEARER={0x198, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @local}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xff, @private0, 0xffff0000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xa3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x800}, 0x20000850) 3.223600211s ago: executing program 5 (id=1933): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fbffbfff00000000030000008500000007000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) ptrace$poke(0x1, 0x0, 0x0, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000000)) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\nr0, {0xee01, 0x0}}, './file0\x00'}) r6 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x400, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x4e310}, [@IFLA_LINK={0x8, 0x5, r9}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240088c4}, 0x20000800) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000002a00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x60, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x4f) getresuid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000180)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000026c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYBLOB="02000e00", @ANYRESHEX=r4, @ANYBLOB="02000000", @ANYRES8=r1, @ANYBLOB="02000200", @ANYRES32=r10, @ANYBLOB="04000100000300", @ANYRES32=0xee00, @ANYRES64=r4, @ANYRES32=r11, @ANYBLOB="10000200000007000047fd9d9028d9e179c9c500000000000000"], 0x54, 0x2) kernel console output (not intermixed with test programs): 477.992221][ T5808] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 478.077724][ T5808] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 478.105934][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.125345][ T5808] usb 1-1: config 0 descriptor?? [ 478.130565][T11161] netlink: 'syz.2.1499': attribute type 4 has an invalid length. [ 478.138864][T11161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1499'. [ 478.140579][ T5926] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 478.149842][ T5808] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 478.166064][ T5808] dvb-usb: bulk message failed: -22 (3/0) [ 478.185862][ T5808] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 478.209850][ T5808] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 478.238209][ T5808] usb 1-1: media controller created [ 478.252297][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 478.274931][ T5808] dvb-usb: bulk message failed: -22 (6/0) [ 478.288017][ T5808] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 478.302344][ T5808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 478.320381][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 478.328567][ T5808] dvb-usb: schedule remote query interval to 150 msecs. [ 478.335741][ T5808] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 478.336521][ T5926] usb 2-1: unable to get BOS descriptor or descriptor too short [ 478.367304][ T30] audit: type=1326 audit(1762422308.798:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11152 comm="syz.3.1497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f336b98f6c9 code=0x0 [ 478.391348][ T5926] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 478.490819][ T5808] dvb-usb: bulk message failed: -22 (1/0) [ 478.510705][ T5808] dvb-usb: error while querying for an remote control event. [ 478.618714][ T10] usb 1-1: USB disconnect, device number 25 [ 478.650412][ T5926] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 478.664830][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 478.673730][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.694010][ T5926] usb 2-1: Product: syz [ 478.698181][ T5926] usb 2-1: Manufacturer: syz [ 478.923569][T11173] netem: change failed [ 478.993307][ T5926] usb 2-1: SerialNumber: syz [ 479.553138][ T5926] usb 2-1: Cannot retrieve CPort count: -110 [ 479.759445][ T5926] usb 2-1: Cannot retrieve CPort count: -110 [ 479.766733][ T5926] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 479.798782][ T5926] usb 2-1: USB disconnect, device number 49 [ 479.834870][ T9192] udevd[9192]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 479.926863][ T8779] udevd[8779]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 480.881801][ T8779] udevd[8779]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 481.076841][T11196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1509'. [ 481.347808][ T9192] udevd[9192]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 481.683223][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 482.070298][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 482.077368][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 482.092886][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.103127][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 482.114362][ T9] usb 2-1: config 1 has no interface number 1 [ 482.120763][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 482.137287][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 482.152980][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1024 [ 482.167712][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 482.177101][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.185498][ T9] usb 2-1: Product: syz [ 482.292416][ T9] usb 2-1: Manufacturer: syz [ 482.297089][ T9] usb 2-1: SerialNumber: syz [ 482.337372][ T9192] udevd[9192]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 482.412825][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1513'. [ 483.309811][T11217] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 483.944621][T11226] syz_tun: entered allmulticast mode [ 483.966569][ T8777] udevd[8777]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 484.025122][T11230] 8021q: VLANs not supported on lo [ 484.093841][T11230] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1517'. [ 484.130775][ T5926] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 484.280297][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 484.292440][ T5926] usb 1-1: config 1 has an invalid interface number: 11 but max is 0 [ 484.305082][ T5926] usb 1-1: config 1 has no interface number 0 [ 484.311423][ T5926] usb 1-1: config 1 interface 11 has no altsetting 0 [ 484.320363][ T5926] usb 1-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=48.2e [ 484.335863][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.343941][ T5926] usb 1-1: Product: syz [ 484.348151][ T5926] usb 1-1: Manufacturer: syz [ 484.370704][ T5926] usb 1-1: SerialNumber: syz [ 484.421304][ T5926] option 1-1:1.11: GSM modem (1-port) converter detected [ 484.439634][ T5926] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 484.595014][ T9] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 484.659793][ T9] usb 2-1: 2:1 : format type 78 is not supported yet [ 485.062315][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1519'. [ 485.108441][ T9] usb 2-1: USB disconnect, device number 50 [ 485.156553][ T976] usb 1-1: USB disconnect, device number 26 [ 485.166523][ T976] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 485.241368][ T976] option 1-1:1.11: device disconnected [ 485.610552][ T24] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 485.789134][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'. [ 485.801994][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.813117][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 485.823047][ T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 485.832394][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.847682][ T24] usb 4-1: config 0 descriptor?? [ 485.881503][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 485.904579][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 485.923150][ T8779] udevd[8779]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 485.934746][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 485.949788][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 485.957785][ T24] usb 4-1: media controller created [ 485.970933][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.983962][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 485.989740][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 485.998847][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input38 [ 486.017950][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 486.025035][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 486.160505][ T5926] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 486.180471][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 486.189304][ T24] dvb-usb: error while querying for an remote control event. [ 486.382414][ T9] usb 4-1: USB disconnect, device number 27 [ 486.432285][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 486.530351][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 486.537916][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.549272][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.559919][ T5926] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 486.569478][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.581765][ T5926] usb 2-1: config 0 descriptor?? [ 486.947388][T11226] syz_tun: left allmulticast mode [ 488.684849][ T8779] udevd[8779]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 488.940525][ T5808] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 489.192436][ T5808] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 489.211791][ T5808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 489.221149][ T5808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 489.249418][ T5808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 489.468725][ T5808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 489.477847][ T5808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 489.508465][ T5926] usbhid 2-1:0.0: can't add hid device: -71 [ 489.549085][ T5808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 489.556899][ T5808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 489.566412][ T5808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 489.577353][ T5808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 489.585223][ T5808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 489.633814][ T5926] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 489.643948][ T5926] usb 2-1: USB disconnect, device number 51 [ 489.675110][ T5808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 489.688083][ T5808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 490.578410][ T5808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 490.587828][ T5808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 490.599105][ T5808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 490.606837][ T5808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 490.616691][ T5808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 490.621902][ T8779] udevd[8779]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 490.630697][ T5808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 490.650106][ T5808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 490.659157][ T5808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 490.670135][ T5808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 490.677890][ T5808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 490.686919][ T5808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 490.700352][ T5808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 490.709188][ T5808] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 490.731318][ T5808] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 490.740642][ T5808] usb 4-1: Product: syz [ 490.745114][ T5808] usb 4-1: Manufacturer: syz [ 490.824621][ T5808] usb 4-1: SerialNumber: syz [ 490.843159][ T5808] usb 4-1: config 0 descriptor?? [ 490.864856][ T30] audit: type=1400 audit(1762422321.289:506): avc: denied { bind } for pid=11305 comm="syz.2.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 490.898627][ T5808] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 490.938916][ T30] audit: type=1400 audit(1762422321.289:507): avc: denied { listen } for pid=11305 comm="syz.2.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 491.150315][ T5926] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 491.174166][ T5860] usb 4-1: USB disconnect, device number 28 [ 491.206836][ T5860] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 491.842513][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.916283][ T5926] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 491.970381][ T5926] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 491.994751][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.008554][T11328] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 492.022371][ T5926] usb 1-1: config 0 descriptor?? [ 492.033884][ T5926] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 492.056172][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 492.074758][ T5926] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 492.094846][ T5926] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 492.110304][ T5926] usb 1-1: media controller created [ 492.122721][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 492.133125][T11331] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1551'. [ 492.162187][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 492.168498][ T5926] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 492.205657][ T5926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input39 [ 492.219326][ T5926] dvb-usb: schedule remote query interval to 150 msecs. [ 492.240284][ T5926] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 492.314027][ T5926] usb 1-1: USB disconnect, device number 27 [ 492.397811][ T5926] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 492.704654][T11346] FAULT_INJECTION: forcing a failure. [ 492.704654][T11346] name failslab, interval 1, probability 0, space 0, times 0 [ 492.717595][T11346] CPU: 0 UID: 0 PID: 11346 Comm: syz.1.1556 Not tainted syzkaller #0 PREEMPT(full) [ 492.717617][T11346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 492.717629][T11346] Call Trace: [ 492.717635][T11346] [ 492.717641][T11346] dump_stack_lvl+0x16c/0x1f0 [ 492.717672][T11346] should_fail_ex+0x512/0x640 [ 492.717692][T11346] ? fs_reclaim_acquire+0xae/0x150 [ 492.717715][T11346] should_failslab+0xc2/0x120 [ 492.717735][T11346] __kmalloc_noprof+0xdd/0x880 [ 492.717760][T11346] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 492.717786][T11346] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 492.717805][T11346] tomoyo_realpath_from_path+0xc2/0x6e0 [ 492.717828][T11346] ? tomoyo_profile+0x47/0x60 [ 492.717854][T11346] tomoyo_path_number_perm+0x245/0x580 [ 492.717880][T11346] ? tomoyo_path_number_perm+0x237/0x580 [ 492.717910][T11346] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 492.717940][T11346] ? find_held_lock+0x2b/0x80 [ 492.717985][T11346] ? find_held_lock+0x2b/0x80 [ 492.718005][T11346] ? hook_file_ioctl_common+0x145/0x410 [ 492.718038][T11346] ? __fget_files+0x20e/0x3c0 [ 492.718060][T11346] security_file_ioctl+0x9b/0x240 [ 492.718080][T11346] __x64_sys_ioctl+0xb7/0x210 [ 492.718106][T11346] do_syscall_64+0xcd/0xfa0 [ 492.718134][T11346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.718151][T11346] RIP: 0033:0x7f4d55f8f6c9 [ 492.718165][T11346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.718181][T11346] RSP: 002b:00007f4d56d6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.718198][T11346] RAX: ffffffffffffffda RBX: 00007f4d561e5fa0 RCX: 00007f4d55f8f6c9 [ 492.718209][T11346] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000006 [ 492.718218][T11346] RBP: 00007f4d56d6d090 R08: 0000000000000000 R09: 0000000000000000 [ 492.718228][T11346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.718238][T11346] R13: 00007f4d561e6038 R14: 00007f4d561e5fa0 R15: 00007ffc8f5bf768 [ 492.718262][T11346] [ 492.718269][T11346] ERROR: Out of memory at tomoyo_realpath_from_path. [ 492.765701][ T9192] udevd[9192]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 492.773844][ T8779] udevd[8779]: symlink '../../loop9' '/dev/disk/by-diskseq/71.tmp-b7:9' failed: Read-only file system [ 492.998160][ T9192] udevd[9192]: symlink '../../loop2' '/dev/disk/by-diskseq/73.tmp-b7:2' failed: Read-only file system [ 493.068738][ T9196] udevd[9196]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 493.168991][T11351] netlink: zone id is out of range [ 493.176808][ T8779] udevd[8779]: symlink '../../loop2' '/dev/disk/by-diskseq/73.tmp-b7:2' failed: Read-only file system [ 493.192529][T11351] netlink: zone id is out of range [ 493.197742][T11351] netlink: zone id is out of range [ 493.207587][ T9192] udevd[9192]: symlink '../../loop9' '/dev/disk/by-diskseq/71.tmp-b7:9' failed: Read-only file system [ 493.376300][ T8779] udevd[8779]: symlink '../../loop2' '/dev/disk/by-diskseq/73.tmp-b7:2' failed: Read-only file system [ 493.394240][T11351] netlink: set zone limit has 8 unknown bytes [ 493.535128][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1561'. [ 494.058720][ T30] audit: type=1400 audit(1762422323.959:508): avc: denied { remount } for pid=11350 comm="syz.1.1559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 494.113005][ T8779] udevd[8779]: symlink '../../loop9' '/dev/disk/by-diskseq/71.tmp-b7:9' failed: Read-only file system [ 494.129907][T11360] fuse: Unknown parameter '0x0000000000000008' [ 494.169164][T11363] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1562'. [ 494.250931][ T9192] udevd[9192]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 494.267125][ T8779] udevd[8779]: symlink '../../loop9' '/dev/disk/by-diskseq/75.tmp-b7:9' failed: Read-only file system [ 494.830851][T11374] veth0: entered promiscuous mode [ 495.477610][T11373] veth0: left promiscuous mode [ 495.578233][T11366] xt_connbytes: Forcing CT accounting to be enabled [ 495.584967][T11366] Cannot find set identified by id 0 to match [ 495.620668][T11366] fuse: Unknown parameter '000000000000000000000110x0000000000000008' [ 495.640894][ T30] audit: type=1400 audit(1762422326.069:509): avc: denied { remount } for pid=11365 comm="syz.0.1563" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 495.811953][ T5881] dvb-usb: did not find the firmware file 'dvb-usb-dw2102.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 495.886829][ T5881] usb 3-1: USB disconnect, device number 33 [ 496.054360][ T5828] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 496.123113][ T5926] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 496.352039][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1572'. [ 496.461759][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.507257][ T5926] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 496.535656][ T5926] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 496.551384][T11403] F2FS-fs: Conflicting test_dummy_encryption options [ 496.565390][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.575690][ T5926] usb 1-1: config 0 descriptor?? [ 496.595533][ T5926] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 496.624077][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 496.645035][T11409] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1576'. [ 496.667462][ T5926] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 496.690845][ T5881] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 496.719460][ T5926] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 496.760372][ T5926] usb 1-1: media controller created [ 496.782895][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 496.879166][T11413] bridge0: entered promiscuous mode [ 496.884915][T11413] macsec1: entered promiscuous mode [ 496.894900][T11413] bridge0: port 3(macsec1) entered blocking state [ 496.902217][T11413] bridge0: port 3(macsec1) entered disabled state [ 496.909235][T11413] macsec1: entered allmulticast mode [ 496.914573][T11413] bridge0: entered allmulticast mode [ 497.283901][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 497.293360][ T5926] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 497.293449][T11413] macsec1: left allmulticast mode [ 497.305624][T11413] bridge0: left allmulticast mode [ 497.311934][T11413] bridge0: left promiscuous mode [ 497.319754][ T5926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input40 [ 497.363659][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 497.474108][T11422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1581'. [ 497.487487][ T5926] dvb-usb: schedule remote query interval to 150 msecs. [ 497.517082][ T30] audit: type=1400 audit(1762422327.949:510): avc: denied { ioctl } for pid=11420 comm="syz.1.1581" path="socket:[28865]" dev="sockfs" ino=28865 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 497.559103][ T5881] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 497.571638][ T5926] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 497.611975][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.637749][ T5881] usb 3-1: Product: syz [ 497.652171][ T5881] usb 3-1: Manufacturer: syz [ 497.658100][ T5881] usb 3-1: SerialNumber: syz [ 497.683621][ T5881] usb 3-1: config 0 descriptor?? [ 497.704766][ T5881] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 497.730581][ T1551] dvb-usb: bulk message failed: -22 (1/0) [ 497.829322][ T1551] dvb-usb: error while querying for an remote control event. [ 497.919122][ T43] usb 1-1: USB disconnect, device number 28 [ 497.952864][ T43] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 497.992891][T11430] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1583'. [ 498.303675][T11434] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 498.482599][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1573'. [ 498.505052][ T30] audit: type=1400 audit(1762422328.919:511): avc: denied { wake_alarm } for pid=11391 comm="syz.2.1573" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 498.570383][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 498.609712][ T5881] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 498.609874][ T5881] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 498.614110][ T5881] usb 3-1: USB disconnect, device number 34 [ 498.623900][T11438] fuse: Unknown parameter 'f^;KoKd' [ 498.825914][T11442] xt_hashlimit: max too large, truncated to 1048576 [ 498.827823][T11442] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 498.880490][ T1551] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 499.271003][ T1551] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 499.279018][ T1551] usb 1-1: config 0 has no interface number 0 [ 499.285308][ T1551] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 499.310477][ T1551] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.329106][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1587'. [ 499.341606][ T1551] usb 1-1: config 0 descriptor?? [ 499.353444][ T1551] usb 1-1: selecting invalid altsetting 1 [ 499.386454][ T1551] dvb_ttusb_budget: ttusb_init_controller: error [ 499.401704][ T1551] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 499.485688][ T1551] DVB: Unable to find symbol cx22700_attach() [ 499.540362][ T1551] DVB: Unable to find symbol tda10046_attach() [ 499.546764][ T1551] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 499.651999][T11455] tipc: Started in network mode [ 499.656950][T11455] tipc: Node identity , cluster identity 4711 [ 499.663336][T11455] tipc: Failed to obtain node identity [ 499.670890][T11455] tipc: Enabling of bearer rejected, failed to enable media [ 499.681871][ T30] audit: type=1400 audit(1762422330.119:512): avc: denied { shutdown } for pid=11437 comm="syz.0.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 499.752674][ T976] usb 1-1: USB disconnect, device number 29 [ 500.318647][ T9192] udevd[9192]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 500.505695][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 500.526784][ T30] audit: type=1326 audit(1762422330.959:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11463 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072ef8f6c9 code=0x7ffc0000 [ 500.573073][T11468] netlink: 568 bytes leftover after parsing attributes in process `syz.0.1593'. [ 500.951697][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.961861][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.019063][ T30] audit: type=1326 audit(1762422330.959:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11463 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f072ef8f6c9 code=0x7ffc0000 [ 501.042539][ T30] audit: type=1326 audit(1762422330.959:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11463 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072ef8f6c9 code=0x7ffc0000 [ 501.065899][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.099513][T11471] xt_cgroup: invalid path, errno=-2 [ 501.109030][T11471] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1591' sets config #0 [ 501.152902][T11468] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1593'. [ 501.227169][T11471] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1591' sets config #1 [ 501.259885][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 501.641949][ T30] audit: type=1326 audit(1762422330.959:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11463 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f072ef8f6c9 code=0x7ffc0000 [ 501.715716][ T30] audit: type=1326 audit(1762422330.959:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11463 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072ef8f6c9 code=0x7ffc0000 [ 501.755685][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 501.803217][ T30] audit: type=1326 audit(1762422330.959:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11463 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072ef8f6c9 code=0x7ffc0000 [ 501.829981][T11486] netlink: 'syz.5.1599': attribute type 16 has an invalid length. [ 501.831549][ T30] audit: type=1326 audit(1762422330.959:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11463 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f072ef8f6c9 code=0x7ffc0000 [ 501.837898][ T5926] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 501.861169][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.870508][T11486] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1599'. [ 501.961575][ T5881] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 501.978491][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1598'. [ 502.431905][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.442108][ T5881] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 502.451051][ T5881] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 502.460098][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.478550][ T5881] usb 3-1: config 0 descriptor?? [ 502.488183][ T5881] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 502.495398][ T5881] dvb-usb: bulk message failed: -22 (3/0) [ 502.501512][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 502.508291][ T5881] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 502.517819][ T5881] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 502.525714][ T5926] usb 2-1: unable to get BOS descriptor or descriptor too short [ 502.534378][ T5881] usb 3-1: media controller created [ 502.540694][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 502.549635][ T5926] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 502.562264][ T5926] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 502.571542][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.579939][ T5926] usb 2-1: Product: syz [ 502.584334][ T5881] dvb-usb: bulk message failed: -22 (6/0) [ 502.594737][ T5881] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 502.602107][ T5926] usb 2-1: Manufacturer: syz [ 502.607830][ T5926] usb 2-1: SerialNumber: syz [ 502.615574][ T5881] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input42 [ 502.634404][T11496] netlink: 5052 bytes leftover after parsing attributes in process `syz.3.1600'. [ 502.660059][ T5881] dvb-usb: schedule remote query interval to 150 msecs. [ 502.667801][ T5881] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 502.714493][T11496] netlink: 5052 bytes leftover after parsing attributes in process `syz.3.1600'. [ 502.784620][ T9] usb 3-1: USB disconnect, device number 35 [ 502.813423][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 502.876666][ T5926] usb 2-1: Cannot retrieve CPort count: -71 [ 502.892083][ T5926] usb 2-1: Cannot retrieve CPort count: -71 [ 502.919525][ T5926] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 502.970482][ T5881] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 502.979809][ T5926] usb 2-1: USB disconnect, device number 52 [ 503.190337][ T5881] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.252854][ T5881] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 503.283678][ T5881] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 503.889931][ T5881] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.900931][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.909105][ T5881] usb 4-1: Product: syz [ 503.926509][ T5881] usb 4-1: Manufacturer: syz [ 503.938401][ T5881] usb 4-1: SerialNumber: syz [ 503.956609][ T5881] cdc_mbim 4-1:1.0: CDC Union missing and no IAD found [ 503.980435][ T5881] cdc_mbim 4-1:1.0: bind() failure [ 503.989652][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 504.165142][ T9192] udevd[9192]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 504.695705][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1610'. [ 504.792717][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 505.018478][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 505.252541][T11543] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 505.261777][T11543] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 506.216475][ T976] usb 4-1: USB disconnect, device number 29 [ 506.444333][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 506.556961][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 507.476046][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 507.642734][T11566] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 508.852138][ T8779] udevd[8779]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 509.079193][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1624'. [ 509.806269][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 509.866159][T11585] loop8: detected capacity change from 0 to 7 [ 509.875133][T11585] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 509.885519][T11585] loop8: partition table partially beyond EOD, truncated [ 509.905650][T11585] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 510.023384][T11585] loop8: p2 start 956478 is beyond EOD, truncated [ 510.158692][ T8778] udevd[8778]: symlink '../../loop8' '/dev/disk/by-diskseq/76.tmp-b7:8' failed: Read-only file system [ 510.206642][ T8779] udevd[8779]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 510.261624][ T8778] udevd[8778]: symlink '../../loop8' '/dev/disk/by-diskseq/76.tmp-b7:8' failed: Read-only file system [ 510.308991][ T8778] udevd[8778]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 511.169538][ T8779] udevd[8779]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 511.199270][ T8778] udevd[8778]: symlink '../../loop8' '/dev/disk/by-diskseq/76.tmp-b7:8' failed: Read-only file system [ 511.219647][ T8778] udevd[8778]: symlink '../../loop8' '/dev/disk/by-diskseq/76.tmp-b7:8' failed: Read-only file system [ 511.271497][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 511.501208][T11605] netlink: 5052 bytes leftover after parsing attributes in process `syz.0.1629'. [ 511.524614][T11605] netlink: 5052 bytes leftover after parsing attributes in process `syz.0.1629'. [ 511.664908][ T5881] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 512.589350][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 512.601181][ T5881] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 512.611568][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 512.624538][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 512.641742][ T5881] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 512.689379][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.750273][ T5881] usb 3-1: Product: syz [ 512.764819][ T5881] usb 3-1: Manufacturer: syz [ 512.789536][ T5881] usb 3-1: SerialNumber: syz [ 512.826441][ T5808] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 513.162311][ T5881] usb 3-1: config 0 descriptor?? [ 513.171144][T11603] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 513.190105][ T5881] usb 3-1: ucan: probing device on interface #0 [ 513.223501][ T5881] usb 3-1: ucan: invalid endpoint configuration [ 513.240026][ T5808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.248352][ T5881] usb 3-1: ucan: probe failed; try to update the device firmware [ 513.266988][ T5808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 513.290552][ T43] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 513.308813][ T5808] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 513.342021][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 513.342035][ T30] audit: type=1400 audit(1762422343.769:554): avc: denied { read } for pid=11631 comm="syz.5.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 513.387727][ T5881] usb 3-1: USB disconnect, device number 36 [ 513.411782][ T5808] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 513.421235][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.429214][ T5808] usb 1-1: Product: syz [ 513.438916][T11636] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1639'. [ 513.448671][ T5808] usb 1-1: Manufacturer: syz [ 513.458786][ T5808] usb 1-1: SerialNumber: syz [ 513.487192][ T5808] cdc_mbim 1-1:1.0: CDC Union missing and no IAD found [ 513.500363][ T5808] cdc_mbim 1-1:1.0: bind() failure [ 513.574143][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 513.581903][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 513.594149][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.620365][ T43] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 513.676076][ T43] usb 4-1: config 1 has no interface number 1 [ 513.704850][ T43] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 513.738711][ T43] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 513.836032][ T43] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1024 [ 513.976838][ T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 513.986083][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.497385][ T43] usb 4-1: Product: syz [ 514.522881][ T43] usb 4-1: Manufacturer: syz [ 514.553974][ T43] usb 4-1: SerialNumber: syz [ 514.583303][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 514.911382][ T5881] usb 1-1: USB disconnect, device number 30 [ 515.321131][T11654] syz2: rxe_newlink: already configured on veth1_to_team [ 515.968177][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 516.039732][ T9192] udevd[9192]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 516.404681][ T5881] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 516.535582][ T30] audit: type=1400 audit(1762422346.969:555): avc: denied { setopt } for pid=11662 comm="syz.5.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 516.535585][T11663] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20000 [ 516.625778][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 516.648100][ T43] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 516.656325][ T43] usb 4-1: 2:1 : format type 78 is not supported yet [ 516.690508][ T43] usb 4-1: USB disconnect, device number 30 [ 516.701966][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.718821][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.727951][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.735426][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.745682][ T5881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 516.754779][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.762079][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.769050][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.774540][ T8779] udevd[8779]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.775975][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.799606][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.801430][T11674] tc_dump_action: action bad kind [ 516.806616][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.818747][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.828044][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.835031][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.842301][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.852733][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.865584][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.880279][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.891840][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.905543][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.920338][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.934375][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.959672][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.968058][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.979067][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 516.980645][ T976] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 516.987276][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.006731][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.101182][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.101343][ T5881] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 517.108168][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.117097][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.124383][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.142368][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.152779][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.160202][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.161144][ T5881] usb 1-1: config 0 descriptor?? [ 517.167265][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.199813][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.220916][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.232631][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.241212][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.254618][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.262204][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.269573][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.277896][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.285527][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.293259][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.305185][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.312581][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.320282][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.327877][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.335571][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.343228][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.357496][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.365219][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.375536][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.385428][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.396770][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.407482][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.419150][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.432854][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.446443][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.465660][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.480607][ T976] usb 3-1: device descriptor read/64, error -71 [ 517.480872][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.496279][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.505321][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.513529][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.521466][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.528926][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 517.572361][ T5828] Bluetooth: hci4: unexpected event for opcode 0x080f [ 518.290713][ T5881] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 518.322510][ T5881] dvb-usb: bulk message failed: -22 (3/0) [ 518.340980][ T5881] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 518.367390][ T5881] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 518.374890][ T5881] usb 1-1: media controller created [ 518.381895][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 518.397294][ T5881] dvb-usb: bulk message failed: -22 (6/0) [ 518.403432][ T5881] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 518.412765][ T5881] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input43 [ 518.425653][ T5881] dvb-usb: schedule remote query interval to 150 msecs. [ 518.433092][ T5881] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 518.480509][ T976] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 518.590422][ T5881] dvb-usb: bulk message failed: -22 (1/0) [ 518.596189][ T5881] dvb-usb: error while querying for an remote control event. [ 518.610405][ T976] usb 3-1: device descriptor read/64, error -71 [ 518.722652][ T976] usb usb3-port1: attempt power cycle [ 518.772685][ T5881] dvb-usb: bulk message failed: -22 (1/0) [ 518.778746][ T5881] dvb-usb: error while querying for an remote control event. [ 518.975465][ T5881] dvb-usb: bulk message failed: -22 (1/0) [ 518.981348][ T5881] dvb-usb: error while querying for an remote control event. [ 519.094619][ T976] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 519.580191][ T5881] dvb-usb: bulk message failed: -22 (1/0) [ 519.595458][ T5881] dvb-usb: error while querying for an remote control event. [ 519.643675][ T976] usb 3-1: device descriptor read/8, error -71 [ 519.643837][ T5881] usb 1-1: USB disconnect, device number 31 [ 519.697316][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 519.815452][ T30] audit: type=1326 audit(1762422350.249:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11696 comm="syz.0.1656" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d1778f6c9 code=0x0 [ 519.913750][T11701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1655'. [ 520.108155][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 520.390107][ T5881] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 520.771744][ T5828] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 520.780722][ T5828] Bluetooth: hci4: Injecting HCI hardware error event [ 520.788329][ T5809] Bluetooth: hci4: hardware error 0x00 [ 520.854742][ T8779] udevd[8779]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 520.858499][T11716] xfs: Unknown parameter 'niscard' [ 520.900357][ T30] audit: type=1400 audit(1762422351.289:557): avc: denied { mounton } for pid=11715 comm="syz.0.1659" path="/340/bus" dev="tmpfs" ino=1933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 521.286947][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 521.360347][ T5926] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 522.000185][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 522.007418][ T5926] usb 2-1: unable to get BOS descriptor or descriptor too short [ 522.016645][ T5926] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.028884][ T5926] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 522.448582][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 522.455351][ T8779] udevd[8779]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 522.478108][ T5926] usb 2-1: config 1 has no interface number 1 [ 522.484303][ T5926] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 522.511616][T11724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1663'. [ 522.521215][ T5926] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 522.552880][ T5926] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1024 [ 522.582520][ T5926] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.648422][T11736] overlayfs: failed to clone upperpath [ 522.656980][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.693997][ T5926] usb 2-1: Product: syz [ 523.210342][ T5926] usb 2-1: Manufacturer: syz [ 523.214765][ T5809] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 523.214965][ T5926] usb 2-1: SerialNumber: syz [ 523.545313][ T8779] udevd[8779]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 523.660382][T11746] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 523.736318][ T30] audit: type=1400 audit(1762422354.169:558): avc: denied { read } for pid=11729 comm="syz.0.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 523.789708][T11750] kAFS: No cell specified [ 524.512384][T11756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1670'. [ 524.727658][ T5926] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 524.764724][ T5926] usb 2-1: 2:1 : format type 78 is not supported yet [ 524.783477][T11760] afs: Unknown parameter 'd' [ 524.851385][ T9192] udevd[9192]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 524.940764][ T5926] usb 2-1: USB disconnect, device number 53 [ 525.844244][ T8778] udevd[8778]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.925661][ T8779] udevd[8779]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 526.026188][ T9192] udevd[9192]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 526.043341][ T8779] udevd[8779]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 526.837432][T11786] siw: device registration error -23 [ 527.022283][T11790] IPv6: sit1: Disabled Multicast RS [ 527.029981][T11790] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1682'. [ 527.095663][ T9192] udevd[9192]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 527.250337][ T5881] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 527.400323][ T5926] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 527.423637][ T5881] usb 2-1: config 0 has an invalid interface number: 46 but max is 0 [ 527.441164][ T5881] usb 2-1: config 0 has no interface number 0 [ 527.456742][ T5881] usb 2-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 527.478940][ T5881] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 527.489885][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.497995][ T5881] usb 2-1: Product: syz [ 527.502249][ T5881] usb 2-1: Manufacturer: syz [ 527.506874][ T5881] usb 2-1: SerialNumber: syz [ 527.534377][ T5881] usb 2-1: config 0 descriptor?? [ 527.560345][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 527.566810][T11792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 527.587809][ T5926] usb 1-1: unable to get BOS descriptor or descriptor too short [ 527.597741][ T5926] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.609307][ T5926] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 527.619175][ T5881] ums-karma 2-1:0.46: USB Mass Storage device detected [ 527.627724][ T5926] usb 1-1: config 1 has no interface number 1 [ 527.634353][ T5926] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 527.661923][ T5926] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 527.673064][ T5926] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1024 [ 527.693961][ T5926] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 527.703551][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.720905][ T5881] ums-karma 2-1:0.46: probe with driver ums-karma failed with error -5 [ 527.733445][ T5926] usb 1-1: Product: syz [ 527.740482][ T5926] usb 1-1: Manufacturer: syz [ 527.760078][ T5926] usb 1-1: SerialNumber: syz [ 528.171922][ T30] audit: type=1400 audit(1762422358.599:559): avc: denied { bind } for pid=11791 comm="syz.1.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 528.283705][T11807] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 528.362907][ T30] audit: type=1400 audit(1762422358.599:560): avc: denied { connect } for pid=11791 comm="syz.1.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 529.083306][T11811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1687'. [ 529.903166][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 529.952281][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 529.952924][ T5881] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 530.678350][ T1551] usb 2-1: USB disconnect, device number 54 [ 530.699778][ T5926] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 530.726693][ T5926] usb 1-1: 2:1 : format type 78 is not supported yet [ 530.991637][ T5881] usb 4-1: config 0 has an invalid interface number: 199 but max is 0 [ 531.073672][ T5881] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 531.137420][ T5926] usb 1-1: USB disconnect, device number 32 [ 531.393917][ T5881] usb 4-1: config 0 has no interface number 0 [ 531.547360][T11846] 9pnet_virtio: no channels available for device syz [ 531.734075][ T5881] usb 4-1: config 0 interface 199 altsetting 8 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 531.745101][ T5881] usb 4-1: config 0 interface 199 altsetting 8 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 531.755989][ T5881] usb 4-1: config 0 interface 199 altsetting 8 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 531.767421][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'. [ 531.776781][ T5881] usb 4-1: config 0 interface 199 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 531.796994][ T5881] usb 4-1: config 0 interface 199 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 531.815943][ T9192] udevd[9192]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 531.817893][ T8777] udevd[8777]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 531.859045][ T5881] usb 4-1: config 0 interface 199 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 531.910736][ T5881] usb 4-1: config 0 interface 199 has no altsetting 0 [ 531.937556][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1696'. [ 532.180293][ T5881] usb 4-1: New USB device found, idVendor=05a9, idProduct=2641, bcdDevice=1c.1b [ 532.221066][T11845] bridge_slave_0: default FDB implementation only supports local addresses [ 532.256800][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.269121][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 532.282655][ T5881] usb 4-1: Product: 훗뀢꾚␞藛ࡘ刁㩈鿅鷑耵熌膻瞹蟋瞋竮⛏哞∽ů艏좮뵥ↈ旍ᩗ狹ꈄ煟问ꟶ厁ꐗ䜛螒徚郾㣣打ᛆ朰穒쾗亩霣곆냪캼ꤍ礚ַ媍博紼ㄈ䆻퍛᛿ꟙ鼾추¢炠窾淧供딹⡦귴ꜩ鞯 [ 532.370764][ T30] audit: type=1400 audit(1762422362.769:561): avc: denied { read } for pid=11851 comm="syz.1.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 532.390937][ T5881] usb 4-1: Manufacturer: ꧆뛾ﯱ鳒鿲쇒㕪馮窊䰖⾊ጊ풬㧓喚ꈻ삅鴏δ죆ퟕ瑜絈⃧爜訅痣㸂Ჾ䉛鈖讱樻 [ 532.390965][ T5881] usb 4-1: SerialNumber: ᰉ [ 532.411436][ T5881] usb 4-1: config 0 descriptor?? [ 532.437415][ T30] audit: type=1400 audit(1762422362.769:562): avc: denied { read } for pid=11851 comm="syz.1.1700" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 532.461563][ T30] audit: type=1400 audit(1762422362.769:563): avc: denied { open } for pid=11851 comm="syz.1.1700" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 532.492632][ T30] audit: type=1400 audit(1762422362.769:564): avc: denied { ioctl } for pid=11851 comm="syz.1.1700" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 532.569249][ T8779] udevd[8779]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 532.640369][ T5881] uvcvideo 4-1:0.199: Found Unit with invalid ID 0 [ 532.647103][ T5881] uvcvideo 4-1:0.199: probe with driver uvcvideo failed with error -22 [ 532.671366][ T5881] usb 4-1: USB disconnect, device number 31 [ 532.904811][ T30] audit: type=1400 audit(1762422363.339:565): avc: denied { append } for pid=11865 comm="syz.1.1704" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 532.929365][ T12] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 532.960568][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 534.135487][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 534.393954][ T5926] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 534.510899][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1706'. [ 534.583734][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 534.930369][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 534.930433][ T5809] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 534.936545][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 535.017395][ T5926] usb 4-1: unable to get BOS descriptor or descriptor too short [ 535.047688][ T5926] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.079646][ T5926] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 535.127126][ T5926] usb 4-1: config 1 has no interface number 1 [ 535.133600][ T5926] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 535.146457][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 535.175527][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 535.537302][ T5926] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 535.560311][ T5926] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1024 [ 535.622322][ T5926] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 535.632272][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.643777][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1710'. [ 535.652585][ T5926] usb 4-1: Product: syz [ 535.656750][ T5926] usb 4-1: Manufacturer: syz [ 535.681202][ T5926] usb 4-1: SerialNumber: syz [ 535.831664][ T9192] udevd[9192]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 535.832037][ T43] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 536.052676][T11898] syz2: rxe_newlink: already configured on veth1_to_team [ 536.816746][ T8779] udevd[8779]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 536.830284][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 536.839224][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.855443][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.877284][ T43] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 536.899008][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.922224][ T43] usb 3-1: config 0 descriptor?? [ 537.263809][ T30] audit: type=1326 audit(1762422367.669:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11907 comm="syz.0.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1778f6c9 code=0x7ffc0000 [ 537.316690][ T5926] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 537.333768][ T5926] usb 4-1: 2:1 : format type 78 is not supported yet [ 537.342112][ T30] audit: type=1326 audit(1762422367.669:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11907 comm="syz.0.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f6d1778f6c9 code=0x7ffc0000 [ 537.366900][ T30] audit: type=1326 audit(1762422367.669:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11907 comm="syz.0.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1778f6c9 code=0x7ffc0000 [ 537.425955][ T5926] usb 4-1: USB disconnect, device number 32 [ 537.591651][ T30] audit: type=1326 audit(1762422367.679:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11907 comm="syz.0.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d1778f6c9 code=0x7ffc0000 [ 537.618246][ T30] audit: type=1326 audit(1762422367.679:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11907 comm="syz.0.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1778f6c9 code=0x7ffc0000 [ 537.907916][ T30] audit: type=1326 audit(1762422367.679:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11907 comm="syz.0.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1778f6c9 code=0x7ffc0000 [ 538.600717][ T976] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 538.792187][ T976] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.802385][ T976] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 538.813257][ T976] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 538.827313][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.842937][ T976] usb 4-1: config 0 descriptor?? [ 538.857517][ T976] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 538.867862][ T976] dvb-usb: bulk message failed: -22 (3/0) [ 538.888297][ T976] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 538.901028][ T976] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 538.912171][ T976] usb 4-1: media controller created [ 538.922601][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 538.951252][ T976] dvb-usb: bulk message failed: -22 (6/0) [ 538.964232][ T976] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 539.909540][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 539.941265][ T976] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44 [ 539.955690][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 539.969173][ T976] dvb-usb: schedule remote query interval to 150 msecs. [ 539.977352][ T43] usb 3-1: USB disconnect, device number 41 [ 539.983734][ T976] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 540.091819][ T9196] udevd[9196]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 540.140290][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 540.143568][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1719'. [ 540.146045][ T976] dvb-usb: error while querying for an remote control event. [ 540.187423][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 540.248105][T11933] serio: Serial port ptm0 [ 541.146674][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 541.168793][ T9] usb 4-1: USB disconnect, device number 33 [ 541.176013][ T30] audit: type=1400 audit(1762422371.599:572): avc: denied { name_bind } for pid=11932 comm="syz.2.1719" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 541.176878][ T976] dvb-usb: error while querying for an remote control event. [ 541.219421][ T9196] udevd[9196]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 541.367184][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 541.885878][T11944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1722'. [ 541.926026][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1724'. [ 542.035123][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 542.091800][ T8779] udevd[8779]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 542.231455][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 542.724518][T11962] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 542.734651][ T30] audit: type=1400 audit(1762422373.169:573): avc: denied { accept } for pid=11961 comm="syz.1.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 542.755525][ T5808] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 543.450291][ T5808] usb 1-1: Using ep0 maxpacket: 32 [ 543.468327][ T5808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 543.487503][ T5808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.507894][ T5808] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 543.645209][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 543.660399][ T5808] usb 1-1: config 1 has no interface number 1 [ 543.678970][ T5808] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 543.891886][ T5808] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 544.194883][ T5808] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1024 [ 544.306762][ T5808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 544.377633][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.567416][ T5808] usb 1-1: Product: syz [ 544.582417][ T5808] usb 1-1: Manufacturer: syz [ 544.587029][ T5808] usb 1-1: SerialNumber: syz [ 544.619583][T11984] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1733'. [ 544.653888][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 545.054153][T11989] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 545.065151][T11989] block device autoloading is deprecated and will be removed. [ 545.104996][T11991] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 545.456159][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1731'. [ 545.530290][ T5860] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 545.805899][T11997] FAULT_INJECTION: forcing a failure. [ 545.805899][T11997] name failslab, interval 1, probability 0, space 0, times 0 [ 545.818573][T11997] CPU: 1 UID: 0 PID: 11997 Comm: syz.1.1736 Not tainted syzkaller #0 PREEMPT(full) [ 545.818595][T11997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 545.818604][T11997] Call Trace: [ 545.818610][T11997] [ 545.818616][T11997] dump_stack_lvl+0x16c/0x1f0 [ 545.818647][T11997] should_fail_ex+0x512/0x640 [ 545.818667][T11997] ? fs_reclaim_acquire+0xae/0x150 [ 545.818693][T11997] should_failslab+0xc2/0x120 [ 545.818713][T11997] __kmalloc_noprof+0xdd/0x880 [ 545.818744][T11997] ? __get_fs_type+0x12c/0x170 [ 545.818764][T11997] ? tomoyo_encode2+0x100/0x3e0 [ 545.818789][T11997] ? tomoyo_encode2+0x100/0x3e0 [ 545.818805][T11997] tomoyo_encode2+0x100/0x3e0 [ 545.818828][T11997] tomoyo_encode+0x29/0x50 [ 545.818847][T11997] tomoyo_mount_acl+0x314/0x850 [ 545.818863][T11997] ? bpf_ksym_find+0x127/0x1c0 [ 545.818895][T11997] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 545.818912][T11997] ? unwind_get_return_address+0x59/0xa0 [ 545.818962][T11997] ? tomoyo_domain+0xbb/0x150 [ 545.818983][T11997] ? tomoyo_profile+0x47/0x60 [ 545.819009][T11997] tomoyo_mount_permission+0x16d/0x420 [ 545.819026][T11997] ? tomoyo_mount_permission+0x14f/0x420 [ 545.819046][T11997] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 545.819081][T11997] security_sb_mount+0x9b/0x260 [ 545.819100][T11997] path_mount+0x158/0x23a0 [ 545.819125][T11997] ? __pfx_path_mount+0x10/0x10 [ 545.819147][T11997] ? kmem_cache_free+0x2d4/0x6c0 [ 545.819161][T11997] ? putname+0x154/0x1a0 [ 545.819186][T11997] ? putname+0x154/0x1a0 [ 545.819204][T11997] ? putname+0x154/0x1a0 [ 545.819227][T11997] ? __x64_sys_mount+0x293/0x310 [ 545.819245][T11997] __x64_sys_mount+0x293/0x310 [ 545.819266][T11997] ? __pfx___x64_sys_mount+0x10/0x10 [ 545.819294][T11997] do_syscall_64+0xcd/0xfa0 [ 545.819323][T11997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.819340][T11997] RIP: 0033:0x7f4d55f8f6c9 [ 545.819355][T11997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.819371][T11997] RSP: 002b:00007f4d56d6d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 545.819388][T11997] RAX: ffffffffffffffda RBX: 00007f4d561e5fa0 RCX: 00007f4d55f8f6c9 [ 545.819399][T11997] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 545.819409][T11997] RBP: 00007f4d56d6d090 R08: 0000000000000000 R09: 0000000000000000 [ 545.819419][T11997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.819429][T11997] R13: 00007f4d561e6038 R14: 00007f4d561e5fa0 R15: 00007ffc8f5bf768 [ 545.819455][T11997] [ 546.235222][ T5808] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 546.244351][ T5808] usb 1-1: 2:1 : format type 78 is not supported yet [ 546.260682][ T5808] usb 1-1: USB disconnect, device number 33 [ 546.293329][ T5860] usb 3-1: unable to get BOS descriptor or descriptor too short [ 546.320858][ T5860] usb 3-1: not running at top speed; connect to a high speed hub [ 546.453065][ T5860] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 546.477025][ T5860] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 547.040246][ T5860] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 547.044663][ T8778] udevd[8778]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 547.049939][ T5860] usb 3-1: config 129 has no interface number 0 [ 547.072288][ T5860] usb 3-1: config 129 has no interface number 1 [ 547.090447][ T5860] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 547.096903][ T30] audit: type=1400 audit(1762422377.519:574): avc: denied { ioctl } for pid=12003 comm="syz.3.1737" path="socket:[30240]" dev="sockfs" ino=30240 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 547.128711][ T5860] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 547.184895][ T8779] udevd[8779]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 547.216303][ T5860] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 547.537506][ T5860] usb 3-1: config 129 interface 135 has no altsetting 0 [ 547.545894][ T5860] usb 3-1: config 129 interface 5 has no altsetting 0 [ 547.553476][ T30] audit: type=1400 audit(1762422377.669:575): avc: denied { write } for pid=12003 comm="syz.3.1737" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 547.596110][ T5860] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 547.617521][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.629473][ T5860] usb 3-1: Product: syz [ 547.645406][ T5860] usb 3-1: Manufacturer: syz [ 547.652852][ T30] audit: type=1400 audit(1762422377.669:576): avc: denied { open } for pid=12003 comm="syz.3.1737" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 547.678640][ T5860] usb 3-1: SerialNumber: syz [ 547.782040][T12019] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 547.794511][ T5860] usb 3-1: can't set config #129, error -71 [ 547.817313][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 547.879553][ T5860] usb 3-1: USB disconnect, device number 42 [ 547.917495][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 549.035006][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 550.900291][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 552.050900][ T8957] udevd[8957]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 552.064196][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 552.568461][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 552.615523][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.661418][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 552.679812][ T9] usb 2-1: config 1 has no interface number 1 [ 552.687066][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 552.701006][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 552.712257][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1024 [ 552.728414][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 552.810267][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.850467][ T9] usb 2-1: Product: syz [ 552.864135][ T9] usb 2-1: Manufacturer: syz [ 552.879709][ T9] usb 2-1: SerialNumber: syz [ 552.883639][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 552.895836][ T30] audit: type=1400 audit(1762422383.309:577): avc: denied { shutdown } for pid=12070 comm="syz.3.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 553.674751][T12077] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 553.693043][ T8779] udevd[8779]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 553.985918][T12082] FAULT_INJECTION: forcing a failure. [ 553.985918][T12082] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 554.005539][T12082] CPU: 0 UID: 0 PID: 12082 Comm: syz.2.1757 Not tainted syzkaller #0 PREEMPT(full) [ 554.005554][T12082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 554.005560][T12082] Call Trace: [ 554.005564][T12082] [ 554.005569][T12082] dump_stack_lvl+0x16c/0x1f0 [ 554.005591][T12082] should_fail_ex+0x512/0x640 [ 554.005606][T12082] _copy_from_iter+0x29f/0x1720 [ 554.005621][T12082] ? __alloc_skb+0x200/0x380 [ 554.005635][T12082] ? __pfx__copy_from_iter+0x10/0x10 [ 554.005649][T12082] ? netlink_autobind.isra.0+0x158/0x370 [ 554.005674][T12082] netlink_sendmsg+0x820/0xdd0 [ 554.005692][T12082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.005712][T12082] ____sys_sendmsg+0xa98/0xc70 [ 554.005723][T12082] ? copy_msghdr_from_user+0x10a/0x160 [ 554.005737][T12082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 554.005753][T12082] ___sys_sendmsg+0x134/0x1d0 [ 554.005767][T12082] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.005780][T12082] ? __lock_acquire+0x622/0x1c90 [ 554.005814][T12082] __sys_sendmsg+0x16d/0x220 [ 554.005828][T12082] ? __pfx___sys_sendmsg+0x10/0x10 [ 554.005851][T12082] do_syscall_64+0xcd/0xfa0 [ 554.005868][T12082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.005879][T12082] RIP: 0033:0x7f072ef8f6c9 [ 554.005888][T12082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.005898][T12082] RSP: 002b:00007f072febb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.005908][T12082] RAX: ffffffffffffffda RBX: 00007f072f1e5fa0 RCX: 00007f072ef8f6c9 [ 554.005915][T12082] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 554.005921][T12082] RBP: 00007f072febb090 R08: 0000000000000000 R09: 0000000000000000 [ 554.005927][T12082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.005932][T12082] R13: 00007f072f1e6038 R14: 00007f072f1e5fa0 R15: 00007ffc01466628 [ 554.005946][T12082] [ 554.327815][ T8779] udevd[8779]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 554.595437][ T8779] udevd[8779]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 554.610584][ T976] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 554.703998][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1761'. [ 554.797682][ T9] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 554.807950][ T9] usb 2-1: 2:1 : format type 78 is not supported yet [ 554.814713][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 554.820622][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.848191][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 554.871691][ T9] usb 2-1: USB disconnect, device number 55 [ 554.873824][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.909147][ T976] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 554.923810][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.955222][ T976] usb 4-1: config 0 descriptor?? [ 554.986307][T12098] 9pnet_virtio: no channels available for device syz [ 554.990349][T12099] overlayfs: failed to clone upperpath [ 555.279953][ T8778] udevd[8778]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.459733][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 555.502650][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.548608][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.591055][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 555.617765][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.680627][ T24] usb 3-1: config 0 descriptor?? [ 555.914584][ T976] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 556.056357][ T8779] udevd[8779]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 556.080310][ T5808] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 556.305654][T12110] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 556.982213][ T5808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.001728][ T5808] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 557.055622][ T5808] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 557.844613][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.854968][ T5808] usb 2-1: config 0 descriptor?? [ 557.865662][ T5808] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 557.872817][ T5808] dvb-usb: bulk message failed: -22 (3/0) [ 557.889216][ T5808] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 557.939836][ T5808] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 557.984315][ T5808] usb 2-1: media controller created [ 558.007851][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 558.028176][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 558.087243][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 558.231538][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 558.239538][ T5808] dvb-usb: bulk message failed: -22 (6/0) [ 558.253845][ T5808] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 558.271923][ T24] usb 3-1: USB disconnect, device number 43 [ 558.285868][ T5808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input45 [ 558.365595][ T5808] dvb-usb: schedule remote query interval to 150 msecs. [ 558.403837][ T5808] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 558.433330][ T5808] usb 2-1: USB disconnect, device number 56 [ 558.525629][ T5808] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 558.630326][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 558.679312][ T30] audit: type=1400 audit(1762422389.109:578): avc: denied { accept } for pid=12119 comm="syz.5.1768" lport=54495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 558.805072][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 558.818220][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.837703][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.973620][ T976] usb 4-1: USB disconnect, device number 34 [ 558.989699][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 559.000427][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.028613][ T24] usb 3-1: config 0 descriptor?? [ 559.901078][ T8779] udevd[8779]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 559.923669][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 560.154077][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 560.204480][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 560.902740][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 560.962750][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 560.972419][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.986427][T12143] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 560.997538][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 561.009120][ T9] usb 2-1: config 1 has no interface number 1 [ 561.024683][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 561.045974][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 561.069290][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1024 [ 561.099051][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 561.117727][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.126208][ T9] usb 2-1: Product: syz [ 561.137422][ T9] usb 2-1: Manufacturer: syz [ 561.142344][ T9] usb 2-1: SerialNumber: syz [ 561.549845][T12144] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 561.907490][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 561.914126][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 561.934922][ T24] usb 3-1: USB disconnect, device number 44 [ 562.377182][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.387126][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.533516][ T8779] udevd[8779]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 563.357324][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 563.441875][ T9] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 563.464631][ T9] usb 2-1: 2:1 : format type 78 is not supported yet [ 563.510082][ T8779] udevd[8779]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 563.527135][ T9] usb 2-1: USB disconnect, device number 57 [ 563.602398][ T9192] udevd[9192]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.817699][ T8779] udevd[8779]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 564.935269][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 565.599074][ T30] audit: type=1400 audit(1762422396.019:579): avc: denied { append } for pid=12179 comm="syz.3.1786" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 565.786107][T12177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1785'. [ 565.980974][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 566.274858][ T43] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 566.440290][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 566.481499][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.523059][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 566.539134][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.556730][ T43] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 566.572325][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.598186][ T43] usb 3-1: config 0 descriptor?? [ 566.613259][T12198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1790'. [ 567.938486][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1793'. [ 569.299622][ T30] audit: type=1400 audit(1762422399.729:580): avc: denied { read } for pid=12226 comm="syz.1.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 569.450621][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 569.460656][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 569.480537][ T43] usb 3-1: USB disconnect, device number 45 [ 569.490036][T12231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1799'. [ 569.515133][ T9196] udevd[9196]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 569.727836][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 569.889084][ T30] audit: type=1400 audit(1762422400.209:581): avc: denied { append } for pid=12236 comm="syz.0.1802" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 570.630261][T12241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=12241 comm=syz.0.1802 [ 571.174118][ T8779] udevd[8779]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 571.185223][ T5860] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 571.250189][ T9192] udevd[9192]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 571.370761][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 571.467123][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.506462][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.545655][ T5860] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 571.556667][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 571.579825][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.739770][ T5860] usb 4-1: config 0 descriptor?? [ 572.310578][ T5860] ft260 0003:0403:6030.000C: item fetching failed at offset 0/2 [ 572.318730][ T5860] ft260 0003:0403:6030.000C: failed to parse HID [ 572.414134][ T5860] ft260 0003:0403:6030.000C: probe with driver ft260 failed with error -22 [ 572.598610][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 572.598675][ T5860] usb 4-1: USB disconnect, device number 35 [ 573.518987][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 574.601471][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'. [ 574.894150][ T8779] udevd[8779]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 574.919933][T12280] : entered promiscuous mode [ 574.930805][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 575.078633][T12287] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 575.089272][T12287] SELinux: failed to load policy [ 575.170037][T12287] input: syz1 as /devices/virtual/input/input46 [ 576.202697][T12284] input: syz1 as /devices/virtual/input/input47 [ 576.324218][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'. [ 576.361631][T12286] SELinux: failed to load policy [ 576.434256][ T8777] udevd[8777]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 576.448336][ T8957] udevd[8957]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 576.798069][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 577.915107][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 578.007220][T12315] mac80211_hwsim hwsim9 4: renamed from wlan1 (while UP) [ 578.161247][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 580.396830][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 581.620262][ T30] audit: type=1400 audit(1762422412.049:582): avc: denied { connect } for pid=12346 comm="syz.5.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 581.652941][T12355] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1833'. [ 581.693254][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 581.987837][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 582.504797][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 583.179751][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1837'. [ 583.216767][T12367] tmpfs: Bad value for 'nr_blocks' [ 583.275354][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 583.286667][ T9781] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 583.554165][ T9781] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.564453][ T9781] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 583.589005][ T9781] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 583.614014][ T9781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.675018][ T9781] usb 4-1: config 0 descriptor?? [ 583.686690][ T9781] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 583.716487][ T9781] dvb-usb: bulk message failed: -22 (3/0) [ 583.727483][ T8779] udevd[8779]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 583.772274][ T9781] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 584.751861][ T30] audit: type=1400 audit(1762422414.559:583): avc: denied { write } for pid=12381 comm="syz.0.1843" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 584.833425][ T30] audit: type=1400 audit(1762422414.599:584): avc: denied { ioctl } for pid=12381 comm="syz.0.1843" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 584.858275][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.932613][ T9781] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 584.943063][ T9781] usb 4-1: media controller created [ 584.961528][ T9781] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 585.114983][T12391] input: syz1 as /devices/virtual/input/input48 [ 585.177809][ T9781] dvb-usb: bulk message failed: -22 (6/0) [ 585.201105][ T9781] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 585.229526][ T9781] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input49 [ 585.277072][ T8777] udevd[8777]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 585.447455][ T9781] dvb-usb: schedule remote query interval to 150 msecs. [ 585.462434][ T5926] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 585.462668][ T9781] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 585.518091][ T9781] usb 4-1: USB disconnect, device number 36 [ 585.521991][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1846'. [ 585.662109][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 586.136811][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.150550][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.160536][ T5926] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 586.169584][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.220817][ T9781] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 586.221629][ T5926] usb 3-1: config 0 descriptor?? [ 588.602093][ T5926] usbhid 3-1:0.0: can't add hid device: -71 [ 588.720329][ T5926] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 588.753777][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 588.784293][ T5926] usb 3-1: USB disconnect, device number 46 [ 588.872403][T12424] sctp: [Deprecated]: syz.2.1853 (pid 12424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 588.872403][T12424] Use struct sctp_sack_info instead [ 588.905056][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 589.017728][ T30] audit: type=1800 audit(1762422419.429:585): pid=12429 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1853" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 589.914057][ T30] audit: type=1400 audit(1762422420.349:586): avc: denied { setopt } for pid=12423 comm="syz.2.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 590.065319][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 590.180447][ T30] audit: type=1400 audit(1762422420.609:587): avc: denied { accept } for pid=12435 comm="syz.0.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 591.493524][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1862'. [ 592.275974][T12454] SELinux: ebitmap start bit (7340096) is beyond the end of the bitmap (1472) [ 592.288682][T12454] SELinux: failed to load policy [ 592.314972][T12454] input: syz1 as /devices/virtual/input/input50 [ 592.442984][ T5809] Bluetooth: hci0: unexpected event for opcode 0xfc0b [ 592.545288][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 592.599265][ T5809] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 592.665331][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 592.750278][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 592.790104][ T30] audit: type=1400 audit(1762422423.219:588): avc: denied { bind } for pid=12462 comm="syz.1.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 592.824157][ T30] audit: type=1400 audit(1762422423.249:589): avc: denied { ioctl } for pid=12462 comm="syz.1.1866" path="socket:[31704]" dev="sockfs" ino=31704 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 592.981924][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 592.993601][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.005475][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.017082][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 593.026588][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.045885][ T24] usb 4-1: config 0 descriptor?? [ 593.154201][ T9196] udevd[9196]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 593.248382][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 594.661625][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 594.797174][T12481] FAULT_INJECTION: forcing a failure. [ 594.797174][T12481] name failslab, interval 1, probability 0, space 0, times 0 [ 594.810146][T12481] CPU: 1 UID: 0 PID: 12481 Comm: syz.0.1871 Not tainted syzkaller #0 PREEMPT(full) [ 594.810167][T12481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 594.810179][T12481] Call Trace: [ 594.810186][T12481] [ 594.810193][T12481] dump_stack_lvl+0x16c/0x1f0 [ 594.810222][T12481] should_fail_ex+0x512/0x640 [ 594.810246][T12481] ? fs_reclaim_acquire+0xae/0x150 [ 594.810267][T12481] should_failslab+0xc2/0x120 [ 594.810288][T12481] __kmalloc_noprof+0xdd/0x880 [ 594.810310][T12481] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 594.810334][T12481] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 594.810352][T12481] tomoyo_realpath_from_path+0xc2/0x6e0 [ 594.810372][T12481] ? tomoyo_profile+0x47/0x60 [ 594.810391][T12481] tomoyo_path_number_perm+0x245/0x580 [ 594.810408][T12481] ? tomoyo_path_number_perm+0x237/0x580 [ 594.810425][T12481] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 594.810443][T12481] ? find_held_lock+0x2b/0x80 [ 594.810469][T12481] ? find_held_lock+0x2b/0x80 [ 594.810483][T12481] ? hook_file_ioctl_common+0x145/0x410 [ 594.810500][T12481] ? __fget_files+0x20e/0x3c0 [ 594.810513][T12481] security_file_ioctl+0x9b/0x240 [ 594.810526][T12481] __x64_sys_ioctl+0xb7/0x210 [ 594.810542][T12481] do_syscall_64+0xcd/0xfa0 [ 594.810559][T12481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.810570][T12481] RIP: 0033:0x7f6d1778f6c9 [ 594.810578][T12481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.810590][T12481] RSP: 002b:00007f6d185a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 594.810601][T12481] RAX: ffffffffffffffda RBX: 00007f6d179e5fa0 RCX: 00007f6d1778f6c9 [ 594.810607][T12481] RDX: 0000200000000140 RSI: 00000000c0189436 RDI: 0000000000000005 [ 594.810614][T12481] RBP: 00007f6d185a4090 R08: 0000000000000000 R09: 0000000000000000 [ 594.810619][T12481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.810625][T12481] R13: 00007f6d179e6038 R14: 00007f6d179e5fa0 R15: 00007ffd6b45cb48 [ 594.810639][T12481] [ 595.012950][T12481] ERROR: Out of memory at tomoyo_realpath_from_path. [ 595.269657][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 595.688035][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 595.820061][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 595.864998][ T24] usb 4-1: USB disconnect, device number 37 [ 596.103945][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 596.460047][ T5809] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 596.469321][ T5809] Bluetooth: hci0: Injecting HCI hardware error event [ 596.477885][ T5809] Bluetooth: hci0: hardware error 0x00 [ 597.137822][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 597.599911][ T5926] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 597.649830][ T30] audit: type=1400 audit(1762422428.079:590): avc: denied { lock } for pid=12506 comm="syz.2.1878" path="socket:[32846]" dev="sockfs" ino=32846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 597.751740][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 597.790259][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 597.823237][T12509] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1879'. [ 597.867418][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1874'. [ 597.893067][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.905667][ T5926] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 597.920251][ T5926] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 597.937416][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.956990][ T5926] usb 2-1: config 0 descriptor?? [ 598.110970][T12516] siw: device registration error -23 [ 598.160419][ T5808] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 598.311433][ T5808] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.321445][ T5808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 598.328031][ T5808] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 598.337413][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.347383][ T5808] usb 3-1: config 0 descriptor?? [ 598.390614][ T5926] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 598.530297][ T5809] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 598.540276][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 598.546683][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.557594][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.567357][ T5926] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 598.576546][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.586660][ T5926] usb 4-1: config 0 descriptor?? [ 598.595825][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1877'. [ 598.763302][ T5808] apple 0003:05AC:027A.000D: bogus close delimiter [ 598.780281][ T5808] apple 0003:05AC:027A.000D: item 0 0 2 10 parsing failed [ 598.787918][ T5808] apple 0003:05AC:027A.000D: parse failed [ 598.798065][ T5808] apple 0003:05AC:027A.000D: probe with driver apple failed with error -22 [ 599.004031][T12526] lo speed is unknown, defaulting to 1000 [ 599.027389][ T5860] usb 3-1: USB disconnect, device number 47 [ 599.037228][ T5926] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 599.057995][T12526] lo speed is unknown, defaulting to 1000 [ 599.065465][T12526] lo speed is unknown, defaulting to 1000 [ 599.098936][T12526] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 599.125110][T12526] lo speed is unknown, defaulting to 1000 [ 599.134614][T12526] lo speed is unknown, defaulting to 1000 [ 599.143460][T12526] lo speed is unknown, defaulting to 1000 [ 599.219950][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 599.373083][T12526] lo speed is unknown, defaulting to 1000 [ 600.077659][ T30] audit: type=1400 audit(1762422430.509:591): avc: denied { write } for pid=12529 comm="syz.0.1883" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 600.077746][ T9] usb 2-1: USB disconnect, device number 58 [ 600.138999][ T30] audit: type=1400 audit(1762422430.539:592): avc: denied { open } for pid=12529 comm="syz.0.1883" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 600.394867][T12526] lo speed is unknown, defaulting to 1000 [ 600.546818][ T9192] udevd[9192]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 601.300333][ T5860] usb 4-1: USB disconnect, device number 38 [ 601.458330][T12538] use of bytesused == 0 is deprecated and will be removed in the future, [ 601.467115][T12538] use the actual size instead. [ 602.352541][ T30] audit: type=1400 audit(1762422432.749:593): avc: denied { bind } for pid=12544 comm="syz.1.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 602.426546][ T9192] udevd[9192]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 602.515562][T12554] loop7: detected capacity change from 0 to 16384 [ 602.523068][ T5881] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 602.670481][ T5860] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 602.674698][ T8778] udevd[8778]: symlink '../../loop7' '/dev/disk/by-diskseq/79.tmp-b7:7' failed: Read-only file system [ 603.210285][ T5881] usb 3-1: device descriptor read/64, error -71 [ 603.231819][ T5860] usb 4-1: config 0 has an invalid interface number: 199 but max is 0 [ 603.231846][ T5860] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 603.231864][ T5860] usb 4-1: config 0 has no interface number 0 [ 603.231905][ T5860] usb 4-1: config 0 interface 199 altsetting 8 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 603.231931][ T5860] usb 4-1: config 0 interface 199 altsetting 8 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 603.231955][ T5860] usb 4-1: config 0 interface 199 altsetting 8 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 603.231980][ T5860] usb 4-1: config 0 interface 199 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 603.232000][ T5860] usb 4-1: config 0 interface 199 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 603.232019][ T5860] usb 4-1: config 0 interface 199 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 603.232037][ T5860] usb 4-1: config 0 interface 199 has no altsetting 0 [ 603.241895][ T5860] usb 4-1: New USB device found, idVendor=05a9, idProduct=2641, bcdDevice=1c.1b [ 603.241928][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.241947][ T5860] usb 4-1: Product: 훗뀢꾚␞藛ࡘ刁㩈鿅鷑耵熌膻瞹蟋瞋竮⛏哞∽ů艏좮뵥ↈ旍ᩗ狹ꈄ煟问ꟶ厁ꐗ䜛螒徚郾㣣打ᛆ朰穒쾗亩霣곆냪캼ꤍ礚ַ媍博紼ㄈ䆻퍛᛿ꟙ鼾추¢炠窾淧供딹⡦귴ꜩ鞯 [ 603.241975][ T5860] usb 4-1: Manufacturer: ꧆뛾ﯱ鳒鿲쇒㕪馮窊䰖⾊ጊ풬㧓喚ꈻ삅鴏δ죆ퟕ瑜絈⃧爜訅痣㸂Ჾ䉛鈖讱樻 [ 603.241996][ T5860] usb 4-1: SerialNumber: ᰉ [ 603.251116][ C1] I/O error, dev loop7, sector 9088 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 603.253658][ T5860] usb 4-1: config 0 descriptor?? [ 603.258736][T12557] loop7: detected capacity change from 16384 to 0 [ 603.260352][ C1] I/O error, dev loop7, sector 9088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 603.317273][ T8779] udevd[8779]: symlink '../../loop7' '/dev/disk/by-diskseq/79.tmp-b7:7' failed: Read-only file system [ 603.324566][ C1] Buffer I/O error on dev loop7, logical block 1136, async page read [ 603.483541][ T5860] uvcvideo 4-1:0.199: Found UVC 0.00 device 훗뀢꾚␞藛ࡘ刁㩈鿅鷑耵熌膻瞹蟋瞋竮⛏哞∽ů艏좮뵥ↈ旍ᩗ狹ꈄ煟问ꟶ厁ꐗ䜛螒徚郾㣣打ᛆ朰穒쾗亩霣곆냪캼ꤍ礚ַ媍博紼ㄈ䆻퍛᛿ꟙ鼾추¢炠窾淧供딹⡦귴ꜩ鞯 (05a9:2641) [ 603.483582][ T5860] uvcvideo 4-1:0.199: No valid video chain found. [ 603.488045][ T5860] usb 4-1: USB disconnect, device number 39 [ 603.505678][ T8779] udevd[8779]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 603.550774][ T5881] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 603.708923][ T8779] udevd[8779]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 603.754706][ T8778] udevd[8778]: symlink '../../loop7' '/dev/disk/by-diskseq/79.tmp-b7:7' failed: Read-only file system [ 603.817741][ T30] audit: type=1400 audit(1762422434.249:594): avc: denied { map } for pid=12570 comm="syz.1.1893" path="/proc/1235/net/wireless" dev="proc" ino=4026533234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 604.196108][T12577] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 604.516856][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 604.597463][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 604.659696][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 604.682961][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 604.840341][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 604.847013][T12593] ALSA: mixer_oss: invalid OSS volume 'PHONEX0IN' [ 604.865223][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 604.890320][T12593] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.899790][T12593] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.909957][ T30] audit: type=1400 audit(1762422435.319:595): avc: denied { accept } for pid=12589 comm="syz.1.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 604.912175][ T9] usb 4-1: config 179 has no interface number 0 [ 604.929430][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.083841][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 605.142587][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 605.197294][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 605.238107][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 605.263175][T12595] SELinux: failed to load policy [ 605.281176][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 605.334064][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 605.367353][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.465027][T12581] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 606.351283][T12595] input: syz1 as /devices/virtual/input/input51 [ 606.472367][T12598] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1902'. [ 606.692429][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1903'. [ 606.794852][ T5881] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input52 [ 607.626055][ T8779] udevd[8779]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 610.067884][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 610.300991][ T5881] usb 4-1: USB disconnect, device number 40 [ 610.306956][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 610.307003][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 610.591538][T12615] overlayfs: failed to clone upperpath [ 611.190316][ T5881] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 612.057735][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 612.074562][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 612.114121][ T5881] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 612.137123][ T8779] udevd[8779]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 612.314247][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.346789][ T5881] usb 4-1: config 0 descriptor?? [ 612.375363][ T5881] usb 4-1: interface 1 not found [ 612.473726][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 613.489293][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 613.815881][ T9] usb 4-1: USB disconnect, device number 41 [ 614.383663][ T30] audit: type=1400 audit(1762422444.809:596): avc: denied { read write } for pid=12649 comm="syz.3.1915" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 614.563714][ T30] audit: type=1400 audit(1762422444.809:597): avc: denied { open } for pid=12649 comm="syz.3.1915" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 614.620296][ T5881] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 614.708110][ T30] audit: type=1400 audit(1762422444.809:598): avc: denied { ioctl } for pid=12649 comm="syz.3.1915" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 614.814187][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 614.849983][ T5881] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 614.908502][ T30] audit: type=1400 audit(1762422444.989:599): avc: denied { read write } for pid=5806 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 617.223650][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 617.239891][ T5881] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 617.255588][ T30] audit: type=1400 audit(1762422444.989:600): avc: denied { open } for pid=5806 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 617.283110][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.420686][ T5881] usb 4-1: Product: syz [ 619.455281][ T5881] usb 4-1: Manufacturer: syz [ 623.305799][ T5881] usb 4-1: SerialNumber: syz [ 623.423885][ T30] audit: type=1400 audit(1762422444.989:601): avc: denied { ioctl } for pid=5806 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 624.180667][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.187039][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.460212][ C1] sched: DL replenish lagged too much [ 624.600330][ T30] audit: type=1400 audit(1762422445.249:602): avc: denied { create } for pid=12651 comm="syz.1.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 624.866579][ T5881] usb 4-1: config 0 descriptor?? [ 624.890455][ T30] audit: type=1400 audit(1762422445.249:603): avc: denied { write } for pid=12651 comm="syz.1.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 624.951078][ T5881] usb 4-1: can't set config #0, error -71 [ 625.010556][ T5881] usb 4-1: USB disconnect, device number 42 [ 625.078179][T12667] openvswitch: netlink: IP tunnel dst address not specified [ 625.100142][ T30] audit: type=1400 audit(1762422445.249:604): avc: denied { read } for pid=12651 comm="syz.1.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 625.337554][ T9196] udevd[9196]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 625.486794][ T30] audit: type=1400 audit(1762422445.339:605): avc: denied { prog_load } for pid=12651 comm="syz.1.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 625.522887][ T9192] udevd[9192]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 626.074003][ T30] audit: type=1400 audit(1762422445.339:606): avc: denied { bpf } for pid=12651 comm="syz.1.1916" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 627.145834][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 627.213198][ T30] audit: type=1400 audit(1762422445.339:607): avc: denied { perfmon } for pid=12651 comm="syz.1.1916" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 628.048267][ T30] audit: type=1400 audit(1762422445.339:608): avc: denied { prog_run } for pid=12651 comm="syz.1.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 628.215248][ T30] audit: type=1400 audit(1762422447.729:609): avc: denied { name_bind } for pid=12653 comm="syz.5.1917" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 628.287127][ T8778] udevd[8778]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 628.312668][ T30] audit: type=1400 audit(1762422447.729:610): avc: denied { node_bind } for pid=12653 comm="syz.5.1917" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 628.334885][ T5926] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 628.525821][T12687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1926'. [ 628.606297][T12688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1926'. [ 628.662250][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 628.662263][ T30] audit: type=1400 audit(1762422458.939:636): avc: denied { create } for pid=12679 comm="syz.0.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 628.746739][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 630.241704][ T30] audit: type=1400 audit(1762422460.669:637): avc: denied { read } for pid=12691 comm="syz.3.1928" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 630.423368][ T5926] usb 2-1: device descriptor read/all, error -71 [ 630.570333][ T30] audit: type=1400 audit(1762422460.669:638): avc: denied { open } for pid=12691 comm="syz.3.1928" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 630.819471][ T30] audit: type=1400 audit(1762422460.719:639): avc: denied { ioctl } for pid=12691 comm="syz.3.1928" path="/dev/sg0" dev="devtmpfs" ino=741 ioctlcmd=0x5387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 630.827808][T12698] usb usb8: usbfs: process 12698 (syz.0.1932) did not claim interface 0 before use [ 632.559763][ T30] audit: type=1400 audit(1762422460.719:640): avc: denied { ioctl } for pid=12691 comm="syz.3.1928" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 632.756569][ T8779] udevd[8779]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 636.256993][ T30] audit: type=1400 audit(1762422461.089:641): avc: denied { write } for pid=12696 comm="syz.0.1932" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 637.088592][ T8778] udevd[8778]: symlink '../../loop0' '/dev/disk/by-diskseq/70.tmp-b7:0' failed: Read-only file system [ 643.428687][ T30] audit: type=1400 audit(1762422461.279:642): avc: denied { write } for pid=12691 comm="syz.3.1928" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 648.492084][ T30] audit: type=1400 audit(1762422461.289:643): avc: denied { create } for pid=12691 comm="syz.3.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 654.309658][ T30] audit: type=1400 audit(1762422461.369:644): avc: denied { getopt } for pid=12694 comm="syz.5.1930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 685.382212][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.399196][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.660154][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 746.667115][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5811/1:b..l [ 746.675466][ C0] rcu: (detected by 0, t=10502 jiffies, g=46069, q=1236024 ncpus=2) [ 746.683528][ C0] task:syz-executor state:R running task stack:23800 pid:5811 tgid:5811 ppid:1 task_flags:0x400140 flags:0x00080003 [ 746.697838][ C0] Call Trace: [ 746.701115][ C0] [ 746.704043][ C0] __schedule+0x1190/0x5de0 [ 746.708571][ C0] ? __pfx___schedule+0x10/0x10 [ 746.713433][ C0] ? mark_held_locks+0x49/0x80 [ 746.718205][ C0] preempt_schedule_irq+0x51/0x90 [ 746.723212][ C0] irqentry_exit+0x36/0x90 [ 746.727627][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 746.733603][ C0] RIP: 0010:lock_release+0x183/0x2f0 [ 746.738884][ C0] Code: 0f c1 05 a8 db 08 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 bd 99 08 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 746.758490][ C0] RSP: 0018:ffffc90002fb74e8 EFLAGS: 00000206 [ 746.764556][ C0] RAX: 5ed832d27c17f900 RBX: ffffffff8e3c4760 RCX: ffffc90002fb74f4 [ 746.772521][ C0] RDX: 0000000000000002 RSI: ffffffff8da0571e RDI: ffffffff8bf07040 [ 746.780492][ C0] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000000 [ 746.788457][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8231337e [ 746.796423][ C0] R13: 0000000000000206 R14: ffff888031f94900 R15: 0000000000000003 [ 746.804389][ C0] ? page_ext_put+0x3e/0xd0 [ 746.808914][ C0] page_ext_put+0x43/0xd0 [ 746.813244][ C0] __reset_page_owner+0x7a/0x1a0 [ 746.818176][ C0] __free_frozen_pages+0x7df/0x1160 [ 746.823365][ C0] __put_partials+0x130/0x170 [ 746.828045][ C0] qlist_free_all+0x4d/0x120 [ 746.832634][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 746.838091][ C0] __kasan_kmalloc+0x8a/0xb0 [ 746.842678][ C0] __kmalloc_noprof+0x32f/0x880 [ 746.847532][ C0] ? kfree+0x252/0x6d0 [ 746.851599][ C0] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 746.857322][ C0] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 746.863036][ C0] tomoyo_realpath_from_path+0xc2/0x6e0 [ 746.868574][ C0] tomoyo_check_open_permission+0x2ab/0x3c0 [ 746.874445][ C0] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 746.880887][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 746.885914][ C0] tomoyo_file_open+0x6b/0x90 [ 746.890590][ C0] security_file_open+0x84/0x1e0 [ 746.895528][ C0] do_dentry_open+0x596/0x1530 [ 746.900294][ C0] vfs_open+0x82/0x3f0 [ 746.904365][ C0] path_openat+0x1de4/0x2cb0 [ 746.908958][ C0] ? __pfx_path_openat+0x10/0x10 [ 746.913907][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 746.918930][ C0] do_filp_open+0x20b/0x470 [ 746.923412][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 746.928449][ C0] ? alloc_fd+0x471/0x7d0 [ 746.932785][ C0] do_sys_openat2+0x11b/0x1d0 [ 746.937459][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 746.942663][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 746.947871][ C0] __x64_sys_openat+0x174/0x210 [ 746.952722][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 746.958101][ C0] do_syscall_64+0xcd/0xfa0 [ 746.962609][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.968516][ C0] RIP: 0033:0x7f072ef8efc1 [ 746.972908][ C0] RSP: 002b:00007ffc01466940 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 746.981317][ C0] RAX: ffffffffffffffda RBX: 00000000000004b5 RCX: 00007f072ef8efc1 [ 746.989281][ C0] RDX: 0000000000090800 RSI: 00007f072f012286 RDI: 00000000ffffff9c [ 746.997245][ C0] RBP: 00007ffc014669ec R08: 0000000000000000 R09: 0000000000000000 [ 747.005210][ C0] R10: 0000000000000000 R11: 0000000000000287 R12: 000000000000016f [ 747.013177][ C0] R13: 0000000000000000 R14: 0000000000099ef4 R15: 00007ffc01466a40 [ 747.021153][ C0] [ 747.024164][ C0] rcu: rcu_preempt kthread starved for 7011 jiffies! g46069 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 747.035258][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 747.045214][ C0] rcu: RCU grace-period kthread stack dump: [ 747.051090][ C0] task:rcu_preempt state:R running task stack:28080 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 747.064572][ C0] Call Trace: [ 747.067834][ C0] [ 747.070747][ C0] __schedule+0x1190/0x5de0 [ 747.075268][ C0] ? __pfx___schedule+0x10/0x10 [ 747.080124][ C0] ? find_held_lock+0x2b/0x80 [ 747.084798][ C0] ? schedule+0x2d7/0x3a0 [ 747.089131][ C0] schedule+0xe7/0x3a0 [ 747.093198][ C0] schedule_timeout+0x123/0x290 [ 747.098043][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 747.103414][ C0] ? __pfx_process_timeout+0x10/0x10 [ 747.108702][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 747.114506][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 747.119969][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 747.124730][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 747.130008][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 747.135211][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 747.140147][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 747.144997][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 747.150806][ C0] rcu_gp_kthread+0x26d/0x380 [ 747.155483][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 747.160674][ C0] ? rcu_is_watching+0x12/0xc0 [ 747.165437][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 747.170644][ C0] ? __kthread_parkme+0x19e/0x250 [ 747.175672][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 747.180865][ C0] kthread+0x3c5/0x780 [ 747.184932][ C0] ? __pfx_kthread+0x10/0x10 [ 747.189522][ C0] ? rcu_is_watching+0x12/0xc0 [ 747.194284][ C0] ? __pfx_kthread+0x10/0x10 [ 747.198869][ C0] ret_from_fork+0x675/0x7d0 [ 747.203457][ C0] ? __pfx_kthread+0x10/0x10 [ 747.208057][ C0] ret_from_fork_asm+0x1a/0x30 [ 747.212836][ C0] [ 747.215849][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 747.222159][ C0] Sending NMI from CPU 0 to CPUs 1: [ 747.227356][ C1] NMI backtrace for cpu 1 [ 747.227369][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 747.227387][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 747.227395][ C1] RIP: 0010:__lock_acquire+0x18f/0x1c90 [ 747.227420][ C1] Code: b7 45 20 4d 89 7d 10 89 fa 66 81 e2 ff 1f 66 25 00 e0 09 d0 66 41 89 45 20 48 8b 84 24 a8 00 00 00 49 89 45 08 48 8b 44 24 08 <49> 89 45 18 8b b5 14 0b 00 00 31 c0 65 8b 15 c6 f6 08 12 85 f6 0f [ 747.227435][ C1] RSP: 0018:ffffc90000a08018 EFLAGS: 00000002 [ 747.227447][ C1] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000002 [ 747.227456][ C1] RDX: 0000000000000007 RSI: ffff88801d6e2fd8 RDI: 0000000000000007 [ 747.227465][ C1] RBP: ffff88801d6e2480 R08: 0000000000000000 R09: 0000000000000000 [ 747.227473][ C1] R10: 0000000000000050 R11: 0000000000000001 R12: ffff88801d6e2fb0 [ 747.227482][ C1] R13: ffff88801d6e3000 R14: 0000000000000000 R15: ffffffff8e3c4760 [ 747.227491][ C1] FS: 0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 747.227506][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 747.227516][ C1] CR2: 00007f4a51600218 CR3: 0000000027223000 CR4: 00000000003526f0 [ 747.227526][ C1] Call Trace: [ 747.227531][ C1] [ 747.227538][ C1] ? lock_acquire+0x179/0x350 [ 747.227553][ C1] lock_acquire+0x179/0x350 [ 747.227564][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 747.227582][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 747.227597][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 747.227616][ C1] unwind_next_frame+0xd1/0x20a0 [ 747.227631][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 747.227644][ C1] ? nf_hook.constprop.0+0x424/0x750 [ 747.227663][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 747.227682][ C1] arch_stack_walk+0x94/0x100 [ 747.227698][ C1] ? nf_hook.constprop.0+0x424/0x750 [ 747.227725][ C1] stack_trace_save+0x8e/0xc0 [ 747.227742][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 747.227762][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 747.227783][ C1] kasan_save_stack+0x33/0x60 [ 747.227797][ C1] ? kasan_save_stack+0x33/0x60 [ 747.227810][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 747.227828][ C1] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 747.227843][ C1] ? dst_release+0x266/0x340 [ 747.227858][ C1] ? skb_release_head_state+0x234/0x290 [ 747.227875][ C1] ? consume_skb+0x85/0x100 [ 747.227893][ C1] ? nft_synproxy_do_eval+0xa6b/0xd80 [ 747.227908][ C1] ? nft_do_chain+0x2e9/0x1920 [ 747.227920][ C1] ? nft_do_chain_inet+0x18a/0x340 [ 747.227940][ C1] ? nf_hook_slow+0xbe/0x200 [ 747.227955][ C1] ? nf_hook.constprop.0+0x424/0x750 [ 747.227989][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 747.228006][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 747.228023][ C1] __call_rcu_common.constprop.0+0xa5/0xa10 [ 747.228038][ C1] ? percpu_counter_add_batch+0xca/0x200 [ 747.228057][ C1] dst_release+0x266/0x340 [ 747.228071][ C1] skb_release_head_state+0x234/0x290 [ 747.228089][ C1] consume_skb+0x85/0x100 [ 747.228108][ C1] nft_synproxy_do_eval+0xa6b/0xd80 [ 747.228124][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 747.228137][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 747.228153][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 747.228169][ C1] ? find_held_lock+0x2b/0x80 [ 747.228187][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 747.228202][ C1] nft_do_chain+0x2e9/0x1920 [ 747.228215][ C1] ? ip6t_do_table+0xbf5/0x1c30 [ 747.228236][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 747.228248][ C1] ? ipt_do_table+0xd48/0x1ae0 [ 747.228264][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 747.228288][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 747.228306][ C1] ? ipt_do_table+0xd48/0x1ae0 [ 747.228329][ C1] nft_do_chain_inet+0x18a/0x340 [ 747.228349][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 747.228370][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 747.228388][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 747.228403][ C1] ? nf_nat_ipv4_local_in+0x181/0x720 [ 747.228421][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 747.228440][ C1] nf_hook_slow+0xbe/0x200 [ 747.228458][ C1] nf_hook.constprop.0+0x424/0x750 [ 747.228475][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 747.228494][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 747.228510][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 747.228529][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 747.228551][ C1] ip_local_deliver+0x169/0x1f0 [ 747.228570][ C1] ip_rcv+0x2e0/0x600 [ 747.228587][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 747.228603][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 747.228619][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 747.228636][ C1] ? lock_acquire+0x179/0x350 [ 747.228652][ C1] ? process_backlog+0x3e7/0x15e0 [ 747.228667][ C1] __netif_receive_skb+0x1d/0x160 [ 747.228682][ C1] process_backlog+0x439/0x15e0 [ 747.228701][ C1] __napi_poll.constprop.0+0xba/0x550 [ 747.228720][ C1] ? skb_defer_free_flush+0x149/0x280 [ 747.228740][ C1] net_rx_action+0x97f/0xef0 [ 747.228757][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 747.228775][ C1] ? tmigr_handle_remote+0x132/0x380 [ 747.228795][ C1] ? run_timer_base+0x121/0x190 [ 747.228808][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 747.228822][ C1] handle_softirqs+0x219/0x8e0 [ 747.228842][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 747.228859][ C1] __irq_exit_rcu+0x109/0x170 [ 747.228875][ C1] irq_exit_rcu+0x9/0x30 [ 747.228891][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 747.228909][ C1] [ 747.228914][ C1] [ 747.228919][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 747.228933][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 747.228953][ C1] Code: e7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 a6 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 747.228965][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 747.228976][ C1] RAX: 0000000003774d17 RBX: 0000000000000001 RCX: ffffffff8b6082a9 [ 747.228985][ C1] RDX: 0000000000000000 RSI: ffffffff8da2b0e0 RDI: ffffffff8bf07040 [ 747.228995][ C1] RBP: ffffed1003adc490 R08: 0000000000000001 R09: ffffed10170a6655 [ 747.229004][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 747.229013][ C1] R13: ffff88801d6e2480 R14: ffffffff908204d0 R15: 0000000000000000 [ 747.229024][ C1] ? ct_kernel_exit+0x139/0x190 [ 747.229038][ C1] default_idle+0x13/0x20 [ 747.229051][ C1] default_idle_call+0x6c/0xb0 [ 747.229065][ C1] do_idle+0x38d/0x500 [ 747.229082][ C1] ? __pfx_do_idle+0x10/0x10 [ 747.229098][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 747.229114][ C1] cpu_startup_entry+0x4f/0x60 [ 747.229131][ C1] start_secondary+0x21d/0x2b0 [ 747.229151][ C1] ? __pfx_start_secondary+0x10/0x10 [ 747.229171][ C1] common_startup_64+0x13e/0x148 [ 747.229190][ C1] [ 755.944524][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 755.962117][ T1294] ieee802154 phy1 wpan1: encryption failed: -22