last executing test programs: 18m38.225346653s ago: executing program 4 (id=666): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r3, 0x4004e502, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB='\x00\x00@\x00max']) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02001000a300"/18, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000040)={0x3ff, 0x7e7, 0x0, 0x9, 0x1, 0x0, 0x7ffffffb, 0x83f8}, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) 18m36.961289057s ago: executing program 4 (id=671): add_key$user(&(0x7f0000000080), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1339000, 0x0, 0x4}, 0x20) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0109220c"], 0x7) tkill(0x0, 0x11) 18m36.79331777s ago: executing program 4 (id=673): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00000003", 0x47}], 0x1) 18m36.069010125s ago: executing program 4 (id=676): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000021f16a0000070000000000000000dd000000e24a53bd4632506334640045d453564dc02069c0127b189b5b7a1de9d38c2a4913f635fec689646cb20b99716c9d64a12285ea386a85e4a6da93dfffcc817be4ba0d667310f599d511d3e7a91d375c7dae7e56f5558a9ec644c7420f05d6d0ec53e3bb920e366f3573b5ea", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000d17e0000850000002e000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$phonet(0x23, 0x2, 0x1) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000400)={0xf, r2, 0x20, {0xcb1, 0x2}, 0xc}, 0x1) io_setup(0x3, &(0x7f0000000180)) mknodat(0xffffffffffffffff, 0x0, 0x22f6c0948578f7ce, 0xb1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 18m35.02068208s ago: executing program 4 (id=679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000021f16a0000070000000000000000dd000000e24a53bd4632506334640045d453564dc02069c0127b189b5b7a1de9d38c2a4913f635fec689646cb20b99716c9d64a12285ea386a85e4a6da93dfffcc817be4ba0d667310f599d511d3e7a91d375c7dae7e56f5558a9ec644c7420f05d6d0ec53e3bb920e366f3573b5ea", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) signalfd4(r0, &(0x7f0000000000)={[0x8]}, 0x8, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$phonet(0x23, 0x2, 0x1) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000400)={0xf, r2, 0x20, {0xcb1, 0x2}, 0xc}, 0x1) io_setup(0x3, &(0x7f0000000180)) mknodat(0xffffffffffffffff, 0x0, 0x22f6c0948578f7ce, 0xb1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 18m33.544993271s ago: executing program 4 (id=682): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000440)={0x1, 0x1, 0x3000, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=r4, @ANYRESDEC=r4, @ANYRESDEC=r3], 0x80}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000700)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x1, 0x24, 0x65, 0x0, 0x44, 0x21, 0x0, @loopback, @multicast1}, {{0x4e24, 0x4e20, 0x4, 0x1, 0x5, 0x0, 0x0, 0x1, 0x0, "461499", 0x9, "040080"}}}}}}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x1, 0x10, 0x4, &(0x7f0000000100)="15bf5d7f"}], 0x1}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0x5000, 0x2000}) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$getregs(0xc, r6, 0x1, &(0x7f0000000000)=""/28) connect$unix(r7, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r9 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r9, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)={0x9, 0x0, [{0x28f, 0x0, 0x6}, {0xc0011038}, {0x2a3, 0x0, 0x20000000}, {0x0, 0x0, 0x71}, {0x40000072, 0x0, 0x3}, {0x3f9, 0x0, 0x7d86}, {0x3b6, 0x0, 0x80000000000000}, {0x251, 0x0, 0x10001}, {0xb15, 0x0, 0xfffffffffffffffe}]}) ftruncate(r9, 0x7) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r10, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, '[---@\x00'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ',!\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x42}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x4040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 18m18.090854348s ago: executing program 32 (id=682): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000440)={0x1, 0x1, 0x3000, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=r4, @ANYRESDEC=r4, @ANYRESDEC=r3], 0x80}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000700)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x1, 0x24, 0x65, 0x0, 0x44, 0x21, 0x0, @loopback, @multicast1}, {{0x4e24, 0x4e20, 0x4, 0x1, 0x5, 0x0, 0x0, 0x1, 0x0, "461499", 0x9, "040080"}}}}}}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x1, 0x10, 0x4, &(0x7f0000000100)="15bf5d7f"}], 0x1}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0x5000, 0x2000}) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$getregs(0xc, r6, 0x1, &(0x7f0000000000)=""/28) connect$unix(r7, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r9 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r9, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)={0x9, 0x0, [{0x28f, 0x0, 0x6}, {0xc0011038}, {0x2a3, 0x0, 0x20000000}, {0x0, 0x0, 0x71}, {0x40000072, 0x0, 0x3}, {0x3f9, 0x0, 0x7d86}, {0x3b6, 0x0, 0x80000000000000}, {0x251, 0x0, 0x10001}, {0xb15, 0x0, 0xfffffffffffffffe}]}) ftruncate(r9, 0x7) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r10, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, '[---@\x00'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ',!\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x42}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x4040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 2m28.617889514s ago: executing program 5 (id=3361): r0 = socket(0x3, 0x4, 0x3) r1 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad3, 0x8, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfeffffff, r0, 0x23, {0x3b4, 0xc}, 0x6}, 0x1) socket(0x3, 0x4, 0x3) (async) syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad3, 0x8, 0x3}, &(0x7f0000000240), &(0x7f0000000280)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) (async) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfeffffff, r0, 0x23, {0x3b4, 0xc}, 0x6}, 0x1) (async) 2m28.488529232s ago: executing program 5 (id=3363): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f0000000100)='ns/ipc\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x2a, 0x800000002, 0x9) ioctl$SIOCPNENABLEPIPE(r6, 0x5411, 0x1000000000000) socket$key(0xf, 0x3, 0x2) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8, 0x0, {0x0, 0x1, 0x3}}, 0x18) connect$can_j1939(r7, &(0x7f0000000040)={0x1d, r8, 0x3, {0x0, 0x0, 0x1}, 0xfe}, 0x18) connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8, 0x0, {0x1, 0xff}, 0x2}, 0x18) sendmmsg(r7, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 2m28.308763141s ago: executing program 5 (id=3364): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x103381) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000440)='./bus\x00', 0x30) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}, {@redirect_dir_nofollow}, {@nfs_export_on}, {@volatile}]}) 2m22.925863949s ago: executing program 5 (id=3376): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000006c0)=""/225, &(0x7f0000000540)=0xfffffffffffffc86) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x44844}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004a40)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x30, r9, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2m21.866124936s ago: executing program 5 (id=3384): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000017c0)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x8100, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xda18, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x0, 0x0, 0x3}}}}}}, 0x0) 2m21.329077953s ago: executing program 5 (id=3385): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) unshare(0x8020000) semget$private(0x0, 0x4000, 0x391) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f00000005c0)={0xa0, 0x0, 0x0, {{0x1, 0x3, 0x1, 0x845, 0xfffffffa, 0x2c, {0x0, 0x7fffffff, 0x5, 0xa, 0x3, 0x8000000000000001, 0x4, 0x7, 0x101, 0x2000, 0x8e5, 0x0, 0x0, 0x7f, 0xffff}}, {0x0, 0x13}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$FUSE(r3, 0x0, 0x500) 2m7.433996163s ago: executing program 3 (id=3418): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) (async) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}}}}}}]}, 0x48}, 0x1, 0x4801000000000000}, 0x0) 2m6.236862086s ago: executing program 33 (id=3385): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) unshare(0x8020000) semget$private(0x0, 0x4000, 0x391) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f00000005c0)={0xa0, 0x0, 0x0, {{0x1, 0x3, 0x1, 0x845, 0xfffffffa, 0x2c, {0x0, 0x7fffffff, 0x5, 0xa, 0x3, 0x8000000000000001, 0x4, 0x7, 0x101, 0x2000, 0x8e5, 0x0, 0x0, 0x7f, 0xffff}}, {0x0, 0x13}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$FUSE(r3, 0x0, 0x500) 2m6.19373464s ago: executing program 3 (id=3423): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x103381) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000300)={0x8, 0x800000, 0x11, 0x7be7, 0x1da5}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0xffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x7, 0x1, 0x1a}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/96, 0x60, 0x2, 0x2b}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x40}], 0x0, 0x0, 0x0}) r6 = fsmount(r2, 0x0, 0x0) fchdir(r6) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000440)='./bus\x00', 0x30) setxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000400000000000400050000000000100004000000000020"], 0x24, 0x2) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}, {@redirect_dir_nofollow}, {@nfs_export_on}, {@volatile}]}) 2m3.224209012s ago: executing program 3 (id=3427): r0 = socket(0xa, 0x80000, 0x7a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x40000000000039a, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read(r3, &(0x7f000000c300)=""/102377, 0x18fe9) read(r0, &(0x7f0000000000)=""/63, 0x3f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0xc, 0x8004, 0x0, 0x9, 0x0, 0xff, 0xfffffffb, 0xffffffff}, 0x0) r5 = socket(0x10, 0x6, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2], 0x194}, 0x1, 0x0, 0x0, 0x40c0}, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0xfffffffffffffe3c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2m1.501037576s ago: executing program 3 (id=3433): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x181942, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x2000008, &(0x7f0000000440)=ANY=[@ANYBLOB="66643d9559d8e97cb8bea24ed1a38e651b2b0209461d645831fb8220c02d23d4bd45768e089c250f48b882a20a0bb48878db98a89136b392a88caa6758f4d6f1d726eaa87b542c108356585f405ba2a5e81cb5ddaaaa98dd7b26f7781b5b80ab02ba8301da97b2130f35b30f96ddbfd8fe8fb994db33bc85c6f36781cdc524cfee725d5459d194dfec8ed9c300b630019750a64eb1401c05d39a3b95a6478c112fade651d1232839e39ff4351432e5b38578f3de694e7c25fa60ca70a0762762ad3ebf3055f6369dc1074bc9d000d6357c6fd1428d7d6099d5446861af1d7c024da021c3c5000000000000", @ANYRESHEX=0x0]) chdir(&(0x7f00000002c0)='./file1\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) statx(r0, 0x0, 0x6100, 0x800, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 1m59.065754493s ago: executing program 3 (id=3435): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff"], 0x0}, 0x94) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000100)=0x7d06, 0x4) recvfrom$inet6(r2, 0x0, 0x0, 0x40000103, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(r3, 0x29, 0x46, 0x0, &(0x7f0000000140)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0xfffffffffffffff9, 0x8, 0x4}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f00000000c0)=ANY=[]) 1m55.801286788s ago: executing program 3 (id=3442): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffffff"]) r0 = socket$inet_sctp(0x2, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1}, {0x24}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) connect$inet(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000240)={0x0, 0xe825, 0x3400, 0x1, 0x383}, &(0x7f0000000dc0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) sync() r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x2000}) epoll_wait(r6, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x3) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000003b80)={0x3, 0x1, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4048aecb, &(0x7f0000000080)) 1m40.77015044s ago: executing program 34 (id=3442): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffffff"]) r0 = socket$inet_sctp(0x2, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1}, {0x24}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) connect$inet(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000240)={0x0, 0xe825, 0x3400, 0x1, 0x383}, &(0x7f0000000dc0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) sync() r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x2000}) epoll_wait(r6, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x3) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000003b80)={0x3, 0x1, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4048aecb, &(0x7f0000000080)) 15.598530237s ago: executing program 1 (id=3680): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="00220f84b39e3ce0b2ba7c92874d38e27502c109d455ee734d30d99f92c3263b5ff8afd5866dce04688b793516d0dd7373b550639f88a8226c1e0460bde3378995c5df964e1105a99139cdbf71571f4a516d6f7c58858636eb27137ad957c88e002f09046683b91365db74d0adf796a1b9d4a87d7dddbb98907af659fafaeb579afe06efcec547ac678b390c964035f0abc3ae873b3f3807000000000000009da2b7db668ec301960f051432d65194a4e89c54e8caa520dde9405e84264652f53697dedf6a76c65229475837698b15980470012ab3597e202cdf2e94033e070632098679772e4b69cccdf4e6"], 0x0}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x04', 0x42, 0x0, 0x0) mq_notify(r2, &(0x7f0000000280)={0x0, 0xd, 0x0, @thr={0x0, 0x0}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') getdents(r4, &(0x7f0000000040)=""/227, 0xe3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB="1b4fbd201a5b000000", @ANYRES8=r6, @ANYRES32, @ANYBLOB="180000000200"/27], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xa1a, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x0, 0x2000, 0x0, 0x4}}) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGES(r9, 0x501c4814, &(0x7f0000000580)={{0x1, 0x200, 0x1, 0x6459, 0x90000, 0x4}, 0x177, [0x3, 0x76ff, 0x3, 0xfff, 0x3, 0xc, 0x1, 0x9, 0xfffffffb, 0x7, 0x5, 0xaa, 0x100, 0x18, 0x3, 0x6, 0x1, 0x6, 0x200, 0x6, 0x100000, 0x7ff, 0x2, 0x2, 0x3, 0x37d, 0x7f, 0x9341, 0xca1, 0x6, 0xb, 0x1ff, 0x0, 0x4, 0xfff, 0x1ff, 0x401, 0x0, 0x6, 0x0, 0x0, 0xfb33, 0x7, 0x81, 0x9, 0xffffffff, 0x7, 0x5, 0x5, 0x8000, 0xc, 0xfffffff9, 0xa2, 0x8, 0xe9e2, 0x10, 0x58c9, 0xffff1458, 0x0, 0x6516, 0x10000, 0x4, 0x0, 0x904a, 0x0, 0x4, 0x4, 0x800, 0x3, 0x5, 0x1, 0x7, 0x400, 0x0, 0x5, 0x8000000, 0x3, 0x4, 0x7, 0x7, 0x0, 0x2, 0x6, 0xc51d, 0xe7, 0x5, 0x2, 0x1, 0x4, 0x4, 0x400, 0x0, 0x0, 0x8a, 0x2, 0x4, 0x1, 0x7f, 0x200, 0x40, 0x3, 0xc9f, 0x4, 0x1, 0xbaaf, 0x1, 0x5, 0xfffffb68, 0x0, 0x7, 0x3, 0xf0a, 0x7fff, 0x3, 0xe, 0x81000, 0x7, 0x3, 0x6, 0x7fffffff, 0x0, 0x9, 0x4, 0x9, 0x1ff, 0x9, 0x404, 0xff, 0x4, 0xffff, 0x8, 0x101, 0xe3cc, 0x80000000, 0x2, 0x690, 0x7ff, 0x4, 0x6, 0x70458d56, 0xfffffff7, 0xfffffffd, 0x8, 0x2, 0x4a86, 0x8, 0x2, 0x2, 0x2, 0x305ce36e, 0x28, 0x8, 0x8, 0x1, 0x4, 0x7, 0x4, 0x5, 0x1ff, 0xffff, 0x4, 0xb, 0x40, 0x6, 0x7fff, 0x7, 0xae, 0xc4b, 0x0, 0x9, 0x200, 0xfff, 0x3, 0x8da, 0x6, 0xe, 0x8, 0x9, 0xe16a, 0x8, 0xd, 0xb, 0x4, 0x7, 0x51, 0x1, 0x80000001, 0x7, 0x42, 0x1, 0x4c2, 0x7, 0x7fff, 0x400, 0x8000, 0x81, 0x3, 0xc, 0x7, 0xfffffc01, 0xf7d, 0x7221, 0x1, 0x3, 0xe1, 0xf, 0x7fff, 0x6, 0xee, 0x8f, 0x7, 0x2, 0x6, 0x3, 0x1000, 0x3, 0x2, 0x1ff, 0x0, 0x5, 0xb281, 0x80, 0xa2, 0x6, 0x6, 0x3, 0x4, 0x1000, 0x3, 0x10001, 0x8001, 0x5, 0x6c32, 0x9, 0x9, 0x8, 0x7, 0x1118680e, 0x101, 0x2, 0xfffffff9, 0x401, 0x8, 0x3, 0x0, 0x8, 0x1, 0x6, 0x6, 0x1, 0xfff, 0x9, 0x1, 0x171, 0x3ff, 0xffff, 0xa9, 0x10000, 0x80, 0x1ff, 0x7, 0x9, 0x3, 0xfffffff4, 0x81, 0x2, 0x5, 0x1ff, 0x5, 0xfff, 0x200, 0x10000, 0x8, 0xe, 0x7, 0xa, 0xf, 0x1, 0xfffffff8, 0x7, 0x0, 0x98, 0x6, 0x1, 0xff, 0x3, 0x5, 0x7, 0x7fffffff, 0x7, 0x322, 0x2, 0x80000001, 0x1, 0x4, 0xb, 0x9, 0x800, 0x7, 0x0, 0xffffffff, 0x7065, 0xf9d, 0x3, 0x2, 0x37813bf3, 0x8, 0xfff, 0x7, 0x6, 0x2, 0x1, 0x93, 0x8, 0x1, 0xffff7fff, 0x1, 0x40, 0x5, 0x8, 0x5, 0x0, 0x5, 0xffff, 0x75, 0xfffffff8, 0x81, 0x1d, 0x3, 0x80, 0x8, 0x3, 0x1, 0x1e, 0x1, 0x2, 0x6, 0xb168, 0x1, 0x1, 0x3, 0x9, 0xbd, 0xf, 0x557, 0xc7c0, 0x7, 0x80000001, 0x5, 0x3, 0x8000, 0xeedc, 0x276629bc, 0x7ffbec97, 0x75e8, 0x6, 0x8fea, 0x2, 0x7fff, 0x6, 0xf37, 0xe6e, 0x10000, 0xffffff65, 0x8, 0xfff, 0x3, 0x8, 0x9, 0x1, 0x7ff, 0x1, 0x40, 0x4, 0x0, 0x34, 0x1, 0x0, 0x3, 0x0, 0x3, 0x5, 0x40, 0x6, 0x0, 0x0, 0x0, 0x6, 0xa, 0x3, 0x6, 0xffff, 0x3, 0xd4b5, 0xfff, 0x9, 0x80, 0x2, 0x101, 0x2b0, 0x9, 0x9, 0x7fff, 0x7, 0x5526, 0x6, 0xb, 0x80, 0x4, 0x8000, 0xfffffffa, 0x2, 0x81, 0x8000, 0x0, 0x4, 0x8, 0x4, 0x5, 0xd9f, 0x8, 0x6, 0x3, 0x7, 0x5, 0x1, 0x6, 0x4, 0x6, 0x80000000, 0x9, 0x1, 0x5704, 0x5, 0xd, 0x1000, 0x1, 0x5, 0x7, 0x5, 0x1ff, 0xd, 0x3, 0x7, 0xca8, 0x930c, 0x7f18, 0x2ca, 0x3, 0xbff, 0x80000000, 0x0, 0x97, 0x3, 0x4, 0x4, 0x4c9b, 0x8, 0x4, 0x1000, 0x9, 0x7, 0x8000, 0x9, 0xffffff54, 0x9, 0x4, 0xc12, 0x50, 0x32fa800, 0xfff, 0x91f, 0x7ff, 0x5, 0x80000000, 0x6, 0x2, 0x1000, 0xffffffff, 0x7, 0x95, 0xc6c6, 0x1, 0x1, 0x4, 0x4, 0x2, 0x3, 0x80000001, 0x3, 0x59a0d048, 0x6, 0x5, 0x4, 0x8, 0xffffffff, 0x6, 0x5, 0x9, 0xfffffffa, 0x9, 0x5, 0x4, 0x77, 0x7f, 0x6, 0xfffffffa, 0x7, 0xf, 0x3, 0x3, 0xfff, 0x6, 0x1, 0x81, 0x4, 0x3, 0x0, 0x1000, 0x1, 0xe4, 0x0, 0x3, 0xfff4, 0x3, 0x4, 0x3, 0xfff, 0xfffffff8, 0x3, 0x5, 0x5, 0xfffffff7, 0x1, 0x460, 0x2, 0xfffffffc, 0xd0, 0x68, 0x0, 0xfffff559, 0x8, 0x800, 0x8001, 0x8, 0x6e6, 0x3, 0x1000, 0x40, 0x882, 0xfff, 0x10, 0x7f, 0xfffffffe, 0xc6, 0x100, 0x3, 0x1000, 0x7ff, 0x1, 0x3, 0x7, 0x3, 0x2, 0x5, 0x4, 0xa5, 0x6, 0x3, 0x5, 0x0, 0x2, 0xfffffffb, 0x46, 0x1, 0xfffffffc, 0xc, 0x1, 0x527, 0x8000, 0xc, 0x3, 0x0, 0x2, 0x9, 0x7, 0x72, 0x1, 0x3b52, 0x80000000, 0xaeb1, 0x7, 0x9, 0xf21, 0xfae, 0x2, 0xff, 0x0, 0x3e9140c0, 0xfffffffc, 0x7fff, 0x7, 0xfffffff7, 0x9, 0x3, 0x9, 0x4, 0x1ff, 0x3c, 0xe, 0x1ff, 0x7, 0x7ad6, 0x5, 0x0, 0x7fff, 0x5, 0x4, 0x2, 0x9f, 0x101, 0x1, 0x8, 0x7, 0x5, 0xfffffc00, 0x80, 0x9, 0x101, 0x7b, 0xb, 0x8000, 0xa3d, 0x1, 0x0, 0x329, 0x9, 0x6, 0x400, 0x8, 0xfc5, 0xbcc, 0x1, 0x1, 0x4, 0x4, 0x80000001, 0x100, 0x1, 0x800, 0x4, 0x3, 0x4, 0x3ff, 0x3, 0x10001, 0x2, 0x4, 0xa5, 0x1000, 0x7, 0xfff, 0xf, 0x2, 0x0, 0x3, 0xfff, 0x5, 0x28000, 0x0, 0x1ff, 0x5f8697ff, 0x80000000, 0x1ff, 0x100, 0x6, 0x1, 0x9639, 0x1, 0x3, 0x2, 0xe7b, 0x80000000, 0x3, 0xaf, 0x20080000, 0xb8bd, 0x5, 0xfffffffd, 0x1000, 0x0, 0x1, 0x6, 0x40, 0x0, 0x6, 0x6, 0x3, 0x4, 0x6, 0xfffffff9, 0x77d, 0x9cc, 0x8, 0x7f, 0x9, 0x7, 0x18, 0xfff, 0x8001, 0x3, 0x2, 0x0, 0x3, 0x0, 0x5, 0x9, 0x80e, 0x4, 0x2, 0x0, 0x0, 0x4, 0x2, 0x7, 0x10001, 0x0, 0x1, 0x81, 0x9, 0x5, 0x4, 0x0, 0x1, 0x32b5, 0xff, 0x800, 0x6, 0x8, 0x4, 0x8, 0xfffffffe, 0x5, 0x2, 0x3, 0x8, 0x4, 0x5, 0x100, 0x0, 0x2000, 0x6, 0x3ff, 0x5, 0x6, 0x6047275, 0x100, 0x9, 0x2f, 0x9, 0x5, 0x1, 0x3, 0x8, 0x7, 0x5adb0969, 0x8, 0x80, 0x7, 0x8f, 0x3, 0x4, 0x8, 0xfc3, 0x1000, 0x4, 0x5, 0x1000, 0x4, 0x3, 0x8, 0x4, 0x7fff, 0xa, 0x2, 0x6, 0x7fffffff, 0x2, 0xb2, 0x9, 0xa, 0x10, 0x0, 0x10001, 0x5, 0x80000000, 0xfffff800, 0x3e18, 0x9c6, 0xfffffff0, 0x6, 0x101, 0x3, 0x1, 0x4, 0xffff1357, 0x200, 0xe, 0x1000, 0x6, 0x1, 0x5, 0x305, 0x5, 0x8, 0x4, 0xda, 0x2, 0x7c, 0x7, 0x0, 0x4, 0x5, 0xa233, 0xde02, 0x2, 0x1, 0x7, 0x6, 0x10, 0x3, 0x3, 0x8001, 0xf, 0x8, 0x8, 0x7, 0xfffffff7, 0x0, 0x6, 0x8, 0xb, 0x5, 0x327, 0xd, 0x0, 0x5, 0xe8, 0x8, 0x5, 0x81, 0x80, 0x9417, 0xfff, 0x39ad, 0x6, 0x3, 0xffffffff, 0x8, 0x200, 0x8, 0x8, 0x8, 0x1000, 0x80, 0x8, 0xd, 0x8, 0x4, 0x9, 0x5, 0x0, 0xf31, 0x4, 0x7, 0x3, 0x1, 0xffffff81, 0xf83f, 0x7fffffff, 0x4c, 0x5, 0xb, 0x81, 0x1, 0x3, 0x800, 0x9, 0x0, 0x3, 0x4, 0x5, 0x7, 0x3, 0x7f17df05, 0x7fffffff, 0x1, 0x9, 0xc9a, 0x2, 0xff, 0xa88, 0x35d3, 0x36be, 0x3, 0x80000000, 0x0, 0xb, 0x1, 0xffffffff, 0x6, 0x9, 0x1, 0xffffecea, 0x9, 0x247, 0xd56b, 0xc100, 0x8, 0x6, 0x7, 0xf, 0xe, 0xffff, 0x5, 0x81, 0x4, 0x200, 0xfffffffc, 0x5, 0xd, 0x3, 0x1, 0x1, 0x5, 0x200080, 0xc133, 0x8001, 0x7, 0x5, 0x7, 0xfffffffb, 0x4, 0xffffffff, 0x3b3, 0x10, 0xe000, 0x0, 0x9, 0xb9, 0x10001, 0x3, 0xd, 0x6, 0x6, 0x1, 0x9f, 0x6, 0x100, 0xaf0, 0x9, 0x7, 0x6, 0xb2, 0x2, 0x5, 0x5, 0x10001, 0x0, 0x2, 0x80000001, 0x26f6c4c4, 0x51cd, 0x9, 0xff, 0xe140, 0x1, 0x5, 0x5945, 0x7, 0x6, 0x1156, 0x1, 0x89, 0xc, 0x7, 0x7, 0x4, 0x4, 0x10, 0x84af, 0x9, 0xffff, 0x3ff, 0x1, 0x9, 0x1, 0x200, 0xd88, 0x2, 0x3b6ababe, 0x80000000, 0x0, 0x6, 0x12, 0xe, 0x9, 0x1, 0xb8, 0x3, 0x0, 0x7fffffff, 0x4, 0x6e70, 0x1, 0x8, 0x7fffffff, 0x0, 0xfffffffa, 0xb, 0x1b8, 0x0, 0x7f, 0x4]}) syz_usb_connect(0x2, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0) ioctl$HIDIOCSUSAGE(r9, 0x4018480c, 0x0) 13.458726735s ago: executing program 2 (id=3686): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x5000009) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x100) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x80000000}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@deltfilter={0x940, 0x2d, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff1, 0x7}, {0x8, 0x2}, {0xfff1, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x81}, @TCA_CHAIN={0x8, 0xb, 0x40}, @filter_kind_options=@f_route={{0xa}, {0x8d0, 0x2, [@TCA_ROUTE4_POLICE={0x8ac, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x6, 0xe, 0x1, 0x4, {0x9, 0x0, 0x1, 0x7, 0x4, 0x8}, {0x9, 0x2, 0x7, 0x7, 0x401, 0x9}, 0x8001, 0x20, 0x81}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x4, 0x8, 0xa, 0x98, 0x0, 0x9, 0x1, 0x7, 0x2, 0x8, 0xffffffff, 0x2, 0x4, 0x2, 0x4, 0x8, 0x4e2e, 0x9, 0x8, 0x8, 0x8, 0x232d, 0xffff7d0f, 0x5, 0x4, 0x2, 0x9a, 0x2, 0x5, 0x4, 0x8000, 0x6, 0x8, 0x7f, 0x0, 0x7, 0x5, 0xffff, 0x1, 0x3, 0x5, 0x33f, 0x1, 0x0, 0x1, 0xfffffe50, 0xffffffff, 0x0, 0x3, 0x80000001, 0x5, 0x1, 0x0, 0x3, 0x5, 0x100, 0xe28, 0x4b, 0x0, 0x0, 0x0, 0x8, 0x40000000, 0x0, 0xad, 0x0, 0x8001, 0x6, 0x1, 0x26, 0xbea, 0x3, 0x2, 0x9, 0x6, 0x8, 0x2, 0x1d, 0x0, 0xfffffffd, 0x1, 0x5fef, 0x7, 0xe118, 0x97, 0x80000001, 0x2, 0x2, 0x4, 0x101, 0xb97c, 0x5, 0x800, 0x7ff, 0x5, 0x200, 0x0, 0x4, 0x80000001, 0xfffffffc, 0x9, 0x80000001, 0x5, 0xfffffffb, 0x5, 0xb0d, 0xe, 0x8, 0x4, 0x8, 0x80000000, 0x0, 0x7, 0x3, 0x4, 0x5, 0x4, 0xfffffffd, 0x6, 0x0, 0x6, 0x6, 0x85, 0x2, 0x18, 0x9, 0x81, 0xfffffffb, 0x7ff, 0x0, 0x7, 0x5b, 0x7fffffff, 0xf3c, 0xf, 0x922b, 0x31ebdc2a, 0x1, 0x73f, 0xfffffffc, 0x200, 0x7, 0x8, 0x200, 0x6, 0xff, 0x2, 0xf0, 0x9, 0x6, 0xffff, 0xfffffff8, 0x1, 0x4, 0x0, 0x0, 0x401, 0x9, 0x8, 0x8, 0x3a, 0x6, 0x4, 0x3, 0x401, 0xffff8000, 0xfffffff7, 0x400, 0x8001, 0x10, 0x2, 0x2, 0xf78, 0x7, 0x40, 0x2, 0x74, 0x3, 0x80000001, 0x8, 0x8001, 0x3, 0x5c, 0x4, 0x501, 0x2, 0x2, 0x450, 0xa, 0x0, 0x7, 0x9, 0x7f, 0x4, 0x3, 0x455, 0x4, 0x8, 0xfffffffd, 0x4, 0xfffffffd, 0x44, 0x1, 0x6, 0x7, 0x2, 0x8001, 0x600f, 0x7fffffff, 0x2, 0x5, 0x101, 0x0, 0x9, 0xc15, 0x0, 0x400, 0x3, 0x3, 0x9, 0x5, 0x2, 0x80dc, 0x0, 0x61c2, 0x8, 0x0, 0x5a, 0xfff, 0xffffffff, 0x3, 0x3, 0x9, 0x5, 0xe, 0x2, 0x0, 0x5, 0x3, 0xe, 0xe8e, 0x0, 0x8, 0x8a, 0x5, 0x81, 0x0, 0xfff, 0x20, 0x0, 0x3, 0x10001, 0x33d6, 0xcf62, 0x1ff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fff, 0x2, 0x101, 0xfffffffa, 0x0, {0x58, 0x1, 0x3, 0x1, 0x7, 0x671}, {0x5, 0x1, 0x5, 0x7, 0x7, 0x8}, 0x0, 0x1fc, 0x1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x3ff, 0xff, 0x8, 0x6, 0x2, 0xae1, 0xe, 0x0, 0x0, 0x4, 0xe02fa000, 0x3, 0x7, 0x800, 0x40000000, 0x6, 0x7a28, 0x8, 0x2, 0xffff, 0x2, 0x9, 0xfab, 0x9, 0xfffffff9, 0x400, 0x5, 0x1, 0x7c03, 0x3ff, 0x9, 0x24000000, 0x7, 0x800, 0x40, 0x5, 0x0, 0x5, 0x8, 0x6, 0x7, 0xffa, 0x0, 0x200, 0x1, 0x40, 0x0, 0x93e2, 0x2, 0x7, 0x7, 0xe17, 0x4, 0x7fffffff, 0x7, 0x468, 0xa, 0x1, 0xe73, 0x6, 0x8, 0x40, 0x8, 0x6, 0xfff, 0x7, 0x1, 0x0, 0x4, 0x1, 0x5, 0x200, 0xa, 0x8, 0xfffff001, 0x3ff, 0x7fff, 0x5, 0x6, 0xe6, 0x8, 0x7ff, 0x0, 0x4b26d30f, 0x400, 0x7, 0x5, 0xb, 0x5, 0x9, 0xfffff50c, 0x3, 0x5, 0x7, 0x0, 0x6, 0x9, 0x8, 0x100, 0x1c, 0x6, 0xffff, 0x2, 0x4, 0x8, 0x472, 0xc204, 0x100, 0x0, 0xffffff80, 0x10, 0x10001, 0xffffffff, 0x101, 0x1, 0x8001, 0x4, 0x40, 0x8, 0x5, 0xc9, 0x267, 0x7, 0x40, 0x6d, 0x5, 0x5, 0x3d, 0x0, 0x2, 0xc, 0x7fffffff, 0x0, 0x4, 0xae, 0x6885, 0x7, 0x9, 0x3ff, 0x16, 0xcc2, 0x1, 0x8000, 0xe027, 0x9, 0xb, 0x8, 0xf5, 0x1, 0x4, 0x2, 0x65, 0x81, 0x3, 0x600, 0xffff8001, 0x1, 0xfff, 0x3, 0xffffff80, 0x82, 0x8, 0x0, 0x0, 0x8, 0x4, 0x18, 0xac33, 0xfff, 0x400, 0x9, 0xf, 0x3, 0x3, 0xc230, 0x400, 0x9, 0xf88, 0x8000, 0xfe, 0x7, 0x40000, 0x0, 0x1, 0x4, 0x2, 0xfff, 0x1, 0x6, 0x9, 0x7, 0x200, 0x6, 0x33f, 0xe4ae, 0x3, 0x10, 0xd, 0x3, 0x1, 0x10, 0x7ff, 0xa, 0x1, 0x0, 0x0, 0xbdc, 0x65ac, 0xfffffff9, 0x4, 0x2, 0x9, 0x8, 0x5, 0x4, 0x1, 0x6, 0xf, 0x8000, 0x9, 0x6, 0x1, 0x1, 0x9, 0x9, 0x1000, 0x5, 0x3d, 0xd, 0x6, 0x0, 0x101, 0xd, 0x8, 0x2, 0x1, 0x0, 0x8, 0x6, 0x3, 0x400, 0x9, 0x9, 0xffff, 0x3, 0x5, 0xf, 0x6, 0x800, 0x4, 0x200, 0x4, 0x3ff, 0x3ff, 0xfffffffa]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x88}, @TCA_ROUTE4_TO={0x8, 0x2, 0xf3}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x9, 0xffff}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xcb}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file1\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}]}, 0x940}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000302c0)=@newtfilter={0x3c, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840) socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r7, 0xc02064a4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) 12.581512218s ago: executing program 1 (id=3690): syz_usb_connect$uac1(0x5, 0xa3, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000406b1d01014000010203010902910003018034080904000000010100000a240107005002010208240803ff00fab0082404030d82ab090c2402030502018102000c81090401000001020000090401010101020000090501090800037c090725018208addc0904020000010200000904020101010200000f24020272090700020080000000000724010412011009058209f703058e8e07"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x189, 0x100) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="002db2b8124b3a787944", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf2510000000080005000b000000300003801400020069703667726574617030000000000000060004000400000005000800010000000800010000000000080004"], 0x98}, 0x1, 0x0, 0x0, 0x8010}, 0x40400c0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x2, &(0x7f0000000340)=[{0xfb, 0xd, 0x5}, {0x6, 0xd8, 0xc7, 0xb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000008000000e47f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000036d82f57603a8360000000000000064", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4}, &(0x7f00000002c0), &(0x7f0000000200)='%ps \x00'}, 0x20) gettid() syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) setsockopt$sock_int(r3, 0x1, 0x4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmsg$nl_xfrm(r0, 0x0, 0x4004840) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xb7e2, 0x402, 0x7) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) 10.550874768s ago: executing program 7 (id=3694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800c96edca5082bc204307de4530000000000000000000068d076ed3db5562d32c51d3851293e2d4f81aeeed6514540e697aa94f801582bf05a9b0c5d518c8ba9051a2f5e0b756c33b5b3ea4a77fe804f2abd856570660a3273cfb3883b031f93a1c7ae02a9224bb1cd72f77ab5ab5bb03bab28e397ca38d3ccd9a4e0c583053e376db372042d4f02f10f3e20b9afce2ec00e7285f2d3ed4a6e44d5e98a0d89593b618fcb587bd28e1eb6fa021e94822bb4017aff96ddad056f6e4309525c544ad8f6a8b78faba06f22090b40449b1e0c4029d9e4976d52434f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x68, "6f3801db0cdd3b83a75273f86e7236706d0e5761d780731d9d048be58ef45aa00b3829642279b5085b7ff9244ecc039757ad79a0ac9afd424e0379f68e211a7affaffc8284703f66b98e693e58f69620b046ddfe0577d67d0dded61bd27db63f91a5d3296322aac5"}, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x4}) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000400), 0xc, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/16], 0x0}, 0x94) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r6, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) 9.549650552s ago: executing program 1 (id=3698): syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x80000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket(0x2, 0x3, 0xff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x81}, 0xf6dd4928fafbe711) connect$inet(r2, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_procfs$namespace(r4, &(0x7f0000000480)='ns/ipc\x00') 9.039604982s ago: executing program 2 (id=3699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="74000000010701020000000000000000020000081c0007800800014000000002080002400000000908000140000000400c00064000000000000000030900010073797a30"], 0x74}, 0x1, 0x0, 0x0, 0x4080}, 0x4000844) 8.893190615s ago: executing program 2 (id=3700): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="00220f84b39e3ce0b2ba7c92874d38e27502c109d455ee734d30d99f92c3263b5ff8afd5866dce04688b793516d0dd7373b550639f88a8226c1e0460bde3378995c5df964e1105a99139cdbf71571f4a516d6f7c58858636eb27137ad957c88e002f09046683b91365db74d0adf796a1b9d4a87d7dddbb98907af659fafaeb579afe06efcec547ac678b390c964035f0abc3ae873b3f3807000000000000009da2b7db668ec301960f051432d65194a4e89c54e8caa520dde9405e84264652f53697dedf6a76c65229475837698b15980470012ab3597e202cdf2e94033e070632098679772e4b69cccdf4e6"], 0x0}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x04', 0x42, 0x0, 0x0) mq_notify(r2, &(0x7f0000000280)={0x0, 0xd, 0x0, @thr={0x0, 0x0}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') getdents(r4, &(0x7f0000000040)=""/227, 0xe3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB="1b4fbd201a5b000000", @ANYRES8=r6, @ANYRES32, @ANYBLOB="180000000200"/27], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xa1a, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x0, 0x2000, 0x0, 0x4}}) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGES(r9, 0x501c4814, &(0x7f0000000580)={{0x1, 0x200, 0x1, 0x6459, 0x90000, 0x4}, 0x177, [0x3, 0x76ff, 0x3, 0xfff, 0x3, 0xc, 0x1, 0x9, 0xfffffffb, 0x7, 0x5, 0xaa, 0x100, 0x18, 0x3, 0x6, 0x1, 0x6, 0x200, 0x6, 0x100000, 0x7ff, 0x2, 0x2, 0x3, 0x37d, 0x7f, 0x9341, 0xca1, 0x6, 0xb, 0x1ff, 0x0, 0x4, 0xfff, 0x1ff, 0x401, 0x0, 0x6, 0x0, 0x0, 0xfb33, 0x7, 0x81, 0x9, 0xffffffff, 0x7, 0x5, 0x5, 0x8000, 0xc, 0xfffffff9, 0xa2, 0x8, 0xe9e2, 0x10, 0x58c9, 0xffff1458, 0x0, 0x6516, 0x10000, 0x4, 0x0, 0x904a, 0x0, 0x4, 0x4, 0x800, 0x3, 0x5, 0x1, 0x7, 0x400, 0x0, 0x5, 0x8000000, 0x3, 0x4, 0x7, 0x7, 0x0, 0x2, 0x6, 0xc51d, 0xe7, 0x5, 0x2, 0x1, 0x4, 0x4, 0x400, 0x0, 0x0, 0x8a, 0x2, 0x4, 0x1, 0x7f, 0x200, 0x40, 0x3, 0xc9f, 0x4, 0x1, 0xbaaf, 0x1, 0x5, 0xfffffb68, 0x0, 0x7, 0x3, 0xf0a, 0x7fff, 0x3, 0xe, 0x81000, 0x7, 0x3, 0x6, 0x7fffffff, 0x0, 0x9, 0x4, 0x9, 0x1ff, 0x9, 0x404, 0xff, 0x4, 0xffff, 0x8, 0x101, 0xe3cc, 0x80000000, 0x2, 0x690, 0x7ff, 0x4, 0x6, 0x70458d56, 0xfffffff7, 0xfffffffd, 0x8, 0x2, 0x4a86, 0x8, 0x2, 0x2, 0x2, 0x305ce36e, 0x28, 0x8, 0x8, 0x1, 0x4, 0x7, 0x4, 0x5, 0x1ff, 0xffff, 0x4, 0xb, 0x40, 0x6, 0x7fff, 0x7, 0xae, 0xc4b, 0x0, 0x9, 0x200, 0xfff, 0x3, 0x8da, 0x6, 0xe, 0x8, 0x9, 0xe16a, 0x8, 0xd, 0xb, 0x4, 0x7, 0x51, 0x1, 0x80000001, 0x7, 0x42, 0x1, 0x4c2, 0x7, 0x7fff, 0x400, 0x8000, 0x81, 0x3, 0xc, 0x7, 0xfffffc01, 0xf7d, 0x7221, 0x1, 0x3, 0xe1, 0xf, 0x7fff, 0x6, 0xee, 0x8f, 0x7, 0x2, 0x6, 0x3, 0x1000, 0x3, 0x2, 0x1ff, 0x0, 0x5, 0xb281, 0x80, 0xa2, 0x6, 0x6, 0x3, 0x4, 0x1000, 0x3, 0x10001, 0x8001, 0x5, 0x6c32, 0x9, 0x9, 0x8, 0x7, 0x1118680e, 0x101, 0x2, 0xfffffff9, 0x401, 0x8, 0x3, 0x0, 0x8, 0x1, 0x6, 0x6, 0x1, 0xfff, 0x9, 0x1, 0x171, 0x3ff, 0xffff, 0xa9, 0x10000, 0x80, 0x1ff, 0x7, 0x9, 0x3, 0xfffffff4, 0x81, 0x2, 0x5, 0x1ff, 0x5, 0xfff, 0x200, 0x10000, 0x8, 0xe, 0x7, 0xa, 0xf, 0x1, 0xfffffff8, 0x7, 0x0, 0x98, 0x6, 0x1, 0xff, 0x3, 0x5, 0x7, 0x7fffffff, 0x7, 0x322, 0x2, 0x80000001, 0x1, 0x4, 0xb, 0x9, 0x800, 0x7, 0x0, 0xffffffff, 0x7065, 0xf9d, 0x3, 0x2, 0x37813bf3, 0x8, 0xfff, 0x7, 0x6, 0x2, 0x1, 0x93, 0x8, 0x1, 0xffff7fff, 0x1, 0x40, 0x5, 0x8, 0x5, 0x0, 0x5, 0xffff, 0x75, 0xfffffff8, 0x81, 0x1d, 0x3, 0x80, 0x8, 0x3, 0x1, 0x1e, 0x1, 0x2, 0x6, 0xb168, 0x1, 0x1, 0x3, 0x9, 0xbd, 0xf, 0x557, 0xc7c0, 0x7, 0x80000001, 0x5, 0x3, 0x8000, 0xeedc, 0x276629bc, 0x7ffbec97, 0x75e8, 0x6, 0x8fea, 0x2, 0x7fff, 0x6, 0xf37, 0xe6e, 0x10000, 0xffffff65, 0x8, 0xfff, 0x3, 0x8, 0x9, 0x1, 0x7ff, 0x1, 0x40, 0x4, 0x0, 0x34, 0x1, 0x0, 0x3, 0x0, 0x3, 0x5, 0x40, 0x6, 0x0, 0x0, 0x0, 0x6, 0xa, 0x3, 0x6, 0xffff, 0x3, 0xd4b5, 0xfff, 0x9, 0x80, 0x2, 0x101, 0x2b0, 0x9, 0x9, 0x7fff, 0x7, 0x5526, 0x6, 0xb, 0x80, 0x4, 0x8000, 0xfffffffa, 0x2, 0x81, 0x8000, 0x0, 0x4, 0x8, 0x4, 0x5, 0xd9f, 0x8, 0x6, 0x3, 0x7, 0x5, 0x1, 0x6, 0x4, 0x6, 0x80000000, 0x9, 0x1, 0x5704, 0x5, 0xd, 0x1000, 0x1, 0x5, 0x7, 0x5, 0x1ff, 0xd, 0x3, 0x7, 0xca8, 0x930c, 0x7f18, 0x2ca, 0x3, 0xbff, 0x80000000, 0x0, 0x97, 0x3, 0x4, 0x4, 0x4c9b, 0x8, 0x4, 0x1000, 0x9, 0x7, 0x8000, 0x9, 0xffffff54, 0x9, 0x4, 0xc12, 0x50, 0x32fa800, 0xfff, 0x91f, 0x7ff, 0x5, 0x80000000, 0x6, 0x2, 0x1000, 0xffffffff, 0x7, 0x95, 0xc6c6, 0x1, 0x1, 0x4, 0x4, 0x2, 0x3, 0x80000001, 0x3, 0x59a0d048, 0x6, 0x5, 0x4, 0x8, 0xffffffff, 0x6, 0x5, 0x9, 0xfffffffa, 0x9, 0x5, 0x4, 0x77, 0x7f, 0x6, 0xfffffffa, 0x7, 0xf, 0x3, 0x3, 0xfff, 0x6, 0x1, 0x81, 0x4, 0x3, 0x0, 0x1000, 0x1, 0xe4, 0x0, 0x3, 0xfff4, 0x3, 0x4, 0x3, 0xfff, 0xfffffff8, 0x3, 0x5, 0x5, 0xfffffff7, 0x1, 0x460, 0x2, 0xfffffffc, 0xd0, 0x68, 0x0, 0xfffff559, 0x8, 0x800, 0x8001, 0x8, 0x6e6, 0x3, 0x1000, 0x40, 0x882, 0xfff, 0x10, 0x7f, 0xfffffffe, 0xc6, 0x100, 0x3, 0x1000, 0x7ff, 0x1, 0x3, 0x7, 0x3, 0x2, 0x5, 0x4, 0xa5, 0x6, 0x3, 0x5, 0x0, 0x2, 0xfffffffb, 0x46, 0x1, 0xfffffffc, 0xc, 0x1, 0x527, 0x8000, 0xc, 0x3, 0x0, 0x2, 0x9, 0x7, 0x72, 0x1, 0x3b52, 0x80000000, 0xaeb1, 0x7, 0x9, 0xf21, 0xfae, 0x2, 0xff, 0x0, 0x3e9140c0, 0xfffffffc, 0x7fff, 0x7, 0xfffffff7, 0x9, 0x3, 0x9, 0x4, 0x1ff, 0x3c, 0xe, 0x1ff, 0x7, 0x7ad6, 0x5, 0x0, 0x7fff, 0x5, 0x4, 0x2, 0x9f, 0x101, 0x1, 0x8, 0x7, 0x5, 0xfffffc00, 0x80, 0x9, 0x101, 0x7b, 0xb, 0x8000, 0xa3d, 0x1, 0x0, 0x329, 0x9, 0x6, 0x400, 0x8, 0xfc5, 0xbcc, 0x1, 0x1, 0x4, 0x4, 0x80000001, 0x100, 0x1, 0x800, 0x4, 0x3, 0x4, 0x3ff, 0x3, 0x10001, 0x2, 0x4, 0xa5, 0x1000, 0x7, 0xfff, 0xf, 0x2, 0x0, 0x3, 0xfff, 0x5, 0x28000, 0x0, 0x1ff, 0x5f8697ff, 0x80000000, 0x1ff, 0x100, 0x6, 0x1, 0x9639, 0x1, 0x3, 0x2, 0xe7b, 0x80000000, 0x3, 0xaf, 0x20080000, 0xb8bd, 0x5, 0xfffffffd, 0x1000, 0x0, 0x1, 0x6, 0x40, 0x0, 0x6, 0x6, 0x3, 0x4, 0x6, 0xfffffff9, 0x77d, 0x9cc, 0x8, 0x7f, 0x9, 0x7, 0x18, 0xfff, 0x8001, 0x3, 0x2, 0x0, 0x3, 0x0, 0x5, 0x9, 0x80e, 0x4, 0x2, 0x0, 0x0, 0x4, 0x2, 0x7, 0x10001, 0x0, 0x1, 0x81, 0x9, 0x5, 0x4, 0x0, 0x1, 0x32b5, 0xff, 0x800, 0x6, 0x8, 0x4, 0x8, 0xfffffffe, 0x5, 0x2, 0x3, 0x8, 0x4, 0x5, 0x100, 0x0, 0x2000, 0x6, 0x3ff, 0x5, 0x6, 0x6047275, 0x100, 0x9, 0x2f, 0x9, 0x5, 0x1, 0x3, 0x8, 0x7, 0x5adb0969, 0x8, 0x80, 0x7, 0x8f, 0x3, 0x4, 0x8, 0xfc3, 0x1000, 0x4, 0x5, 0x1000, 0x4, 0x3, 0x8, 0x4, 0x7fff, 0xa, 0x2, 0x6, 0x7fffffff, 0x2, 0xb2, 0x9, 0xa, 0x10, 0x0, 0x10001, 0x5, 0x80000000, 0xfffff800, 0x3e18, 0x9c6, 0xfffffff0, 0x6, 0x101, 0x3, 0x1, 0x4, 0xffff1357, 0x200, 0xe, 0x1000, 0x6, 0x1, 0x5, 0x305, 0x5, 0x8, 0x4, 0xda, 0x2, 0x7c, 0x7, 0x0, 0x4, 0x5, 0xa233, 0xde02, 0x2, 0x1, 0x7, 0x6, 0x10, 0x3, 0x3, 0x8001, 0xf, 0x8, 0x8, 0x7, 0xfffffff7, 0x0, 0x6, 0x8, 0xb, 0x5, 0x327, 0xd, 0x0, 0x5, 0xe8, 0x8, 0x5, 0x81, 0x80, 0x9417, 0xfff, 0x39ad, 0x6, 0x3, 0xffffffff, 0x8, 0x200, 0x8, 0x8, 0x8, 0x1000, 0x80, 0x8, 0xd, 0x8, 0x4, 0x9, 0x5, 0x0, 0xf31, 0x4, 0x7, 0x3, 0x1, 0xffffff81, 0xf83f, 0x7fffffff, 0x4c, 0x5, 0xb, 0x81, 0x1, 0x3, 0x800, 0x9, 0x0, 0x3, 0x4, 0x5, 0x7, 0x3, 0x7f17df05, 0x7fffffff, 0x1, 0x9, 0xc9a, 0x2, 0xff, 0xa88, 0x35d3, 0x36be, 0x3, 0x80000000, 0x0, 0xb, 0x1, 0xffffffff, 0x6, 0x9, 0x1, 0xffffecea, 0x9, 0x247, 0xd56b, 0xc100, 0x8, 0x6, 0x7, 0xf, 0xe, 0xffff, 0x5, 0x81, 0x4, 0x200, 0xfffffffc, 0x5, 0xd, 0x3, 0x1, 0x1, 0x5, 0x200080, 0xc133, 0x8001, 0x7, 0x5, 0x7, 0xfffffffb, 0x4, 0xffffffff, 0x3b3, 0x10, 0xe000, 0x0, 0x9, 0xb9, 0x10001, 0x3, 0xd, 0x6, 0x6, 0x1, 0x9f, 0x6, 0x100, 0xaf0, 0x9, 0x7, 0x6, 0xb2, 0x2, 0x5, 0x5, 0x10001, 0x0, 0x2, 0x80000001, 0x26f6c4c4, 0x51cd, 0x9, 0xff, 0xe140, 0x1, 0x5, 0x5945, 0x7, 0x6, 0x1156, 0x1, 0x89, 0xc, 0x7, 0x7, 0x4, 0x4, 0x10, 0x84af, 0x9, 0xffff, 0x3ff, 0x1, 0x9, 0x1, 0x200, 0xd88, 0x2, 0x3b6ababe, 0x80000000, 0x0, 0x6, 0x12, 0xe, 0x9, 0x1, 0xb8, 0x3, 0x0, 0x7fffffff, 0x4, 0x6e70, 0x1, 0x8, 0x7fffffff, 0x0, 0xfffffffa, 0xb, 0x1b8, 0x0, 0x7f, 0x4]}) syz_usb_connect(0x2, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0) ioctl$HIDIOCSUSAGE(r9, 0x4018480c, 0x0) 8.729880839s ago: executing program 6 (id=3702): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52", 0xc) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x80108907, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x4}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x10) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=""/36, 0x24) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0xf1, 0x0, 0x0, 0x2) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) sysfs$1(0x1, &(0x7f0000000080)='\x00') openat$kvm(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) 8.488789339s ago: executing program 1 (id=3703): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xa10000, 0x67, 0x40000000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f910, 0x4b, '\x00', @p_u32=&(0x7f0000000300)=0x14}}) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f00000000c0)={0x26, 0x10, 0x9, 0x4, 0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00'], 0x2c}}, 0x800) recvmmsg(r3, 0x0, 0x0, 0xfc0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x189, 0x100) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000580)="0f768544d6671b915c2dfdd24cb798d1fdef00b188b52897269f3778670d2b8f40a7afe1c7f7ebb0cd2c05330f589102538ed8ea53b30fa4a89602bbef643be42007d6da5cfbbf3ab961413b36fe3dc5e7bc528dcd8e488f4f09968f4b278e976ee3350487e0916a794039f45bfeacefa43400", 0x73}], 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) setsockopt$sock_int(r6, 0x1, 0x4, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) getrlimit(0xc, &(0x7f0000000080)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a94000000060a0b0400000000000000000200000068000480540001800a0001006d617463680000004400028008000240000000002c000300ebae551382395afa4d23edfcbe6d55b57cb15e63940000000000000088abc3d6ce2316334e8278ad0a0001006c696d6974000000100001800b00010064796e73657400000900010073797a30000000000900020073797a32"], 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4040804) 7.805827101s ago: executing program 7 (id=3704): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xffffffffffffffdc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff}}, './file0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x8000, 0x1}) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, 0x0, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r5}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r5}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_usb_connect(0x4, 0x2d, 0x0, 0x0) 7.546469526s ago: executing program 1 (id=3706): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c200000800004bf89cacaa3882520000c6000000000000009500000c00ec5500"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) setrlimit(0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="17bd23e19560798fb41a8775bb6709f7bedad04aa04323ab7c9d0ae4182ebd8db1470d502b8a4f542d95a8b5bffcbc4073e2f752f34c0198288dc5364c8b4d09adc35eea438d0354e5da617c0f0bae72137866cbeae07954b7625cb0362fb779a946ae560b4a129a3fcc08c18e0f077f1627e7b48049a8b02a2c98eb300d1d68882572ad1d56bfefcbc2cb26bb6341bbc94ce5d7c8fbe40d7cb8a5246baa0ce1686b7215ec57640c333aba84fceebaf692e93f8093dff7bf5d54da4bcfc53d6af141c1f3230d350e792795eeafaa"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$evdev(&(0x7f00000005c0), 0x7f, 0x16001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d48751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xe3}, {&(0x7f00000007c0)="1d4ac370cf8c47025bd7a6546c8bd2123991596dfcd1abdb72276d5f80b1d38cedd7d704de6e472fa6961cd700b4f8e0f594861c0296ca9277c9bbf83e11a3ab33449d0e26aa8bcb6c2ef9", 0x4b}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6", 0x46}, {&(0x7f0000000840)="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", 0x104}, {&(0x7f0000004480)="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", 0xda6}, {&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000000400)="b81660c019f12fa3c75cf910ee43d1e0e31dc694cac57ef2ed5d18704f407c3c167db2b1277da41991752dae935e0dd3e83b6c88bb29824109abf8fb17289bd3cfdff778784902885d95a40ca7b23d38ecb5df329b97b2df238b088d1f7c0bccdf39fc39039f2dd2099cc6751e4fa135759876539553f20f703ec603cc26960f45135ac50612d913faf45d7266c7166acbb61cbb7517e69f3f5c96400ddaa4c0a3d629f0d998f12efad1515427366f9b6e21e019bd667a4ec71b52e3737192024b8288f67924", 0xc6}, {&(0x7f0000003400)="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", 0xeff}], 0x8) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r5, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x3, 0xa, 0x2}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000008d00000095000000000000009edd5cb712e365bc368d3b3103212ea1780d57323a6379cb50a8ee45ee202b9a6e1e551c77c8d44f4ede39c3d02f277cb086381931f65eefc1680880505911e3c96e34f3a3d8ca"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a}, 0x94) 6.484731585s ago: executing program 7 (id=3707): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000006c0)=""/225, &(0x7f0000000540)=0xfffffffffffffc86) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x44844}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004a40)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x30, r9, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6.373968431s ago: executing program 0 (id=3708): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$vbi(0x0, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="b00000001a00010000000000000000000a8000ff0000000000000000080010000e000000790008806bbea9748248ee4beb0129741dab2a1c5772dc4494e8b1a19b9ca6fdcef7598d4d"], 0xb0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0xffffffff}}]}}, 0x0, 0x32, 0x0, 0x0, 0x3ff}, 0x28) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[], 0x44}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000540)={r6, 0x10000}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000005c0)=@assoc_value={r7, 0x8}, &(0x7f0000000600)=0x8) 5.362726746s ago: executing program 7 (id=3709): syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000006, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0xac) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x20002002, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}], [], 0x6b}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x3, "1101b3288888d16d379d0000000000800400", 0x34324d59}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = gettid() process_vm_readv(r5, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000000)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000001c00)="bc323179", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000004180)="b9", 0x1}], 0x1}}], 0x3, 0x0) shutdown(r0, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket(0x1, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$netlink(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000880}, 0x4008000) accept$nfc_llcp(r8, 0x0, 0x0) getsockopt$bt_hci(r6, 0x0, 0x1, 0x0, &(0x7f00000000c0)) 5.072635239s ago: executing program 2 (id=3710): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000040)=[{r4, 0xc5cb}], 0x1, 0x0, 0x0, 0x0) close(r3) r5 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x2}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xb0) write$FUSE_NOTIFY_DELETE(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="2d000000060000000000000098d6358f8b5a367015b2000400000000000000010000000100000004000000000000007767320000"], 0x2d) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) connect$nfc_llcp(r11, &(0x7f00000001c0)={0x27, r12, 0x0, 0x5, 0x8, 0x0, "ac2c4309a2729e4c671c5e52c25feb02da5a8a4c3b375361ac673147ac632e48bcfd6dcc03eac7ba13283d407a363d2a12b6a133d478a3333c283085a8fb32", 0x1f}, 0x60) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000140)=0xff) 5.012525201s ago: executing program 6 (id=3711): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x7, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4000) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="74000000010701020000000000000000020000081c0007800800014000000002080002400000000908000140000000400c00064000000000000000030900010073797a30"], 0x74}, 0x1, 0x0, 0x0, 0x4080}, 0x4000844) 4.971548048s ago: executing program 0 (id=3712): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000040)=[{r4, 0xc5cb}], 0x1, 0x0, 0x0, 0x0) close(r3) r5 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x2}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xb0) write$FUSE_NOTIFY_DELETE(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="2d000000060000000000000098d6358f8b5a367015b2000400000000000000010000000100000004000000000000007767320000"], 0x2d) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) connect$nfc_llcp(r11, &(0x7f00000001c0)={0x27, r12, 0x0, 0x5, 0x8, 0x0, "ac2c4309a2729e4c671c5e52c25feb02da5a8a4c3b375361ac673147ac632e48bcfd6dcc03eac7ba13283d407a363d2a12b6a133d478a3333c283085a8fb32", 0x1f}, 0x60) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000140)=0xff) 4.779066563s ago: executing program 7 (id=3713): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='ip6gretap0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000180)=[{0x50, 0x2, 0x0, 0x7}, {0x6, 0x60}]}) write$ppp(r2, &(0x7f0000000580)='Di', 0x2) r3 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c009900f400000017000000080026007f1700000800270001"], 0x40}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0xbc, r7, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xe3}, @NL80211_ATTR_CSA_IES={0x70, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x26, 0xf, [@challenge={0x10, 0x1, 0xa2}, @ht={0x2d, 0x1a, {0x400, 0x2, 0x7, 0x0, {0x649a, 0x8, 0x0, 0x80, 0x0, 0x0, 0x1, 0x2}, 0x8, 0x6, 0x2c}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0xfff, 0x47af, 0x7, 0x0, 0xfffc]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x6, 0x19c9, 0xff, 0x5, 0xc1e6, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0xbe88, 0x8, 0x401, 0xba8b]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x3, 0x6, 0xa6, 0x2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x7, 0x9621, 0xab]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x20, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x40, 0x8001, 0x7fc, 0x8, 0xfc3, 0x4ab9]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x8c1b, 0x7, 0xfff8, 0xff]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x10) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) r11 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r11, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)}) 4.717489322s ago: executing program 6 (id=3714): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, r3, 0x40099d}}, 0x48) writev(r2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x20, 0x700, 0x9, 0x7, {{0xc, 0x4, 0x1, 0x19, 0x30, 0x67, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast, {[@ssrr={0x89, 0xb, 0xbe, [@rand_addr=0x64010102, @remote]}, @generic={0x89, 0x11, "9083eb54037d8f88bad6d2c7f03109"}]}}}}}) openat$comedi(0xffffffffffffff9c, 0x0, 0x181001, 0x0) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000780)={'gretap0\x00', &(0x7f0000000880)={'ip_vti0\x00', r4, 0x1, 0x8000, 0x3, 0x7, {{0x1b, 0x4, 0x0, 0x4, 0x6c, 0x66, 0x0, 0x6, 0x4, 0x0, @multicast2, @loopback, {[@lsrr={0x83, 0xf, 0xcc, [@loopback, @private=0xa010100, @multicast1]}, @noop, @end, @end, @timestamp={0x44, 0xc, 0xe9, 0x0, 0x4, [0x400, 0x9]}, @timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @timestamp_addr={0x44, 0x2c, 0x1e, 0x1, 0xd, [{@remote, 0x7}, {@multicast2, 0x8}, {@broadcast, 0x8}, {@private=0xa010102, 0x77f}, {@local, 0x11}]}]}}}}}) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20044000) write$rfkill(r5, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7) ioctl$TCFLSH(r8, 0x89f0, 0xffffffffffff7ffe) 4.251306986s ago: executing program 6 (id=3715): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x80003, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000680), &(0x7f0000000400)=@tcp6=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 6) 3.510125042s ago: executing program 6 (id=3716): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0xb, 0x0, &(0x7f0000008dc0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x7f, 0x2, 0x800, 0x59}) prctl$PR_CAPBSET_DROP(0x18, 0x5) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsmount(0xffffffffffffffff, 0x0, 0xfc) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r1}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x52, 0x0}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r8, @ANYBLOB], 0x44}}, 0x0) socket(0x10, 0x803, 0x8) 3.43767011s ago: executing program 2 (id=3717): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0x4000005}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x96a}, @exit], &(0x7f0000000100)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0x4000005}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x96a}, @exit], &(0x7f0000000100)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10}, 0x94) dup3(r4, r3, 0x80000) r5 = openat$cgroup_ro(r2, &(0x7f0000000140)='memory.numa_stat\x00', 0x275a, 0x0) read$alg(r5, &(0x7f0000000040)=""/136, 0x88) (async) read$alg(r5, &(0x7f0000000040)=""/136, 0x88) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x1, 0x3000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) 2.181107603s ago: executing program 0 (id=3718): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xffffffffffffffdc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff}}, './file0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x8000, 0x1}) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, 0x0, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r5}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r5}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 2.178935884s ago: executing program 1 (id=3719): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52", 0xc) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x80108907, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x4}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x10) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=""/36, 0x24) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0xf1, 0x0, 0x0, 0x2) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) sysfs$1(0x1, &(0x7f0000000080)='\x00') io_uring_setup(0x29f8, &(0x7f0000000180)={0x0, 0xfffffffc, 0x0, 0x20000000}) 1.972483155s ago: executing program 2 (id=3720): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="00220f84b39e3ce0b2ba7c92874d38e27502c109d455ee734d30d99f92c3263b5ff8afd5866dce04688b793516d0dd7373b550639f88a8226c1e0460bde3378995c5df964e1105a99139cdbf71571f4a516d6f7c58858636eb27137ad957c88e002f09046683b91365db74d0adf796a1b9d4a87d7dddbb98907af659fafaeb579afe06efcec547ac678b390c964035f0abc3ae873b3f3807000000000000009da2b7db668ec301960f051432d65194a4e89c54e8caa520dde9405e84264652f53697dedf6a76c65229475837698b15980470012ab3597e202cdf2e94033e070632098679772e4b69cccdf4e6"], 0x0}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x04', 0x42, 0x0, 0x0) mq_notify(r2, &(0x7f0000000280)={0x0, 0xd, 0x0, @thr={0x0, 0x0}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') getdents(r4, &(0x7f0000000040)=""/227, 0xe3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB="1b4fbd201a5b000000", @ANYRES8=r6, @ANYRES32, @ANYBLOB="180000000200"/27], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xa1a, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x0, 0x2000, 0x0, 0x4}}) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGES(r9, 0x501c4814, &(0x7f0000000580)={{0x1, 0x200, 0x1, 0x6459, 0x90000, 0x4}, 0x177, [0x3, 0x76ff, 0x3, 0xfff, 0x3, 0xc, 0x1, 0x9, 0xfffffffb, 0x7, 0x5, 0xaa, 0x100, 0x18, 0x3, 0x6, 0x1, 0x6, 0x200, 0x6, 0x100000, 0x7ff, 0x2, 0x2, 0x3, 0x37d, 0x7f, 0x9341, 0xca1, 0x6, 0xb, 0x1ff, 0x0, 0x4, 0xfff, 0x1ff, 0x401, 0x0, 0x6, 0x0, 0x0, 0xfb33, 0x7, 0x81, 0x9, 0xffffffff, 0x7, 0x5, 0x5, 0x8000, 0xc, 0xfffffff9, 0xa2, 0x8, 0xe9e2, 0x10, 0x58c9, 0xffff1458, 0x0, 0x6516, 0x10000, 0x4, 0x0, 0x904a, 0x0, 0x4, 0x4, 0x800, 0x3, 0x5, 0x1, 0x7, 0x400, 0x0, 0x5, 0x8000000, 0x3, 0x4, 0x7, 0x7, 0x0, 0x2, 0x6, 0xc51d, 0xe7, 0x5, 0x2, 0x1, 0x4, 0x4, 0x400, 0x0, 0x0, 0x8a, 0x2, 0x4, 0x1, 0x7f, 0x200, 0x40, 0x3, 0xc9f, 0x4, 0x1, 0xbaaf, 0x1, 0x5, 0xfffffb68, 0x0, 0x7, 0x3, 0xf0a, 0x7fff, 0x3, 0xe, 0x81000, 0x7, 0x3, 0x6, 0x7fffffff, 0x0, 0x9, 0x4, 0x9, 0x1ff, 0x9, 0x404, 0xff, 0x4, 0xffff, 0x8, 0x101, 0xe3cc, 0x80000000, 0x2, 0x690, 0x7ff, 0x4, 0x6, 0x70458d56, 0xfffffff7, 0xfffffffd, 0x8, 0x2, 0x4a86, 0x8, 0x2, 0x2, 0x2, 0x305ce36e, 0x28, 0x8, 0x8, 0x1, 0x4, 0x7, 0x4, 0x5, 0x1ff, 0xffff, 0x4, 0xb, 0x40, 0x6, 0x7fff, 0x7, 0xae, 0xc4b, 0x0, 0x9, 0x200, 0xfff, 0x3, 0x8da, 0x6, 0xe, 0x8, 0x9, 0xe16a, 0x8, 0xd, 0xb, 0x4, 0x7, 0x51, 0x1, 0x80000001, 0x7, 0x42, 0x1, 0x4c2, 0x7, 0x7fff, 0x400, 0x8000, 0x81, 0x3, 0xc, 0x7, 0xfffffc01, 0xf7d, 0x7221, 0x1, 0x3, 0xe1, 0xf, 0x7fff, 0x6, 0xee, 0x8f, 0x7, 0x2, 0x6, 0x3, 0x1000, 0x3, 0x2, 0x1ff, 0x0, 0x5, 0xb281, 0x80, 0xa2, 0x6, 0x6, 0x3, 0x4, 0x1000, 0x3, 0x10001, 0x8001, 0x5, 0x6c32, 0x9, 0x9, 0x8, 0x7, 0x1118680e, 0x101, 0x2, 0xfffffff9, 0x401, 0x8, 0x3, 0x0, 0x8, 0x1, 0x6, 0x6, 0x1, 0xfff, 0x9, 0x1, 0x171, 0x3ff, 0xffff, 0xa9, 0x10000, 0x80, 0x1ff, 0x7, 0x9, 0x3, 0xfffffff4, 0x81, 0x2, 0x5, 0x1ff, 0x5, 0xfff, 0x200, 0x10000, 0x8, 0xe, 0x7, 0xa, 0xf, 0x1, 0xfffffff8, 0x7, 0x0, 0x98, 0x6, 0x1, 0xff, 0x3, 0x5, 0x7, 0x7fffffff, 0x7, 0x322, 0x2, 0x80000001, 0x1, 0x4, 0xb, 0x9, 0x800, 0x7, 0x0, 0xffffffff, 0x7065, 0xf9d, 0x3, 0x2, 0x37813bf3, 0x8, 0xfff, 0x7, 0x6, 0x2, 0x1, 0x93, 0x8, 0x1, 0xffff7fff, 0x1, 0x40, 0x5, 0x8, 0x5, 0x0, 0x5, 0xffff, 0x75, 0xfffffff8, 0x81, 0x1d, 0x3, 0x80, 0x8, 0x3, 0x1, 0x1e, 0x1, 0x2, 0x6, 0xb168, 0x1, 0x1, 0x3, 0x9, 0xbd, 0xf, 0x557, 0xc7c0, 0x7, 0x80000001, 0x5, 0x3, 0x8000, 0xeedc, 0x276629bc, 0x7ffbec97, 0x75e8, 0x6, 0x8fea, 0x2, 0x7fff, 0x6, 0xf37, 0xe6e, 0x10000, 0xffffff65, 0x8, 0xfff, 0x3, 0x8, 0x9, 0x1, 0x7ff, 0x1, 0x40, 0x4, 0x0, 0x34, 0x1, 0x0, 0x3, 0x0, 0x3, 0x5, 0x40, 0x6, 0x0, 0x0, 0x0, 0x6, 0xa, 0x3, 0x6, 0xffff, 0x3, 0xd4b5, 0xfff, 0x9, 0x80, 0x2, 0x101, 0x2b0, 0x9, 0x9, 0x7fff, 0x7, 0x5526, 0x6, 0xb, 0x80, 0x4, 0x8000, 0xfffffffa, 0x2, 0x81, 0x8000, 0x0, 0x4, 0x8, 0x4, 0x5, 0xd9f, 0x8, 0x6, 0x3, 0x7, 0x5, 0x1, 0x6, 0x4, 0x6, 0x80000000, 0x9, 0x1, 0x5704, 0x5, 0xd, 0x1000, 0x1, 0x5, 0x7, 0x5, 0x1ff, 0xd, 0x3, 0x7, 0xca8, 0x930c, 0x7f18, 0x2ca, 0x3, 0xbff, 0x80000000, 0x0, 0x97, 0x3, 0x4, 0x4, 0x4c9b, 0x8, 0x4, 0x1000, 0x9, 0x7, 0x8000, 0x9, 0xffffff54, 0x9, 0x4, 0xc12, 0x50, 0x32fa800, 0xfff, 0x91f, 0x7ff, 0x5, 0x80000000, 0x6, 0x2, 0x1000, 0xffffffff, 0x7, 0x95, 0xc6c6, 0x1, 0x1, 0x4, 0x4, 0x2, 0x3, 0x80000001, 0x3, 0x59a0d048, 0x6, 0x5, 0x4, 0x8, 0xffffffff, 0x6, 0x5, 0x9, 0xfffffffa, 0x9, 0x5, 0x4, 0x77, 0x7f, 0x6, 0xfffffffa, 0x7, 0xf, 0x3, 0x3, 0xfff, 0x6, 0x1, 0x81, 0x4, 0x3, 0x0, 0x1000, 0x1, 0xe4, 0x0, 0x3, 0xfff4, 0x3, 0x4, 0x3, 0xfff, 0xfffffff8, 0x3, 0x5, 0x5, 0xfffffff7, 0x1, 0x460, 0x2, 0xfffffffc, 0xd0, 0x68, 0x0, 0xfffff559, 0x8, 0x800, 0x8001, 0x8, 0x6e6, 0x3, 0x1000, 0x40, 0x882, 0xfff, 0x10, 0x7f, 0xfffffffe, 0xc6, 0x100, 0x3, 0x1000, 0x7ff, 0x1, 0x3, 0x7, 0x3, 0x2, 0x5, 0x4, 0xa5, 0x6, 0x3, 0x5, 0x0, 0x2, 0xfffffffb, 0x46, 0x1, 0xfffffffc, 0xc, 0x1, 0x527, 0x8000, 0xc, 0x3, 0x0, 0x2, 0x9, 0x7, 0x72, 0x1, 0x3b52, 0x80000000, 0xaeb1, 0x7, 0x9, 0xf21, 0xfae, 0x2, 0xff, 0x0, 0x3e9140c0, 0xfffffffc, 0x7fff, 0x7, 0xfffffff7, 0x9, 0x3, 0x9, 0x4, 0x1ff, 0x3c, 0xe, 0x1ff, 0x7, 0x7ad6, 0x5, 0x0, 0x7fff, 0x5, 0x4, 0x2, 0x9f, 0x101, 0x1, 0x8, 0x7, 0x5, 0xfffffc00, 0x80, 0x9, 0x101, 0x7b, 0xb, 0x8000, 0xa3d, 0x1, 0x0, 0x329, 0x9, 0x6, 0x400, 0x8, 0xfc5, 0xbcc, 0x1, 0x1, 0x4, 0x4, 0x80000001, 0x100, 0x1, 0x800, 0x4, 0x3, 0x4, 0x3ff, 0x3, 0x10001, 0x2, 0x4, 0xa5, 0x1000, 0x7, 0xfff, 0xf, 0x2, 0x0, 0x3, 0xfff, 0x5, 0x28000, 0x0, 0x1ff, 0x5f8697ff, 0x80000000, 0x1ff, 0x100, 0x6, 0x1, 0x9639, 0x1, 0x3, 0x2, 0xe7b, 0x80000000, 0x3, 0xaf, 0x20080000, 0xb8bd, 0x5, 0xfffffffd, 0x1000, 0x0, 0x1, 0x6, 0x40, 0x0, 0x6, 0x6, 0x3, 0x4, 0x6, 0xfffffff9, 0x77d, 0x9cc, 0x8, 0x7f, 0x9, 0x7, 0x18, 0xfff, 0x8001, 0x3, 0x2, 0x0, 0x3, 0x0, 0x5, 0x9, 0x80e, 0x4, 0x2, 0x0, 0x0, 0x4, 0x2, 0x7, 0x10001, 0x0, 0x1, 0x81, 0x9, 0x5, 0x4, 0x0, 0x1, 0x32b5, 0xff, 0x800, 0x6, 0x8, 0x4, 0x8, 0xfffffffe, 0x5, 0x2, 0x3, 0x8, 0x4, 0x5, 0x100, 0x0, 0x2000, 0x6, 0x3ff, 0x5, 0x6, 0x6047275, 0x100, 0x9, 0x2f, 0x9, 0x5, 0x1, 0x3, 0x8, 0x7, 0x5adb0969, 0x8, 0x80, 0x7, 0x8f, 0x3, 0x4, 0x8, 0xfc3, 0x1000, 0x4, 0x5, 0x1000, 0x4, 0x3, 0x8, 0x4, 0x7fff, 0xa, 0x2, 0x6, 0x7fffffff, 0x2, 0xb2, 0x9, 0xa, 0x10, 0x0, 0x10001, 0x5, 0x80000000, 0xfffff800, 0x3e18, 0x9c6, 0xfffffff0, 0x6, 0x101, 0x3, 0x1, 0x4, 0xffff1357, 0x200, 0xe, 0x1000, 0x6, 0x1, 0x5, 0x305, 0x5, 0x8, 0x4, 0xda, 0x2, 0x7c, 0x7, 0x0, 0x4, 0x5, 0xa233, 0xde02, 0x2, 0x1, 0x7, 0x6, 0x10, 0x3, 0x3, 0x8001, 0xf, 0x8, 0x8, 0x7, 0xfffffff7, 0x0, 0x6, 0x8, 0xb, 0x5, 0x327, 0xd, 0x0, 0x5, 0xe8, 0x8, 0x5, 0x81, 0x80, 0x9417, 0xfff, 0x39ad, 0x6, 0x3, 0xffffffff, 0x8, 0x200, 0x8, 0x8, 0x8, 0x1000, 0x80, 0x8, 0xd, 0x8, 0x4, 0x9, 0x5, 0x0, 0xf31, 0x4, 0x7, 0x3, 0x1, 0xffffff81, 0xf83f, 0x7fffffff, 0x4c, 0x5, 0xb, 0x81, 0x1, 0x3, 0x800, 0x9, 0x0, 0x3, 0x4, 0x5, 0x7, 0x3, 0x7f17df05, 0x7fffffff, 0x1, 0x9, 0xc9a, 0x2, 0xff, 0xa88, 0x35d3, 0x36be, 0x3, 0x80000000, 0x0, 0xb, 0x1, 0xffffffff, 0x6, 0x9, 0x1, 0xffffecea, 0x9, 0x247, 0xd56b, 0xc100, 0x8, 0x6, 0x7, 0xf, 0xe, 0xffff, 0x5, 0x81, 0x4, 0x200, 0xfffffffc, 0x5, 0xd, 0x3, 0x1, 0x1, 0x5, 0x200080, 0xc133, 0x8001, 0x7, 0x5, 0x7, 0xfffffffb, 0x4, 0xffffffff, 0x3b3, 0x10, 0xe000, 0x0, 0x9, 0xb9, 0x10001, 0x3, 0xd, 0x6, 0x6, 0x1, 0x9f, 0x6, 0x100, 0xaf0, 0x9, 0x7, 0x6, 0xb2, 0x2, 0x5, 0x5, 0x10001, 0x0, 0x2, 0x80000001, 0x26f6c4c4, 0x51cd, 0x9, 0xff, 0xe140, 0x1, 0x5, 0x5945, 0x7, 0x6, 0x1156, 0x1, 0x89, 0xc, 0x7, 0x7, 0x4, 0x4, 0x10, 0x84af, 0x9, 0xffff, 0x3ff, 0x1, 0x9, 0x1, 0x200, 0xd88, 0x2, 0x3b6ababe, 0x80000000, 0x0, 0x6, 0x12, 0xe, 0x9, 0x1, 0xb8, 0x3, 0x0, 0x7fffffff, 0x4, 0x6e70, 0x1, 0x8, 0x7fffffff, 0x0, 0xfffffffa, 0xb, 0x1b8, 0x0, 0x7f, 0x4]}) syz_usb_connect(0x2, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0) ioctl$HIDIOCSUSAGE(r9, 0x4018480c, 0x0) 1.811709469s ago: executing program 7 (id=3721): io_uring_setup(0x12b9, &(0x7f00000002c0)={0x0, 0x48c7, 0x810, 0xfffffffc, 0x1000168}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x200, 0x4) connect$inet6(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) 1.497585194s ago: executing program 6 (id=3722): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52", 0xc) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x80108907, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x4}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x10) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=""/36, 0x24) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0xf1, 0x0, 0x0, 0x2) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) sysfs$1(0x1, &(0x7f0000000080)='\x00') openat$kvm(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) 1.073830303s ago: executing program 0 (id=3723): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r1, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000040)=0x7, 0x4) fadvise64(r0, 0x0, 0x5, 0x4) 642.265807ms ago: executing program 0 (id=3724): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x7, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4000) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="74000000010701020000000000000000020000081c0007800800014000000002080002400000000908000140000000400c00064000000000000000030900010073797a30"], 0x74}, 0x1, 0x0, 0x0, 0x4080}, 0x4000844) 0s ago: executing program 0 (id=3725): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, r3, 0x40099d}}, 0x48) writev(r2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x20, 0x700, 0x9, 0x7, {{0xc, 0x4, 0x1, 0x19, 0x30, 0x67, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast, {[@ssrr={0x89, 0xb, 0xbe, [@rand_addr=0x64010102, @remote]}, @generic={0x89, 0x11, "9083eb54037d8f88bad6d2c7f03109"}]}}}}}) openat$comedi(0xffffffffffffff9c, 0x0, 0x181001, 0x0) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000780)={'gretap0\x00', &(0x7f0000000880)={'ip_vti0\x00', r4, 0x1, 0x8000, 0x3, 0x7, {{0x1b, 0x4, 0x0, 0x4, 0x6c, 0x66, 0x0, 0x6, 0x4, 0x0, @multicast2, @loopback, {[@lsrr={0x83, 0xf, 0xcc, [@loopback, @private=0xa010100, @multicast1]}, @noop, @end, @end, @timestamp={0x44, 0xc, 0xe9, 0x0, 0x4, [0x400, 0x9]}, @timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @timestamp_addr={0x44, 0x2c, 0x1e, 0x1, 0xd, [{@remote, 0x7}, {@multicast2, 0x8}, {@broadcast, 0x8}, {@private=0xa010102, 0x77f}, {@local, 0x11}]}]}}}}}) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20044000) write$rfkill(r5, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7) ioctl$TCFLSH(r8, 0x89f0, 0xffffffffffff7ffe) kernel console output (not intermixed with test programs): symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1240.843998][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1240.856701][T19254] netlink: 'syz.0.3273': attribute type 4 has an invalid length. [ 1240.872375][T19254] vivid-000: disconnect [ 1241.086207][T19260] netlink: 'syz.1.3274': attribute type 4 has an invalid length. [ 1243.181902][T19250] vivid-000: reconnect [ 1243.324501][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1243.645569][T18543] udevd[18543]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1243.678087][T19270] No control pipe specified [ 1244.994879][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1245.216179][ T30] audit: type=1804 audit(1247.122:1430): pid=19289 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.3282" name="/newroot/11/file0" dev="tmpfs" ino=75 res=1 errno=0 [ 1245.865548][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1246.009667][T18543] udevd[18543]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1246.886180][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1247.023912][T18543] udevd[18543]: symlink '../../loop5' '/dev/disk/by-diskseq/123.tmp-b7:5' failed: Read-only file system [ 1247.097965][T19313] netlink: 'syz.5.3287': attribute type 4 has an invalid length. [ 1247.290315][T19322] vivid-000: disconnect [ 1247.518690][T19311] vivid-000: reconnect [ 1247.958591][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1248.430058][T18543] udevd[18543]: symlink '../../loop5' '/dev/disk/by-diskseq/123.tmp-b7:5' failed: Read-only file system [ 1248.577474][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1248.659337][T18543] udevd[18543]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1249.122106][T19341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.132610][T19341] bridge_slave_1: left allmulticast mode [ 1249.138310][T19341] bridge_slave_1: left promiscuous mode [ 1249.229399][T19341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.805566][T19341] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1250.233825][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1250.429470][T19369] netlink: 'syz.0.3303': attribute type 4 has an invalid length. [ 1250.437974][T19369] vivid-000: disconnect [ 1251.087549][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1251.264870][T19368] vivid-000: reconnect [ 1251.374591][T19377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1251.496257][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1251.732326][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1251.910415][T19384] No control pipe specified [ 1252.607620][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1252.895085][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1253.797542][T17304] udevd[17304]: symlink '../../loop5' '/dev/disk/by-diskseq/123.tmp-b7:5' failed: Read-only file system [ 1254.476428][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1255.433032][T17304] udevd[17304]: symlink '../../loop5' '/dev/disk/by-diskseq/123.tmp-b7:5' failed: Read-only file system [ 1255.485122][T19408] usb usb8: usbfs: process 19408 (syz.5.3312) did not claim interface 0 before use [ 1255.612004][T19410] dummy0: entered allmulticast mode [ 1255.639406][T19410] syz.5.3312: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1255.671591][T19411] ubi: mtd0 is already attached to ubi31 [ 1255.692212][T19410] CPU: 0 UID: 0 PID: 19410 Comm: syz.5.3312 Not tainted syzkaller #0 PREEMPT(full) [ 1255.692242][T19410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1255.692254][T19410] Call Trace: [ 1255.692261][T19410] [ 1255.692269][T19410] dump_stack_lvl+0x16c/0x1f0 [ 1255.692299][T19410] warn_alloc+0x248/0x3a0 [ 1255.692321][T19410] ? __pfx_warn_alloc+0x10/0x10 [ 1255.692339][T19410] ? __pfx_stack_trace_save+0x10/0x10 [ 1255.692374][T19410] ? kasan_save_stack+0x42/0x60 [ 1255.692392][T19410] ? kasan_save_stack+0x33/0x60 [ 1255.692409][T19410] ? kasan_save_track+0x14/0x30 [ 1255.692427][T19410] ? xskq_create+0x52/0x1d0 [ 1255.692446][T19410] ? xsk_setsockopt+0x74e/0x9a0 [ 1255.692462][T19410] ? do_sock_setsockopt+0xf0/0x1d0 [ 1255.692491][T19410] ? xskq_create+0xfb/0x1d0 [ 1255.692512][T19410] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1255.692549][T19410] ? xskq_create+0xfb/0x1d0 [ 1255.692575][T19410] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1255.692611][T19410] ? xskq_create+0xfb/0x1d0 [ 1255.692631][T19410] vmalloc_user_noprof+0x9e/0xe0 [ 1255.692658][T19410] ? xskq_create+0xfb/0x1d0 [ 1255.692678][T19410] xskq_create+0xfb/0x1d0 [ 1255.692700][T19410] xsk_setsockopt+0x74e/0x9a0 [ 1255.692720][T19410] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1255.692739][T19410] ? find_held_lock+0x2b/0x80 [ 1255.692767][T19410] ? selinux_socket_setsockopt+0x6a/0x80 [ 1255.692799][T19410] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1255.692820][T19410] do_sock_setsockopt+0xf0/0x1d0 [ 1255.692850][T19410] __sys_setsockopt+0x1a0/0x230 [ 1255.692877][T19410] __x64_sys_setsockopt+0xbd/0x160 [ 1255.692899][T19410] ? do_syscall_64+0x91/0x4e0 [ 1255.692924][T19410] ? lockdep_hardirqs_on+0x7c/0x110 [ 1255.692948][T19410] do_syscall_64+0xcd/0x4e0 [ 1255.692976][T19410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.692996][T19410] RIP: 0033:0x7f0c9b58eba9 [ 1255.693011][T19410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1255.693030][T19410] RSP: 002b:00007f0c9c483038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1255.693049][T19410] RAX: ffffffffffffffda RBX: 00007f0c9b7d6090 RCX: 00007f0c9b58eba9 [ 1255.693062][T19410] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1255.693073][T19410] RBP: 00007f0c9b611e19 R08: 0000000000000004 R09: 0000000000000000 [ 1255.693084][T19410] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1255.693096][T19410] R13: 00007f0c9b7d6128 R14: 00007f0c9b7d6090 R15: 00007ffe417443f8 [ 1255.693120][T19410] [ 1255.693127][T19410] Mem-Info: [ 1256.084948][T19410] active_anon:29502 inactive_anon:0 isolated_anon:0 [ 1256.084948][T19410] active_file:17890 inactive_file:4463 isolated_file:0 [ 1256.084948][T19410] unevictable:768 dirty:421 writeback:0 [ 1256.084948][T19410] slab_reclaimable:12607 slab_unreclaimable:105369 [ 1256.084948][T19410] mapped:38408 shmem:24664 pagetables:1193 [ 1256.084948][T19410] sec_pagetables:0 bounce:0 [ 1256.084948][T19410] kernel_misc_reclaimable:0 [ 1256.084948][T19410] free:1314754 free_pcp:7939 free_cma:0 [ 1256.130399][ C0] vkms_vblank_simulate: vblank timer overrun [ 1256.150232][T19410] Node 0 active_anon:118008kB inactive_anon:0kB active_file:71560kB inactive_file:17716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:153632kB dirty:1684kB writeback:0kB shmem:97120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12080kB pagetables:4620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1256.266575][T19407] dummy0: left allmulticast mode [ 1256.329016][T19410] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1256.361979][T19410] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 1256.401529][T19410] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 1256.439716][T19410] Node 0 DMA32 free:1336328kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:117048kB inactive_anon:0kB active_file:71272kB inactive_file:16696kB unevictable:1536kB writepending:1692kB present:3129332kB managed:2539320kB mlocked:0kB bounce:0kB free_pcp:26680kB local_pcp:17128kB free_cma:0kB [ 1256.515625][T19410] lowmem_reserve[]: 0 0 1 1 1 [ 1256.533860][T19410] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20kB inactive_anon:0kB active_file:288kB inactive_file:1020kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:28kB free_cma:0kB [ 1256.599218][T19410] lowmem_reserve[]: 0 0 0 0 0 [ 1256.605441][T19410] Node 1 Normal free:3907312kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6656kB local_pcp:6656kB free_cma:0kB [ 1256.636469][ C0] vkms_vblank_simulate: vblank timer overrun [ 1256.938442][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1257.013262][T19410] lowmem_reserve[]: 0 0 0 0 0 [ 1257.063825][T19410] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 1257.167228][T19410] Node 0 DMA32: 2*4kB (ME) 490*8kB (UME) 330*16kB (ME) 301*32kB (UME) 252*64kB (UME) 223*128kB (UME) 187*256kB (UM) 92*512kB (UME) 38*1024kB (UME) 16*2048kB (UME) 270*4096kB (UM) = 1336088kB [ 1257.276605][T19410] Node 0 Normal: 1*4kB (M) 2*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1257.364904][T19410] Node 1 Normal: 200*4kB (UME) 66*8kB (UME) 34*16kB (UME) 269*32kB (UME) 84*64kB (UME) 12*128kB (UME) 7*256kB (UM) 4*512kB (UME) 1*1024kB (M) 3*2048kB (UME) 947*4096kB (M) = 3907312kB [ 1257.384004][ C0] vkms_vblank_simulate: vblank timer overrun [ 1258.250637][T19410] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1258.287957][T19410] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1258.316878][T19410] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1258.347653][T19410] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1258.357323][T19410] 43019 total pagecache pages [ 1258.369016][T19410] 0 pages in swap cache [ 1258.378965][T19410] Free swap = 124996kB [ 1258.386236][T19410] Total swap = 124996kB [ 1258.399823][T19410] 2097051 pages RAM [ 1258.403631][T19410] 0 pages HighMem/MovableOnly [ 1258.413805][T19410] 430259 pages reserved [ 1258.417977][T19410] 0 pages cma reserved [ 1258.765521][T17304] udevd[17304]: symlink '../../loop5' '/dev/disk/by-diskseq/123.tmp-b7:5' failed: Read-only file system [ 1259.194525][T19424] trusted_key: syz.1.3315 sent an empty control message without MSG_MORE. [ 1259.417696][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1259.487163][T19439] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1259.529293][T19439] overlayfs: failed to set xattr on upper [ 1259.536544][T19439] overlayfs: ...falling back to index=off. [ 1259.552705][T19439] overlayfs: ...falling back to uuid=null. [ 1259.577551][T19439] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1260.068083][T17304] udevd[17304]: symlink '../../loop5' '/dev/disk/by-diskseq/123.tmp-b7:5' failed: Read-only file system [ 1261.741665][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1261.825139][T19456] ptrace attach of "./syz-executor exec"[18420] was attempted by "./syz-executor exec"[19456] [ 1263.915448][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1265.419275][T18543] udevd[18543]: symlink '../../loop5' '/dev/disk/by-diskseq/123.tmp-b7:5' failed: Read-only file system [ 1266.214562][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1266.243852][T18543] udevd[18543]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1266.322331][ T30] audit: type=1326 audit(1268.302:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19476 comm="syz.5.3331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c9b58eba9 code=0x0 [ 1266.322660][T17278] udevd[17278]: symlink '../../loop5' '/dev/disk/by-diskseq/123.tmp-b7:5' failed: Read-only file system [ 1266.420864][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1267.963544][T17304] udevd[17304]: symlink '../../loop5' '/dev/disk/by-diskseq/123.tmp-b7:5' failed: Read-only file system [ 1268.018690][T19492] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1268.038599][T19492] overlayfs: failed to set xattr on upper [ 1268.047791][T19492] overlayfs: ...falling back to index=off. [ 1268.099109][T19492] overlayfs: ...falling back to uuid=null. [ 1268.124325][T19492] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1268.486335][T19499] ubi: mtd0 is already attached to ubi31 [ 1268.611905][T14165] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1268.702271][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1268.779081][T14165] usb 6-1: Using ep0 maxpacket: 16 [ 1268.786977][T14165] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1268.799033][T14165] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.810780][T14165] usb 6-1: config 0 has no interface number 0 [ 1268.818639][T14165] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1268.827989][T14165] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.837429][T14165] usb 6-1: Product: syz [ 1268.841888][T14165] usb 6-1: Manufacturer: syz [ 1268.846556][T14165] usb 6-1: SerialNumber: syz [ 1268.883088][T14165] usb 6-1: config 0 descriptor?? [ 1268.915757][ T30] audit: type=1400 audit(1270.892:1432): avc: denied { ioctl } for pid=19505 comm="syz.0.3337" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1268.959717][T14165] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 1268.968021][T14165] usb 6-1: No valid video chain found. [ 1268.972829][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1269.478449][T19509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1269.679135][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1269.831256][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1269.838021][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1269.846534][ T10] usb 4-1: config 255 has too many interfaces: 253, using maximum allowed: 32 [ 1269.855591][ T10] usb 4-1: config 255 has 1 interface, different from the descriptor's value: 253 [ 1269.864946][ T10] usb 4-1: config 255 interface 0 has no altsetting 0 [ 1269.873528][ T10] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=5e.05 [ 1269.882685][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.890755][ T10] usb 4-1: Product: syz [ 1269.894912][ T10] usb 4-1: Manufacturer: syz [ 1269.899709][ T10] usb 4-1: SerialNumber: syz [ 1269.993318][T18543] udevd[18543]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1270.028564][T18543] udevd[18543]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1270.130740][ T10] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1270.151613][ T30] audit: type=1400 audit(1272.122:1433): avc: denied { read write } for pid=19512 comm="syz.2.3340" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1270.160312][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1270.202554][ T30] audit: type=1400 audit(1272.122:1434): avc: denied { open } for pid=19512 comm="syz.2.3340" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1270.229425][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1270.236929][ T10] usb 4-1: media controller created [ 1270.257578][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1270.276693][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 1270.318674][ T10] usb 4-1: USB disconnect, device number 55 [ 1270.389881][T12456] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1270.538988][T12456] usb 3-1: Using ep0 maxpacket: 8 [ 1270.553157][T12456] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.568239][T12456] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1270.582999][T12456] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1270.596111][T12456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.611966][T12456] usbtmc 3-1:16.0: bulk endpoints not found [ 1270.858703][T14165] usb 3-1: USB disconnect, device number 48 [ 1271.611689][ T10] usb 6-1: USB disconnect, device number 55 [ 1271.648533][T18543] udevd[18543]: symlink '../../loop5' '/dev/disk/by-diskseq/123.tmp-b7:5' failed: Read-only file system [ 1271.956050][T19530] fuse: Unknown parameter '00000000000000000000' [ 1272.831218][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1273.207660][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1273.373996][T19554] ubi: mtd0 is already attached to ubi31 [ 1273.469204][T14165] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1273.643345][T17304] udevd[17304]: symlink '../../loop5' '/dev/disk/by-diskseq/123.tmp-b7:5' failed: Read-only file system [ 1273.654670][T14165] usb 3-1: Using ep0 maxpacket: 32 [ 1273.662800][T14165] usb 3-1: config 0 has an invalid interface number: 192 but max is 0 [ 1273.679076][T14165] usb 3-1: config 0 has no interface number 0 [ 1273.688828][T14165] usb 3-1: config 0 interface 192 has no altsetting 0 [ 1273.707870][T14165] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0022, bcdDevice=f4.c6 [ 1273.960191][T14165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.968560][T14165] usb 3-1: Product: syz [ 1273.978405][T14165] usb 3-1: Manufacturer: syz [ 1273.984817][T14165] usb 3-1: SerialNumber: syz [ 1274.052116][T14165] usb 3-1: config 0 descriptor?? [ 1274.058598][T17304] udevd[17304]: symlink '../../loop5' '/dev/disk/by-diskseq/123.tmp-b7:5' failed: Read-only file system [ 1274.287093][T14165] kvaser_usb 3-1:0.192: error -EPROTO: Cannot get software info [ 1274.339973][T14165] kvaser_usb 3-1:0.192: probe with driver kvaser_usb failed with error -71 [ 1274.375753][T17304] udevd[17304]: symlink '../../loop5' '/dev/disk/by-diskseq/123.tmp-b7:5' failed: Read-only file system [ 1274.383472][T17278] udevd[17278]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1274.395562][T14165] usb 3-1: USB disconnect, device number 49 [ 1274.438479][T19561] netlink: 'syz.5.3355': attribute type 4 has an invalid length. [ 1274.469264][T19561] vivid-000: disconnect [ 1275.277202][T19560] vivid-000: reconnect [ 1275.351094][T19567] No control pipe specified [ 1275.439482][T18543] udevd[18543]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1275.469831][T17304] udevd[17304]: symlink '../../loop5' '/dev/disk/by-diskseq/123.tmp-b7:5' failed: Read-only file system [ 1275.470468][T19580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3360'. [ 1275.866778][T19586] sctp: [Deprecated]: syz.2.3360 (pid 19586) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1275.866778][T19586] Use struct sctp_sack_info instead [ 1276.070847][T17304] udevd[17304]: symlink '../../loop5' '/dev/disk/by-diskseq/123.tmp-b7:5' failed: Read-only file system [ 1276.709736][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1276.884307][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1277.093519][T19611] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1277.483533][T19612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19612 comm=syz.0.3369 [ 1277.900229][T17278] udevd[17278]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1278.143048][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1278.237526][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1278.271741][T19619] netlink: 'syz.2.3372': attribute type 4 has an invalid length. [ 1278.375623][T19623] binder: Bad value for 'max' [ 1278.408312][T19623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.419383][T19623] bridge0: entered allmulticast mode [ 1278.501063][T19623] bridge_slave_0: left allmulticast mode [ 1278.506877][T19623] bridge_slave_0: left promiscuous mode [ 1278.515028][T19623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.664663][T19619] vivid-000: disconnect [ 1279.189490][T19617] vivid-000: reconnect [ 1279.291789][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1279.485267][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1280.826479][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1281.119188][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1281.170833][T19636] FAULT_INJECTION: forcing a failure. [ 1281.170833][T19636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1281.198173][T17304] udevd[17304]: symlink '../../loop5' '/dev/disk/by-diskseq/123.tmp-b7:5' failed: Read-only file system [ 1281.331651][T19636] CPU: 1 UID: 0 PID: 19636 Comm: syz.0.3377 Not tainted syzkaller #0 PREEMPT(full) [ 1281.331677][T19636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1281.331688][T19636] Call Trace: [ 1281.331694][T19636] [ 1281.331702][T19636] dump_stack_lvl+0x16c/0x1f0 [ 1281.331731][T19636] should_fail_ex+0x512/0x640 [ 1281.331757][T19636] _copy_to_user+0x32/0xd0 [ 1281.331785][T19636] simple_read_from_buffer+0xcb/0x170 [ 1281.331812][T19636] proc_fail_nth_read+0x197/0x240 [ 1281.331835][T19636] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1281.331858][T19636] ? rw_verify_area+0xcf/0x6c0 [ 1281.331885][T19636] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1281.331906][T19636] vfs_read+0x1e4/0xcf0 [ 1281.331928][T19636] ? __pfx___mutex_lock+0x10/0x10 [ 1281.331953][T19636] ? __pfx_vfs_read+0x10/0x10 [ 1281.331978][T19636] ? __fget_files+0x20e/0x3c0 [ 1281.332006][T19636] ksys_read+0x12a/0x250 [ 1281.332024][T19636] ? __pfx_ksys_read+0x10/0x10 [ 1281.332050][T19636] do_syscall_64+0xcd/0x4e0 [ 1281.332076][T19636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.332095][T19636] RIP: 0033:0x7fc5c0f8d5bc [ 1281.332110][T19636] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1281.332128][T19636] RSP: 002b:00007fc5c1d8d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1281.332146][T19636] RAX: ffffffffffffffda RBX: 00007fc5c11d5fa0 RCX: 00007fc5c0f8d5bc [ 1281.332159][T19636] RDX: 000000000000000f RSI: 00007fc5c1d8d0a0 RDI: 0000000000000003 [ 1281.332170][T19636] RBP: 00007fc5c1d8d090 R08: 0000000000000000 R09: 0000000000000000 [ 1281.332181][T19636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1281.332192][T19636] R13: 00007fc5c11d6038 R14: 00007fc5c11d5fa0 R15: 00007fff694af988 [ 1281.332217][T19636] [ 1281.716030][T19647] IPVS: sync thread started: state = MASTER, mcast_ifn = wg0, syncid = 3, id = 0 [ 1281.839430][T17531] udevd[17531]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1281.978986][ T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1282.125832][T17304] udevd[17304]: symlink '../../loop5' '/dev/disk/by-diskseq/123.tmp-b7:5' failed: Read-only file system [ 1282.138509][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1282.619683][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.634082][T19660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19660 comm=syz.0.3382 [ 1282.680309][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1282.701670][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1282.737450][T17304] udevd[17304]: symlink '../../loop5' '/dev/disk/by-diskseq/123.tmp-b7:5' failed: Read-only file system [ 1282.754251][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1282.768641][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1282.795946][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.848703][ T24] usb 3-1: config 0 descriptor?? [ 1282.856304][T19664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3386'. [ 1282.869565][ T30] audit: type=1400 audit(1284.852:1435): avc: denied { read } for pid=19661 comm="syz.5.3385" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1282.878443][T19662] netfs: Couldn't get user pages (rc=-14) [ 1283.076341][T19662] netfs: Zero-sized read [R=2] [ 1283.287235][T19665] sctp: [Deprecated]: syz.0.3386 (pid 19665) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1283.287235][T19665] Use struct sctp_sack_info instead [ 1283.566415][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1283.646321][T19673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1283.656521][T19673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1283.962775][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 1283.968759][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1284.042375][ T24] usb 3-1: USB disconnect, device number 50 [ 1284.162489][ T30] audit: type=1400 audit(1286.142:1436): avc: denied { bind } for pid=19670 comm="syz.0.3387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1284.295258][T19677] ubi: mtd0 is already attached to ubi31 [ 1284.508135][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1284.513128][T18543] udevd[18543]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1286.932950][T19704] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3394'. [ 1287.220079][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1287.429700][T19712] No control pipe specified [ 1287.793393][T19704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1287.895616][T19704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1287.908427][T19704] bond0 (unregistering): Released all slaves [ 1288.134343][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1288.220589][T19724] dlm: no locking on control device [ 1288.239511][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1288.259346][ T24] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1288.377388][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1288.759235][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1288.775495][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1288.812089][ T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1288.933274][ T24] usb 4-1: config 0 has no interface number 0 [ 1288.964130][ T24] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1289.453980][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1289.502610][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1289.537546][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.566847][ T24] usb 4-1: Product: syz [ 1289.587900][ T24] usb 4-1: Manufacturer: syz [ 1289.624338][ T24] usb 4-1: SerialNumber: syz [ 1289.787143][ T24] usb 4-1: config 0 descriptor?? [ 1289.819827][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1289.822509][ T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1289.894333][ T24] em28xx 4-1:0.132: Video interface 132 found: [ 1290.109176][ T5930] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1290.221975][T19717] overlayfs: failed to resolve './bus/file0': -2 [ 1290.290595][ T5930] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 1290.339427][T19747] overlayfs: failed to resolve './bus': -2 [ 1290.350743][ T5930] usb 3-1: config 0 has no interface number 0 [ 1290.356879][ T5930] usb 3-1: config 0 interface 113 has no altsetting 0 [ 1290.404785][ T5930] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1290.424127][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.439916][ T5930] usb 3-1: Product: syz [ 1290.444071][ T5930] usb 3-1: Manufacturer: syz [ 1290.458925][ T5930] usb 3-1: SerialNumber: syz [ 1290.859478][T19717] netlink: 'syz.3.3397': attribute type 1 has an invalid length. [ 1290.882085][ T5930] usb 3-1: config 0 descriptor?? [ 1290.889092][T19717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3397'. [ 1290.969049][ T24] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1291.519953][T19717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.541934][T19717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.572123][ T24] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1291.603450][ T24] em28xx 4-1:0.132: board has no eeprom [ 1291.724746][T17278] udevd[17278]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1291.844650][T19717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3397'. [ 1291.969959][ T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1291.977892][ T24] em28xx 4-1:0.132: analog set to bulk mode. [ 1291.985392][T14165] em28xx 4-1:0.132: Registering V4L2 extension [ 1293.201493][T17278] udevd[17278]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1293.219226][T18056] usb 4-1: USB disconnect, device number 56 [ 1293.226109][T18056] em28xx 4-1:0.132: Disconnecting em28xx [ 1293.406179][ C1] usb 3-1: NFC: Urb failure (status -71) [ 1293.424438][ C1] usb 3-1: NFC: Urb failure (status -71) [ 1293.440631][ T5930] usb 3-1: NFC: Unable to get FW version [ 1293.848507][ T5930] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -71 [ 1293.875004][ T5930] usb 3-1: USB disconnect, device number 51 [ 1294.188555][T19781] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1294.627370][T19785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3411'. [ 1294.997639][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1295.015881][T17531] udevd[17531]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1295.067901][T14165] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1295.079240][T19785] sctp: [Deprecated]: syz.0.3411 (pid 19785) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1295.079240][T19785] Use struct sctp_sack_info instead [ 1295.106987][T14165] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1295.273444][T19792] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1295.352075][T14165] em28xx 4-1:0.132: No AC97 audio processor [ 1295.384585][T14165] usb 4-1: Decoder not found [ 1295.389496][T14165] em28xx 4-1:0.132: failed to create media graph [ 1295.396204][T14165] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1295.412871][T14165] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1295.428715][T18056] em28xx 4-1:0.132: Closing input extension [ 1295.498887][T18056] em28xx 4-1:0.132: Freeing device [ 1295.513619][T19794] netfs: Couldn't get user pages (rc=-14) [ 1295.555333][T17278] udevd[17278]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1296.256284][T18543] udevd[18543]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1296.476742][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1297.079605][T19808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19808 comm=syz.1.3416 [ 1297.534728][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1297.573359][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1297.707960][T19825] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1297.715212][T19825] overlayfs: failed to set xattr on upper [ 1297.753591][T19825] overlayfs: ...falling back to index=off. [ 1297.762412][T19825] overlayfs: ...falling back to uuid=null. [ 1297.800326][T19825] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1298.859353][T19834] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1299.169001][T19834] overlayfs: failed to set xattr on upper [ 1299.224364][T19834] overlayfs: ...falling back to index=off. [ 1299.239026][T19834] overlayfs: ...falling back to uuid=null. [ 1299.249489][T19834] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1299.600732][T17272] udevd[17272]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1299.693128][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.700664][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.046111][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1300.123784][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1300.139234][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1300.209526][T19842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19842 comm=syz.2.3425 [ 1300.304449][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1300.314348][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1300.321892][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1300.343104][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1300.350272][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1300.424212][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1300.574358][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1300.592385][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1300.797089][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1301.642194][ T7865] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1301.680299][ T7865] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.781579][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1301.833710][ T7865] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1301.856120][ T7865] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.018271][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1302.058396][T17278] udevd[17278]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1302.839193][ T5852] Bluetooth: hci3: command tx timeout [ 1302.895717][T19881] netlink: 'syz.2.3431': attribute type 1 has an invalid length. [ 1303.778787][T19878] netlink: 'syz.1.3430': attribute type 1 has an invalid length. [ 1304.067065][ T7865] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1304.078465][ T7865] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.098618][T19872] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up [ 1304.118143][T19881] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1304.189059][T19878] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1304.202457][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1304.869062][ T5852] Bluetooth: hci3: command tx timeout [ 1304.936609][ T7865] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1304.977257][ T7865] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.098653][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1305.428976][ T5907] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1305.611663][T19838] chnl_net:caif_netlink_parms(): no params data found [ 1305.655770][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1305.729071][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 1305.754121][ T5907] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1305.768962][ T5907] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1305.778130][ T5907] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1305.841205][ T5907] usb 4-1: config 1 has no interface number 0 [ 1305.847767][ T5907] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1305.859415][ T5907] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1305.873601][ T5907] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1305.882768][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.682232][ T54] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1306.949011][ T5852] Bluetooth: hci3: command tx timeout [ 1306.960443][ T5907] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1307.019606][ T54] usb 3-1: Using ep0 maxpacket: 16 [ 1307.030021][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.086879][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.092895][ T5907] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1307.114315][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1307.119509][ T54] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1307.146493][T19838] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.160736][T19838] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.172560][T19838] bridge_slave_0: entered allmulticast mode [ 1307.177532][ T54] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1307.214323][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.233913][ T54] usb 3-1: config 0 descriptor?? [ 1307.234379][T19838] bridge_slave_0: entered promiscuous mode [ 1307.262099][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1307.294939][T19838] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.317433][T19838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.345660][T19838] bridge_slave_1: entered allmulticast mode [ 1307.360550][T19838] bridge_slave_1: entered promiscuous mode [ 1307.437820][ T7865] bridge_slave_0: left allmulticast mode [ 1307.445342][ T7865] bridge_slave_0: left promiscuous mode [ 1307.453309][ T7865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.594132][ T5930] usb 4-1: USB disconnect, device number 57 [ 1307.624420][ T5930] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1307.805982][ T54] microsoft 0003:045E:07DA.0013: ignoring exceeding usage max [ 1307.889876][ T54] microsoft 0003:045E:07DA.0013: unsupported Resolution Multiplier 0 [ 1307.923578][ T54] microsoft 0003:045E:07DA.0013: implement() called with n (152) > 32! (kworker/1:1) [ 1308.723341][T19940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19940 comm=syz.1.3443 [ 1308.816537][ T7865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1308.830678][ T7865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1308.871364][ T7865] bond0 (unregistering): Released all slaves [ 1309.156337][ T5852] Bluetooth: hci3: command tx timeout [ 1309.323295][ T54] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1309.334817][ T54] microsoft 0003:045E:07DA.0013: no inputs found [ 1310.127121][T18543] udevd[18543]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1310.138249][ T54] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway [ 1310.189442][ T54] usb 3-1: USB disconnect, device number 52 [ 1310.550953][T19954] netlink: 'syz.2.3445': attribute type 1 has an invalid length. [ 1310.802193][T19949] fido_id[19949]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1311.064768][ T7865] bond1 (unregistering): Released all slaves [ 1311.187263][ T7865] bond2 (unregistering): (slave veth5): Releasing active interface [ 1311.197558][ T7865] bond2 (unregistering): Released all slaves [ 1311.298840][ T7865] bond3 (unregistering): Released all slaves [ 1311.318230][T19950] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up [ 1311.383077][T19954] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1311.403976][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1311.450531][T19956] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1311.463393][T19838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.786541][T19838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.822591][T19838] team0: Port device team_slave_0 added [ 1311.838601][T19838] team0: Port device team_slave_1 added [ 1311.930814][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1311.954399][T19838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.963788][T19838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.999277][T19838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.031754][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1312.047749][ T7865] hsr_slave_0: left promiscuous mode [ 1312.077346][ T7865] hsr_slave_1: left promiscuous mode [ 1312.083349][ T7865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1312.091537][ T7865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1312.102477][ T7865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1312.491969][ T7865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1312.523032][ T7865] veth1_macvtap: left promiscuous mode [ 1312.536113][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1312.550826][ T7865] veth0_macvtap: left promiscuous mode [ 1312.556423][ T7865] veth1_vlan: left promiscuous mode [ 1312.968593][T19979] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1312.976825][T19979] overlayfs: failed to set xattr on upper [ 1312.984018][T19979] overlayfs: ...falling back to index=off. [ 1312.996333][T19979] overlayfs: ...falling back to uuid=null. [ 1313.016435][T19979] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1313.027580][T19979] overlayfs: failed to clone lowerpath [ 1313.422960][T19984] netlink: 'syz.1.3451': attribute type 4 has an invalid length. [ 1313.471889][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1313.498157][T19987] vivid-000: disconnect [ 1314.206120][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1314.227053][T19983] vivid-000: reconnect [ 1314.300971][T19995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1314.642521][T19998] Bluetooth: MGMT ver 1.23 [ 1314.682943][ T7865] team0 (unregistering): Port device team_slave_1 removed [ 1314.891647][ T7865] team0 (unregistering): Port device team_slave_0 removed [ 1315.281328][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1315.416974][T19838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1315.424140][T19838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1315.450762][T19838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1315.484288][T19996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.506322][T19996] bridge_slave_1: left allmulticast mode [ 1315.522775][T19996] bridge_slave_1: left promiscuous mode [ 1315.528796][T19996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.541622][T19996] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1315.761560][T19838] hsr_slave_0: entered promiscuous mode [ 1315.767861][T19838] hsr_slave_1: entered promiscuous mode [ 1315.775564][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1315.787925][T19838] debugfs: 'hsr0' already exists in 'hsr' [ 1315.797048][T19838] Cannot create hsr debugfs directory [ 1316.359396][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1316.625435][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1316.793047][ T7865] IPVS: stop unused estimator thread 0... [ 1316.799521][T20013] overlayfs: overlapping lowerdir path [ 1317.820764][T19838] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1317.860188][T19838] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1317.880164][T19838] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1317.913437][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1317.991210][T19838] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1318.074117][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1318.105101][T20031] No control pipe specified [ 1318.716612][T19838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1318.770094][T19838] 8021q: adding VLAN 0 to HW filter on device team0 [ 1318.783724][ T6590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.790794][ T6590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.827227][ T6590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.834315][ T6590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.102876][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1319.103010][T18543] udevd[18543]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1319.216172][T19838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1319.292444][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1319.442924][ T30] audit: type=1400 audit(1321.402:1437): avc: denied { create } for pid=20053 comm="syz.2.3465" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 1319.609123][ T30] audit: type=1400 audit(1321.442:1438): avc: denied { watch watch_reads } for pid=20053 comm="syz.2.3465" path="/" dev="ramfs" ino=68353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1319.765817][ T30] audit: type=1400 audit(1321.442:1439): avc: denied { read } for pid=20053 comm="syz.2.3465" name="file0" dev="ramfs" ino=68354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 1320.488988][ T30] audit: type=1400 audit(1321.442:1440): avc: denied { watch watch_reads } for pid=20053 comm="syz.2.3465" path="/file0" dev="ramfs" ino=68354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 1320.564602][ T30] audit: type=1400 audit(1321.442:1441): avc: denied { open } for pid=20053 comm="syz.2.3465" path="/file0" dev="ramfs" ino=68354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 1320.577572][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1320.654546][T19838] veth0_vlan: entered promiscuous mode [ 1320.695028][T19838] veth1_vlan: entered promiscuous mode [ 1320.746145][T19838] veth0_macvtap: entered promiscuous mode [ 1320.774272][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1320.812057][T19838] veth1_macvtap: entered promiscuous mode [ 1321.189151][ T5930] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1321.212397][T19838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1321.223516][T19838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1321.224476][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1321.268209][T19861] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.300117][T19861] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.338155][T19861] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.354089][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 1321.364373][ T5930] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1321.375132][ T5930] usb 3-1: config 255 has too many interfaces: 253, using maximum allowed: 32 [ 1321.390788][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1321.411913][T19861] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.418905][ T5930] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 253 [ 1321.455091][ T5930] usb 3-1: config 255 interface 0 has no altsetting 0 [ 1321.477932][ T5930] usb 3-1: string descriptor 0 read error: -22 [ 1321.488243][ T5930] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=5e.05 [ 1321.497787][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.515823][ T5930] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1321.540207][ T5930] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1321.561586][ T5930] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1321.568695][ T5930] usb 3-1: media controller created [ 1321.602017][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1321.706827][ T30] audit: type=1400 audit(1323.682:1442): avc: denied { shutdown } for pid=20074 comm="syz.0.3470" laddr=::1 lport=255 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1321.764846][ T5930] zl10353_read_register: readreg error (reg=127, ret==0) [ 1321.833155][T19861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1321.853328][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1321.860521][T20079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3471'. [ 1321.872802][T19861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.234273][ T5930] usb 3-1: USB disconnect, device number 53 [ 1322.307324][T20079] sctp: [Deprecated]: syz.0.3471 (pid 20079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1322.307324][T20079] Use struct sctp_sack_info instead [ 1322.339924][ T7865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.368749][ T7865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.400858][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1322.714376][T20089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.178748][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1323.549199][T20098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.945527][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1324.834378][T20106] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1325.373824][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1325.412305][T20114] netlink: 'syz.2.3478': attribute type 4 has an invalid length. [ 1325.450917][T20114] vivid-000: disconnect [ 1326.165935][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1326.178661][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1326.187118][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1326.198328][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1326.208523][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1326.236688][T20111] vivid-000: reconnect [ 1326.432043][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1327.144735][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1327.287444][T20117] chnl_net:caif_netlink_parms(): no params data found [ 1327.335415][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1327.366041][T18543] udevd[18543]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1328.203663][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1328.312856][ T50] Bluetooth: hci5: command tx timeout [ 1328.341941][T20117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.369932][T20117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.381178][T20117] bridge_slave_0: entered allmulticast mode [ 1328.391692][T20117] bridge_slave_0: entered promiscuous mode [ 1328.822279][T20117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.867164][T20117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.928315][T20164] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1328.935519][T20164] overlayfs: failed to set xattr on upper [ 1328.941318][T20164] overlayfs: ...falling back to index=off. [ 1328.947198][T20164] overlayfs: ...falling back to uuid=null. [ 1328.953754][T20164] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1328.989739][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1328.990913][T20117] bridge_slave_1: entered allmulticast mode [ 1329.009667][T20117] bridge_slave_1: entered promiscuous mode [ 1329.613842][T20117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.632535][T20117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.725783][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1329.728595][T20117] team0: Port device team_slave_0 added [ 1329.840741][T20117] team0: Port device team_slave_1 added [ 1329.870551][T20169] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1329.870790][T20172] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1329.876549][T20169] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1329.913070][T20172] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1329.994770][T20117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.024333][T20117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1330.050296][ C0] vkms_vblank_simulate: vblank timer overrun [ 1330.058858][T20172] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1330.077628][T20169] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1330.089355][T20117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1330.119468][T20169] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1330.120756][T20117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1330.139662][T20117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1330.201746][T20117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1330.329114][ T5930] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1330.364089][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1330.464341][T20117] hsr_slave_0: entered promiscuous mode [ 1330.483366][T20117] hsr_slave_1: entered promiscuous mode [ 1330.493759][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1330.514702][T20117] debugfs: 'hsr0' already exists in 'hsr' [ 1330.601342][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.641511][T20117] Cannot create hsr debugfs directory [ 1330.670887][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1330.727159][ T5930] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1330.737089][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.772423][ T5930] usb 3-1: config 0 descriptor?? [ 1330.888162][T20182] overlayfs: overlapping lowerdir path [ 1331.229552][T20186] overlayfs: overlapping lowerdir path [ 1332.127803][T20174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.136476][T20174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.149006][ T5930] usbhid 3-1:0.0: can't add hid device: -71 [ 1332.154952][ T5930] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1332.187603][ T5930] usb 3-1: USB disconnect, device number 54 [ 1332.198283][T20117] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1332.507796][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1332.912901][T20117] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1333.249229][T20117] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1333.267163][T20117] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1333.352869][T20117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1333.381158][T20117] 8021q: adding VLAN 0 to HW filter on device team0 [ 1333.415615][ T7955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.422781][ T7955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1333.483418][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1333.520259][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.527379][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.544576][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1334.268229][T20117] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1334.304142][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1334.354599][T20117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1334.386616][T20223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.403977][T20223] bridge_slave_1: left allmulticast mode [ 1334.414258][T20223] bridge_slave_1: left promiscuous mode [ 1334.435908][T20223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.465260][T20223] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1334.497408][T20227] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1334.705057][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1334.718473][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1334.769690][T20241] unsupported nlmsg_type 40 [ 1334.858212][T20250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1335.435320][T20117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1335.590715][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1335.821393][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1335.837562][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1335.994122][T20275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3509'. [ 1337.494034][T20288] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3512'. [ 1337.503264][T20117] veth0_vlan: entered promiscuous mode [ 1337.523891][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1337.860530][T20292] sctp: [Deprecated]: syz.2.3512 (pid 20292) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1337.860530][T20292] Use struct sctp_sack_info instead [ 1338.003822][T20117] veth1_vlan: entered promiscuous mode [ 1338.425707][T20117] veth0_macvtap: entered promiscuous mode [ 1338.467924][T20117] veth1_macvtap: entered promiscuous mode [ 1338.524621][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1338.542090][T20117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1338.555965][T20117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1338.686012][ T7865] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.098442][ T7865] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.114954][ T7865] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.127205][ T7865] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.673435][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1339.686828][T18543] udevd[18543]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1339.786982][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.867718][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.879296][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.900765][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.956174][T20313] netlink: 4400 bytes leftover after parsing attributes in process `syz.6.3516'. [ 1341.626708][T20322] overlayfs: overlapping lowerdir path [ 1341.724100][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1341.770688][T19765] IPVS: starting estimator thread 0... [ 1341.929657][T20326] IPVS: using max 75 ests per chain, 180000 per kthread [ 1342.164173][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1342.206790][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1342.251029][T20330] netlink: 'syz.0.3521': attribute type 1 has an invalid length. [ 1342.409192][T20332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.419952][T20332] bridge_slave_1: left allmulticast mode [ 1342.426139][T20332] bridge_slave_1: left promiscuous mode [ 1342.433944][T20332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.735620][T20332] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1343.687671][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1343.724683][T20330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1343.892606][T20348] netlink: 'syz.1.3523': attribute type 1 has an invalid length. [ 1344.128963][T20355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3523'. [ 1344.894917][T20359] No control pipe specified [ 1345.178748][T20339] bond1: (slave gretap1): making interface the new active one [ 1345.191127][T20339] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1345.243046][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1345.263618][T20348] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1345.843892][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1346.533574][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1346.607468][T18543] udevd[18543]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1347.348981][ T5930] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1347.356723][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 1347.569597][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1347.598994][ T5930] usb 8-1: device descriptor read/64, error -32 [ 1347.716262][T20385] netlink: 'syz.1.3529': attribute type 1 has an invalid length. [ 1347.944314][T20390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3529'. [ 1348.130905][ T5930] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1349.820728][ T5930] usb 8-1: Using ep0 maxpacket: 8 [ 1349.828403][T20385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1349.846715][ T5930] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1349.866445][T20400] overlayfs: missing 'lowerdir' [ 1349.879231][ T5930] usb 8-1: config 255 has too many interfaces: 253, using maximum allowed: 32 [ 1349.889121][ T5930] usb 8-1: config 255 has 1 interface, different from the descriptor's value: 253 [ 1349.900535][ T5930] usb 8-1: config 255 interface 0 has no altsetting 0 [ 1349.905646][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1349.921271][ T5930] usb 8-1: string descriptor 0 read error: -22 [ 1349.930199][ T5930] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=5e.05 [ 1349.945397][ T5930] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.972165][T20384] bond0: (slave veth3): Enslaving as an active interface with a down link [ 1350.000560][ T5930] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1350.020108][ T5930] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1350.032962][ T5930] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1350.040727][ T5930] usb 8-1: media controller created [ 1350.063123][T20373] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up [ 1350.105343][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1350.119923][T20372] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3528'. [ 1350.185223][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1350.228328][T17278] udevd[17278]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1350.261979][T20405] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3534'. [ 1350.328915][ T5930] zl10353_read_register: readreg error (reg=127, ret==0) [ 1350.437063][T20411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3537'. [ 1350.577761][T20414] sctp: [Deprecated]: syz.1.3537 (pid 20414) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1350.577761][T20414] Use struct sctp_sack_info instead [ 1351.218379][ T5930] usb 8-1: USB disconnect, device number 3 [ 1351.275289][T18543] udevd[18543]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1351.553254][T20425] 9pnet_fd: Insufficient options for proto=fd [ 1351.945634][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1352.000449][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1353.112047][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1353.181128][T18543] udevd[18543]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1353.589662][T20446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1353.736152][T20451] ubi: mtd0 is already attached to ubi31 [ 1354.129855][T17278] udevd[17278]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1354.221669][T20456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3547'. [ 1354.263992][T20454] vlan2: entered allmulticast mode [ 1354.399668][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1354.482767][T20460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3549'. [ 1354.726070][T20463] sctp: [Deprecated]: syz.0.3549 (pid 20463) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1354.726070][T20463] Use struct sctp_sack_info instead [ 1355.237251][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1355.646070][T20484] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1355.685659][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1355.749115][T20484] overlayfs: failed to set xattr on upper [ 1355.754897][T20484] overlayfs: ...falling back to index=off. [ 1355.760914][T20484] overlayfs: ...falling back to uuid=null. [ 1355.767264][T20484] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1356.657889][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1358.068530][T18543] udevd[18543]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1358.936491][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1359.220001][T18543] udevd[18543]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1359.285299][T17272] udevd[17272]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1359.323937][T17278] udevd[17278]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1359.396774][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1359.591114][T20524] veth0_to_bridge: entered promiscuous mode [ 1360.297084][T20515] veth0_to_bridge: left promiscuous mode [ 1360.578750][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.586369][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.002604][T20529] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1361.538966][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1362.484836][T18543] udevd[18543]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1363.135971][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1363.145487][T20554] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.3568'. [ 1363.208772][T20557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3569'. [ 1363.349955][T20558] sctp: [Deprecated]: syz.2.3569 (pid 20558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1363.349955][T20558] Use struct sctp_sack_info instead [ 1363.814984][T17278] udevd[17278]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1363.823655][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1364.281915][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1364.630650][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1365.321928][T20568] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1365.332018][T20568] overlayfs: failed to set xattr on upper [ 1365.339345][T20568] overlayfs: ...falling back to index=off. [ 1365.347550][T20568] overlayfs: ...falling back to uuid=null. [ 1365.365759][T20568] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1365.723423][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1365.730159][T18543] udevd[18543]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1365.753937][T17278] udevd[17278]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1366.311403][T20586] 9pnet_fd: Insufficient options for proto=fd [ 1367.173411][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1367.472035][T20597] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1367.933497][T20601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3581'. [ 1368.116946][T20602] sctp: [Deprecated]: syz.2.3581 (pid 20602) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1368.116946][T20602] Use struct sctp_sack_info instead [ 1368.465216][T20606] Mount JFS Failure: -22 [ 1368.479363][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1368.493914][T20606] jfs_mount failed w/return code = -22 [ 1368.513445][T20606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3582'. [ 1368.628501][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1369.638513][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1369.649727][T20620] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up [ 1369.891539][T20609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=20609 comm=syz.6.3583 [ 1370.028109][T18543] udevd[18543]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1370.106970][T20625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20625 comm=syz.7.3587 [ 1370.398803][T20626] netlink: 'syz.2.3586': attribute type 1 has an invalid length. [ 1370.627513][T20626] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1370.707841][T20626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3586'. [ 1371.399134][T18543] udevd[18543]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1371.527718][T20634] cgroup: Name too long [ 1371.807973][T20624] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1371.909146][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1372.085437][T18543] udevd[18543]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1372.241420][T20642] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1372.787727][T20653] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1372.794811][T20653] overlayfs: failed to set xattr on upper [ 1372.800628][T20653] overlayfs: ...falling back to index=off. [ 1372.806498][T20653] overlayfs: ...falling back to uuid=null. [ 1372.812845][T20653] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1372.872687][ T30] audit: type=1400 audit(2143.893:1443): avc: denied { mount } for pid=20635 comm="syz.6.3590" name="/" dev="ramfs" ino=73592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1372.950762][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1373.323654][ T30] audit: type=1400 audit(2143.893:1444): avc: denied { read } for pid=20635 comm="syz.6.3590" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1373.660100][ T30] audit: type=1400 audit(2143.903:1445): avc: denied { open } for pid=20635 comm="syz.6.3590" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1373.744923][ T30] audit: type=1400 audit(2143.903:1446): avc: denied { ioctl } for pid=20635 comm="syz.6.3590" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1373.878114][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1374.363630][ T30] audit: type=1400 audit(2143.903:1447): avc: denied { set_context_mgr } for pid=20635 comm="syz.6.3590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1374.385058][ T30] audit: type=1400 audit(2143.903:1448): avc: denied { mounton } for pid=20635 comm="syz.6.3590" path="/file0" dev="ramfs" ino=73595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1374.537403][T20669] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1374.563151][ T30] audit: type=1400 audit(2143.945:1449): avc: denied { mount } for pid=20635 comm="syz.6.3590" name="/" dev="overlay" ino=73595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1374.708443][ T30] audit: type=1400 audit(2143.997:1450): avc: denied { read write } for pid=17780 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1374.920479][ T30] audit: type=1400 audit(2143.997:1451): avc: denied { open } for pid=17780 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1374.944752][ T30] audit: type=1400 audit(2143.997:1452): avc: denied { ioctl } for pid=17780 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1375.117883][T20673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1375.205747][T20673] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1375.343216][T20677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20677 comm=syz.6.3599 [ 1376.390223][T20690] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1376.398429][T20690] overlayfs: failed to set xattr on upper [ 1376.405434][T20690] overlayfs: ...falling back to index=off. [ 1376.413984][T20690] overlayfs: ...falling back to uuid=null. [ 1376.438664][T20690] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1377.956819][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1377.956835][ T30] audit: type=1400 audit(2148.859:1515): avc: denied { setopt } for pid=20686 comm="syz.1.3603" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1378.068771][ T30] audit: type=1400 audit(2148.869:1516): avc: denied { write } for pid=20686 comm="syz.1.3603" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1378.164352][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1378.262671][ T30] audit: type=1400 audit(2149.657:1517): avc: denied { unlink } for pid=18737 comm="syz-executor" name="file1" dev="tmpfs" ino=497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 1378.288850][ C0] vkms_vblank_simulate: vblank timer overrun [ 1378.314704][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1378.475616][ T30] audit: type=1400 audit(2149.709:1518): avc: denied { create } for pid=20697 comm="syz.7.3602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1378.962424][ T30] audit: type=1400 audit(2149.709:1519): avc: denied { setopt } for pid=20697 comm="syz.7.3602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1379.068975][ T30] audit: type=1400 audit(2149.730:1520): avc: denied { write } for pid=20697 comm="syz.7.3602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1379.088456][ T30] audit: type=1400 audit(2149.961:1521): avc: denied { create } for pid=20699 comm="syz.0.3604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1379.130846][T18543] udevd[18543]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1379.474010][ T30] audit: type=1400 audit(2150.685:1522): avc: denied { getopt } for pid=20704 comm="syz.7.3606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1379.586524][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1380.678918][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1380.746969][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1380.769311][ T30] audit: type=1400 audit(2152.281:1523): avc: denied { create } for pid=20721 comm="syz.7.3611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1380.861575][T20722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1380.935717][ T30] audit: type=1400 audit(2152.281:1524): avc: denied { create } for pid=20721 comm="syz.7.3611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1380.979278][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1381.069619][T20728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20728 comm=syz.7.3612 [ 1381.434023][T20711] ubi: mtd0 is already attached to ubi31 [ 1381.478766][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1381.517978][T18543] udevd[18543]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1381.735690][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1382.349458][T20746] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1382.831629][T20750] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up [ 1383.399101][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1383.399119][ T30] audit: type=1400 audit(2154.896:1533): avc: denied { read write } for pid=20749 comm="syz.0.3618" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1383.498114][T20757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1383.514057][ T30] audit: type=1400 audit(2154.896:1534): avc: denied { open } for pid=20749 comm="syz.0.3618" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1383.536734][ C1] vkms_vblank_simulate: vblank timer overrun [ 1383.564028][ T30] audit: type=1400 audit(2154.906:1535): avc: denied { ioctl } for pid=20749 comm="syz.0.3618" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1383.747408][T20752] netlink: 'syz.0.3618': attribute type 1 has an invalid length. [ 1383.908307][T20760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3618'. [ 1384.951301][T20752] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1385.016369][ T30] audit: type=1400 audit(2155.169:1536): avc: denied { write } for pid=20754 comm="syz.6.3619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1385.180271][T20753] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1385.267354][ T30] audit: type=1400 audit(2155.589:1537): avc: denied { ioctl } for pid=20749 comm="syz.0.3618" path="socket:[74897]" dev="sockfs" ino=74897 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1385.462722][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1385.495365][ T30] audit: type=1400 audit(2157.258:1538): avc: denied { write } for pid=20766 comm="syz.2.3621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1385.505232][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1386.301527][ T30] audit: type=1400 audit(2158.077:1539): avc: denied { connect } for pid=20770 comm="syz.6.3623" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1386.322183][T20771] netlink: 'syz.6.3623': attribute type 4 has an invalid length. [ 1386.331361][T20771] vivid-000: disconnect [ 1386.430309][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1386.634976][T20777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3624'. [ 1386.644015][T20777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3624'. [ 1386.683887][T20777] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3624'. [ 1386.987211][ T30] audit: type=1400 audit(2158.350:1540): avc: denied { map_create } for pid=20770 comm="syz.6.3623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1387.012661][ T30] audit: type=1400 audit(2158.350:1541): avc: denied { map_read map_write } for pid=20770 comm="syz.6.3623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1387.036830][T20770] vivid-000: reconnect [ 1387.211909][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1387.592050][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1388.076879][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1388.171242][ T30] audit: type=1400 audit(2160.061:1542): avc: denied { create } for pid=20790 comm="syz.2.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1388.638506][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1388.774129][T20796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1388.901319][ T30] audit: type=1400 audit(2160.828:1543): avc: denied { write } for pid=20793 comm="syz.7.3629" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1388.943142][ T30] audit: type=1400 audit(2160.859:1544): avc: denied { open } for pid=20793 comm="syz.7.3629" path="/21/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1389.026825][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1389.120538][T12456] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1389.144952][T20807] netlink: 'syz.2.3632': attribute type 1 has an invalid length. [ 1389.237809][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3632'. [ 1389.340706][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1389.468345][ T30] audit: type=1400 audit(2161.300:1545): avc: denied { create } for pid=20804 comm="syz.0.3633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1389.482528][T12456] usb 7-1: Using ep0 maxpacket: 16 [ 1389.728541][T20807] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1389.908793][T12456] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1389.968010][ T30] audit: type=1400 audit(2161.300:1546): avc: denied { connect } for pid=20804 comm="syz.0.3633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1390.200216][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1390.661142][T12456] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1390.663836][ T30] audit: type=1400 audit(2161.584:1547): avc: denied { setopt } for pid=20804 comm="syz.0.3633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1390.690934][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.697697][T12456] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1390.720094][T12456] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1390.747480][T12456] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.771038][T12456] usb 7-1: Product: syz [ 1390.810762][T12456] usb 7-1: Manufacturer: syz [ 1390.818095][T12456] usb 7-1: SerialNumber: syz [ 1390.831246][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1390.887202][ T30] audit: type=1400 audit(2162.907:1548): avc: denied { bind } for pid=20820 comm="syz.2.3635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1391.058817][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1391.096876][ T30] audit: type=1400 audit(2162.907:1549): avc: denied { listen } for pid=20820 comm="syz.2.3635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1391.099289][T17278] udevd[17278]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1391.187368][ T30] audit: type=1400 audit(2163.201:1550): avc: denied { read } for pid=20823 comm="syz.0.3636" path="socket:[74442]" dev="sockfs" ino=74442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1391.282743][ T30] audit: type=1400 audit(2163.201:1551): avc: denied { ioctl } for pid=20823 comm="syz.0.3636" path="socket:[74442]" dev="sockfs" ino=74442 ioctlcmd=0x5513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1391.346205][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1391.817985][T12456] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1391.834363][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1391.911620][T12456] usb 7-1: USB disconnect, device number 2 [ 1392.430306][T17304] udevd[17304]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1393.166559][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1393.304689][T20859] No control pipe specified [ 1393.359730][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1393.359744][ T30] audit: type=1400 audit(2165.458:1554): avc: denied { mounton } for pid=20854 comm="syz.1.3644" path="/123/file1" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1393.512009][ T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1393.627760][T20862] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up [ 1393.807874][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1393.840100][T20865] netlink: 'syz.6.3646': attribute type 1 has an invalid length. [ 1393.866858][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.949460][T20865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1393.977126][T20869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3646'. [ 1394.878792][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1396.192812][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.207241][ T24] usb 3-1: config 0 descriptor?? [ 1396.285572][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 1396.306743][ T24] pwc: send_video_command error -71 [ 1396.312091][ T24] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1396.320049][ T24] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1396.631935][T20863] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1396.660038][ T30] audit: type=1400 audit(2168.975:1555): avc: denied { name_bind } for pid=20873 comm="syz.1.3648" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1396.662209][ T24] usb 3-1: USB disconnect, device number 55 [ 1397.663429][T18543] udevd[18543]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1397.699131][T17531] udevd[17531]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1397.714247][T17272] udevd[17272]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1397.832798][T20896] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3653'. [ 1398.096328][ T30] audit: type=1400 audit(2170.477:1556): avc: denied { mounton } for pid=20897 comm="syz.2.3654" path=2F70726F632F3631342F6E65742F70666B6579202864656C6574656429 dev="proc" ino=4026533849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1398.871205][T20901] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3653'. [ 1398.881624][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1399.261198][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1399.431893][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1399.481844][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1399.495128][ T30] audit: type=1326 audit(2171.936:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20911 comm="syz.7.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9c58eba9 code=0x7ffc0000 [ 1399.527559][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3658'. [ 1399.549190][T20915] IPVS: Error joining to the multicast group [ 1400.287549][T20914] ocfs2: Unknown parameter 'barrieryÐHÇÂ ' [ 1400.621576][ T30] audit: type=1326 audit(2171.936:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20911 comm="syz.7.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9c58eba9 code=0x7ffc0000 [ 1400.700766][T20905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3655'. [ 1400.709784][T20905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3655'. [ 1400.720256][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1400.738108][T20926] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up [ 1400.747338][ T30] audit: type=1326 audit(2171.936:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20911 comm="syz.7.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c9c58eba9 code=0x7ffc0000 [ 1400.774295][T20905] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3655'. [ 1401.037319][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1401.041925][ T30] audit: type=1326 audit(2171.936:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20911 comm="syz.7.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9c58eba9 code=0x7ffc0000 [ 1401.068176][ T30] audit: type=1326 audit(2171.936:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20911 comm="syz.7.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9c58eba9 code=0x7ffc0000 [ 1401.091577][ T30] audit: type=1326 audit(2171.936:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20911 comm="syz.7.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c9c590ac7 code=0x7ffc0000 [ 1401.116847][ T30] audit: type=1326 audit(2171.936:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20911 comm="syz.7.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4c9c590a3c code=0x7ffc0000 [ 1401.140631][ T30] audit: type=1326 audit(2171.936:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20911 comm="syz.7.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4c9c590974 code=0x7ffc0000 [ 1401.164083][ T30] audit: type=1326 audit(2171.957:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20911 comm="syz.7.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4c9c590974 code=0x7ffc0000 [ 1401.187161][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1401.187241][ T30] audit: type=1326 audit(2171.957:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20911 comm="syz.7.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4c9c58d80a code=0x7ffc0000 [ 1401.233510][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1401.245407][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1401.321431][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1401.397477][T20929] netlink: 'syz.0.3662': attribute type 1 has an invalid length. [ 1401.502221][T20931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3662'. [ 1402.605507][T20929] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1402.625709][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1402.674451][T20930] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1402.697024][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.752242][ T10] usb 7-1: config 0 descriptor?? [ 1402.866364][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1402.961189][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1403.037853][T18543] udevd[18543]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1403.139553][T17278] udevd[17278]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1403.312082][T12456] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1404.898036][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 1405.181910][T12456] usb 8-1: Using ep0 maxpacket: 16 [ 1405.212214][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1405.223051][ T10] usb 7-1: USB disconnect, device number 3 [ 1405.351237][T12456] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 1405.360468][T12456] usb 8-1: config 0 has no interface number 0 [ 1405.366531][T12456] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1405.391749][T17278] udevd[17278]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1405.809878][T20966] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1405.823788][T12456] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1405.840715][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1405.840729][ T30] audit: type=1400 audit(2178.235:1609): avc: denied { mount } for pid=20961 comm="syz.0.3669" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1405.845400][T12456] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1405.851764][ T30] audit: type=1400 audit(2178.571:1610): avc: denied { unlink } for pid=20961 comm="syz.0.3669" name="#9d" dev="tmpfs" ino=587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1405.899455][ C1] vkms_vblank_simulate: vblank timer overrun [ 1405.954148][T12456] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1406.045079][T18543] udevd[18543]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1406.074512][T12456] usb 8-1: Product: syz [ 1406.160176][T12456] usb 8-1: SerialNumber: syz [ 1406.191993][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1406.192465][T12456] usb 8-1: config 0 descriptor?? [ 1406.227978][ T30] audit: type=1400 audit(2178.907:1611): avc: denied { allowed } for pid=20971 comm="syz.7.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1406.231383][T20981] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3673'. [ 1406.250878][T12456] usb 8-1: can't set config #0, error -71 [ 1406.277322][T12456] usb 8-1: USB disconnect, device number 4 [ 1406.285530][ T30] audit: type=1400 audit(2178.907:1612): avc: denied { create } for pid=20971 comm="syz.7.3671" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1406.545163][T20982] overlayfs: overlapping lowerdir path [ 1406.578145][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1406.813866][T18543] udevd[18543]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1406.966065][ T30] audit: type=1400 audit(2179.348:1613): avc: denied { unmount } for pid=18737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1406.987127][ T30] audit: type=1400 audit(2179.380:1614): avc: denied { unmount } for pid=18737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1407.009454][ T30] audit: type=1400 audit(2179.495:1615): avc: denied { create } for pid=20971 comm="syz.7.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1407.168835][ T30] audit: type=1400 audit(2179.506:1616): avc: denied { connect } for pid=20971 comm="syz.7.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1407.912490][ T30] audit: type=1400 audit(2180.419:1617): avc: denied { read write } for pid=20986 comm="syz.2.3675" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1407.935846][ T30] audit: type=1400 audit(2180.419:1618): avc: denied { open } for pid=20986 comm="syz.2.3675" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1408.089364][T20994] netlink: 'syz.1.3676': attribute type 1 has an invalid length. [ 1408.105505][T20994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1408.123781][T20994] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1408.135401][T20994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3676'. [ 1408.240570][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1408.284708][T18543] udevd[18543]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1408.301077][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1408.367609][T21009] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3679'. [ 1408.740161][T21014] sctp: [Deprecated]: syz.7.3679 (pid 21014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1408.740161][T21014] Use struct sctp_sack_info instead [ 1409.023500][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1409.241531][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1409.246463][T18543] udevd[18543]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1409.348920][T21019] FAULT_INJECTION: forcing a failure. [ 1409.348920][T21019] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.370783][T21019] CPU: 0 UID: 0 PID: 21019 Comm: syz.0.3682 Not tainted syzkaller #0 PREEMPT(full) [ 1409.370809][T21019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1409.370819][T21019] Call Trace: [ 1409.370825][T21019] [ 1409.370831][T21019] dump_stack_lvl+0x16c/0x1f0 [ 1409.370850][T21019] should_fail_ex+0x512/0x640 [ 1409.370866][T21019] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1409.370882][T21019] should_failslab+0xc2/0x120 [ 1409.370896][T21019] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1409.370910][T21019] ? security_set_bools+0x115/0x6c0 [ 1409.370923][T21019] kmemdup_noprof+0x29/0x60 [ 1409.370936][T21019] security_set_bools+0x115/0x6c0 [ 1409.370951][T21019] ? sel_commit_bools_write+0x25c/0x420 [ 1409.370967][T21019] sel_commit_bools_write+0x36e/0x420 [ 1409.370980][T21019] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 1409.370998][T21019] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 1409.371011][T21019] vfs_writev+0x5df/0xde0 [ 1409.371026][T21019] ? __pfx_vfs_writev+0x10/0x10 [ 1409.371036][T21019] ? __mutex_lock+0x1c5/0x1060 [ 1409.371056][T21019] ? __pfx___mutex_lock+0x10/0x10 [ 1409.371075][T21019] ? __fget_files+0x20e/0x3c0 [ 1409.371092][T21019] ? do_writev+0x132/0x340 [ 1409.371101][T21019] do_writev+0x132/0x340 [ 1409.371112][T21019] ? __pfx_do_writev+0x10/0x10 [ 1409.371126][T21019] do_syscall_64+0xcd/0x4e0 [ 1409.371142][T21019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.371154][T21019] RIP: 0033:0x7fc5c0f8eba9 [ 1409.371163][T21019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1409.371174][T21019] RSP: 002b:00007fc5c1d8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1409.371186][T21019] RAX: ffffffffffffffda RBX: 00007fc5c11d5fa0 RCX: 00007fc5c0f8eba9 [ 1409.371193][T21019] RDX: 0000000000000002 RSI: 00002000000025c0 RDI: 0000000000000009 [ 1409.371200][T21019] RBP: 00007fc5c1d8d090 R08: 0000000000000000 R09: 0000000000000000 [ 1409.371206][T21019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1409.371213][T21019] R13: 00007fc5c11d6038 R14: 00007fc5c11d5fa0 R15: 00007fff694af988 [ 1409.371227][T21019] [ 1409.931581][T21026] 9pnet_fd: Insufficient options for proto=fd [ 1409.999935][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1410.427915][T21031] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3685'. [ 1410.636289][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1410.679681][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1410.783566][T18543] udevd[18543]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1410.800233][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1410.800247][ T30] audit: type=1400 audit(2183.821:1631): avc: denied { listen } for pid=21038 comm="syz.6.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1411.280342][ T30] audit: type=1400 audit(2184.325:1632): avc: denied { shutdown } for pid=21038 comm="syz.6.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1411.890981][T21054] No control pipe specified [ 1413.313434][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1413.404729][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1413.415934][ T30] audit: type=1400 audit(2186.519:1633): avc: denied { setopt } for pid=21057 comm="syz.7.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1413.666339][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1413.912190][T21074] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1413.919584][T21074] overlayfs: failed to set xattr on upper [ 1413.926340][T21074] overlayfs: ...falling back to index=off. [ 1413.932324][T21074] overlayfs: ...falling back to uuid=null. [ 1413.941415][T21074] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1414.016836][T21075] ubi: mtd0 is already attached to ubi31 [ 1414.171705][T21071] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1414.179959][T21071] overlayfs: failed to set xattr on upper [ 1414.195829][T21071] overlayfs: ...falling back to index=off. [ 1414.202413][T21071] overlayfs: ...falling back to uuid=null. [ 1414.230050][T21071] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1414.965004][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1415.018300][T21081] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3699'. [ 1415.124090][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1415.188574][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1415.262155][ T30] audit: type=1400 audit(2188.504:1634): avc: denied { read write } for pid=21084 comm="syz.0.3701" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1415.488843][ T54] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1415.578003][ T30] audit: type=1400 audit(2188.504:1635): avc: denied { open } for pid=21084 comm="syz.0.3701" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1415.602626][ T30] audit: type=1400 audit(2188.682:1636): avc: denied { mount } for pid=21084 comm="syz.0.3701" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1415.624072][ C1] vkms_vblank_simulate: vblank timer overrun [ 1415.880998][T21091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21091 comm=syz.1.3703 [ 1416.087000][T21095] netlink: 188 bytes leftover after parsing attributes in process `syz.6.3702'. [ 1416.203888][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1416.232820][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.279058][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1416.289098][ T30] audit: type=1400 audit(2189.575:1637): avc: denied { unmount } for pid=18737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1416.311037][ T54] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1416.350301][ T54] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1416.372831][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.382783][ T54] usb 3-1: config 0 descriptor?? [ 1416.398959][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1417.366517][T21106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.380198][T21106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.563267][ T54] usbhid 3-1:0.0: can't add hid device: -71 [ 1417.577148][T18543] udevd[18543]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1417.623026][ T54] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1417.728488][T17272] udevd[17272]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1417.762833][T21111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3708'. [ 1417.782518][ T54] usb 3-1: USB disconnect, device number 56 [ 1418.584353][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1418.866661][T21111] sctp: [Deprecated]: syz.0.3708 (pid 21111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1418.866661][T21111] Use struct sctp_sack_info instead [ 1418.922903][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1418.989051][ T30] audit: type=1400 audit(2192.409:1638): avc: denied { setattr } for pid=21116 comm="syz.7.3709" name="/" dev="9p" ino=2306405959167115266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 1419.104400][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1419.110666][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1419.160799][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1419.175827][ T30] audit: type=1400 audit(2192.451:1639): avc: denied { bind } for pid=21116 comm="syz.7.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1419.201014][ T30] audit: type=1400 audit(2192.451:1640): avc: denied { name_bind } for pid=21116 comm="syz.7.3709" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1419.351976][ T30] audit: type=1400 audit(2192.451:1641): avc: denied { node_bind } for pid=21116 comm="syz.7.3709" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1419.373968][T21127] overlayfs: overlapping lowerdir path [ 1419.598360][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1419.767873][T21137] overlayfs: overlapping lowerdir path [ 1419.784353][T21141] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up [ 1419.794452][T21142] FAULT_INJECTION: forcing a failure. [ 1419.794452][T21142] name failslab, interval 1, probability 0, space 0, times 0 [ 1419.980858][T21142] CPU: 0 UID: 0 PID: 21142 Comm: syz.6.3715 Not tainted syzkaller #0 PREEMPT(full) [ 1419.980876][T21142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1419.980883][T21142] Call Trace: [ 1419.980887][T21142] [ 1419.980892][T21142] dump_stack_lvl+0x16c/0x1f0 [ 1419.980910][T21142] should_fail_ex+0x512/0x640 [ 1419.980925][T21142] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 1419.980938][T21142] should_failslab+0xc2/0x120 [ 1419.980951][T21142] __kmalloc_cache_node_noprof+0x6d/0x420 [ 1419.980962][T21142] ? trace_kmalloc+0x2b/0xd0 [ 1419.980976][T21142] ? page_pool_create_percpu+0x7a/0xcb0 [ 1419.980996][T21142] page_pool_create_percpu+0x7a/0xcb0 [ 1419.981015][T21142] bpf_test_run_xdp_live+0x18e/0x500 [ 1419.981030][T21142] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1419.981045][T21142] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1419.981063][T21142] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1419.981076][T21142] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1419.981095][T21142] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1419.981108][T21142] ? 0xffffffffa02054c0 [ 1419.981118][T21142] ? 0xffffffffa02054c0 [ 1419.981127][T21142] ? 0xffffffffa02054c0 [ 1419.981138][T21142] bpf_prog_test_run_xdp+0x824/0x1590 [ 1419.981158][T21142] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1419.981173][T21142] ? __might_fault+0x50/0x190 [ 1419.981186][T21142] ? fput+0x9b/0xd0 [ 1419.981201][T21142] ? __bpf_prog_get+0x97/0x2a0 [ 1419.981213][T21142] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1419.981227][T21142] __sys_bpf+0x1050/0x4de0 [ 1419.981244][T21142] ? __pfx___sys_bpf+0x10/0x10 [ 1419.981259][T21142] ? ksys_write+0x190/0x250 [ 1419.981273][T21142] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1419.981295][T21142] ? fput+0x9b/0xd0 [ 1419.981314][T21142] ? ksys_write+0x1ac/0x250 [ 1419.981325][T21142] ? __pfx_ksys_write+0x10/0x10 [ 1419.981339][T21142] __x64_sys_bpf+0x78/0xc0 [ 1419.981354][T21142] ? lockdep_hardirqs_on+0x7c/0x110 [ 1419.981368][T21142] do_syscall_64+0xcd/0x4e0 [ 1419.981383][T21142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.981395][T21142] RIP: 0033:0x7ff87518eba9 [ 1419.981404][T21142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1419.981415][T21142] RSP: 002b:00007ff8760ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1419.981426][T21142] RAX: ffffffffffffffda RBX: 00007ff8753d5fa0 RCX: 00007ff87518eba9 [ 1419.981433][T21142] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1419.981440][T21142] RBP: 00007ff8760ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1419.981446][T21142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1419.981453][T21142] R13: 00007ff8753d6038 R14: 00007ff8753d5fa0 R15: 00007ffe69ed8c68 [ 1419.981466][T21142] [ 1420.653455][T21144] netlink: 'syz.7.3713': attribute type 1 has an invalid length. [ 1420.673643][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1420.890833][T21147] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3713'. [ 1421.773466][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1421.856473][T21144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1421.944320][T21159] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3719'. [ 1422.001230][T21143] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1422.066888][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1422.197711][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1422.351704][ T54] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1422.370260][ T30] audit: type=1400 audit(2195.969:1642): avc: denied { mounton } for pid=21149 comm="syz.6.3716" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1422.452579][ T30] audit: type=1400 audit(2195.979:1643): avc: denied { create } for pid=21149 comm="syz.6.3716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1422.619858][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1422.637491][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1422.669387][T21173] netlink: 188 bytes leftover after parsing attributes in process `syz.6.3722'. [ 1422.739714][ T54] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1422.789796][ T54] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1422.847273][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.878738][ T54] usb 3-1: config 0 descriptor?? [ 1422.957006][ T30] audit: type=1400 audit(2196.588:1644): avc: denied { map } for pid=21174 comm="syz.0.3723" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1423.011570][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1423.045668][ T30] audit: type=1400 audit(2196.588:1645): avc: denied { execute } for pid=21174 comm="syz.0.3723" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1423.378025][T17304] udevd[17304]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1423.603343][T21179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.613307][T21179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.966904][T18543] udevd[18543]: symlink '../../loop0' '/dev/disk/by-diskseq/79.tmp-b7:0' failed: Read-only file system [ 1423.971419][ T31] INFO: task syz.5.3385:19662 blocked for more than 143 seconds. [ 1424.003113][ T31] Not tainted syzkaller #0 [ 1424.015309][ T31] Blocked by coredump. [ 1424.023969][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1424.045135][ T54] usbhid 3-1:0.0: can't add hid device: -71 [ 1424.061938][ T54] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1424.085078][ T31] task:syz.5.3385 state:D stack:26504 pid:19662 tgid:19661 ppid:8982 task_flags:0x40054c flags:0x00004002 [ 1424.097527][ T31] Call Trace: [ 1424.130858][ T31] [ 1424.140476][ T31] __schedule+0x1190/0x5de0 [ 1424.158273][ T54] usb 3-1: USB disconnect, device number 57 [ 1424.163457][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1424.195607][ T31] ? __pfx___schedule+0x10/0x10 [ 1424.229297][ T31] ? find_held_lock+0x2b/0x80 [ 1424.248231][ T31] ? schedule+0x2d7/0x3a0 [ 1424.295205][ T31] schedule+0xe7/0x3a0 [ 1424.338737][T17304] udevd[17304]: symlink '../../loop7' '/dev/disk/by-diskseq/125.tmp-b7:7' failed: Read-only file system [ 1424.379702][ T31] v9fs_evict_inode+0x26f/0x300 [ 1424.392284][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 1424.400712][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 1424.419047][ T31] ? evict+0x3a2/0x920 [ 1424.429761][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 1424.479734][ T31] evict+0x3e6/0x920 [ 1424.561532][ T31] ? __pfx_evict+0x10/0x10 [ 1424.572935][ T31] ? iput+0x519/0x880 [ 1424.577246][ T31] iput+0x521/0x880 [ 1424.580196][T17304] udevd[17304]: symlink '../../loop2' '/dev/disk/by-diskseq/78.tmp-b7:2' failed: Read-only file system [ 1424.589459][ T31] ? __pfx_v9fs_drop_inode+0x10/0x10 [ 1424.597878][ T31] dentry_unlink_inode+0x29c/0x480 [ 1424.603516][ T31] __dentry_kill+0x1d0/0x600 [ 1424.608211][ T31] dput.part.0+0x4b1/0x9b0 [ 1424.612900][ T31] shrink_dcache_for_umount+0x159/0x3e0 [ 1424.618860][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1424.624820][ T31] generic_shutdown_super+0x6c/0x390 [ 1424.681887][ T31] kill_anon_super+0x3a/0x60 [ 1424.687325][ T31] v9fs_kill_super+0x3d/0xa0 [ 1424.693257][ T31] deactivate_locked_super+0xbe/0x1a0 [ 1424.700453][ T31] deactivate_super+0xde/0x100 [ 1424.705777][ T31] cleanup_mnt+0x225/0x450 [ 1424.710470][ T31] task_work_run+0x150/0x240 [ 1424.717207][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1424.723600][ T31] do_exit+0x86f/0x2bf0 [ 1424.727949][ T31] ? lock_acquire+0x179/0x350 [ 1424.778149][ T31] ? __pfx_do_exit+0x10/0x10 [ 1424.783047][ T31] ? find_held_lock+0x2b/0x80 [ 1424.787973][ T31] do_group_exit+0xd3/0x2a0 [ 1424.793154][ T31] get_signal+0x2673/0x26d0 [ 1424.798191][ T31] ? __pfx_get_signal+0x10/0x10 [ 1424.803109][ T31] ? do_futex+0x122/0x350 [ 1424.807797][ T31] ? __pfx_do_futex+0x10/0x10 [ 1424.812861][ T31] arch_do_signal_or_restart+0x8f/0x7d0 [ 1424.818419][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1424.824642][ T31] ? xfd_validate_state+0x61/0x180 [ 1424.829925][ T31] ? __pfx_ksys_read+0x10/0x10 [ 1424.834675][ T31] exit_to_user_mode_loop+0x84/0x110 [ 1424.839979][ T31] do_syscall_64+0x41c/0x4e0 [ 1424.844684][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.850597][ T31] RIP: 0033:0x7f0c9b58eba9 [ 1424.855100][ T31] RSP: 002b:00007f0c9c4a40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1424.863560][ T31] RAX: 0000000000000001 RBX: 00007f0c9b7d5fa8 RCX: 00007f0c9b58eba9 [ 1424.871641][ T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0c9b7d5fac [ 1424.879903][ T31] RBP: 00007f0c9b7d5fa0 R08: 00007f0c9c4a5000 R09: 0000000000000000 [ 1424.888058][ T31] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1424.901107][ T31] R13: 00007f0c9b7d6038 R14: 00007ffe41744310 R15: 00007ffe417443f8 [ 1424.909312][ T31] [ 1424.912365][ T31] [ 1424.912365][ T31] Showing all locks held in the system: [ 1424.921504][ T31] 2 locks held by kworker/u8:1/13: [ 1424.928370][ T31] #0: ffff88801ff0b948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1424.947862][ T31] #1: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0 [ 1424.957331][ T31] 1 lock held by khungtaskd/31: [ 1424.962392][ T31] #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1424.972490][ T31] 1 lock held by syslogd/5200: [ 1424.977334][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1424.987551][ T31] 2 locks held by getty/5604: [ 1424.993190][ T31] #0: ffff8880367be0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1425.003117][ T31] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1425.013438][ T31] 1 lock held by syz-executor/5830: [ 1425.018708][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1425.029038][ T31] 1 lock held by syz.5.3385/19662: [ 1425.034166][ T31] #0: ffff88806f6040e0 (&type->s_umount_key#77){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1425.044519][ T31] 1 lock held by syz.3.3442/19935: [ 1425.049646][ T31] #0: ffff88806f6040e0 (&type->s_umount_key#77){++++}-{4:4}, at: super_lock+0x31c/0x3f0 [ 1425.059540][ T31] 2 locks held by syz.0.3725/21180: [ 1425.064724][ T31] #0: ffffffff903851c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1425.073701][ T31] #1: ffffffff8e5ccb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1425.083759][ T31] [ 1425.086326][ T31] ============================================= [ 1425.086326][ T31] [ 1425.094737][ T31] NMI backtrace for cpu 0 [ 1425.094752][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1425.094771][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1425.094782][ T31] Call Trace: [ 1425.094788][ T31] [ 1425.094795][ T31] dump_stack_lvl+0x116/0x1f0 [ 1425.094821][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1425.094837][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1425.094858][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1425.094885][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1425.094904][ T31] watchdog+0xf0e/0x1260 [ 1425.094929][ T31] ? __pfx_watchdog+0x10/0x10 [ 1425.094946][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1425.094969][ T31] ? __kthread_parkme+0x19e/0x250 [ 1425.095000][ T31] ? __pfx_watchdog+0x10/0x10 [ 1425.095019][ T31] kthread+0x3c2/0x780 [ 1425.095038][ T31] ? __pfx_kthread+0x10/0x10 [ 1425.095057][ T31] ? rcu_is_watching+0x12/0xc0 [ 1425.095078][ T31] ? __pfx_kthread+0x10/0x10 [ 1425.095096][ T31] ret_from_fork+0x56a/0x730 [ 1425.095112][ T31] ? __pfx_kthread+0x10/0x10 [ 1425.095130][ T31] ret_from_fork_asm+0x1a/0x30 [ 1425.095164][ T31] [ 1425.210334][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1425.215525][ C1] NMI backtrace for cpu 1 [ 1425.215536][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1425.215551][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1425.215559][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1425.215580][ C1] Code: 7d 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 56 15 00 fb f4 cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1425.215593][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 1425.215604][ C1] RAX: 00000000067074fb RBX: 0000000000000001 RCX: ffffffff8b94bb49 [ 1425.215612][ C1] RDX: 0000000000000000 RSI: ffffffff8de52c58 RDI: ffffffff8c163300 [ 1425.215621][ C1] RBP: ffffed1003c5c488 R08: 0000000000000001 R09: ffffed10170a6655 [ 1425.215629][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 1425.215638][ C1] R13: ffff88801e2e2440 R14: ffffffff90ab7290 R15: 0000000000000000 [ 1425.215647][ C1] FS: 0000000000000000(0000) GS:ffff8881247b2000(0000) knlGS:0000000000000000 [ 1425.215660][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1425.215669][ C1] CR2: 0000200000404030 CR3: 000000006a8f3000 CR4: 00000000003526f0 [ 1425.215677][ C1] Call Trace: [ 1425.215682][ C1] [ 1425.215686][ C1] default_idle+0x13/0x20 [ 1425.215704][ C1] default_idle_call+0x6d/0xb0 [ 1425.215721][ C1] do_idle+0x391/0x510 [ 1425.215738][ C1] ? __pfx_do_idle+0x10/0x10 [ 1425.215753][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 1425.215769][ C1] cpu_startup_entry+0x4f/0x60 [ 1425.215784][ C1] start_secondary+0x21d/0x2b0 [ 1425.215803][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1425.215823][ C1] common_startup_64+0x13e/0x148 [ 1425.215842][ C1] [ 1425.392048][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1425.398902][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1425.407980][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1425.418007][ T31] Call Trace: [ 1425.421260][ T31] [ 1425.424166][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1425.428732][ T31] vpanic+0x6e8/0x7a0 [ 1425.432693][ T31] ? __pfx_vpanic+0x10/0x10 [ 1425.437173][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1425.443040][ T31] panic+0xca/0xd0 [ 1425.446729][ T31] ? __pfx_panic+0x10/0x10 [ 1425.451113][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1425.456460][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1425.462583][ T31] ? watchdog+0xd78/0x1260 [ 1425.466974][ T31] ? watchdog+0xd6b/0x1260 [ 1425.471361][ T31] watchdog+0xd89/0x1260 [ 1425.475574][ T31] ? __pfx_watchdog+0x10/0x10 [ 1425.480220][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1425.485392][ T31] ? __kthread_parkme+0x19e/0x250 [ 1425.490392][ T31] ? __pfx_watchdog+0x10/0x10 [ 1425.495048][ T31] kthread+0x3c2/0x780 [ 1425.499100][ T31] ? __pfx_kthread+0x10/0x10 [ 1425.503663][ T31] ? rcu_is_watching+0x12/0xc0 [ 1425.508399][ T31] ? __pfx_kthread+0x10/0x10 [ 1425.512958][ T31] ret_from_fork+0x56a/0x730 [ 1425.517521][ T31] ? __pfx_kthread+0x10/0x10 [ 1425.522082][ T31] ret_from_fork_asm+0x1a/0x30 [ 1425.526823][ T31] [ 1425.530016][ T31] Kernel Offset: disabled [ 1425.534314][ T31] Rebooting in 86400 seconds..