last executing test programs: 7m56.4914618s ago: executing program 2 (id=388): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) bind$netlink(r3, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x80000000, 0x0, 0x0, 0x4], [0xfa, 0x0, 0x0, 0x0, 0x4000]], '\x00', [{0x0, 0x1}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000340001"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) r6 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) recvmmsg(r5, &(0x7f0000007c00)=[{{&(0x7f0000000700)=@hci, 0x80, 0x0}, 0x2}, {{&(0x7f0000002e40)=@sco={0x1f, @fixed}, 0x80, 0x0}, 0x1}, {{&(0x7f0000002f80)=@nl=@unspec, 0x80, &(0x7f00000033c0), 0x0, &(0x7f0000003440)=""/150, 0x96}, 0x3c}, {{0x0, 0x0, &(0x7f0000003600)=[{0x0}], 0x1}, 0x7}, {{&(0x7f0000003640)=@sco={0x1f, @none}, 0x80, &(0x7f0000003840)=[{&(0x7f00000036c0)=""/188, 0xbc}], 0x1, &(0x7f0000003880)=""/201, 0xc9}, 0x3}, {{0x0, 0x0, &(0x7f0000003e00)=[{0x0}, {&(0x7f0000003ac0)=""/68, 0x44}, {&(0x7f0000003b80)=""/123, 0x7b}, {&(0x7f0000003c00)=""/213, 0xd5}, {&(0x7f0000003d00)=""/127, 0x7f}], 0x5, &(0x7f0000000780)=""/164, 0xa4}, 0x5}, {{&(0x7f0000003f40)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000005100)=""/148, 0x94}, 0x2}, {{&(0x7f00000051c0)=@xdp, 0x80, &(0x7f0000007580)=[{&(0x7f0000005240)=""/4096, 0x1000}, {&(0x7f0000006240)=""/207, 0xcf}, {0x0}, {0x0}, {&(0x7f0000007500)=""/103, 0x67}], 0x5}, 0x4}, {{&(0x7f0000007640)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0xffffffffffffff1f, 0x0, 0x0, &(0x7f0000007bc0)=""/32, 0x20}, 0x100}], 0x9, 0x60, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000031c0)='net/if_inet6\x00') ioctl$KVM_SET_IRQCHIP(r8, 0x4048aec9, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0x1, 0x3, 0x2, 0x0, [{0xf, 0x0, 0x0, '\x00', 0xe}, {0x5, 0x0, 0x0, '\x00', 0xfc}, {0x1, 0x1, 0x7, '\x00', 0x3}, {0xfa, 0x8, 0x5, '\x00', 0xa0}, {0x1, 0x9}, {0xa, 0x3, 0x5}, {0xb8, 0xda, 0xd, '\x00', 0x59}, {0xb, 0x1, 0xc, '\x00', 0x3}, {0x9, 0x7, 0x81, '\x00', 0x9}, {0x4, 0x6, 0x4, '\x00', 0x9}, {0xfe, 0x5, 0xd, '\x00', 0xa}, {0x2, 0x4b, 0x45, '\x00', 0xc2}, {0xd2, 0xab, 0x8, '\x00', 0x3}, {0x1, 0x3, 0xfe, '\x00', 0x81}, {0x5, 0xfb, 0x1, '\x00', 0x2}, {0xfe, 0x0, 0x6, '\x00', 0x9}, {0x1b, 0x9, 0x7, '\x00', 0x4}, {0x4, 0x7, 0x4, '\x00', 0x9}, {0xab, 0xef, 0x40, '\x00', 0x6}, {0x8, 0x10, 0x80}, {0x3, 0x3, 0x2, '\x00', 0x86}, {0x9, 0x3, 0xa, '\x00', 0x8}, {0x86, 0x8e, 0x5, '\x00', 0x9}, {0x56, 0x3, 0x4, '\x00', 0x7f}]}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000080)={&(0x7f0000000040)=[{0x4, 0x5201, 0x3, &(0x7f0000000300)="2f4710"}, {0x5, 0x1000, 0x0, 0x0}], 0x2}) 7m52.322727239s ago: executing program 2 (id=395): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r5 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff0000000000", 0x85}], 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000a2c000/0x2000)=nil, &(0x7f0000a4d000/0x3000)=nil, 0x2000, 0x1, 0x2}) 7m50.675130954s ago: executing program 2 (id=400): sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0xed5e, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x628, 0xc88d, 0x43, 0x0, 0x0) 7m43.39840174s ago: executing program 2 (id=416): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="27850200340f14000600002fb96dbcf706060000170000005f55f491bdd54ec5ff45faffffff", 0x26}], 0x1}, 0x9cdc2384256b08bc) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) (async, rerun: 32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='mm_compaction_migratepages\x00', r3, 0x0, 0x5}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) (async) r5 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e21, 0x80, @mcast1, 0x8}, {0xa, 0x4e23, 0x80000000, @private1, 0x8}, 0x1, {[0x3ff, 0x9, 0x196d, 0x400, 0x8, 0x81, 0x6, 0x8]}}, 0x5c) (async) syz_open_dev$loop(&(0x7f00000001c0), 0x8, 0x4040) (async) write(r9, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x55, 0x7, r1, 0x0, &(0x7f0000234000/0x2000)=nil, 0x1000, 0x1003fff}) 7m42.371394531s ago: executing program 2 (id=421): socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x14, 0x23, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x80) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7m38.735661956s ago: executing program 2 (id=424): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xc4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1000, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x0, 0x40}}}}}]}}]}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002207000000ab"], 0x0}, 0x0) 7m22.97285315s ago: executing program 32 (id=424): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xc4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1000, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x0, 0x40}}}}}]}}]}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002207000000ab"], 0x0}, 0x0) 3m46.746962797s ago: executing program 5 (id=1022): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRES8=r1, @ANYRESHEX, @ANYRES64=r0, @ANYRES32, @ANYRESDEC=r0, @ANYRESOCT], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={r3, &(0x7f0000000cc0), 0x0}, 0x20) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000c00)=@usbdevfs_driver={0x8, 0x28000000, 0x0}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) recvmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001000)=""/228, 0xe4}, {&(0x7f0000000180)=""/35, 0x23}, {&(0x7f0000001100)=""/74, 0x4a}, {&(0x7f0000001180)=""/124, 0x7c}, {&(0x7f0000001200)=""/88, 0x58}], 0x5}, 0x10100) mmap(&(0x7f00007b0000/0x1000)=nil, 0x1000, 0x3000006, 0x28011, 0xffffffffffffffff, 0xa06e2000) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='vfat\x00', 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) sched_setparam(0xffffffffffffffff, &(0x7f0000000140)=0x5) close_range(r4, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x48045) 3m45.186501446s ago: executing program 5 (id=1026): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x121500) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x3) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000096000a0002000180c20000030000060005"], 0x30}}, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff30000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) close(0x3) unshare(0x22020600) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, 0x0, &(0x7f0000000040)) fdatasync(r7) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) io_setup(0x2, &(0x7f0000001700)=0x0) r10 = eventfd2(0x0, 0x0) io_submit(r9, 0x1, &(0x7f00000028c0)=[&(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0}]) io_destroy(r9) 3m44.183355837s ago: executing program 5 (id=1032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0xfffffffc}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000180)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000980)=[{&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f0000000300)=""/224, 0xe0}, {&(0x7f00000004c0)=""/147, 0x93}, {&(0x7f0000000580)=""/245, 0xf5}, {&(0x7f0000000680)=""/150, 0x96}, {&(0x7f0000000740)=""/253, 0xfd}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/248, 0xf8}, {&(0x7f0000000400)=""/86, 0x56}], 0x9, &(0x7f0000000a40)=""/119, 0x77}, 0x1386}], 0x2, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4048aecb, &(0x7f0000001440)={{0x2, 0x0, 0x80, {0xffffffffffffffff, 0x1}}, "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", "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"}) 3m40.154485879s ago: executing program 5 (id=1034): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) connect$packet(0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x8, 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24000094) recvmmsg(r0, &(0x7f0000003600), 0x58, 0x10020, 0x0) 3m39.377472944s ago: executing program 5 (id=1037): syz_usb_connect(0x2, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000840), 0x800, 0x0) r3 = io_uring_setup(0x197e, &(0x7f0000000880)={0x0, 0xcdc2, 0x8, 0x1, 0x20e, 0x0, r2}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000900)=r2, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180), 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000380)=""/176) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpid() socket$packet(0x11, 0x3, 0x300) r6 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r6, 0x0, 0x0, 0x80000) 3m30.930682165s ago: executing program 5 (id=1057): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x2a}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x804) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 3m15.643559162s ago: executing program 33 (id=1057): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x2a}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x804) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 1m13.282230543s ago: executing program 4 (id=1419): fanotify_init(0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r3, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 1m12.212403603s ago: executing program 4 (id=1423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$nullb(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r6 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000f01000/0x3000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x3000, 0x1}) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m4.270757053s ago: executing program 4 (id=1441): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, &(0x7f0000000540)) (fail_nth: 2) 1m3.905567647s ago: executing program 4 (id=1443): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000180)=0x101, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x8d) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @local, @loopback}, &(0x7f0000000380)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x4, 0x98, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x43}, 0x1, 0x8000, 0x72, 0xa}}) sendmsg$nl_route(r3, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=@RTM_DELMDB={0x58, 0x55, 0x2, 0x70bd2b, 0x25dfdbfb, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x1, 0x3, {@ip4=@loopback, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x2, 0x4, {@in6_addr=@mcast2, 0x8edd}}}]}, 0x58}}, 0x20000010) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x884}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000020101030000000000000000000000000600124000040000140005800f0001006e657462696f732d6e730000140019"], 0xa8}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[]) open(&(0x7f00000000c0)='./file0\x00', 0x49c802, 0x81) 1m2.031268063s ago: executing program 4 (id=1448): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) epoll_create(0x5) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x7, 0x5, 0x77}, {@private=0xa010101, 0x4e23, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x3, 0x608, 0x0, 0xffff, 0x1, 0x4, 0x6a}, &(0x7f0000000040)=0x20) 59.194411298s ago: executing program 4 (id=1454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_open_dev$video(0x0, 0xc000, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x274100) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x5, 0x5, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x3, 0x4) r7 = socket(0x10, 0x3, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) getsockopt$MRT(r8, 0x0, 0xcf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x40}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, {0x4}}]}]}, 0x64}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 57.083872958s ago: executing program 34 (id=1454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_open_dev$video(0x0, 0xc000, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x274100) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x5, 0x5, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x3, 0x4) r7 = socket(0x10, 0x3, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) getsockopt$MRT(r8, 0x0, 0xcf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x40}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, {0x4}}]}]}, 0x64}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 19.804361209s ago: executing program 3 (id=1567): openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={r2, &(0x7f0000000cc0), 0x0}, 0x20) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000c00)=@usbdevfs_driver={0x8, 0x28000000, 0x0}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001000)=""/228, 0xe4}, {&(0x7f0000000180)=""/35, 0x23}, {&(0x7f0000001100)=""/74, 0x4a}, {&(0x7f0000001180)=""/124, 0x7c}, {&(0x7f0000001200)=""/88, 0x58}], 0x5}, 0x10100) mmap(&(0x7f00007b0000/0x1000)=nil, 0x1000, 0x3000006, 0x28011, 0xffffffffffffffff, 0xa06e2000) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='vfat\x00', 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) sched_setparam(0xffffffffffffffff, &(0x7f0000000140)=0x5) close_range(r3, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x48045) 17.402103738s ago: executing program 6 (id=1570): syz_io_uring_setup(0x9e, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r3, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30c6d1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f40e2ab1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c81106db988096bba7772e6acc5956344eaa64fea7c6319a37312ad57490dd2ebcb9bdf2815aae851bbd55317b4fcdaa8b06d30ed3db8a117424fed41f68979ac996e7fcd4549daf29bff6a2643e184580eb0b0bf81046975ea8d5e06e7124790dfca059217a34f4120feb2bb", 0x14d}, {&(0x7f0000000280)="5b4ea80f20d7212327afde5e7a457cde2dff9073f71979", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e649", 0x1000}, {&(0x7f0000000080)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc78a12ad1a30e4f7038336f1af1d61b0409988f1755e9b3ba9919b2a4952ceda920f5f0e22dd247d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870691200e428d5dcae697fa5a1e48df472ebb098aeb32e4049eba9f92be1ef1b6609f2b91c449dca240f", 0x95}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x4000000000001f4, 0x81) 16.583019436s ago: executing program 3 (id=1572): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) connect$packet(0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001300010000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a80180004801400068008"], 0x3c}}, 0x0) 14.372033633s ago: executing program 3 (id=1576): fanotify_init(0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 14.294027997s ago: executing program 0 (id=1578): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @local, 0xffffffff}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 14.00196668s ago: executing program 7 (id=1580): socketpair(0x28, 0x5, 0x28, &(0x7f00000002c0)) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @broadcast}, {}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 'lo\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x68, @loopback, 0xc2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000380)={r3, 0x39, "bf7fa159ea60785a5fcfa8d2d836dbcbaacf8bcee9219a5f2bb4a5f212d2b1d9541653fae56c283d3660069a3a61a1ce38f68f4a4c568f001b"}, &(0x7f0000000400)=0x41) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r4, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r6, &(0x7f0000001940)={&(0x7f00000002c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xce}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0x7e}}], 0x18}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00'}, 0x18) r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000440)="358e8ab5ecad417682b1bd211d714be026ed5d2d6a6e7ce0fb879b12454fa427de58d9d33e6d54a6d8e70d83044ea89aedebed92f9e9f8d42d45f13286dee885cd12d4494b90dac2f020dcd887fe30", 0x4f) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000040)={0xc, 0xb5315241, 0x1, @discrete={0x2, 0x3}}) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902"], 0x0) socket$vsock_stream(0x28, 0x1, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) socket(0x10, 0x3, 0x0) 12.836703538s ago: executing program 3 (id=1582): mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="0a12020000000000140003006e657464657673696d3000000000000014001680100001800c000500050000000800000020bd6712863649b848160c4d58821264d5dc838eaf4a0d0a7924a47df1eadf61c122dd09650ee57b9addfb192581916f4cfc3815abeb3bb38f19cf44dc461e5ae33de1df275306fa0a35cc9965c919c50cdcf83ce28921e20c06daad7eba926447b6c1a1c3"], 0x48}}, 0x200448c0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141121) unshare(0x20020680) r3 = syz_io_uring_setup(0x10b, &(0x7f00000000c0)={0x0, 0x0, 0x80, 0x1, 0x2000008}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x50, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x1200) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000240)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x0}) r6 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80240) r7 = dup(r6) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 12.824162045s ago: executing program 6 (id=1583): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001a00)=@abs={0x0, 0x0, 0xfffffff4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x22, 0x2, 0x3) getsockopt$nfc_llcp(r4, 0x6a, 0x0, 0x0, 0x1000000000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x600) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) unshare(0x480b0200) cachestat(r5, &(0x7f0000000140)={0x1, 0x7fc001}, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$caif(r4, &(0x7f0000000240)=@dbg={0x25, 0x7, 0x40}, 0x18) bind$l2tp6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c0002"], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) 10.905118922s ago: executing program 6 (id=1586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sigaltstack(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0xd3c, 0x0, &(0x7f0000000700), &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000240)='./file0\x00') r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="24010000", @ANYRES16, @ANYBLOB="010028bd7000fbdbdf251500000008002c005e070000050029000000000008002c000100000008000300", @ANYRES32=r3], 0x124}, 0x1, 0x0, 0x0, 0x80}, 0xc4) 10.840425849s ago: executing program 7 (id=1587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x800) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_io_uring_complete(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000214010021bd7000fcdbdf250900020073797a320000000008004100736977001400330063616984ebb92b7d66"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8051) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000021401006abd700002dcdf2508000100000000000900020073797a32000000007f9f108cffca6623b74202a42fc9acd30a4974", @ANYBLOB="3e8829a2ef3805450119be04184be444921a87ac516d1db5b3885045b39e75de3700b6720ab22154a65e7d4b80afd7f5cecfef7d1a83dbd8e6abad44eb8bb67a8755bc75c52ae6580f2807b7000000000000009f04480a65cb1f605ccc2d68bdff14868f0f326dceedb9c5724c46b9714289fbd3d605c68146d4a6eb88102997fd0915b1cc6adb9222c0f6d41c824a1c6959658aebf816de9dba7dbab33e56c9e44398a236"], 0x29}, 0x1, 0x0, 0x0, 0x10000801}, 0x40810) 9.413431571s ago: executing program 1 (id=1588): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) connect$packet(0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001300010000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a80180004801400068008"], 0x3c}}, 0x0) 9.339609252s ago: executing program 3 (id=1589): fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x15}, {0x45}, {0x6}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) getrlimit(0xa, &(0x7f0000000000)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x8, 0x7ffd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 9.236320633s ago: executing program 1 (id=1590): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000080)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x6, 0x3, 0x4, 0xfffffffffffffff8, 0x8}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x46, &(0x7f0000000100)=""/70, 0x40f00, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x10, 0xa7, 0x7}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000200)=[{0x5, 0x5, 0x0, 0xa}, {0x5, 0x3, 0x1}, {0x2, 0x5, 0x0, 0x3}], 0x10, 0x9, @void, @value}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='map_files\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)=0x3) r5 = epoll_create1(0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) close(r3) r7 = fcntl$dupfd(r5, 0x0, r4) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000400), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map, 0x4, 0x1, 0xffff, &(0x7f00000000c0)=[0x0], 0x1, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@fallback=r4, r6, 0x16, 0x8, r7, @void, @value=r9, @void, @void, r8}, 0x20) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup=r10, 0xffffffffffffffff, 0x18, 0x18, 0x0, @void, @value=r11, @void, @void, r8}, 0x20) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000380)=@raw=[@exit, @tail_call, @exit, @map_idx={0x18, 0x6, 0x5, 0x0, 0x7}, @tail_call, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @alu={0x4, 0x0, 0x8, 0xa, 0x3, 0x2, 0x1}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x5, 0x363e8bd6, 0x7f}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000500)=[0x1], &(0x7f0000000540)=[{0x4, 0x5, 0x9, 0x4}, {0x0, 0x3, 0xb, 0x3}, {0x1, 0x5, 0x4, 0xc}], 0x10, 0x34, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, r1, 0x5, 0x0, @val=@netkit={@void, @value=r12, @void, @void, r8}}, 0x1c) r13 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r13, 0x40045532, &(0x7f0000000040)=0x7) r14 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r15 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r15, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffffe, 0x0, 0x2, 0x2, 0xfffffffffffffffe, 0x7b, 0x0, 0x2, 0xffeffffffffffffd, 0x100002, 0x2}) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000907000000000000000705d77b5d"], 0x0) r16 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000f40)=ANY=[@ANYRES16, @ANYRES32=r16, @ANYRES64=r16, @ANYBLOB="7591c0f0f05637045927b483094a005210569e232d1e71ffd00949", @ANYRES32, @ANYRES64=0x0, @ANYBLOB="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", @ANYRES64=r16], &(0x7f0000000000)='GPL\x00', 0x8, 0xaf, &(0x7f0000000140)=""/175, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 9.172070086s ago: executing program 7 (id=1591): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x9, 0x0, 0xfffffffd, 0x0, 0x0, "7f12dd01517600000000fc00"}) syz_open_pts(r0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x480) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xd6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = getpgrp(0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) rt_tgsigqueueinfo(r3, r3, 0x1b, &(0x7f0000000040)={0x0, 0x0, 0x2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000101010100000000000000000a0000003c0001800c00028005001e003a0000002c0001801400030000000000000000000000f5000000000014000400ff0200000000000000000000000000010c001980080001009b000000"], 0x5c}}, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 9.086470635s ago: executing program 0 (id=1592): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x73ca9000) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') landlock_create_ruleset(&(0x7f0000000240)={0xa3a9, 0x5, 0x3}, 0x45, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="04"], 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000040), 0xb6, 0x48041) writev(r4, &(0x7f0000003480)=[{&(0x7f0000000400)}, {&(0x7f00000034c0)="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", 0x680}], 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00000000000000fe8000000000000000000000000000bb000000000a"], 0xe0}}, 0x0) 8.921952457s ago: executing program 6 (id=1593): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001200)=ANY=[@ANYBLOB="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"/301], 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000001e40)={0x2020}, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0xa0082) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r4, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0xc}, {0x0, 0x24}], 0x2, 0x0, 0x0) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) write$binfmt_script(r5, &(0x7f00000001c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6.05972743s ago: executing program 0 (id=1594): fanotify_init(0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 4.09879s ago: executing program 1 (id=1595): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000840), 0x800, 0x0) r4 = io_uring_setup(0x197e, &(0x7f0000000880)={0x0, 0xcdc2, 0x8, 0x1, 0x20e, 0x0, r3}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000900)=r3, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180), 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000380)=""/176) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpid() socket$packet(0x11, 0x3, 0x300) r7 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r7, 0x0, 0x0, 0x80000) 3.880610107s ago: executing program 7 (id=1596): shutdown(0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_enter(0xffffffffffffffff, 0x38c4, 0x2000000, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000", 0x4) 3.568240172s ago: executing program 6 (id=1597): socketpair(0x28, 0x5, 0x28, &(0x7f00000002c0)) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @broadcast}, {}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 'lo\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x68, @loopback, 0xc2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000380)={r3, 0x39, "bf7fa159ea60785a5fcfa8d2d836dbcbaacf8bcee9219a5f2bb4a5f212d2b1d9541653fae56c283d3660069a3a61a1ce38f68f4a4c568f001b"}, &(0x7f0000000400)=0x41) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r4, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r6, &(0x7f0000001940)={&(0x7f00000002c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xce}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0x7e}}], 0x18}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00'}, 0x18) r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000440)="358e8ab5ecad417682b1bd211d714be026ed5d2d6a6e7ce0fb879b12454fa427de58d9d33e6d54a6d8e70d83044ea89aedebed92f9e9f8d42d45f13286dee885cd12d4494b90dac2f020dcd887fe30", 0x4f) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000040)={0xc, 0xb5315241, 0x1, @discrete={0x2, 0x3}}) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902"], 0x0) socket$vsock_stream(0x28, 0x1, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) socket(0x10, 0x3, 0x0) 3.370504072s ago: executing program 0 (id=1598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_open_dev$I2C(0x0, 0x80, 0x274100) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x5, 0x5, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x3, 0x4) r7 = socket(0x10, 0x3, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) getsockopt$MRT(r8, 0x0, 0xcf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x40}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, {0x4}}]}]}, 0x64}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 3.265818803s ago: executing program 3 (id=1599): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="5814040000003f080be5622560c0b06fc35325fd9700f040047417be8899f43938c03d91b8919984131f1a2b564f4450f35c28899391d8ce80f84aea137616675aeb0d9085bb6ef8ab8693d5e20129a92d33683606a87502a873b08e06088283c052e6bea1b7d5f0a485f42a0ba7aacf9ce3e8b7f0e885cda09ce0487f7dd1142d3973ef929ee625247e98896d268a3ee1504aed80770347ad8254d05ff1bb389daa205d08d3011cbd9a5a8118d2212d83217c85c45a500b2e2305b876c2d7"], 0x0, 0x0, 0x0, 0x0}) io_uring_setup(0x2a48, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) socket(0x2b, 0x1, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) fsopen(0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x94, 0x200) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f00000001c0)={0xacae, 0x9, [{0x1, 0x1}, {0x6, 0x1}, {0xe, 0x1}, {0x6, 0x1}, {0xe, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0xd}, {0xa}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0xe1) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x5, &(0x7f0000000080)=[{0x4328, 0x4, 0x7, 0x1}, {0x3, 0xd, 0x7, 0x5}, {0x9, 0x1, 0x0, 0x5}, {0x4, 0x11, 0x2, 0x5}, {0x8, 0xa, 0x4, 0x6}]}) 2.577810655s ago: executing program 1 (id=1600): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109041, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1d, 0xc, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, &(0x7f0000000480)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) r1 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000640)='A\xf4r\xa6B\x00\xe0\xa4}\x99]/x{\xbc\xe8%\xd4\xcdO\xd4C\v\xf8\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\b\x00\x04\x00'}, 0xffffffffffffff28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2, 0x10020000, @mcast2, 0x16}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000840)=[{&(0x7f0000000a00)="1b", 0x1}, {&(0x7f00000005c0)="c1ee4691bb1b6b31419c1cdcafbe1cba1ed2b7791c99a5e235bbb2a2354b649152e8087d647f02d3f47ea62d2cfdccdf66ab322fb2cef12efb986f1bfd4cf369f7e139", 0x43}], 0x2) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r8, 0x0, 0x80080, 0x4) write$vhost_msg_v2(r8, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) write(r5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYRESOCT=r7, @ANYRES32, @ANYBLOB="b8afd4f014968c8e6dbdd3e2248ca366ee37a67015beb8a287878501833f367b8b25b9308436422f6cbb49d8ae5bdda3518250c2c5c177ca9f59ac6766023fd12085c1e8f1a7b455669a288645a9b96b386138f90d8f82c5654a82e837baa099173224107f081baab9f736686f1dbb129b700cd5035375e25998d4ae49f0adaef89ec7c276f2888b171d94b5bc750755fbb516dccdc782c285fc3fe7a088bed92721cc1b9fbca4cc5fdaf8049d69ef58b75e06b822318da525270cba9b87277cf1ffec9a26", @ANYRESDEC=r0, @ANYRESDEC=r6], 0x10) socket$packet(0x11, 0x3, 0x300) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x4, @mcast1, 0xc}}, 0x0, 0x2}, &(0x7f0000000040)=0x90) socket$nl_route(0x10, 0x3, 0x0) 2.381681082s ago: executing program 7 (id=1601): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x121500) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x3) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000096000a0002000180c20000030000060005"], 0x30}}, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f00000077c0)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff30000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) close(0x3) unshare(0x22020600) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, 0x0, &(0x7f0000000040)) fdatasync(r6) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) io_setup(0x2, &(0x7f0000001700)=0x0) r9 = eventfd2(0x0, 0x0) io_getevents(r8, 0x4, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0) io_submit(r8, 0x1, &(0x7f00000028c0)=[&(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}]) io_destroy(r8) 2.330417833s ago: executing program 0 (id=1602): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x800) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_io_uring_complete(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000214010021bd7000fcdbdf250900020073797a320000000008004100736977001400330063616984ebb92b7d66"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8051) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000021401006abd700002dcdf2508000100000000000900020073797a32000000007f9f108cffca6623b74202a42fc9acd30a4974b7cc3050", @ANYBLOB="3e8829a2ef3805450119be04184be444921a87ac516d1db5b3885045b39e75de3700b6720ab22154a65e7d4b80afd7f5cecfef7d1a83dbd8e6abad44eb8bb67a8755bc75c52ae6580f2807b7000000000000009f04480a65cb1f605ccc2d68bdff14868f0f326dceedb9c5724c46b9714289fbd3d605c68146d4a6eb88102997fd0915b1cc6adb9222c0f6d41c824a1c6959658aebf816de9dba7dbab33e56c9e44398a236"], 0x29}, 0x1, 0x0, 0x0, 0x10000801}, 0x40810) 2.091054789s ago: executing program 1 (id=1603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sigaltstack(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0xd3c, 0x0, &(0x7f0000000700), &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000240)='./file0\x00') r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="24010000", @ANYRES16, @ANYBLOB="010028bd7000fbdbdf251500000008002c005e070000050029000000000008002c000100000008000300", @ANYRES32=r3], 0x124}, 0x1, 0x0, 0x0, 0x80}, 0xc4) 1.133990719s ago: executing program 1 (id=1604): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="0a12020000000000140003006e657464657673696d3000000000000014001680100001800c000500050000000800000020bd6712863649b848160c4d58821264d5dc838eaf4a0d0a7924a47df1eadf61c122dd09650ee57b9addfb192581916f4cfc3815abeb3bb38f19cf44dc461e5ae33de1df275306fa0a35cc9965c919c50cdcf83ce28921e20c06daad7eba926447b6c1a1c3"], 0x48}}, 0x200448c0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141121) unshare(0x20020680) r4 = syz_io_uring_setup(0x10b, &(0x7f00000000c0)={0x0, 0x0, 0x80, 0x1, 0x2000008}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x50, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x1200) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000240)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x0}) r7 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80240) r8 = dup(r7) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1.005878209s ago: executing program 0 (id=1605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 885.703191ms ago: executing program 7 (id=1606): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x1, 0x608, 0x0, 0xffff, 0x1, 0x4, 0x8, 0x0}, &(0x7f0000000040)=0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c0000001956c5c1223371e529c3dd749870f1e1fb0a01020000000800000000000000000900010073797a30000000000c000640000000000000000224000580080001400008a2bd3c08000140000000320800024000000007080001400000002f0900020073797a300000000020000740d07d45b2ea3eec53a10c6b79cc855cf3348d80c823b4913a0208000a4000000000040005da3f0001003d7ca0c8abd1"], 0x9c}}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r7, 0x5}, &(0x7f0000000100)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004010003080000000100000080"], 0x50) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) 0s ago: executing program 6 (id=1607): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) connect$packet(0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001300010000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a80180004801400068008"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 75833][ T9195] ? __local_bh_enable_ip+0x12d/0x1c0 [ 433.875861][ T9195] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.875890][ T9195] ? __local_bh_enable_ip+0x12d/0x1c0 [ 433.875915][ T9195] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 433.875946][ T9195] ? __dev_queue_xmit+0x27e/0x3a70 [ 433.875971][ T9195] ? __dev_queue_xmit+0x27e/0x3a70 [ 433.875995][ T9195] ? __dev_queue_xmit+0x27e/0x3a70 [ 433.876022][ T9195] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 433.876055][ T9195] ? __lock_acquire+0xab9/0xd20 [ 433.876107][ T9195] ? __pfx_rtnl_newlink+0x10/0x10 [ 433.876127][ T9195] rtnetlink_rcv_msg+0x7cc/0xb70 [ 433.876150][ T9195] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 433.876169][ T9195] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 433.876187][ T9195] ? ref_tracker_free+0x63a/0x7d0 [ 433.876209][ T9195] ? __copy_skb_header+0xa7/0x550 [ 433.876236][ T9195] ? __pfx_ref_tracker_free+0x10/0x10 [ 433.876274][ T9195] netlink_rcv_skb+0x208/0x470 [ 433.876299][ T9195] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 433.876319][ T9195] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.876356][ T9195] ? netlink_deliver_tap+0x2e/0x1b0 [ 433.876377][ T9195] ? netlink_deliver_tap+0x2e/0x1b0 [ 433.876406][ T9195] netlink_unicast+0x75b/0x8d0 [ 433.876440][ T9195] netlink_sendmsg+0x805/0xb30 [ 433.876473][ T9195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.876517][ T9195] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.876540][ T9195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.876563][ T9195] __sock_sendmsg+0x219/0x270 [ 433.876597][ T9195] ____sys_sendmsg+0x505/0x830 [ 433.876630][ T9195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.876665][ T9195] ? import_iovec+0x74/0xa0 [ 433.876691][ T9195] ___sys_sendmsg+0x21f/0x2a0 [ 433.876718][ T9195] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.876783][ T9195] ? __fget_files+0x2a/0x420 [ 433.876808][ T9195] ? __fget_files+0x3a0/0x420 [ 433.876844][ T9195] __x64_sys_sendmsg+0x19b/0x260 [ 433.876873][ T9195] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 433.876908][ T9195] ? __pfx_ksys_write+0x10/0x10 [ 433.876931][ T9195] ? __secure_computing+0xe2/0x2a0 [ 433.876970][ T9195] do_syscall_64+0xfa/0x3b0 [ 433.876987][ T9195] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.877013][ T9195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.877032][ T9195] ? clear_bhb_loop+0x60/0xb0 [ 433.877056][ T9195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.877073][ T9195] RIP: 0033:0x7f53e5d8e929 [ 433.877093][ T9195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.877110][ T9195] RSP: 002b:00007f53e6b84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.877133][ T9195] RAX: ffffffffffffffda RBX: 00007f53e5fb5fa0 RCX: 00007f53e5d8e929 [ 433.877147][ T9195] RDX: 0000000020000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 433.877161][ T9195] RBP: 00007f53e6b84090 R08: 0000000000000000 R09: 0000000000000000 [ 433.877172][ T9195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 433.877185][ T9195] R13: 0000000000000000 R14: 00007f53e5fb5fa0 R15: 00007fff7812def8 [ 433.877213][ T9195] [ 434.397666][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.891'. [ 434.551023][ T6040] udevd[6040]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 434.654678][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.891'. [ 435.018495][ T9209] FAULT_INJECTION: forcing a failure. [ 435.018495][ T9209] name failslab, interval 1, probability 0, space 0, times 0 [ 435.034997][ T9209] CPU: 0 UID: 0 PID: 9209 Comm: syz.0.892 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 435.035028][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 435.035040][ T9209] Call Trace: [ 435.035048][ T9209] [ 435.035057][ T9209] dump_stack_lvl+0x189/0x250 [ 435.035093][ T9209] ? __pfx____ratelimit+0x10/0x10 [ 435.035123][ T9209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.035153][ T9209] ? __pfx__printk+0x10/0x10 [ 435.035181][ T9209] ? __pfx___might_resched+0x10/0x10 [ 435.035209][ T9209] ? fs_reclaim_acquire+0x7d/0x100 [ 435.035244][ T9209] should_fail_ex+0x414/0x560 [ 435.035296][ T9209] should_failslab+0xa8/0x100 [ 435.035325][ T9209] __kmalloc_noprof+0xcb/0x4f0 [ 435.035348][ T9209] ? iter_file_splice_write+0x1cb/0x1000 [ 435.035381][ T9209] iter_file_splice_write+0x1cb/0x1000 [ 435.035438][ T9209] ? __pfx_iter_file_splice_write+0x10/0x10 [ 435.035477][ T9209] ? rcu_read_lock_any_held+0xb3/0x120 [ 435.035508][ T9209] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 435.035542][ T9209] ? direct_splice_actor+0x10c/0x160 [ 435.035573][ T9209] ? __pfx_iter_file_splice_write+0x10/0x10 [ 435.035600][ T9209] direct_splice_actor+0x101/0x160 [ 435.035631][ T9209] splice_direct_to_actor+0x5a5/0xcc0 [ 435.035683][ T9209] ? __pfx_direct_splice_actor+0x10/0x10 [ 435.035708][ T9209] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 435.035746][ T9209] do_splice_direct+0x181/0x270 [ 435.035776][ T9209] ? __pfx_do_splice_direct+0x10/0x10 [ 435.035803][ T9209] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 435.035837][ T9209] ? rw_verify_area+0x258/0x650 [ 435.035865][ T9209] do_sendfile+0x4da/0x7e0 [ 435.035906][ T9209] ? __pfx_do_sendfile+0x10/0x10 [ 435.035951][ T9209] __se_sys_sendfile64+0xd9/0x190 [ 435.035983][ T9209] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 435.036026][ T9209] do_syscall_64+0xfa/0x3b0 [ 435.036048][ T9209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.036067][ T9209] ? asm_sysvec_call_function_single+0x1a/0x20 [ 435.036086][ T9209] ? clear_bhb_loop+0x60/0xb0 [ 435.036112][ T9209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.036130][ T9209] RIP: 0033:0x7f6ba798e929 [ 435.036149][ T9209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.036167][ T9209] RSP: 002b:00007f6ba57b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 435.036190][ T9209] RAX: ffffffffffffffda RBX: 00007f6ba7bb6160 RCX: 00007f6ba798e929 [ 435.036205][ T9209] RDX: 0000200000000080 RSI: 0000000000000007 RDI: 0000000000000007 [ 435.036217][ T9209] RBP: 00007f6ba57b4090 R08: 0000000000000000 R09: 0000000000000000 [ 435.036230][ T9209] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 435.036242][ T9209] R13: 0000000000000000 R14: 00007f6ba7bb6160 R15: 00007ffed0445a48 [ 435.036278][ T9209] [ 435.645901][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.895'. [ 435.760804][ T9211] vlan2: entered promiscuous mode [ 435.793214][ T9211] vlan2: entered allmulticast mode [ 435.798415][ T9211] hsr_slave_1: entered allmulticast mode [ 435.885805][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.895'. [ 435.978402][ T6040] udevd[6040]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 436.569612][ T9223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.897'. [ 437.822525][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 437.822568][ T30] audit: type=1326 audit(1749823836.606:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9229 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864e98e929 code=0x7fc00000 [ 438.493982][ T9249] netlink: 32 bytes leftover after parsing attributes in process `syz.3.904'. [ 439.503767][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 439.525855][ T5983] udevd[5983]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 439.913762][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.699727][ T6040] udevd[6040]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 441.727623][ T9272] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.909'. [ 442.559547][ T9285] FAULT_INJECTION: forcing a failure. [ 442.559547][ T9285] name failslab, interval 1, probability 0, space 0, times 0 [ 442.590810][ T9285] CPU: 0 UID: 0 PID: 9285 Comm: syz.1.915 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 442.590842][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 442.590854][ T9285] Call Trace: [ 442.590863][ T9285] [ 442.590872][ T9285] dump_stack_lvl+0x189/0x250 [ 442.590907][ T9285] ? __pfx____ratelimit+0x10/0x10 [ 442.590937][ T9285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.590967][ T9285] ? __pfx__printk+0x10/0x10 [ 442.590995][ T9285] ? __pfx___might_resched+0x10/0x10 [ 442.591023][ T9285] ? fs_reclaim_acquire+0x7d/0x100 [ 442.591058][ T9285] should_fail_ex+0x414/0x560 [ 442.591091][ T9285] should_failslab+0xa8/0x100 [ 442.591119][ T9285] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 442.591144][ T9285] ? __alloc_skb+0x112/0x2d0 [ 442.591172][ T9285] __alloc_skb+0x112/0x2d0 [ 442.591200][ T9285] netlink_ack+0x146/0xa50 [ 442.591221][ T9285] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.591247][ T9285] ? ref_tracker_free+0x63a/0x7d0 [ 442.591277][ T9285] ? __pfx_ref_tracker_free+0x10/0x10 [ 442.591317][ T9285] netlink_rcv_skb+0x28c/0x470 [ 442.591342][ T9285] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.591372][ T9285] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 442.591417][ T9285] ? down_read+0x1ad/0x2e0 [ 442.591441][ T9285] genl_rcv+0x28/0x40 [ 442.591467][ T9285] netlink_unicast+0x75b/0x8d0 [ 442.591503][ T9285] netlink_sendmsg+0x805/0xb30 [ 442.591539][ T9285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.591573][ T9285] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 442.591597][ T9285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.591630][ T9285] __sock_sendmsg+0x219/0x270 [ 442.591664][ T9285] ____sys_sendmsg+0x505/0x830 [ 442.591697][ T9285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.591740][ T9285] ? import_iovec+0x74/0xa0 [ 442.591766][ T9285] ___sys_sendmsg+0x21f/0x2a0 [ 442.591794][ T9285] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.591863][ T9285] ? __fget_files+0x2a/0x420 [ 442.591889][ T9285] ? __fget_files+0x3a0/0x420 [ 442.591929][ T9285] __x64_sys_sendmsg+0x19b/0x260 [ 442.591958][ T9285] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 442.591996][ T9285] ? __pfx_ksys_write+0x10/0x10 [ 442.592017][ T9285] ? rcu_is_watching+0x15/0xb0 [ 442.592053][ T9285] ? do_syscall_64+0xbe/0x3b0 [ 442.592076][ T9285] do_syscall_64+0xfa/0x3b0 [ 442.592093][ T9285] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.592120][ T9285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.592140][ T9285] ? clear_bhb_loop+0x60/0xb0 [ 442.592165][ T9285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.592185][ T9285] RIP: 0033:0x7f5eac58e929 [ 442.592205][ T9285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.592223][ T9285] RSP: 002b:00007f5ead3ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.592246][ T9285] RAX: ffffffffffffffda RBX: 00007f5eac7b5fa0 RCX: 00007f5eac58e929 [ 442.592260][ T9285] RDX: 0000000040000804 RSI: 0000200000000b80 RDI: 0000000000000004 [ 442.592273][ T9285] RBP: 00007f5ead3ed090 R08: 0000000000000000 R09: 0000000000000000 [ 442.592286][ T9285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.592298][ T9285] R13: 0000000000000000 R14: 00007f5eac7b5fa0 R15: 00007ffdea01f898 [ 442.592333][ T9285] [ 443.656989][ T30] audit: type=1326 audit(1749823842.429:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9296 comm="syz.5.919" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53e5d8e929 code=0x0 [ 447.501852][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'. [ 447.578956][ T9311] netlink: 40 bytes leftover after parsing attributes in process `syz.3.921'. [ 447.699481][ T9318] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.286917][ T9322] ======================================================= [ 448.286917][ T9322] WARNING: The mand mount option has been deprecated and [ 448.286917][ T9322] and is ignored by this kernel. Remove the mand [ 448.286917][ T9322] option from the mount to silence this warning. [ 448.286917][ T9322] ======================================================= [ 448.833688][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.928'. [ 450.389556][ T30] audit: type=1800 audit(1749823849.170:93): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.3.928" name="/newroot/200/bus" dev="tmpfs" ino=1098 res=0 errno=0 [ 450.402603][ T6040] udevd[6040]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 450.435927][ T9338] Invalid ELF header len 8 [ 451.192739][ T9357] netlink: 24 bytes leftover after parsing attributes in process `syz.5.931'. [ 451.473493][ T6040] udevd[6040]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 451.695652][ T6040] udevd[6040]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 451.873671][ T9372] dlm: non-version read from control device 36 [ 453.724094][ T9374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.814515][ T6040] udevd[6040]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 454.683116][ T6040] udevd[6040]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 455.013401][ T6040] udevd[6040]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 456.317037][ T6040] udevd[6040]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 456.562098][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.946'. [ 456.687929][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.946'. [ 460.574428][ T9434] input: syz1 as /devices/virtual/input/input10 [ 461.165175][ T30] audit: type=1326 audit(1749823859.922:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9432 comm="syz.3.954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f864e98e929 code=0x0 [ 465.422714][ T9455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.959'. [ 465.958461][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.962'. [ 466.213389][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.962'. [ 466.326044][ T9469] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 9469 comm: syz.1.963) [ 467.035511][ T30] audit: type=1800 audit(1749823865.123:95): pid=9469 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.963" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=14941 res=0 errno=0 [ 467.232334][ T30] audit: type=1800 audit(1749823865.813:96): pid=9457 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.5.961" name="/newroot/84/bus" dev="tmpfs" ino=481 res=0 errno=0 [ 467.675478][ T5998] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 467.771830][ T6040] udevd[6040]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 467.845420][ T5998] usb 6-1: Using ep0 maxpacket: 8 [ 467.872098][ T5998] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 467.947620][ T6040] udevd[6040]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 467.967233][ T5998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.975893][ T5888] libceph: connect (1)[c::]:6789 error -101 [ 467.982090][ T5888] libceph: mon0 (1)[c::]:6789 connect error [ 468.006353][ T9480] ceph: No mds server is up or the cluster is laggy [ 468.014563][ T5998] usb 6-1: Product: syz [ 468.018998][ T5998] usb 6-1: Manufacturer: syz [ 468.025937][ T5998] usb 6-1: SerialNumber: syz [ 468.038220][ T5998] usb 6-1: config 0 descriptor?? [ 468.093214][ T5998] gspca_main: se401-2.14.0 probing 047d:5003 [ 468.809279][ T5998] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 468.912581][ T9498] netlink: 'syz.1.972': attribute type 4 has an invalid length. [ 469.045794][ T5983] udevd[5983]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 469.768067][ T5983] udevd[5983]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 469.809261][ T5998] gspca_se401: read req failed req 0x06 error -19 [ 470.127334][ T5998] usb 6-1: USB disconnect, device number 7 [ 470.317850][ T30] audit: type=1800 audit(1749823869.103:97): pid=9507 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.5.975" name="/newroot/86/bus" dev="tmpfs" ino=492 res=0 errno=0 [ 470.744930][ T9516] xt_hashlimit: max too large, truncated to 1048576 [ 472.682239][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 473.523328][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 475.780539][ T6040] udevd[6040]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 475.830908][ T30] audit: type=1326 audit(1749823874.603:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9550 comm="syz.4.985" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c12f8e929 code=0x0 [ 476.467834][ T9561] netlink: 'syz.3.986': attribute type 4 has an invalid length. [ 477.644911][ T5919] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 477.696568][ T6040] udevd[6040]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 477.808930][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 477.833620][ T5919] usb 4-1: config 0 has no interfaces? [ 477.844804][ T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 477.849329][ T9570] netlink: 44 bytes leftover after parsing attributes in process `syz.1.991'. [ 477.852489][ T5919] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 477.890312][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.930104][ T5919] usb 4-1: config 0 descriptor?? [ 478.000681][ T5983] udevd[5983]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 478.015342][ T9] usb 6-1: device descriptor read/64, error -71 [ 478.102883][ T9575] netlink: 16 bytes leftover after parsing attributes in process `syz.0.992'. [ 478.529679][ T9555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.540667][ T9574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.993'. [ 478.575387][ T9555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.645896][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 478.649008][ T5888] usb 4-1: USB disconnect, device number 12 [ 478.758401][ T5983] udevd[5983]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 478.825715][ T9] usb 6-1: device descriptor read/64, error -71 [ 478.945129][ T9] usb usb6-port1: attempt power cycle [ 479.305119][ T9] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 479.971040][ T30] audit: type=1326 audit(1749823878.753:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9595 comm="syz.3.1002" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f864e98e929 code=0x0 [ 479.982240][ T9] usb 6-1: device descriptor read/8, error -71 [ 483.435673][ T9609] FAULT_INJECTION: forcing a failure. [ 483.435673][ T9609] name failslab, interval 1, probability 0, space 0, times 0 [ 484.526343][ T9609] CPU: 0 UID: 0 PID: 9609 Comm: syz.4.1004 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 484.526375][ T9609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 484.526387][ T9609] Call Trace: [ 484.526395][ T9609] [ 484.526404][ T9609] dump_stack_lvl+0x189/0x250 [ 484.526438][ T9609] ? __pfx____ratelimit+0x10/0x10 [ 484.526468][ T9609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.526489][ T9609] ? __pfx__printk+0x10/0x10 [ 484.526503][ T9609] ? __pfx___might_resched+0x10/0x10 [ 484.526521][ T9609] ? fs_reclaim_acquire+0x7d/0x100 [ 484.526542][ T9609] should_fail_ex+0x414/0x560 [ 484.526561][ T9609] should_failslab+0xa8/0x100 [ 484.526577][ T9609] __kmalloc_noprof+0xcb/0x4f0 [ 484.526591][ T9609] ? alloc_pipe_info+0x1fd/0x4d0 [ 484.526609][ T9609] alloc_pipe_info+0x1fd/0x4d0 [ 484.526625][ T9609] splice_direct_to_actor+0xa5d/0xcc0 [ 484.526642][ T9609] ? __lock_acquire+0xab9/0xd20 [ 484.526667][ T9609] ? __lock_acquire+0xab9/0xd20 [ 484.526681][ T9609] ? __pfx_direct_splice_actor+0x10/0x10 [ 484.526696][ T9609] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 484.526719][ T9609] do_splice_direct+0x181/0x270 [ 484.526742][ T9609] ? __pfx_do_splice_direct+0x10/0x10 [ 484.526768][ T9609] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 484.526805][ T9609] ? rw_verify_area+0x258/0x650 [ 484.526822][ T9609] do_sendfile+0x4da/0x7e0 [ 484.526839][ T9609] ? __pfx_vfs_write+0x10/0x10 [ 484.526856][ T9609] ? __pfx_do_sendfile+0x10/0x10 [ 484.526878][ T9609] ? __fget_files+0x3a0/0x420 [ 484.526915][ T9609] __se_sys_sendfile64+0x13e/0x190 [ 484.526947][ T9609] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 484.526981][ T9609] ? do_syscall_64+0xbe/0x3b0 [ 484.526997][ T9609] do_syscall_64+0xfa/0x3b0 [ 484.527006][ T9609] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.527024][ T9609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.527036][ T9609] ? clear_bhb_loop+0x60/0xb0 [ 484.527053][ T9609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.527064][ T9609] RIP: 0033:0x7f0c12f8e929 [ 484.527077][ T9609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.527087][ T9609] RSP: 002b:00007f0c13d36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 484.527102][ T9609] RAX: ffffffffffffffda RBX: 00007f0c131b6080 RCX: 00007f0c12f8e929 [ 484.527111][ T9609] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 484.527118][ T9609] RBP: 00007f0c13d36090 R08: 0000000000000000 R09: 0000000000000000 [ 484.527126][ T9609] R10: 000000000000106f R11: 0000000000000246 R12: 0000000000000001 [ 484.527133][ T9609] R13: 0000000000000000 R14: 00007f0c131b6080 R15: 00007ffdc7ad1aa8 [ 484.527157][ T9609] [ 486.299492][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'. [ 488.728999][ T9618] udevd[9618]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 490.143204][ T9657] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 490.260574][ T30] audit: type=1326 audit(1749823889.044:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9650 comm="syz.1.1018" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5eac58e929 code=0x0 [ 492.054033][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1020'. [ 492.284532][ T9669] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 492.380776][ T9618] udevd[9618]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 493.925258][ T9681] Invalid ELF header magic: != ELF [ 494.897369][ T30] audit: type=1326 audit(1749823893.674:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9699 comm="syz.3.1030" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f864e98e929 code=0x0 [ 495.083104][ T30] audit: type=1326 audit(1749823893.864:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9700 comm="syz.1.1031" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5eac58e929 code=0x0 [ 499.453160][ T9618] udevd[9618]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 499.485674][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'. [ 499.681312][ T9722] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 500.251148][ T9618] udevd[9618]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 500.735342][ T9739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1040'. [ 501.335442][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.752900][ T9618] udevd[9618]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 502.560336][ T30] audit: type=1326 audit(1749823901.344:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9745 comm="syz.1.1043" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5eac58e929 code=0x0 [ 504.425023][ T9618] udevd[9618]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 505.576772][ T9618] udevd[9618]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 505.732349][ T9770] netlink: 'syz.0.1048': attribute type 21 has an invalid length. [ 505.740582][ T9770] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1048'. [ 505.750450][ T9770] netlink: 'syz.0.1048': attribute type 6 has an invalid length. [ 505.758351][ T9770] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1048'. [ 506.259506][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'. [ 506.522310][ T9647] udevd[9647]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 508.289544][ T9798] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 9798 comm: syz.3.1055) [ 508.394913][ T30] audit: type=1800 audit(1749823907.084:105): pid=9798 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1055" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=18234 res=0 errno=0 [ 510.271311][ T30] audit: type=1326 audit(1749823907.014:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9793 comm="syz.1.1056" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5eac58e929 code=0x0 [ 512.460719][ T9800] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.568612][ T9809] udevd[9809]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 512.574053][ T9800] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.821227][ T9800] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.861703][ T9800] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.937264][ T9821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1062'. [ 513.095744][ T9800] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.112807][ T9800] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.137289][ T9809] udevd[9809]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 514.330554][ T9800] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.330601][ T9800] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.210730][ T9835] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1067'. [ 515.373055][ T9809] udevd[9809]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 515.400788][ T9800] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.443136][ T9800] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.511070][ T30] audit: type=1326 audit(1749823914.294:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9846 comm="syz.0.1069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ba798e929 code=0x0 [ 515.556065][ T9848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'. [ 515.725325][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1071'. [ 515.748283][ T9800] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.124916][ T9800] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.352091][ T9800] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.401698][ T9809] udevd[9809]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 522.414345][ T9800] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.634800][ T9869] syz.0.1073 (9869): attempted to duplicate a private mapping with mremap. This is not supported. [ 522.764286][ T30] audit: type=1326 audit(1749823921.464:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba798e929 code=0x7ffc0000 [ 522.801110][ T9800] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.833576][ T9800] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.034357][ T30] audit: type=1326 audit(1749823921.474:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba798e929 code=0x7ffc0000 [ 523.126055][ T30] audit: type=1326 audit(1749823921.474:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f6ba798e929 code=0x7ffc0000 [ 523.214195][ T30] audit: type=1326 audit(1749823921.944:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba798e929 code=0x7ffc0000 [ 523.344040][ T30] audit: type=1326 audit(1749823921.944:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba798e929 code=0x7ffc0000 [ 523.421758][ T9809] udevd[9809]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 523.422789][ T9874] openvswitch: netlink: Duplicate or invalid key (type 0). [ 523.524267][ T9874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.750598][ T9809] udevd[9809]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 526.168564][ T9809] udevd[9809]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 526.736732][ T5831] Bluetooth: hci5: command 0x0406 tx timeout [ 527.022141][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 527.290094][ T9907] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1084'. [ 527.416588][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 527.431385][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 527.438952][ T5998] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 527.457045][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 527.469098][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 527.498084][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 527.547826][ T9842] udevd[9842]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 527.600538][ T5991] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.613890][ T5991] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.635646][ T5998] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.651980][ T5998] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 527.667985][ T5998] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 527.677166][ T5998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 527.696081][ T5998] usb 5-1: SerialNumber: syz [ 527.718704][ T5998] usb 5-1: 0:2 : does not exist [ 527.741255][ T5991] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.773696][ T5991] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.984316][ T5991] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.208270][ T5991] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.497701][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1083'. [ 528.556773][ T9900] IPVS: Error joining to the multicast group [ 528.581112][ T9915] udevd[9915]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 528.923371][ T5991] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.934899][ T5991] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.190444][ T9809] udevd[9809]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 529.313197][ T9910] chnl_net:caif_netlink_parms(): no params data found [ 529.334349][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 529.523000][ T10] usb 4-1: device descriptor read/64, error -71 [ 529.573038][ T5828] Bluetooth: hci5: command tx timeout [ 530.135231][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 530.178612][ T5919] usb 5-1: USB disconnect, device number 24 [ 530.474692][ T10] usb 4-1: device descriptor read/64, error -71 [ 530.506972][ T9915] udevd[9915]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 530.597991][ T10] usb usb4-port1: attempt power cycle [ 530.633490][ T9910] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.662470][ T9910] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.765891][ T9910] bridge_slave_0: entered allmulticast mode [ 530.776988][ T9910] bridge_slave_0: entered promiscuous mode [ 531.532233][ T9960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1097'. [ 531.579150][ T9910] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.588570][ T9910] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.600439][ T9910] bridge_slave_1: entered allmulticast mode [ 531.606735][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 531.617560][ T9910] bridge_slave_1: entered promiscuous mode [ 531.678465][ T5828] Bluetooth: hci5: command tx timeout [ 531.697152][ T10] usb 4-1: device descriptor read/8, error -71 [ 531.727791][ T9809] udevd[9809]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 531.767428][ T9960] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.776486][ T9960] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.786034][ T9960] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.795895][ T9960] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.823863][ T9960] vxlan0: entered promiscuous mode [ 531.850242][ T30] audit: type=1326 audit(1749823930.634:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.1.1099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5eac58e929 code=0x0 [ 531.871235][ C1] vkms_vblank_simulate: vblank timer overrun [ 531.951692][ T5991] bridge_slave_1: left allmulticast mode [ 531.962042][ T5991] bridge_slave_1: left promiscuous mode [ 531.974872][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 531.995084][ T10] usb 4-1: device descriptor read/8, error -71 [ 532.015356][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.986192][ T10] usb usb4-port1: unable to enumerate USB device [ 533.072072][ T5991] bridge_slave_0: left allmulticast mode [ 533.919115][ T5828] Bluetooth: hci5: command tx timeout [ 533.955983][ T5991] bridge_slave_0: left promiscuous mode [ 533.963241][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.954257][ T5828] Bluetooth: hci5: command tx timeout [ 536.986590][ T9981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 538.021253][ T9984] udevd[9984]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 539.088934][ T9984] udevd[9984]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 539.123639][ T5828] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 539.185666][T10017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1109'. [ 539.391777][ T5991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.405574][ T5991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.416555][ T5991] bond0 (unregistering): Released all slaves [ 540.109340][ T9910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.165592][ T9910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.208705][ T9984] udevd[9984]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 540.285003][ T9998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1105'. [ 540.308972][T10017] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.318483][T10017] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.327652][T10017] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.336690][T10017] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.381779][T10017] vxlan0: entered promiscuous mode [ 540.668365][ T30] audit: type=1326 audit(1749823939.454:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10026 comm="syz.4.1113" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c12f8e929 code=0x0 [ 543.648811][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1115'. [ 543.773114][T10049] udevd[10049]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 544.122463][ T9910] team0: Port device team_slave_0 added [ 544.163322][ T9910] team0: Port device team_slave_1 added [ 544.743624][ T9910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.761776][ T9910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.311479][ T9910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.394359][ T9910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.436177][ T9910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.489570][T10047] udevd[10047]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 545.523405][ T9910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.661946][T10089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1123'. [ 545.938957][ T5991] hsr_slave_0: left promiscuous mode [ 545.949684][ T30] audit: type=1326 audit(1749823944.734:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10091 comm="syz.4.1125" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c12f8e929 code=0x0 [ 545.977372][ T5991] hsr_slave_1: left promiscuous mode [ 545.990376][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.002904][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.021129][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.044022][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.055017][T10096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1126'. [ 546.719263][ T5991] veth1_macvtap: left promiscuous mode [ 546.766303][ T5991] veth0_macvtap: left promiscuous mode [ 546.795937][ T5991] veth1_vlan: left promiscuous mode [ 546.850294][ T5991] veth0_vlan: left promiscuous mode [ 548.778789][ T5991] team0 (unregistering): Port device team_slave_1 removed [ 548.869295][ T5991] team0 (unregistering): Port device team_slave_0 removed [ 549.861522][ T30] audit: type=1326 audit(1749823948.644:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10119 comm="syz.4.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c12f8e929 code=0x7fc00000 [ 549.885684][ T30] audit: type=1326 audit(1749823948.644:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10119 comm="syz.4.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0c12f8e929 code=0x7fc00000 [ 549.910296][ T30] audit: type=1326 audit(1749823948.644:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10119 comm="syz.4.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c12f8e929 code=0x7fc00000 [ 549.936833][ T30] audit: type=1326 audit(1749823948.644:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10119 comm="syz.4.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c12f8e929 code=0x7fc00000 [ 549.973028][ T30] audit: type=1326 audit(1749823948.644:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10119 comm="syz.4.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c12f8e929 code=0x7fc00000 [ 549.995496][ T30] audit: type=1326 audit(1749823948.644:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10119 comm="syz.4.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c12f8e929 code=0x7fc00000 [ 550.019834][ T30] audit: type=1326 audit(1749823948.644:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10119 comm="syz.4.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c12f8e929 code=0x7fc00000 [ 550.048747][ T30] audit: type=1326 audit(1749823948.644:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10119 comm="syz.4.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c12f8e929 code=0x7fc00000 [ 550.079674][ T30] audit: type=1326 audit(1749823948.644:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10119 comm="syz.4.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c12f8e929 code=0x7fc00000 [ 550.223936][T10089] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.232852][T10089] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.242119][T10089] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.251007][T10089] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.262219][T10089] vxlan0: entered promiscuous mode [ 550.293242][ T9910] hsr_slave_0: entered promiscuous mode [ 550.319204][ T9910] hsr_slave_1: entered promiscuous mode [ 550.326028][ T9910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.333649][ T9910] Cannot create hsr debugfs directory [ 550.367589][T10049] udevd[10049]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 550.748101][T10132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1135'. [ 551.050655][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'. [ 551.159396][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 551.159417][ T30] audit: type=1326 audit(1749823949.934:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10138 comm="syz.4.1138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c12f8e929 code=0x0 [ 551.223931][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 552.384376][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'. [ 552.534731][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1140'. [ 552.687843][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 553.463478][ T5991] IPVS: stop unused estimator thread 0... [ 553.711292][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 553.820032][ T9910] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 554.511090][T10179] xt_l2tp: unknown flags: 17 [ 554.511913][ T9910] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 554.552858][ T9910] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 554.584653][ T9910] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 554.805825][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 555.056379][ T9910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.075903][T10199] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1149'. [ 555.111117][T10197] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1149'. [ 555.149020][T10200] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1149'. [ 555.193664][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 555.223439][ T9910] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.289052][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.296318][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.334952][ T30] audit: type=1326 audit(1749823954.114:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10178 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c12f8e929 code=0x7fc00000 [ 555.385834][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.393099][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.425893][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1151'. [ 555.613214][ T30] audit: type=1326 audit(1749823954.394:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10209 comm="syz.4.1152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c12f8e929 code=0x0 [ 555.824310][T10208] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 556.043842][ T9910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 556.774137][ T30] audit: type=1800 audit(1749823955.554:185): pid=10216 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.1.1153" name="/newroot/275/bus" dev="tmpfs" ino=1516 res=0 errno=0 [ 556.814403][T10219] Invalid ELF header len 8 [ 557.670308][ T9910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.400602][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 558.725646][ T9910] veth0_vlan: entered promiscuous mode [ 558.739540][ T9910] veth1_vlan: entered promiscuous mode [ 558.925837][T10265] input: syz1 as /devices/virtual/input/input11 [ 559.661578][ T9910] veth0_macvtap: entered promiscuous mode [ 559.696267][T10049] udevd[10049]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 559.737168][ T9910] veth1_macvtap: entered promiscuous mode [ 560.142874][ T9910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.203096][ T9910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.309403][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 560.376319][ T9910] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.489370][ T9910] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.498685][ T9910] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.508325][ T9910] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.596349][T10279] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 560.626680][ T30] audit: type=1326 audit(1749823959.414:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10282 comm="syz.4.1164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c12f8e929 code=0x0 [ 561.872734][ T6050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.961750][ T6050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.193934][ T7942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.214155][ T7942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.444783][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.052882][T10321] Invalid ELF header len 8 [ 565.071443][ T30] audit: type=1800 audit(1749823963.834:187): pid=10317 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.6.1167" name="/newroot/1/bus" dev="tmpfs" ino=23 res=0 errno=0 [ 565.169998][T10327] netlink: 'syz.1.1170': attribute type 1 has an invalid length. [ 565.208376][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1170'. [ 565.613606][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 565.695571][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1174'. [ 566.223062][T10345] input: syz1 as /devices/virtual/input/input12 [ 569.142789][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 569.280604][T10364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1180'. [ 570.079389][ T30] audit: type=1326 audit(1749823968.864:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10373 comm="syz.3.1185" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f864e98e929 code=0x0 [ 571.159993][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 571.752162][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 572.608990][T10401] Invalid ELF header len 8 [ 572.629769][ T30] audit: type=1800 audit(1749823971.394:189): pid=10396 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.6.1186" name="/newroot/4/bus" dev="tmpfs" ino=39 res=0 errno=0 [ 572.798563][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 572.972047][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 574.038188][T10431] input: syz1 as /devices/virtual/input/input13 [ 574.751662][T10049] udevd[10049]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 575.068744][T10438] netlink: 'syz.0.1195': attribute type 1 has an invalid length. [ 575.076943][T10438] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1195'. [ 575.086149][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 575.835624][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 575.980992][T10451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1198'. [ 576.929559][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 578.958415][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 580.067771][T10496] dlm: non-version read from control device 36 [ 580.370089][T10352] udevd[10352]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 581.933806][T10513] netfs: Couldn't get user pages (rc=-14) [ 582.097488][ T5998] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 582.163024][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 582.244964][T10521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1216'. [ 582.300180][ T5998] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.323321][ T5998] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 582.363726][ T5998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.427896][ T5998] usb 4-1: config 0 descriptor?? [ 582.468638][T10527] lo speed is unknown, defaulting to 1000 [ 582.474791][T10527] lo speed is unknown, defaulting to 1000 [ 582.482396][T10527] lo speed is unknown, defaulting to 1000 [ 582.494401][T10527] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 582.509211][T10527] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 582.536821][T10527] lo speed is unknown, defaulting to 1000 [ 582.544183][T10527] lo speed is unknown, defaulting to 1000 [ 582.551036][T10527] lo speed is unknown, defaulting to 1000 [ 582.557929][T10527] lo speed is unknown, defaulting to 1000 [ 582.565996][T10527] lo speed is unknown, defaulting to 1000 [ 582.580473][T10527] lo speed is unknown, defaulting to 1000 [ 582.597860][ T5998] pwc: Askey VC010 type 2 USB webcam detected. [ 582.646833][ T30] audit: type=1804 audit(1749823981.434:190): pid=10521 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.1216" name="/newroot/243/file1" dev="fuse" ino=1 res=1 errno=0 [ 582.739102][ T30] audit: type=1800 audit(1749823981.484:191): pid=10521 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1216" name="/" dev="fuse" ino=1 res=0 errno=0 [ 583.224826][ T5998] pwc: recv_control_msg error -32 req 02 val 2b00 [ 583.330328][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1218'. [ 583.424199][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 583.644255][ T5998] pwc: recv_control_msg error -71 req 02 val 2700 [ 583.659322][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.674252][ T5998] pwc: recv_control_msg error -71 req 02 val 2c00 [ 583.694626][ T5998] pwc: recv_control_msg error -71 req 04 val 1000 [ 583.714566][ T5998] pwc: recv_control_msg error -71 req 04 val 1300 [ 583.734764][ T5998] pwc: recv_control_msg error -71 req 04 val 1400 [ 583.741892][ T5998] pwc: recv_control_msg error -71 req 02 val 2000 [ 583.749015][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 583.749084][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 583.755573][ T9] usb 7-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 583.788733][ T5998] pwc: recv_control_msg error -71 req 02 val 2100 [ 583.828907][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.834187][ T5998] pwc: recv_control_msg error -71 req 04 val 1500 [ 583.856678][ T9] usb 7-1: Product: syz [ 583.868502][ T5998] pwc: recv_control_msg error -71 req 02 val 2500 [ 583.904417][ T5998] pwc: recv_control_msg error -71 req 02 val 2400 [ 583.936346][T10556] dlm: non-version read from control device 36 [ 583.998170][ T5998] pwc: recv_control_msg error -71 req 02 val 2600 [ 584.090895][ T5998] pwc: recv_control_msg error -71 req 02 val 2900 [ 584.159241][ T5998] pwc: recv_control_msg error -71 req 02 val 2800 [ 584.239711][ T5998] pwc: recv_control_msg error -71 req 04 val 1100 [ 584.305539][ T5998] pwc: recv_control_msg error -71 req 04 val 1200 [ 584.590282][ T5998] pwc: Registered as video103. [ 584.774089][ T9] usb 7-1: Manufacturer: syz [ 584.774446][ T5998] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 584.778784][ T9] usb 7-1: SerialNumber: syz [ 584.836577][ T9] usb 7-1: config 0 descriptor?? [ 584.907926][T10049] udevd[10049]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 584.967417][ T5998] usb 4-1: USB disconnect, device number 17 [ 585.082080][ T43] usb 7-1: USB disconnect, device number 2 [ 585.435630][T10574] vxcan1: tx address claim with dest, not broadcast [ 586.519852][T10352] udevd[10352]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 586.693953][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'. [ 588.606011][ T30] audit: type=1326 audit(1749823987.384:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10591 comm="syz.1.1231" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5eac58e929 code=0x0 [ 588.637668][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1230'. [ 588.757639][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 588.780442][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1233'. [ 588.831287][T10606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1230'. [ 588.967073][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1233'. [ 589.945919][T10620] 9pnet_fd: Insufficient options for proto=fd [ 590.021729][T10611] hsr_slave_1 (unregistering): left promiscuous mode [ 590.156459][T10625] dlm: non-version read from control device 36 [ 592.966464][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 593.383227][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 593.554620][T10656] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 593.644252][ T30] audit: type=1326 audit(1749823992.404:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10666 comm="syz.0.1245" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ba798e929 code=0x0 [ 594.219229][T10679] dlm: non-version read from control device 36 [ 597.203266][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 597.435769][T10721] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 597.849147][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 598.378833][ T5828] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 601.419918][ T30] audit: type=1326 audit(1749824000.204:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10763 comm="syz.1.1271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5eac58e929 code=0x0 [ 601.441123][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.549638][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 602.589854][T10781] FAULT_INJECTION: forcing a failure. [ 602.589854][T10781] name failslab, interval 1, probability 0, space 0, times 0 [ 602.605677][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 602.682162][T10781] CPU: 0 UID: 0 PID: 10781 Comm: syz.4.1272 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 602.682194][T10781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 602.682207][T10781] Call Trace: [ 602.682215][T10781] [ 602.682225][T10781] dump_stack_lvl+0x189/0x250 [ 602.682261][T10781] ? __pfx____ratelimit+0x10/0x10 [ 602.682291][T10781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 602.682319][T10781] ? __pfx__printk+0x10/0x10 [ 602.682347][T10781] ? __pfx___might_resched+0x10/0x10 [ 602.682374][T10781] ? fs_reclaim_acquire+0x7d/0x100 [ 602.682408][T10781] should_fail_ex+0x414/0x560 [ 602.682440][T10781] should_failslab+0xa8/0x100 [ 602.682468][T10781] __kmalloc_cache_noprof+0x70/0x3d0 [ 602.682490][T10781] ? nfnetlink_rcv+0xeff/0x2520 [ 602.682525][T10781] nfnetlink_rcv+0xeff/0x2520 [ 602.682600][T10781] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 602.682650][T10781] ? ref_tracker_free+0x63a/0x7d0 [ 602.682714][T10781] ? __netlink_deliver_tap+0x807/0x850 [ 602.682748][T10781] ? netlink_deliver_tap+0x2e/0x1b0 [ 602.682770][T10781] ? netlink_deliver_tap+0x2e/0x1b0 [ 602.682800][T10781] netlink_unicast+0x75b/0x8d0 [ 602.682836][T10781] netlink_sendmsg+0x805/0xb30 [ 602.682872][T10781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.682904][T10781] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 602.682928][T10781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.682953][T10781] __sock_sendmsg+0x219/0x270 [ 602.682988][T10781] ____sys_sendmsg+0x505/0x830 [ 602.683020][T10781] ? __pfx_____sys_sendmsg+0x10/0x10 [ 602.683056][T10781] ? import_iovec+0x74/0xa0 [ 602.683081][T10781] ___sys_sendmsg+0x21f/0x2a0 [ 602.683109][T10781] ? __pfx____sys_sendmsg+0x10/0x10 [ 602.683184][T10781] ? __fget_files+0x2a/0x420 [ 602.683208][T10781] ? __fget_files+0x3a0/0x420 [ 602.683248][T10781] __x64_sys_sendmsg+0x19b/0x260 [ 602.683277][T10781] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 602.683313][T10781] ? __pfx_ksys_write+0x10/0x10 [ 602.683332][T10781] ? rcu_is_watching+0x15/0xb0 [ 602.683367][T10781] ? do_syscall_64+0xbe/0x3b0 [ 602.683390][T10781] do_syscall_64+0xfa/0x3b0 [ 602.683406][T10781] ? lockdep_hardirqs_on+0x9c/0x150 [ 602.683434][T10781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.683453][T10781] ? clear_bhb_loop+0x60/0xb0 [ 602.683479][T10781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.683497][T10781] RIP: 0033:0x7f0c12f8e929 [ 602.683516][T10781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.683534][T10781] RSP: 002b:00007f0c13d57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 602.683556][T10781] RAX: ffffffffffffffda RBX: 00007f0c131b5fa0 RCX: 00007f0c12f8e929 [ 602.683571][T10781] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 602.683592][T10781] RBP: 00007f0c13d57090 R08: 0000000000000000 R09: 0000000000000000 [ 602.683604][T10781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 602.683616][T10781] R13: 0000000000000000 R14: 00007f0c131b5fa0 R15: 00007ffdc7ad1aa8 [ 602.683650][T10781] [ 602.684270][T10784] ieee802154 phy0 wpan0: encryption failed: -22 [ 603.015978][ T30] audit: type=1800 audit(1749824001.794:195): pid=10766 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.6.1269" name="/newroot/18/bus" dev="tmpfs" ino=111 res=0 errno=0 [ 603.070487][T10770] Invalid ELF header len 8 [ 603.378406][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 606.028540][T10824] netfs: Couldn't get user pages (rc=-14) [ 606.076433][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1283'. [ 606.099433][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 606.237763][ T30] audit: type=1326 audit(1749824005.024:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10827 comm="syz.0.1284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ba798e929 code=0x0 [ 607.728014][ T5828] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 607.757150][T10850] netlink: 'syz.6.1289': attribute type 4 has an invalid length. [ 607.841484][T10855] QAT: failed to copy from user cfg_data. [ 608.034406][ T5998] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 608.264240][ T5998] usb 7-1: Using ep0 maxpacket: 32 [ 608.370535][ T5998] usb 7-1: config 0 has no interfaces? [ 608.546627][ T5998] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 608.614047][ T5998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.960130][ T5998] usb 7-1: config 0 descriptor?? [ 609.317146][T10850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.336698][T10850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.435816][ T5910] usb 7-1: USB disconnect, device number 3 [ 609.446379][T10352] udevd[10352]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 609.589469][T10871] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1295'. [ 610.028749][T10891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1300'. [ 611.122232][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 611.242422][ T30] audit: type=1800 audit(1749824010.024:197): pid=10894 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.4.1299" name="/newroot/245/bus" dev="tmpfs" ino=1326 res=0 errno=0 [ 611.269936][T10898] Invalid ELF header len 8 [ 612.154634][ T30] audit: type=1326 audit(1749824010.924:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10914 comm="syz.6.1305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbba9f8e929 code=0x0 [ 612.276931][T10919] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1306'. [ 612.383095][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 612.423791][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1306'. [ 612.494645][T10925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1306'. [ 613.564389][T10928] netlink: 'syz.1.1306': attribute type 27 has an invalid length. [ 613.725143][T10925] capability: warning: `syz.1.1306' uses 32-bit capabilities (legacy support in use) [ 613.781678][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 614.210841][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 615.062314][T10953] Cache volume key already in use (9p,(null),) [ 615.626080][T10963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1314'. [ 615.637576][T10962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 615.794916][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 616.539392][T10049] udevd[10049]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 616.761973][T10136] udevd[10136]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 617.432025][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 618.882511][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 619.066518][T11006] netfs: Couldn't get user pages (rc=-14) [ 619.124807][T11015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1323'. [ 619.529829][T11030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 620.157560][T10352] udevd[10352]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 620.396004][ T30] audit: type=1800 audit(1749824019.124:199): pid=11011 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.4.1324" name="/newroot/248/bus" dev="tmpfs" ino=1342 res=0 errno=0 [ 620.474759][T11022] Invalid ELF header len 8 [ 620.619398][T11044] loop6: detected capacity change from 0 to 7 [ 620.746214][T10136] Dev loop6: unable to read RDB block 7 [ 620.752224][T10136] loop6: unable to read partition table [ 620.760221][T10136] loop6: partition table beyond EOD, truncated [ 620.809142][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/73.tmp-b7:6' failed: Read-only file system [ 620.885979][ T5191] Dev loop6: unable to read RDB block 7 [ 620.899719][ T5191] loop6: unable to read partition table [ 620.926233][ T5191] loop6: partition table beyond EOD, truncated [ 621.030436][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/73.tmp-b7:6' failed: Read-only file system [ 621.044367][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1336'. [ 621.098362][T10049] udevd[10049]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 621.137348][T11057] netem: change failed [ 621.165926][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/73.tmp-b7:6' failed: Read-only file system [ 621.234749][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 621.568855][T10352] udevd[10352]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 622.400909][T11082] input: syz1 as /devices/virtual/input/input15 [ 623.075821][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 623.226767][T11094] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1342'. [ 623.481606][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 623.582460][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 624.047656][T11112] input: syz1 as /devices/virtual/input/input16 [ 624.225056][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.733326][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 625.328854][ T30] audit: type=1800 audit(1749824024.114:200): pid=11133 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.1.1352" name="/newroot/329/bus" dev="tmpfs" ino=1805 res=0 errno=0 [ 625.372567][T11135] Invalid ELF header len 8 [ 625.990613][T10352] udevd[10352]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 626.023521][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 626.135394][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 626.544854][T11171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1362'. [ 626.627807][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 627.110704][T11174] FAULT_INJECTION: forcing a failure. [ 627.110704][T11174] name failslab, interval 1, probability 0, space 0, times 0 [ 627.124590][T11174] CPU: 0 UID: 0 PID: 11174 Comm: syz.6.1363 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 627.124620][T11174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 627.124632][T11174] Call Trace: [ 627.124642][T11174] [ 627.124651][T11174] dump_stack_lvl+0x189/0x250 [ 627.124686][T11174] ? __pfx____ratelimit+0x10/0x10 [ 627.124716][T11174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.124745][T11174] ? __pfx__printk+0x10/0x10 [ 627.124771][T11174] ? is_bpf_text_address+0x26/0x2b0 [ 627.124807][T11174] should_fail_ex+0x414/0x560 [ 627.124839][T11174] should_failslab+0xa8/0x100 [ 627.124868][T11174] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 627.124893][T11174] ? __alloc_skb+0x112/0x2d0 [ 627.124922][T11174] __alloc_skb+0x112/0x2d0 [ 627.124949][T11174] _sctp_make_chunk+0x5e/0x430 [ 627.124968][T11174] ? is_bpf_text_address+0x26/0x2b0 [ 627.125000][T11174] sctp_make_abort_violation+0xb9/0x660 [ 627.125022][T11174] ? __lock_acquire+0xab9/0xd20 [ 627.125048][T11174] ? __pfx_sctp_make_abort_violation+0x10/0x10 [ 627.125074][T11174] ? sctp_auth_recv_cid+0x75/0x230 [ 627.125099][T11174] sctp_sf_abort_violation+0x6f/0xc60 [ 627.125132][T11174] sctp_sf_ootb+0x4df/0x7c0 [ 627.125171][T11174] sctp_do_sm+0x1e7/0x5a20 [ 627.125196][T11174] ? __pfx_sctp_cname+0x10/0x10 [ 627.125221][T11174] ? stack_depot_save_flags+0x429/0x900 [ 627.125256][T11174] ? kasan_save_track+0x4f/0x80 [ 627.125283][T11174] ? kasan_save_track+0x3e/0x80 [ 627.125303][T11174] ? __pfx_sctp_do_sm+0x10/0x10 [ 627.125327][T11174] ? ip_protocol_deliver_rcu+0x2e0/0x440 [ 627.125346][T11174] ? ip_local_deliver_finish+0x2fb/0x580 [ 627.125366][T11174] ? NF_HOOK+0x309/0x3a0 [ 627.125383][T11174] ? NF_HOOK+0x309/0x3a0 [ 627.125400][T11174] ? __netif_receive_skb+0x143/0x380 [ 627.125477][T11174] ? sctp_inq_pop+0xc46/0x1010 [ 627.125507][T11174] ? sctp_auth_recv_cid+0x75/0x230 [ 627.125531][T11174] sctp_endpoint_bh_rcv+0x591/0x7e0 [ 627.125571][T11174] sctp_rcv+0x1ca6/0x2490 [ 627.125594][T11174] ? raw_local_deliver+0x30d/0xe90 [ 627.125642][T11174] ? __pfx_sctp_rcv+0x10/0x10 [ 627.125663][T11174] ? raw_local_deliver+0xd88/0xe90 [ 627.125698][T11174] ? __lock_acquire+0xab9/0xd20 [ 627.125727][T11174] ? raw_local_deliver+0x30d/0xe90 [ 627.125764][T11174] ? __pfx_sctp4_rcv+0x10/0x10 [ 627.125785][T11174] ip_protocol_deliver_rcu+0x2e0/0x440 [ 627.125808][T11174] ? ip_local_deliver_finish+0x1fa/0x580 [ 627.125833][T11174] ip_local_deliver_finish+0x2fb/0x580 [ 627.125864][T11174] NF_HOOK+0x309/0x3a0 [ 627.125885][T11174] ? __pfx_ipt_do_table+0x10/0x10 [ 627.125906][T11174] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 627.125926][T11174] ? NF_HOOK+0x9a/0x3a0 [ 627.125947][T11174] ? __pfx_NF_HOOK+0x10/0x10 [ 627.125965][T11174] ? ip_rcv_finish_core+0xda3/0x1c00 [ 627.125990][T11174] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 627.126013][T11174] ? skb_dst+0x4f/0xd0 [ 627.126036][T11174] ? ip_local_deliver+0x12a/0x1b0 [ 627.126061][T11174] NF_HOOK+0x309/0x3a0 [ 627.126084][T11174] ? __pfx_ip_rcv_finish+0x10/0x10 [ 627.126103][T11174] ? NF_HOOK+0x9a/0x3a0 [ 627.126119][T11174] ? __pfx_NF_HOOK+0x10/0x10 [ 627.126131][T11174] ? ip_rcv_core+0x7f7/0xd00 [ 627.126144][T11174] ? __pfx_ip_rcv_finish+0x10/0x10 [ 627.126163][T11174] ? __pfx_ip_rcv+0x10/0x10 [ 627.126174][T11174] __netif_receive_skb+0x143/0x380 [ 627.126197][T11174] ? netif_receive_skb+0x115/0x790 [ 627.126214][T11174] netif_receive_skb+0x1cb/0x790 [ 627.126231][T11174] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 627.126247][T11174] ? _copy_from_iter+0x24c/0x16f0 [ 627.126271][T11174] ? __pfx_netif_receive_skb+0x10/0x10 [ 627.126289][T11174] ? skb_partial_csum_set+0x107/0x360 [ 627.126305][T11174] ? tun_rx_batched+0x160/0x730 [ 627.126325][T11174] tun_rx_batched+0x1b9/0x730 [ 627.126342][T11174] ? __lock_acquire+0xab9/0xd20 [ 627.126360][T11174] ? __pfx_tun_rx_batched+0x10/0x10 [ 627.126380][T11174] ? tun_get_user+0x2549/0x3ce0 [ 627.126406][T11174] tun_get_user+0x298e/0x3ce0 [ 627.126426][T11174] ? tun_get_user+0x2549/0x3ce0 [ 627.126449][T11174] ? __might_fault+0xb0/0x130 [ 627.126465][T11174] ? __pfx_tun_get_user+0x10/0x10 [ 627.126487][T11174] ? __lock_acquire+0xab9/0xd20 [ 627.126505][T11174] ? ref_tracker_alloc+0x318/0x460 [ 627.126520][T11174] ? __lock_acquire+0xab9/0xd20 [ 627.126536][T11174] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 627.126555][T11174] ? tun_get+0x1c/0x2f0 [ 627.126575][T11174] ? tun_get+0x1c/0x2f0 [ 627.126592][T11174] ? tun_get+0x1c/0x2f0 [ 627.126612][T11174] tun_chr_write_iter+0x113/0x200 [ 627.126631][T11174] vfs_write+0x54b/0xa90 [ 627.126648][T11174] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 627.126666][T11174] ? __pfx_vfs_write+0x10/0x10 [ 627.126686][T11174] ? __fget_files+0x2a/0x420 [ 627.126707][T11174] ksys_write+0x145/0x250 [ 627.126722][T11174] ? __pfx_ksys_write+0x10/0x10 [ 627.126734][T11174] ? rcu_is_watching+0x15/0xb0 [ 627.126754][T11174] ? do_syscall_64+0xbe/0x3b0 [ 627.126767][T11174] do_syscall_64+0xfa/0x3b0 [ 627.126776][T11174] ? lockdep_hardirqs_on+0x9c/0x150 [ 627.126793][T11174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.126805][T11174] ? clear_bhb_loop+0x60/0xb0 [ 627.126819][T11174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.126831][T11174] RIP: 0033:0x7fbba9f8e929 [ 627.126843][T11174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.126855][T11174] RSP: 002b:00007fbba7df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 627.126869][T11174] RAX: ffffffffffffffda RBX: 00007fbbaa1b5fa0 RCX: 00007fbba9f8e929 [ 627.126878][T11174] RDX: 0000000000000036 RSI: 0000200000000280 RDI: 0000000000000004 [ 627.126886][T11174] RBP: 00007fbba7df6090 R08: 0000000000000000 R09: 0000000000000000 [ 627.126893][T11174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 627.126900][T11174] R13: 0000000000000000 R14: 00007fbbaa1b5fa0 R15: 00007ffc1ce03b58 [ 627.126918][T11174] [ 627.705664][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.862227][T11179] fuse: Bad value for 'fd' [ 627.877303][T11179] netfs: Couldn't get user pages (rc=-14) [ 627.963073][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 628.790923][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 629.540268][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 629.571126][T11203] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1371'. [ 629.600639][T10352] udevd[10352]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 630.467307][T11219] overlayfs: failed to resolve './file1': -2 [ 630.515889][T11217] ubi: mtd0 is already attached to ubi31 [ 631.070992][T11232] netlink: 'syz.1.1377': attribute type 4 has an invalid length. [ 631.106926][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 631.112582][T11232] netlink: 'syz.1.1377': attribute type 4 has an invalid length. [ 631.178715][T11234] fuse: Bad value for 'fd' [ 631.239798][ T9] lo speed is unknown, defaulting to 1000 [ 631.244126][ T5840] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 631.284210][ T9] syz2: Port: 1 Link ACTIVE [ 631.352337][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 631.404122][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 631.431886][ T5840] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 631.467640][ T5840] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 631.490681][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.527441][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 631.554557][ T5840] usb 4-1: Product: syz [ 631.558799][ T5840] usb 4-1: Manufacturer: syz [ 631.600101][ T5840] usb 4-1: SerialNumber: syz [ 631.635299][ T5840] usb 4-1: config 0 descriptor?? [ 631.863486][ T5828] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 631.888766][T11230] FAULT_INJECTION: forcing a failure. [ 631.888766][T11230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.994559][T11230] CPU: 1 UID: 0 PID: 11230 Comm: syz.3.1376 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 631.994593][T11230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 631.994605][T11230] Call Trace: [ 631.994614][T11230] [ 631.994623][T11230] dump_stack_lvl+0x189/0x250 [ 631.994659][T11230] ? __pfx____ratelimit+0x10/0x10 [ 631.994688][T11230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.994718][T11230] ? __pfx__printk+0x10/0x10 [ 631.994739][T11230] ? __might_fault+0xb0/0x130 [ 631.994776][T11230] should_fail_ex+0x414/0x560 [ 631.994808][T11230] _copy_from_user+0x2d/0xb0 [ 631.994831][T11230] ___sys_sendmsg+0x158/0x2a0 [ 631.994861][T11230] ? __pfx____sys_sendmsg+0x10/0x10 [ 631.994930][T11230] ? __fget_files+0x2a/0x420 [ 631.994954][T11230] ? __fget_files+0x3a0/0x420 [ 631.994993][T11230] __x64_sys_sendmsg+0x19b/0x260 [ 631.995021][T11230] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 631.995058][T11230] ? __pfx_ksys_write+0x10/0x10 [ 631.995089][T11230] ? do_syscall_64+0xbe/0x3b0 [ 631.995113][T11230] do_syscall_64+0xfa/0x3b0 [ 631.995129][T11230] ? lockdep_hardirqs_on+0x9c/0x150 [ 631.995157][T11230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.995178][T11230] ? clear_bhb_loop+0x60/0xb0 [ 631.995211][T11230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.995231][T11230] RIP: 0033:0x7f864e98e929 [ 631.995249][T11230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.995266][T11230] RSP: 002b:00007f864f88a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.995290][T11230] RAX: ffffffffffffffda RBX: 00007f864ebb5fa0 RCX: 00007f864e98e929 [ 631.995304][T11230] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 631.995316][T11230] RBP: 00007f864f88a090 R08: 0000000000000000 R09: 0000000000000000 [ 631.995328][T11230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.995340][T11230] R13: 0000000000000000 R14: 00007f864ebb5fa0 R15: 00007ffd0cc49908 [ 631.995373][T11230] [ 632.611068][ T9] usb 4-1: USB disconnect, device number 18 [ 632.907339][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 633.590656][T11273] FAULT_INJECTION: forcing a failure. [ 633.590656][T11273] name failslab, interval 1, probability 0, space 0, times 0 [ 633.809890][T11273] CPU: 1 UID: 0 PID: 11273 Comm: syz.4.1386 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 633.809931][T11273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 633.809943][T11273] Call Trace: [ 633.809953][T11273] [ 633.809961][T11273] dump_stack_lvl+0x189/0x250 [ 633.809995][T11273] ? __pfx____ratelimit+0x10/0x10 [ 633.810025][T11273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.810054][T11273] ? __pfx__printk+0x10/0x10 [ 633.810078][T11273] ? __pfx___might_resched+0x10/0x10 [ 633.810106][T11273] ? fs_reclaim_acquire+0x7d/0x100 [ 633.810139][T11273] should_fail_ex+0x414/0x560 [ 633.810170][T11273] should_failslab+0xa8/0x100 [ 633.810197][T11273] __kmalloc_noprof+0xcb/0x4f0 [ 633.810221][T11273] ? tomoyo_encode+0x28b/0x550 [ 633.810254][T11273] tomoyo_encode+0x28b/0x550 [ 633.810291][T11273] tomoyo_realpath_from_path+0x58d/0x5d0 [ 633.810337][T11273] tomoyo_path_perm+0x213/0x4b0 [ 633.810362][T11273] ? tomoyo_path_perm+0x1e3/0x4b0 [ 633.810385][T11273] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 633.810469][T11273] security_inode_getattr+0x12f/0x330 [ 633.810495][T11273] vfs_statx+0x18e/0x550 [ 633.810531][T11273] ? __pfx_vfs_statx+0x10/0x10 [ 633.810562][T11273] ? getname_flags+0x1e5/0x540 [ 633.810594][T11273] __x64_sys_newlstat+0xea/0x170 [ 633.810622][T11273] ? __pfx___x64_sys_newlstat+0x10/0x10 [ 633.810649][T11273] ? preempt_schedule_irq+0xde/0x150 [ 633.810718][T11273] do_syscall_64+0xfa/0x3b0 [ 633.810738][T11273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.810757][T11273] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 633.810775][T11273] ? clear_bhb_loop+0x60/0xb0 [ 633.810805][T11273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.810824][T11273] RIP: 0033:0x7f0c12f8e929 [ 633.810842][T11273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.810860][T11273] RSP: 002b:00007f0c13d36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 633.810882][T11273] RAX: ffffffffffffffda RBX: 00007f0c131b6080 RCX: 00007f0c12f8e929 [ 633.810896][T11273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000004c0 [ 633.810908][T11273] RBP: 00007f0c13d36090 R08: 0000000000000000 R09: 0000000000000000 [ 633.810928][T11273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.810940][T11273] R13: 0000000000000000 R14: 00007f0c131b6080 R15: 00007ffdc7ad1aa8 [ 633.810974][T11273] [ 633.813415][T11273] ERROR: Out of memory at tomoyo_realpath_from_path. [ 634.249232][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 634.273350][T10352] udevd[10352]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 634.997997][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 635.293780][T11302] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1394'. [ 636.632099][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 636.774787][T11319] overlayfs: failed to clone upperpath [ 636.918084][T11318] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1399'. [ 637.261334][T11310] Can't find ip_set type bitmap:ip [ 637.806088][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 638.679082][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 638.771024][ T5828] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 638.931164][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 639.721674][T10352] udevd[10352]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 639.910699][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 639.988916][ T30] audit: type=1326 audit(1749824038.774:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11343 comm="syz.4.1404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c12f8e929 code=0x0 [ 640.866841][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 642.137107][T11374] netlink: 186420 bytes leftover after parsing attributes in process `syz.3.1408'. [ 642.328891][T10352] udevd[10352]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 642.359915][T11369] tipc: Failed to remove unknown binding: 66,1,1/0:4014540403/4014540405 [ 642.368953][T11369] tipc: Failed to remove unknown binding: 66,1,1/0:4014540403/4014540405 [ 642.629912][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 643.644293][T11372] Invalid ELF header len 8 [ 643.649185][ T30] audit: type=1800 audit(1749824042.424:202): pid=11371 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.1.1409" name="/newroot/341/bus" dev="tmpfs" ino=1871 res=0 errno=0 [ 643.680442][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 643.748000][T10352] udevd[10352]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 643.901938][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 644.081616][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 645.321969][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 645.424699][T10352] udevd[10352]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 645.788502][T11414] fuse: Bad value for 'fd' [ 645.850331][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 645.899588][T11414] netfs: Couldn't get user pages (rc=-14) [ 646.531505][T10352] udevd[10352]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 647.683673][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 649.567820][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 649.673143][T10049] udevd[10049]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 649.931466][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 650.339625][T11472] input: syz1 as /devices/virtual/input/input18 [ 651.174276][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 651.924705][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 652.563191][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 652.850781][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 652.988643][T11500] sctp: [Deprecated]: syz.1.1437 (pid 11500) Use of int in max_burst socket option. [ 652.988643][T11500] Use struct sctp_assoc_value instead [ 653.139008][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 654.363343][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 654.643142][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 654.675615][T11517] FAULT_INJECTION: forcing a failure. [ 654.675615][T11517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.708324][T11517] CPU: 0 UID: 0 PID: 11517 Comm: syz.4.1441 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 654.708355][T11517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 654.708367][T11517] Call Trace: [ 654.708375][T11517] [ 654.708384][T11517] dump_stack_lvl+0x189/0x250 [ 654.708419][T11517] ? __pfx____ratelimit+0x10/0x10 [ 654.708450][T11517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 654.708478][T11517] ? __pfx__printk+0x10/0x10 [ 654.708515][T11517] should_fail_ex+0x414/0x560 [ 654.708548][T11517] _copy_to_user+0x31/0xb0 [ 654.708571][T11517] simple_read_from_buffer+0xe1/0x170 [ 654.708604][T11517] proc_fail_nth_read+0x1df/0x250 [ 654.708636][T11517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 654.708668][T11517] ? rw_verify_area+0x258/0x650 [ 654.708689][T11517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 654.708728][T11517] vfs_read+0x200/0x980 [ 654.708757][T11517] ? __pfx___mutex_lock+0x10/0x10 [ 654.708777][T11517] ? __pfx_vfs_read+0x10/0x10 [ 654.708802][T11517] ? __fget_files+0x2a/0x420 [ 654.708834][T11517] ? __fget_files+0x3a0/0x420 [ 654.708859][T11517] ? __fget_files+0x2a/0x420 [ 654.708896][T11517] ksys_read+0x145/0x250 [ 654.708922][T11517] ? __pfx_ksys_read+0x10/0x10 [ 654.708941][T11517] ? fput+0xa0/0xd0 [ 654.708974][T11517] ? do_syscall_64+0xbe/0x3b0 [ 654.708997][T11517] do_syscall_64+0xfa/0x3b0 [ 654.709014][T11517] ? lockdep_hardirqs_on+0x9c/0x150 [ 654.709041][T11517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.709061][T11517] ? clear_bhb_loop+0x60/0xb0 [ 654.709086][T11517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.709104][T11517] RIP: 0033:0x7f0c12f8d33c [ 654.709123][T11517] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 654.709141][T11517] RSP: 002b:00007f0c13d57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 654.709164][T11517] RAX: ffffffffffffffda RBX: 00007f0c131b5fa0 RCX: 00007f0c12f8d33c [ 654.709178][T11517] RDX: 000000000000000f RSI: 00007f0c13d570a0 RDI: 0000000000000003 [ 654.709189][T11517] RBP: 00007f0c13d57090 R08: 0000000000000000 R09: 0000000000000000 [ 654.709202][T11517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.709214][T11517] R13: 0000000000000000 R14: 00007f0c131b5fa0 R15: 00007ffdc7ad1aa8 [ 654.709249][T11517] [ 654.783326][ T5828] Bluetooth: hci5: link tx timeout [ 654.929927][T10047] udevd[10047]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 654.965664][ T5828] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 655.073473][T11518] lo speed is unknown, defaulting to 1000 [ 655.162057][ T5831] Bluetooth: hci5: link tx timeout [ 655.167457][ T5831] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 655.206262][ T5831] Bluetooth: hci5: link tx timeout [ 655.211465][ T5831] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 656.544832][ T5831] Bluetooth: hci5: link tx timeout [ 656.550233][ T5831] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 656.586584][ T5831] Bluetooth: hci5: link tx timeout [ 656.591791][ T5831] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 656.639215][T11532] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1443'. [ 656.717123][ T5831] Bluetooth: hci5: link tx timeout [ 656.722291][ T5831] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 656.823717][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 656.998044][ T5831] Bluetooth: hci5: command 0x0406 tx timeout [ 657.897076][ T5831] Bluetooth: hci5: link tx timeout [ 659.268011][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 659.397030][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 659.977028][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 660.685139][T11586] FAULT_INJECTION: forcing a failure. [ 660.685139][T11586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.698476][T11586] CPU: 0 UID: 0 PID: 11586 Comm: syz.0.1455 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 660.698503][T11586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 660.698515][T11586] Call Trace: [ 660.698525][T11586] [ 660.698535][T11586] dump_stack_lvl+0x189/0x250 [ 660.698577][T11586] ? __pfx____ratelimit+0x10/0x10 [ 660.698607][T11586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.698636][T11586] ? __pfx__printk+0x10/0x10 [ 660.698657][T11586] ? __might_fault+0xb0/0x130 [ 660.698690][T11586] should_fail_ex+0x414/0x560 [ 660.698709][T11586] _copy_from_user+0x2d/0xb0 [ 660.698722][T11586] generic_map_update_batch+0x51b/0x7f0 [ 660.698744][T11586] ? __pfx_generic_map_update_batch+0x10/0x10 [ 660.698755][T11586] ? __fget_files+0x2a/0x420 [ 660.698776][T11586] ? __pfx_generic_map_update_batch+0x10/0x10 [ 660.698787][T11586] bpf_map_do_batch+0x36c/0x5f0 [ 660.698807][T11586] __sys_bpf+0x384/0x860 [ 660.698826][T11586] ? __pfx___sys_bpf+0x10/0x10 [ 660.698849][T11586] ? ksys_write+0x22a/0x250 [ 660.698864][T11586] ? __pfx_ksys_write+0x10/0x10 [ 660.698876][T11586] ? rcu_is_watching+0x15/0xb0 [ 660.698898][T11586] __x64_sys_bpf+0x7c/0x90 [ 660.698912][T11586] do_syscall_64+0xfa/0x3b0 [ 660.698922][T11586] ? lockdep_hardirqs_on+0x9c/0x150 [ 660.698940][T11586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.698952][T11586] ? clear_bhb_loop+0x60/0xb0 [ 660.698966][T11586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.698977][T11586] RIP: 0033:0x7f6ba798e929 [ 660.698990][T11586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.699000][T11586] RSP: 002b:00007f6ba57d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 660.699015][T11586] RAX: ffffffffffffffda RBX: 00007f6ba7bb6080 RCX: 00007f6ba798e929 [ 660.699024][T11586] RDX: 0000000000000038 RSI: 0000200000000400 RDI: 000000000000001a [ 660.699031][T11586] RBP: 00007f6ba57d5090 R08: 0000000000000000 R09: 0000000000000000 [ 660.699039][T11586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.699046][T11586] R13: 0000000000000000 R14: 00007f6ba7bb6080 R15: 00007ffed0445a48 [ 660.699065][T11586] [ 661.497183][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 661.539200][T10352] udevd[10352]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 661.603044][ T5991] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.613803][ T5991] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.778406][ T5991] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.804130][ T5991] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.959839][T11598] FAULT_INJECTION: forcing a failure. [ 661.959839][T11598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.116448][T11598] CPU: 0 UID: 0 PID: 11598 Comm: syz.3.1460 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 662.116480][T11598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 662.116492][T11598] Call Trace: [ 662.116500][T11598] [ 662.116509][T11598] dump_stack_lvl+0x189/0x250 [ 662.116544][T11598] ? __pfx____ratelimit+0x10/0x10 [ 662.116573][T11598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 662.116600][T11598] ? __pfx__printk+0x10/0x10 [ 662.116622][T11598] ? __might_fault+0xb0/0x130 [ 662.116657][T11598] should_fail_ex+0x414/0x560 [ 662.116688][T11598] _copy_from_iter+0x1db/0x16f0 [ 662.116722][T11598] ? rcu_is_watching+0x15/0xb0 [ 662.116752][T11598] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 662.116771][T11598] ? __pfx__copy_from_iter+0x10/0x10 [ 662.116798][T11598] ? __build_skb_around+0x257/0x3e0 [ 662.116814][T11598] ? netlink_sendmsg+0x642/0xb30 [ 662.116828][T11598] ? skb_put+0x11b/0x210 [ 662.116843][T11598] netlink_sendmsg+0x6b2/0xb30 [ 662.116864][T11598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.116883][T11598] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 662.116897][T11598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.116912][T11598] __sock_sendmsg+0x219/0x270 [ 662.116932][T11598] ____sys_sendmsg+0x505/0x830 [ 662.116952][T11598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 662.116973][T11598] ? import_iovec+0x74/0xa0 [ 662.116986][T11598] ___sys_sendmsg+0x21f/0x2a0 [ 662.117003][T11598] ? __pfx____sys_sendmsg+0x10/0x10 [ 662.117041][T11598] ? __fget_files+0x2a/0x420 [ 662.117056][T11598] ? __fget_files+0x3a0/0x420 [ 662.117079][T11598] __x64_sys_sendmsg+0x19b/0x260 [ 662.117096][T11598] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 662.117117][T11598] ? __pfx_ksys_write+0x10/0x10 [ 662.117129][T11598] ? rcu_is_watching+0x15/0xb0 [ 662.117149][T11598] ? do_syscall_64+0xbe/0x3b0 [ 662.117163][T11598] do_syscall_64+0xfa/0x3b0 [ 662.117172][T11598] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.117189][T11598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.117201][T11598] ? clear_bhb_loop+0x60/0xb0 [ 662.117215][T11598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.117227][T11598] RIP: 0033:0x7f864e98e929 [ 662.117239][T11598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.117250][T11598] RSP: 002b:00007f864f88a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 662.117266][T11598] RAX: ffffffffffffffda RBX: 00007f864ebb5fa0 RCX: 00007f864e98e929 [ 662.117275][T11598] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 662.117282][T11598] RBP: 00007f864f88a090 R08: 0000000000000000 R09: 0000000000000000 [ 662.117290][T11598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.117296][T11598] R13: 0000000000000000 R14: 00007f864ebb5fa0 R15: 00007ffd0cc49908 [ 662.117315][T11598] [ 663.207773][ T5991] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.236605][T11604] overlayfs: failed to clone upperpath [ 663.243633][T11603] dlm: non-version read from control device 36 [ 663.288369][T11605] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1458'. [ 663.420484][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 663.834269][ T5991] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.879816][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 663.984787][T11608] netlink: 'syz.6.1461': attribute type 4 has an invalid length. [ 664.175293][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 664.265883][ T5998] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 665.414286][ T5998] usb 7-1: Using ep0 maxpacket: 32 [ 665.421424][ T5991] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.438231][ T5991] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.451446][ T5998] usb 7-1: config 0 has no interfaces? [ 665.459690][ T5998] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 665.479585][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 665.494823][ T5998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.535875][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 665.576588][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 665.586756][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 665.601579][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 665.609926][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 665.658523][ T5998] usb 7-1: config 0 descriptor?? [ 665.833704][T11632] lo speed is unknown, defaulting to 1000 [ 665.981681][T11608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.018190][T11608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.047569][ T9] usb 7-1: USB disconnect, device number 4 [ 666.222560][T11621] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 667.080373][T11653] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1471'. [ 667.083463][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 667.645464][ T5828] Bluetooth: hci1: command tx timeout [ 667.734684][ T5991] bridge_slave_1: left allmulticast mode [ 667.749385][ T5991] bridge_slave_1: left promiscuous mode [ 667.761922][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.023542][T11661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1474'. [ 668.315850][T11662] overlayfs: failed to clone upperpath [ 668.332425][ T5991] bridge_slave_0: left allmulticast mode [ 668.338831][T10049] udevd[10049]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 668.355393][T11662] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1473'. [ 668.376602][ T5991] bridge_slave_0: left promiscuous mode [ 668.409333][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.462392][T10352] udevd[10352]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 668.653592][ T30] audit: type=1326 audit(1749824067.434:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11664 comm="syz.6.1475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbba9f8e929 code=0x0 [ 668.720921][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 668.782583][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 669.718620][ T5828] Bluetooth: hci1: command tx timeout [ 669.873912][ T5991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.893447][ T5991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.912465][ T5991] bond0 (unregistering): Released all slaves [ 670.122533][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 670.194192][ T5991] bond1 (unregistering): (slave veth3): Releasing active interface [ 670.202663][ T5991] veth0_to_bond: entered promiscuous mode [ 670.212008][ T5991] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 670.222469][ T5991] bond1 (unregistering): Released all slaves [ 670.498073][ T5991] tipc: Left network mode [ 670.898166][T11693] netlink: 'syz.3.1480': attribute type 4 has an invalid length. [ 670.902639][T11632] chnl_net:caif_netlink_parms(): no params data found [ 671.093864][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 671.184098][ T43] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 671.224927][T11702] netlink: 'syz.1.1482': attribute type 1 has an invalid length. [ 671.233070][T11702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1482'. [ 671.293317][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 671.365224][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 671.379079][ T43] usb 4-1: config 0 has no interfaces? [ 671.388382][ T43] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 671.432828][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.472037][ T43] usb 4-1: config 0 descriptor?? [ 671.673879][T11632] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.701511][T11632] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.716026][T11693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.724888][T11632] bridge_slave_0: entered allmulticast mode [ 671.726818][T11632] bridge_slave_0: entered promiscuous mode [ 671.753786][T11693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.794638][ T5828] Bluetooth: hci1: command tx timeout [ 671.806983][ T9] usb 4-1: USB disconnect, device number 19 [ 671.886146][T11632] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.893344][T11632] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.947929][T11632] bridge_slave_1: entered allmulticast mode [ 671.967030][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 671.990945][T11632] bridge_slave_1: entered promiscuous mode [ 672.128596][ T5991] hsr_slave_0: left promiscuous mode [ 672.146476][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 672.164960][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.184071][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.214524][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.227684][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.285465][T11729] overlayfs: failed to clone upperpath [ 672.305303][ T5991] veth1_macvtap: left promiscuous mode [ 672.315464][ T5991] veth0_macvtap: left promiscuous mode [ 672.327777][T11729] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1488'. [ 672.344363][ T5991] veth1_vlan: left promiscuous mode [ 672.350201][ T5991] veth0_vlan: left promiscuous mode [ 672.704283][ T43] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 672.867697][ T43] usb 4-1: config 0 has an invalid interface number: 27 but max is 0 [ 672.882012][ T43] usb 4-1: config 0 has no interface number 0 [ 672.890976][ T43] usb 4-1: config 0 interface 27 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 673.718514][ T43] usb 4-1: config 0 interface 27 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.728635][ T43] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 673.866031][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.874298][ T5828] Bluetooth: hci1: command tx timeout [ 673.905481][ T43] usb 4-1: config 0 descriptor?? [ 674.393553][ T43] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 674.470587][ T5991] team0 (unregistering): Port device team_slave_1 removed [ 674.547040][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 674.617870][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 674.633614][ T5991] team0 (unregistering): Port device team_slave_0 removed [ 674.651496][ T10] usb 4-1: USB disconnect, device number 20 [ 674.660706][T11744] netlink: 'syz.6.1493': attribute type 1 has an invalid length. [ 674.678598][T11744] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1493'. [ 674.786364][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 675.115402][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 675.525489][T11752] input: syz1 as /devices/virtual/input/input19 [ 676.218070][T11757] binder: Binderfs stats mode cannot be changed during a remount [ 676.230288][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 676.231688][T11757] binder: Unknown parameter 'pcr' [ 676.278490][T11632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.351606][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 676.368611][T11632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.401594][T10352] udevd[10352]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 676.626085][T11765] netlink: 'syz.0.1498': attribute type 4 has an invalid length. [ 676.658824][T11632] team0: Port device team_slave_0 added [ 676.780268][T11761] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1499'. [ 676.792699][T11632] team0: Port device team_slave_1 added [ 677.974266][T11777] netlink: 'syz.6.1503': attribute type 1 has an invalid length. [ 677.997032][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1503'. [ 678.095993][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 678.166912][T11632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.193683][T11632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.637497][T11787] input: syz0 as /devices/virtual/input/input20 [ 678.801180][T11632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.878065][T11632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.885529][T11632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.948368][T10352] udevd[10352]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 678.949214][T11632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.033848][ T5991] IPVS: stop unused estimator thread 0... [ 679.829688][T11632] hsr_slave_0: entered promiscuous mode [ 679.853520][T11632] hsr_slave_1: entered promiscuous mode [ 680.062863][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 680.151405][T11810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1510'. [ 680.306991][T11816] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1512'. [ 680.429085][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 680.690493][T11820] tty tty21: ldisc open failed (-12), clearing slot 20 [ 681.684212][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 681.759352][T11832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1517'. [ 682.788922][T11722] udevd[11722]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 682.857007][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 682.932604][T11632] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 683.108765][T11632] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 683.163818][T11632] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 683.206050][T11632] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 683.338610][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 684.000529][T11870] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1523'. [ 684.142974][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 684.154548][ T5909] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 684.199521][T11632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.277874][T11632] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.316773][T11875] overlayfs: failed to clone upperpath [ 684.346687][T11875] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1525'. [ 684.389595][ T5909] usb 7-1: config 0 interface 0 has no altsetting 0 [ 684.389645][ T5909] usb 7-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 684.389669][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.395692][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.395822][ T5991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.412552][ T5909] usb 7-1: config 0 descriptor?? [ 684.442385][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.442456][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.055678][ T5909] microsoft 0003:045E:00F9.0006: hidraw1: USB HID v0.02 Device [HID 045e:00f9] on usb-dummy_hcd.6-1/input0 [ 685.067709][ T5909] microsoft 0003:045E:00F9.0006: no inputs found [ 685.081804][ T5909] microsoft 0003:045E:00F9.0006: could not initialize ff, continuing anyway [ 685.780844][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.787457][T11863] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1522'. [ 685.966524][ T10] usb 7-1: USB disconnect, device number 5 [ 686.077590][T11722] udevd[11722]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 686.092736][T11893] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1528'. [ 686.738564][T11886] fido_id[11886]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 687.421884][T10352] udevd[10352]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 687.533348][T11632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.620277][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 687.644066][T11917] dlm: non-version read from control device 36 [ 688.591491][ T5828] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 689.628390][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 689.898597][T11941] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1541'. [ 690.737154][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 690.843234][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 690.933564][T11953] FAULT_INJECTION: forcing a failure. [ 690.933564][T11953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.947046][T11953] CPU: 1 UID: 0 PID: 11953 Comm: syz.6.1542 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 690.947073][T11953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 690.947085][T11953] Call Trace: [ 690.947093][T11953] [ 690.947102][T11953] dump_stack_lvl+0x189/0x250 [ 690.947136][T11953] ? __pfx____ratelimit+0x10/0x10 [ 690.947166][T11953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.947196][T11953] ? __pfx__printk+0x10/0x10 [ 690.947217][T11953] ? __might_fault+0xb0/0x130 [ 690.947255][T11953] should_fail_ex+0x414/0x560 [ 690.947286][T11953] _copy_from_user+0x2d/0xb0 [ 690.947308][T11953] ___sys_sendmsg+0x158/0x2a0 [ 690.947338][T11953] ? __pfx____sys_sendmsg+0x10/0x10 [ 690.947409][T11953] ? __fget_files+0x2a/0x420 [ 690.947434][T11953] ? __fget_files+0x3a0/0x420 [ 690.947484][T11953] __x64_sys_sendmsg+0x19b/0x260 [ 690.947514][T11953] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 690.947551][T11953] ? __pfx_ksys_write+0x10/0x10 [ 690.947571][T11953] ? rcu_is_watching+0x15/0xb0 [ 690.947606][T11953] ? do_syscall_64+0xbe/0x3b0 [ 690.947630][T11953] do_syscall_64+0xfa/0x3b0 [ 690.947655][T11953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.947674][T11953] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 690.947693][T11953] ? clear_bhb_loop+0x60/0xb0 [ 690.947718][T11953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.947738][T11953] RIP: 0033:0x7fbba9f8e929 [ 690.947756][T11953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.947773][T11953] RSP: 002b:00007fbba7dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 690.947796][T11953] RAX: ffffffffffffffda RBX: 00007fbbaa1b6080 RCX: 00007fbba9f8e929 [ 690.947811][T11953] RDX: 0000000020000001 RSI: 00002000000019c0 RDI: 000000000000000b [ 690.947824][T11953] RBP: 00007fbba7dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 690.947836][T11953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.947847][T11953] R13: 0000000000000000 R14: 00007fbbaa1b6080 R15: 00007ffc1ce03b58 [ 690.947881][T11953] [ 690.950160][T11953] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1542'. [ 691.803278][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 691.838661][T11958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1543'. [ 692.358158][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 692.541561][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1546'. [ 693.344988][T11632] veth0_vlan: entered promiscuous mode [ 693.359864][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 693.413518][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 693.450001][T11632] veth1_vlan: entered promiscuous mode [ 694.488518][T11974] dlm: non-version read from control device 36 [ 694.592785][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 694.718871][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 694.738313][T11632] veth0_macvtap: entered promiscuous mode [ 694.776927][T11632] veth1_macvtap: entered promiscuous mode [ 695.044719][T11632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.856132][T11632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.899740][T11632] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.918749][T11632] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.931081][T11632] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.939648][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 695.962062][T11632] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.525925][T12009] input: syz1 as /devices/virtual/input/input21 [ 697.245200][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.284980][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.319574][T11722] udevd[11722]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 697.623518][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.648828][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.331322][T12025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1560'. [ 698.498996][T12022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1557'. [ 698.687513][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 698.847549][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 698.916490][T12034] dlm: non-version read from control device 36 [ 699.108955][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 700.358126][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 701.037335][T12063] tmpfs: Unknown parameter '' [ 702.233866][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 703.100389][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 703.492578][T12079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1572'. [ 703.995479][T12080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1573'. [ 704.436887][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 704.708292][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 704.823515][T12093] dlm: non-version read from control device 36 [ 705.202829][T12103] netlink: 'syz.7.1580': attribute type 4 has an invalid length. [ 706.187122][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 706.469422][T12111] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1582'. [ 708.217355][T12122] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1585'. [ 708.615985][T10352] udevd[10352]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 708.919376][T12127] tmpfs: Unknown parameter '' [ 709.650170][T12130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1588'. [ 709.936970][ T30] audit: type=1326 audit(1749824108.714:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12133 comm="syz.3.1589" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f864e98e929 code=0x0 [ 709.969502][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 709.969830][ T5828] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 711.058427][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 715.017338][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 715.108488][T12155] dlm: non-version read from control device 36 [ 715.391200][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 715.539623][T12166] netlink: 'syz.6.1597': attribute type 4 has an invalid length. [ 715.576800][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 716.134228][ T43] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 716.609246][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 716.619263][ T43] usb 7-1: config 0 has no interfaces? [ 716.619616][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 716.625496][ T43] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 716.699112][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.707701][T10136] udevd[10136]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 716.730209][ T43] usb 7-1: config 0 descriptor?? [ 716.807273][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 716.853779][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 716.874159][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.888804][ T9] usb 4-1: Product: syz [ 716.900051][ T9] usb 4-1: Manufacturer: syz [ 717.406207][T12166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.407709][ T9] usb 4-1: SerialNumber: syz [ 717.435163][T12198] tmpfs: Unknown parameter '' [ 717.632839][T12166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.678489][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 717.701834][ T9] r8152-cfgselector 4-1: config 0 descriptor?? [ 717.724412][ T5888] usb 7-1: USB disconnect, device number 6 [ 718.003140][T10352] udevd[10352]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 718.493893][T12218] sctp: [Deprecated]: syz.7.1606 (pid 12218) Use of struct sctp_assoc_value in delayed_ack socket option. [ 718.493893][T12218] Use struct sctp_sack_info instead [ 719.022343][T10136] udevd[10136]: symlink '../../loop6' '/dev/disk/by-diskseq/74.tmp-b7:6' failed: Read-only file system [ 719.034381][ T30] audit: type=1326 audit(1749824117.804:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12172 comm="syz.3.1599" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f864e98e929 code=0x0 [ 719.081617][T12173] sp0: Synchronizing with TNC [ 719.117132][ T6050] [ 719.119509][ T6050] ===================================================== [ 719.126446][ T6050] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 719.133902][ T6050] 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 Not tainted [ 719.141016][ T6050] ----------------------------------------------------- [ 719.147950][ T6050] kworker/u8:10/6050 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 719.155847][ T6050] ffffffff8ece06f8 (disc_data_lock#2){.+.+}-{3:3}, at: sixpack_write_wakeup+0x30/0x480 [ 719.165537][ T6050] [ 719.165537][ T6050] and this task is already holding: [ 719.172912][ T6050] ffffffff99d95058 (&port_lock_key){-.-.}-{3:3}, at: uart_port_ref_lock+0xc4/0x3b0 [ 719.182232][ T6050] which would create a new lock dependency: [ 719.188120][ T6050] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#2){.+.+}-{3:3} [ 719.195980][ T6050] [ 719.195980][ T6050] but this new dependency connects a HARDIRQ-irq-safe lock: [ 719.205429][ T6050] (&port_lock_key){-.-.}-{3:3} [ 719.205454][ T6050] [ 719.205454][ T6050] ... which became HARDIRQ-irq-safe at: [ 719.218005][ T6050] lock_acquire+0x120/0x360 [ 719.222605][ T6050] _raw_spin_lock_irqsave+0xa7/0xf0 [ 719.227899][ T6050] serial8250_handle_irq+0x6b/0xbb0 [ 719.233195][ T6050] serial8250_default_handle_irq+0xbf/0x1b0 [ 719.239183][ T6050] serial8250_interrupt+0xa5/0x1d0 [ 719.244390][ T6050] __handle_irq_event_percpu+0x28c/0x980 [ 719.250115][ T6050] handle_irq_event+0x8b/0x1e0 [ 719.254971][ T6050] handle_edge_irq+0x267/0x9c0 [ 719.259833][ T6050] __common_interrupt+0x140/0x250 [ 719.264954][ T6050] common_interrupt+0xb6/0xe0 [ 719.269720][ T6050] asm_common_interrupt+0x26/0x40 [ 719.274841][ T6050] pv_native_safe_halt+0x13/0x20 [ 719.279873][ T6050] default_idle+0x13/0x20 [ 719.284303][ T6050] default_idle_call+0x74/0xb0 [ 719.289170][ T6050] do_idle+0x1e8/0x510 [ 719.293337][ T6050] cpu_startup_entry+0x44/0x60 [ 719.298201][ T6050] rest_init+0x2de/0x300 [ 719.302532][ T6050] start_kernel+0x47d/0x500 [ 719.307135][ T6050] x86_64_start_reservations+0x24/0x30 [ 719.312685][ T6050] x86_64_start_kernel+0x143/0x1c0 [ 719.317890][ T6050] common_startup_64+0x13e/0x147 [ 719.322927][ T6050] [ 719.322927][ T6050] to a HARDIRQ-irq-unsafe lock: [ 719.329946][ T6050] (disc_data_lock#2){.+.+}-{3:3} [ 719.329980][ T6050] [ 719.329980][ T6050] ... which became HARDIRQ-irq-unsafe at: [ 719.342875][ T6050] ... [ 719.342882][ T6050] lock_acquire+0x120/0x360 [ 719.350066][ T6050] _raw_read_lock+0x36/0x50 [ 719.354666][ T6050] sixpack_receive_buf+0x5c/0x1450 [ 719.359869][ T6050] tty_ldisc_receive_buf+0x116/0x160 [ 719.365249][ T6050] tty_port_default_receive_buf+0x6e/0xa0 [ 719.371059][ T6050] flush_to_ldisc+0x24a/0x720 [ 719.375855][ T6050] process_scheduled_works+0xade/0x17b0 [ 719.381527][ T6050] worker_thread+0x8a0/0xda0 [ 719.386228][ T6050] kthread+0x70e/0x8a0 [ 719.390390][ T6050] ret_from_fork+0x3fc/0x770 [ 719.395077][ T6050] ret_from_fork_asm+0x1a/0x30 [ 719.399932][ T6050] [ 719.399932][ T6050] other info that might help us debug this: [ 719.399932][ T6050] [ 719.410161][ T6050] Possible interrupt unsafe locking scenario: [ 719.410161][ T6050] [ 719.418480][ T6050] CPU0 CPU1 [ 719.423847][ T6050] ---- ---- [ 719.429211][ T6050] lock(disc_data_lock#2); [ 719.433733][ T6050] local_irq_disable(); [ 719.440488][ T6050] lock(&port_lock_key); [ 719.447345][ T6050] lock(disc_data_lock#2); [ 719.454385][ T6050] [ 719.457839][ T6050] lock(&port_lock_key); [ 719.462349][ T6050] [ 719.462349][ T6050] *** DEADLOCK *** [ 719.462349][ T6050] [ 719.470493][ T6050] 6 locks held by kworker/u8:10/6050: [ 719.475869][ T6050] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 719.487549][ T6050] #1: ffffc9000b047bc0 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 719.499226][ T6050] #2: ffff8880247e0ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x38/0x720 [ 719.508309][ T6050] #3: ffff888028be30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 719.517658][ T6050] #4: ffffffff99d95058 (&port_lock_key){-.-.}-{3:3}, at: uart_port_ref_lock+0xc4/0x3b0 [ 719.527419][ T6050] #5: ffff888028be30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 719.536748][ T6050] [ 719.536748][ T6050] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 719.547153][ T6050] -> (&port_lock_key){-.-.}-{3:3} { [ 719.552375][ T6050] IN-HARDIRQ-W at: [ 719.556359][ T6050] lock_acquire+0x120/0x360 [ 719.562524][ T6050] _raw_spin_lock_irqsave+0xa7/0xf0 [ 719.569383][ T6050] serial8250_handle_irq+0x6b/0xbb0 [ 719.576239][ T6050] serial8250_default_handle_irq+0xbf/0x1b0 [ 719.583789][ T6050] serial8250_interrupt+0xa5/0x1d0 [ 719.590569][ T6050] __handle_irq_event_percpu+0x28c/0x980 [ 719.597866][ T6050] handle_irq_event+0x8b/0x1e0 [ 719.604285][ T6050] handle_edge_irq+0x267/0x9c0 [ 719.610708][ T6050] __common_interrupt+0x140/0x250 [ 719.617390][ T6050] common_interrupt+0xb6/0xe0 [ 719.623721][ T6050] asm_common_interrupt+0x26/0x40 [ 719.630400][ T6050] pv_native_safe_halt+0x13/0x20 [ 719.637001][ T6050] default_idle+0x13/0x20 [ 719.642982][ T6050] default_idle_call+0x74/0xb0 [ 719.649398][ T6050] do_idle+0x1e8/0x510 [ 719.655128][ T6050] cpu_startup_entry+0x44/0x60 [ 719.661550][ T6050] rest_init+0x2de/0x300 [ 719.667449][ T6050] start_kernel+0x47d/0x500 [ 719.673612][ T6050] x86_64_start_reservations+0x24/0x30 [ 719.680732][ T6050] x86_64_start_kernel+0x143/0x1c0 [ 719.687498][ T6050] common_startup_64+0x13e/0x147 [ 719.694115][ T6050] IN-SOFTIRQ-W at: [ 719.698125][ T6050] lock_acquire+0x120/0x360 [ 719.704301][ T6050] _raw_spin_lock_irqsave+0xa7/0xf0 [ 719.711166][ T6050] serial8250_console_write+0x17e/0x1ba0 [ 719.718455][ T6050] console_flush_all+0x728/0xc40 [ 719.725050][ T6050] console_unlock+0xc4/0x270 [ 719.731302][ T6050] vprintk_emit+0x5b7/0x7a0 [ 719.737466][ T6050] dev_vprintk_emit+0x337/0x3f0 [ 719.743984][ T6050] dev_printk_emit+0xe0/0x130 [ 719.750324][ T6050] _dev_printk+0x113/0x160 [ 719.756401][ T6050] scsi_print_result+0x4b3/0x5c0 [ 719.763000][ T6050] scsi_io_completion_action+0xaec/0x1370 [ 719.770384][ T6050] blk_done_softirq+0x107/0x160 [ 719.776892][ T6050] handle_softirqs+0x286/0x870 [ 719.783314][ T6050] __irq_exit_rcu+0xca/0x1f0 [ 719.789565][ T6050] irq_exit_rcu+0x9/0x30 [ 719.795472][ T6050] common_interrupt+0xbb/0xe0 [ 719.801806][ T6050] asm_common_interrupt+0x26/0x40 [ 719.808488][ T6050] kasan_check_range+0x30/0x2c0 [ 719.815000][ T6050] refresh_cpu_vm_stats+0x47b/0x4c0 [ 719.821856][ T6050] vmstat_update+0x15/0xb0 [ 719.827933][ T6050] process_scheduled_works+0xade/0x17b0 [ 719.835142][ T6050] worker_thread+0x8a0/0xda0 [ 719.841395][ T6050] kthread+0x70e/0x8a0 [ 719.847118][ T6050] ret_from_fork+0x3fc/0x770 [ 719.853364][ T6050] ret_from_fork_asm+0x1a/0x30 [ 719.859782][ T6050] INITIAL USE at: [ 719.863720][ T6050] lock_acquire+0x120/0x360 [ 719.869793][ T6050] _raw_spin_lock_irqsave+0xa7/0xf0 [ 719.876569][ T6050] serial8250_do_set_termios+0x4bb/0x1c20 [ 719.883860][ T6050] uart_set_options+0x3c2/0x5b0 [ 719.890283][ T6050] serial8250_console_setup+0x2f4/0x3c0 [ 719.897401][ T6050] univ8250_console_setup+0x43a/0x540 [ 719.904347][ T6050] try_enable_preferred_console+0x4e4/0x650 [ 719.911809][ T6050] register_console+0x551/0xf90 [ 719.918231][ T6050] univ8250_console_init+0x52/0x90 [ 719.924916][ T6050] console_init+0x1a1/0x670 [ 719.930994][ T6050] start_kernel+0x2cc/0x500 [ 719.937073][ T6050] x86_64_start_reservations+0x24/0x30 [ 719.944103][ T6050] x86_64_start_kernel+0x143/0x1c0 [ 719.950780][ T6050] common_startup_64+0x13e/0x147 [ 719.957295][ T6050] } [ 719.959796][ T6050] ... key at: [] port_lock_key+0x0/0x20 [ 719.967445][ T6050] [ 719.967445][ T6050] the dependencies between the lock to be acquired [ 719.967455][ T6050] and HARDIRQ-irq-unsafe lock: [ 719.980969][ T6050] -> (disc_data_lock#2){.+.+}-{3:3} { [ 719.986379][ T6050] HARDIRQ-ON-R at: [ 719.990370][ T6050] lock_acquire+0x120/0x360 [ 719.996544][ T6050] _raw_read_lock+0x36/0x50 [ 720.002706][ T6050] sixpack_receive_buf+0x5c/0x1450 [ 720.009473][ T6050] tty_ldisc_receive_buf+0x116/0x160 [ 720.016435][ T6050] tty_port_default_receive_buf+0x6e/0xa0 [ 720.023833][ T6050] flush_to_ldisc+0x24a/0x720 [ 720.030171][ T6050] process_scheduled_works+0xade/0x17b0 [ 720.037379][ T6050] worker_thread+0x8a0/0xda0 [ 720.043628][ T6050] kthread+0x70e/0x8a0 [ 720.049349][ T6050] ret_from_fork+0x3fc/0x770 [ 720.055598][ T6050] ret_from_fork_asm+0x1a/0x30 [ 720.062017][ T6050] SOFTIRQ-ON-R at: [ 720.066005][ T6050] lock_acquire+0x120/0x360 [ 720.072167][ T6050] _raw_read_lock+0x36/0x50 [ 720.078330][ T6050] sixpack_receive_buf+0x5c/0x1450 [ 720.085097][ T6050] tty_ldisc_receive_buf+0x116/0x160 [ 720.092036][ T6050] tty_port_default_receive_buf+0x6e/0xa0 [ 720.099417][ T6050] flush_to_ldisc+0x24a/0x720 [ 720.105750][ T6050] process_scheduled_works+0xade/0x17b0 [ 720.112959][ T6050] worker_thread+0x8a0/0xda0 [ 720.119209][ T6050] kthread+0x70e/0x8a0 [ 720.124932][ T6050] ret_from_fork+0x3fc/0x770 [ 720.131179][ T6050] ret_from_fork_asm+0x1a/0x30 [ 720.137600][ T6050] INITIAL READ USE at: [ 720.141933][ T6050] lock_acquire+0x120/0x360 [ 720.148441][ T6050] _raw_read_lock+0x36/0x50 [ 720.154959][ T6050] sixpack_receive_buf+0x5c/0x1450 [ 720.162071][ T6050] tty_ldisc_receive_buf+0x116/0x160 [ 720.169357][ T6050] tty_port_default_receive_buf+0x6e/0xa0 [ 720.177083][ T6050] flush_to_ldisc+0x24a/0x720 [ 720.183765][ T6050] process_scheduled_works+0xade/0x17b0 [ 720.191320][ T6050] worker_thread+0x8a0/0xda0 [ 720.197920][ T6050] kthread+0x70e/0x8a0 [ 720.204000][ T6050] ret_from_fork+0x3fc/0x770 [ 720.210609][ T6050] ret_from_fork_asm+0x1a/0x30 [ 720.217377][ T6050] } [ 720.219877][ T6050] ... key at: [] disc_data_lock+0x18/0x100 [ 720.227785][ T6050] ... acquired at: [ 720.231592][ T6050] lock_acquire+0x120/0x360 [ 720.236279][ T6050] _raw_read_lock+0x36/0x50 [ 720.240965][ T6050] sixpack_write_wakeup+0x30/0x480 [ 720.246254][ T6050] tty_wakeup+0xbb/0x100 [ 720.250682][ T6050] tty_port_default_wakeup+0xa2/0xf0 [ 720.256146][ T6050] serial8250_tx_chars+0x72e/0x970 [ 720.261432][ T6050] __start_tx+0x33b/0x480 [ 720.265938][ T6050] __uart_start+0x23c/0x440 [ 720.270630][ T6050] uart_write+0xdc/0x130 [ 720.275048][ T6050] sixpack_receive_buf+0x447/0x1450 [ 720.280422][ T6050] tty_ldisc_receive_buf+0x116/0x160 [ 720.285885][ T6050] tty_port_default_receive_buf+0x6e/0xa0 [ 720.291783][ T6050] flush_to_ldisc+0x24a/0x720 [ 720.296642][ T6050] process_scheduled_works+0xade/0x17b0 [ 720.302372][ T6050] worker_thread+0x8a0/0xda0 [ 720.307147][ T6050] kthread+0x70e/0x8a0 [ 720.311392][ T6050] ret_from_fork+0x3fc/0x770 [ 720.316167][ T6050] ret_from_fork_asm+0x1a/0x30 [ 720.321110][ T6050] [ 720.323433][ T6050] [ 720.323433][ T6050] stack backtrace: [ 720.329325][ T6050] CPU: 0 UID: 0 PID: 6050 Comm: kworker/u8:10 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 720.329347][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 720.329360][ T6050] Workqueue: events_unbound flush_to_ldisc [ 720.329379][ T6050] Call Trace: [ 720.329386][ T6050] [ 720.329394][ T6050] dump_stack_lvl+0x189/0x250 [ 720.329420][ T6050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 720.329442][ T6050] ? __pfx__printk+0x10/0x10 [ 720.329462][ T6050] validate_chain+0x1f05/0x2140 [ 720.329494][ T6050] __lock_acquire+0xab9/0xd20 [ 720.329515][ T6050] ? sixpack_write_wakeup+0x30/0x480 [ 720.329530][ T6050] lock_acquire+0x120/0x360 [ 720.329549][ T6050] ? sixpack_write_wakeup+0x30/0x480 [ 720.329566][ T6050] ? ldsem_down_read_trylock+0x137/0x1a0 [ 720.329586][ T6050] ? tty_ldisc_ref+0x1c/0x90 [ 720.329610][ T6050] _raw_read_lock+0x36/0x50 [ 720.329631][ T6050] ? sixpack_write_wakeup+0x30/0x480 [ 720.329645][ T6050] sixpack_write_wakeup+0x30/0x480 [ 720.329662][ T6050] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 720.329676][ T6050] tty_wakeup+0xbb/0x100 [ 720.329698][ T6050] tty_port_default_wakeup+0xa2/0xf0 [ 720.329716][ T6050] serial8250_tx_chars+0x72e/0x970 [ 720.329736][ T6050] __start_tx+0x33b/0x480 [ 720.329752][ T6050] __uart_start+0x23c/0x440 [ 720.329776][ T6050] uart_write+0xdc/0x130 [ 720.329790][ T6050] sixpack_receive_buf+0x447/0x1450 [ 720.329821][ T6050] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 720.329836][ T6050] tty_ldisc_receive_buf+0x116/0x160 [ 720.329853][ T6050] tty_port_default_receive_buf+0x6e/0xa0 [ 720.329871][ T6050] flush_to_ldisc+0x24a/0x720 [ 720.329888][ T6050] ? process_scheduled_works+0x9ef/0x17b0 [ 720.329910][ T6050] process_scheduled_works+0xade/0x17b0 [ 720.329940][ T6050] ? __pfx_process_scheduled_works+0x10/0x10 [ 720.329967][ T6050] worker_thread+0x8a0/0xda0 [ 720.329989][ T6050] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 720.330013][ T6050] ? __kthread_parkme+0x7b/0x200 [ 720.330038][ T6050] kthread+0x70e/0x8a0 [ 720.330055][ T6050] ? __pfx_worker_thread+0x10/0x10 [ 720.330076][ T6050] ? __pfx_kthread+0x10/0x10 [ 720.330091][ T6050] ? _raw_spin_unlock_irq+0x23/0x50 [ 720.330111][ T6050] ? lockdep_hardirqs_on+0x9c/0x150 [ 720.330132][ T6050] ? __pfx_kthread+0x10/0x10 [ 720.330147][ T6050] ret_from_fork+0x3fc/0x770 [ 720.330168][ T6050] ? __pfx_ret_from_fork+0x10/0x10 [ 720.330190][ T6050] ? __switch_to_asm+0x39/0x70 [ 720.330203][ T6050] ? __switch_to_asm+0x33/0x70 [ 720.330217][ T6050] ? __pfx_kthread+0x10/0x10 [ 720.330232][ T6050] ret_from_fork_asm+0x1a/0x30 [ 720.330251][ T6050] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 720.722322][T12232] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1604'. [ 721.414313][ T6050] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.521856][ T6050] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.617233][ T6050] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.673085][ T5888] r8152-cfgselector 4-1: USB disconnect, device number 21 [ 721.720889][ T6050] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.836611][ T6050] bridge_slave_1: left allmulticast mode [ 721.842341][ T6050] bridge_slave_1: left promiscuous mode [ 721.848441][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.860458][ T6050] bridge_slave_0: left allmulticast mode [ 721.868334][ T6050] bridge_slave_0: left promiscuous mode [ 721.874248][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.970142][ T6050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.980148][ T6050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.990088][ T6050] bond0 (unregistering): Released all slaves [ 722.205840][ T6050] hsr_slave_0: left promiscuous mode [ 722.211842][ T6050] hsr_slave_1: left promiscuous mode [ 722.219680][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.230666][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.242053][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.252560][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.266064][ T6050] veth1_macvtap: left promiscuous mode [ 722.271660][ T6050] veth0_macvtap: left promiscuous mode [ 722.277436][ T6050] veth1_vlan: left promiscuous mode [ 722.282770][ T6050] veth0_vlan: left promiscuous mode [ 722.428754][ T6050] team0 (unregistering): Port device team_slave_1 removed [ 722.458471][ T6050] team0 (unregistering): Port device team_slave_0 removed [ 722.836041][ T6050] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.849468][ T6050] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.905921][ T6050] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.919101][ T6050] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.955429][ T6050] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.966778][ T6050] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.030784][ T6050] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.042692][ T6050] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.169575][ T6050] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.184695][ T6050] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.231071][ T6050] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.243624][ T6050] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.301329][ T6050] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.311923][ T6050] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.371954][ T6050] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.383680][ T6050] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.507700][ T6050] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.518728][ T6050] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.569236][ T6050] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.580060][ T6050] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.657306][ T6050] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.668853][ T6050] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.728499][ T6050] bridge0: port 3(netdevsim0) entered disabled state [ 723.742042][ T6050] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 723.753307][ T6050] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 723.762553][ T6050] bridge0: port 3(netdevsim0) entered disabled state [ 723.772090][ T6050] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.784865][ T6050] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.872242][ T6050] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.912088][ T6050] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.951540][ T6050] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.013246][ T6050] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.153251][ T6050] bridge_slave_1: left allmulticast mode [ 724.159247][ T6050] bridge_slave_1: left promiscuous mode [ 724.165635][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.175322][ T6050] bridge_slave_0: left allmulticast mode [ 724.181017][ T6050] bridge_slave_0: left promiscuous mode [ 724.187013][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.199325][ T6050] bridge_slave_1: left allmulticast mode [ 724.205472][ T6050] bridge_slave_1: left promiscuous mode [ 724.211205][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.220040][ T6050] bridge_slave_0: left allmulticast mode [ 724.226082][ T6050] bridge_slave_0: left promiscuous mode [ 724.231801][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.244259][ T6050] bridge_slave_1: left allmulticast mode [ 724.249955][ T6050] bridge_slave_1: left promiscuous mode [ 724.256006][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.266370][ T6050] bridge_slave_0: left allmulticast mode [ 724.272061][ T6050] bridge_slave_0: left promiscuous mode [ 724.278213][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.527370][ T6050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.538111][ T6050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.549259][ T6050] bond0 (unregistering): Released all slaves [ 724.886867][ T6050] bond0 (unregistering): Released all slaves [ 724.979405][ T6050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.989210][ T6050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.999439][ T6050] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 725.010102][ T6050] bond0 (unregistering): Released all slaves [ 725.066845][ T6050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.077372][ T6050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.086953][ T6050] bond0 (unregistering): Released all slaves [ 725.822185][ T6050] hsr_slave_0: left promiscuous mode [ 725.828507][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.836191][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.847347][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.855254][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.866524][ T6050] hsr_slave_0: left promiscuous mode [ 725.875653][ T6050] hsr_slave_0: left promiscuous mode [ 725.881531][ T6050] hsr_slave_1: left promiscuous mode [ 725.888461][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.896243][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.904928][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.912369][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.923553][ T6050] hsr_slave_0: left promiscuous mode [ 725.929900][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.937616][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.945731][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.953174][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.973515][ T6050] veth1_macvtap: left promiscuous mode [ 725.979247][ T6050] veth0_macvtap: left promiscuous mode [ 725.985860][ T6050] veth1_vlan: left promiscuous mode [ 725.991174][ T6050] veth0_vlan: left promiscuous mode [ 725.997727][ T6050] veth1_macvtap: left promiscuous mode [ 726.003284][ T6050] veth0_macvtap: left promiscuous mode [ 726.009232][ T6050] veth1_vlan: left promiscuous mode [ 726.016665][ T6050] veth0_vlan: left promiscuous mode [ 726.022580][ T6050] veth1_macvtap: left promiscuous mode [ 726.028577][ T6050] veth0_macvtap: left promiscuous mode [ 726.035948][ T6050] veth1_vlan: left promiscuous mode [ 726.041221][ T6050] veth0_vlan: left promiscuous mode [ 726.048088][ T6050] veth1_macvtap: left promiscuous mode [ 726.053645][ T6050] veth0_macvtap: left promiscuous mode [ 726.061078][ T6050] veth1_vlan: left promiscuous mode [ 726.067125][ T6050] veth0_vlan: left promiscuous mode [ 726.350937][ T6050] team0 (unregistering): Port device team_slave_1 removed [ 726.379042][ T6050] team0 (unregistering): Port device team_slave_0 removed [ 726.962599][ T6050] team0 (unregistering): Port device team_slave_1 removed [ 726.991960][ T6050] team0 (unregistering): Port device team_slave_0 removed [ 727.160138][ T6050] team0 (unregistering): Port device team_slave_1 removed [ 727.187790][ T6050] team0 (unregistering): Port device team_slave_0 removed [ 727.293775][ T5998] lo speed is unknown, defaulting to 1000 [ 727.302561][ T5998] infiniband syz2: ib_query_port failed (-19) [ 728.060885][ T6050] IPVS: stop unused estimator thread 0... [ 728.067760][ T6050] IPVS: stop unused estimator thread 0... [ 728.075531][ T6050] IPVS: stop unused estimator thread 0...