last executing test programs: 5m56.285001778s ago: executing program 1 (id=663): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000000c0)="24089511676639fd638552dd916c7b6c75b65af3942adfbccd54ec938a40e6256861d11be86e183a53e90d1d3e5388b9c8a91dfb62791f4c04ce1ceb9b32c251c53eeeaf25f3a3a5a676df13ad4b95821dea904c8c974eb31c01dac57edd1272944455c12104778ed74fb85427e7cf", 0x6f}, {0x0}, {&(0x7f00000001c0)="922c03a3302e86c17be88d69575a85537e38fa4bd5b657f01856df2d8ddb86011216fc92892482a78ae6f6c041dcd863cbe022c081651bfb030458e347fac3ceed474434c29212a0dcf1d02128d3812d0b57c52e699e621f7260605ff1dd607099a503ea32819cb3903005a17f8fb089526761bff41e58de629d187d77e050699128d256091e3ffeaf0db19b838a8fd87ee96ffd2cf4b08c1e9ecdcc127e29be8a5e81209384584d2e0a6f568537353758892fc389eff6f7903454862b21f8735c797801795e8ad29eac2316485a5b49323046184d02ed52a00bf2af5c759e674b5e2722f1935a6ed5211d1d89de2d885b2673baf9f71ed47e", 0xf9}, {&(0x7f0000000500)="b26ff1e022fb2083c53c6fc41c0af62ee9681a470e4d5845fb0266078cdd19c823ff1671c0460ed13fd57db4976b79fd5d4bc4e8b3407a4db4009138d82d10d969dfdb6103710dbce73a21370b39b89390fa654df800c0c56e24af645b5721690e00b57c95257472a2f5ce584d85792eb76a516b7eff39e30e970efafc2640ac5bf5e9d4da26324f30a2be5e06b9ca6344bac5215892e7bd2bf0ee0c4357819be5", 0xa1}, {&(0x7f00000005c0)}, {&(0x7f0000000640)="36fa73818db15e7e4af0cac7fde7ec60257bdea62d0649f58225b9dc34fcc475f61543c3a3e18d0e9ffa96653aa11d838bc770b1e3064178fd7e67f1be0da290d07bda114fd8d5da6a4f17875a88d5a912f2d65606ca2b329e65bc37c028ec0f73e94d2ec67e34b7d9901bb4e3b70c6dad7c53a030d05459609b76c1408ed41309e630a45073e65ec707626ddc5b05d0dd2a8b32779d812cf401", 0x9a}, {&(0x7f0000001700)="33f6bc753c9af4b6a43b405a895c3f1f7413d97e06dc627be116d2d3215d371e64f8a6eb4a0905a62d25074c1128bc400cd4de5bf6026d505e697bb398c91fd733ccefcc6f28b204658050ba4ef23371aaec5a3a25812512a8404562794dee56da1f4e937457981b53201c06334fae085796dd7f488a2408c4eb279d8fd9ecbb26d10475e8a31e0901703df64d1bbeada7ba9e3896fe86ddd8d5cd01909f4519c43eda5ad5312db6009f6c03c0447c327405183eda0c4d36c4b150ad39a13b755a3c618486d3473e33fcb14404fa4266da83f771a63cc4f47ce267f68e", 0xdd}], 0x7}, 0x840) 5m54.753171554s ago: executing program 1 (id=668): socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0100000000f732827800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000600000000000098aa1d2ee3f431221488187e735eac28ab2fff1c07791bcf086a0947f99379d8dd01251e19dae2401de48231889939135824cc913998a44ee0b10000"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000380), &(0x7f0000000400)=r0}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) lsm_set_self_attr(0x68, &(0x7f0000000800)=ANY=[@ANYBLOB="68000000000000004b0000000000000020000000001100"/32], 0x20, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) (async, rerun: 64) r6 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) (async) rseq(0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r8 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x0, 0x0, 0x17b}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000080)=0x2) (async) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) (async) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) (async) socket$xdp(0x2c, 0x3, 0x0) 5m53.995580265s ago: executing program 1 (id=670): r0 = socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$MSR(&(0x7f00000000c0), 0x9, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005080007006e617400"], 0xf0}}, 0x0) ioprio_set$uid(0x3, 0xee00, 0x4007) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8, 0x4}]}, @enum64={0xd, 0x1, 0x0, 0x13, 0x1, 0xc, [{0xc, 0x1, 0x7}]}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x5}, @restrict={0xd, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x30, 0x2e, 0x61, 0x0, 0x2e]}}, &(0x7f0000000500)=""/177, 0x64, 0xb1, 0x0, 0x6, 0x10000, @value=r3}, 0x28) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400461c1d67f6f94007134cf6efb8000a007a290457f0189b31627287ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a15a8b16f14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f211ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941c6a0501148", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x24080000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x3131354f, [0x400, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x2, {}, {0x0, 0x8, 0xfd, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0xfffffffd}) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r7 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r7, &(0x7f0000ff9000/0x1000)=nil, 0x4000) 5m53.56823768s ago: executing program 1 (id=671): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="07062bbd7000fedbdf25270000000a0001007770216e310000000500310012000000f235929c834e73c20e665b6e86c4304f9db872fff05d8510be131bfae396c5d69bdfc7346ef497dff1756b886b92000a7501dcc71005aa0a560e894fd7b786d6cdd1d57d"], 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x8000812) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) (async) landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) landlock_restrict_self(r0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) (async) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) (async) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) (async) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="07062bbd7000fedbdf25270000000a0001007770216e310000000500310012000000f235929c834e73c20e665b6e86c4304f9db872fff05d8510be131bfae396c5d69bdfc7346ef497dff1756b886b92000a7501dcc71005aa0a560e894fd7b786d6cdd1d57d"], 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x8000812) (async) 5m53.475572897s ago: executing program 1 (id=672): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x609, 0xe, 0x0, &(0x7f0000000140)="dd800000000000005d8ec6f10000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100010000000000000000000100000a0000000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) read$msr(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000800)=0xc, 0x12) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x98, 0x0, &(0x7f0000000600)=[@clear_death, @register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/198, 0xc6, 0x401, 0x4}, @flat=@weak_handle={0x77682a85, 0x59190842c32910b}, @flat=@handle={0x73682a85, 0x101, 0x2}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}}, @increfs, @request_death={0x400c630e, 0x2}, @register_looper, @dead_binder_done, @decrefs, @request_death={0x400c630e, 0x1}], 0x46, 0x0, &(0x7f00000006c0)="2d499a7f63e2f77bbe97be752fd0e3cc525efad1b84d73d5e8ac314482b5e5899565caa1c75fbbfcb9a3cc1284e817040770ea808a8127d28f1f5f52897edcc0835e393b492d"}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x26, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000740)={0x0, 'batadv_slave_1\x00', {0x3}, 0x3}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0d00c59f5d517935b2e0d827c85741600b5300cb4bcea6b4d7a9", @ANYRES16=r6, @ANYBLOB="090b26bd7000ffdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c854}, 0x8800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) exit(0x9) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c020400) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000440)="9f870afe3c1c6c10e8151d5199ab11e66b4e0de2f79ac8c65d6356e0a3c9b44227eeccf8cb8f41714283537855459f278b4c40ffbbb0276601e31659ed38b92295a32b9176cdd102befb3f850a53dff73233018be37d1b733f846dfb90a13e6d996c5e5c5daff386dab026dde5d4a1dd8cce432f6d176ce09c154074b59b4d4ca3d8d9a1e17163e674bf94a39f7cabcc32c7d51acf426a0d88b42ebee7ad532c08b274e5424e09d9", 0x0, &(0x7f0000000500)="5765525c5b192f2cd7170943adc7ff1ccd9237881a0aef4fb8cae2a2e948635893ec14ba14fc20c3f06ab2c209aad8ff0b3e1d575480cb8157d8742521a64f8d9bf38db5f70d6b0d1a1ed9fb556a6a612e248e79d6cfcf5651e44fa58e04f9a4a9491766b76275ebb1558aa495e421360b7458c438ecb7ae1a3f39791441eb1c24c913262bdffc37ab822d957e35b4a1be54a88aa9aa7b5d5d74f1c687ea0223ecda2aabb9122d0c1529933e987e7d7d07d411c8aa43f2", &(0x7f0000000680)="972bd846362b299efc0d8bf9e57d27320000fedfd727f3d9dd64f7b91eee4a42b28ef7e8e6cf076bbb0c4169ebc6e94684b4f09e9acb08b34fd0e0f975f2c66965ed95dc5654ce53386ba23912f846ae18ba5f22ccec65edd84e9d", 0x9f46, r8}, 0x38) 5m53.151054311s ago: executing program 1 (id=675): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdf, &(0x7f00000000c0)={0x0, 0xd548, 0x400, 0x1, 0x40000332}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x14, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@noxattr}]}}) r9 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f0000000040)={0x1, 0x7, 0x4, &(0x7f0000000100)={0x11, "c6c1f7b51030c4b7c54bebe6acb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/126, 0x7e}], 0x1}) io_uring_enter(r3, 0x847ba, 0x79c, 0xe, 0x0, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, 0x0) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x48280, 0x0) ioctl$TIOCSETD(r12, 0x5423, 0x0) read(r12, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 5m52.227735654s ago: executing program 32 (id=675): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdf, &(0x7f00000000c0)={0x0, 0xd548, 0x400, 0x1, 0x40000332}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x14, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@noxattr}]}}) r9 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f0000000040)={0x1, 0x7, 0x4, &(0x7f0000000100)={0x11, "c6c1f7b51030c4b7c54bebe6acb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/126, 0x7e}], 0x1}) io_uring_enter(r3, 0x847ba, 0x79c, 0xe, 0x0, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, 0x0) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x48280, 0x0) ioctl$TIOCSETD(r12, 0x5423, 0x0) read(r12, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 2m45.969065559s ago: executing program 0 (id=1329): recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x2, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0xc5) close(r3) rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r4 = inotify_init1(0x800) fcntl$setstatus(r3, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r3, 0x8, r5) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 2m44.868304486s ago: executing program 0 (id=1334): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000d004"]) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000016c0), r4) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0xffffffffffffffc9}]}, 0x1c}}, 0x800) socket$pptp(0x18, 0x1, 0x2) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r8, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (async) sendmmsg(r8, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='objagg_obj_get\x00', r3, 0x0, 0x1}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000380)={0x38, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000380)={0x38, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x184}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x184}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1f}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/183, 0x0, 0x28, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdb7}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1f}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/183, 0x0, 0x28, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdb7}, 0x94) 2m42.112039492s ago: executing program 0 (id=1339): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '.}*'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) ppoll(&(0x7f0000000480)=[{r1, 0x2}, {r0, 0x40}], 0x2, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)={[0x3]}, 0x8) (async, rerun: 32) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r3], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r4}, 0x94) close(r5) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async, rerun: 64) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) (rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r8 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r4}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r4, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) (async) io_uring_enter(r8, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) (async) open(0x0, 0x2ad82, 0x173) 2m39.683923165s ago: executing program 0 (id=1350): syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x0, 0x7) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x2c2, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="7040000190780006fe06e2d4c3d913128ac06abf91dbf625f656eb8c31dc98702f0a4477a679ba51746cdd6edd9db061c9aa080a0000009b0000000501fe06e2d4c3d9080a000000100000000000000075d667890b744420ff7347bd5cbe28f0"], 0x0) 2m39.511452796s ago: executing program 0 (id=1351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000001fc0)={0x2020}, 0x2020) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = dup3(r5, r4, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x4802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) socket(0xf, 0x6, 0x1) recvmmsg(r7, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0x10000c}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x400100a0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 2m38.200036311s ago: executing program 0 (id=1353): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setlease(r1, 0x403, 0x0) listen(r0, 0xfffffffc) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) lseek(r2, 0x2, 0x2) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000101a81, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}]}}) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5, 0x0, 0x9}, 0x18) ioctl$NBD_DO_IT(r2, 0xab03) socket$packet(0x11, 0x3, 0x300) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$midi(0xffffffffffffffff, &(0x7f0000000580)="131dd5a38a536c64dae780c40aa4f2f4a6dded6fa368699f87020b12651df987f31673f0654909dab4018e445cf3706864dfad11f20f40bf5988d93faef627ae47f456340853a0e0bc84cc2c395b9f1dfaa404fbf039dcaaef47d5291a434617208bb5adae19c55e1cc9fce217ca", 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xaa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) userfaultfd(0x1) 2m22.974499442s ago: executing program 33 (id=1353): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setlease(r1, 0x403, 0x0) listen(r0, 0xfffffffc) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) lseek(r2, 0x2, 0x2) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000101a81, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}]}}) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5, 0x0, 0x9}, 0x18) ioctl$NBD_DO_IT(r2, 0xab03) socket$packet(0x11, 0x3, 0x300) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$midi(0xffffffffffffffff, &(0x7f0000000580)="131dd5a38a536c64dae780c40aa4f2f4a6dded6fa368699f87020b12651df987f31673f0654909dab4018e445cf3706864dfad11f20f40bf5988d93faef627ae47f456340853a0e0bc84cc2c395b9f1dfaa404fbf039dcaaef47d5291a434617208bb5adae19c55e1cc9fce217ca", 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xaa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) userfaultfd(0x1) 15.051504691s ago: executing program 2 (id=1867): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) syz_io_uring_setup(0x707c, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f00000000c0)='zonefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(r0) 14.899935449s ago: executing program 2 (id=1870): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) msgsnd(0x0, &(0x7f0000000980)={0x1, "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"}, 0x375, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x11, @loopback, 0x15, 0x0, 'rr\x00', 0x3c, 0xa, 0x80}, 0x2c) socket$inet6_udp(0xa, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) r5 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r5, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) 13.120537874s ago: executing program 2 (id=1874): socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0403d11, 0x0) socket$inet(0xa, 0x801, 0x84) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) read$FUSE(r3, &(0x7f00000047c0)={0x2020}, 0xfffffffffffffd07) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) r4 = openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) readv(r7, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/252, 0xfc}], 0x1) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000800)) socket$can_bcm(0x1d, 0x2, 0x2) 9.810291493s ago: executing program 2 (id=1881): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xca3e9000) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000fff000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.443884375s ago: executing program 2 (id=1883): r0 = socket(0x40000000015, 0x5, 0x0) setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setlink={0x3b, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200, 0x21a2}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}]}, 0x30}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)='PCI:', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b"], 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000280)={0x1, '}'}, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000240)=@target={'target ', {'PCI:', '0', ':', '8', ':', '1f', '.', '1'}}, 0x14) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) syz_usb_disconnect(r5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) faccessat2(r6, &(0x7f0000001400)='\x00', 0x0, 0x1100) 9.442753968s ago: executing program 3 (id=1884): socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) msgsnd(0x0, &(0x7f0000000980)={0x1, "ff7f1c823e695237825488d5e047d09602c1017642c6ca17e11ecf866b5b33b179d065bdcb1b5e01481dfb6a2c73cc623a60ca094f1a550aba92acd8a69444d52f86e5db83b032f4c6cbfcd0c084237048eefc30d84c82b62811c1ed61c0d1cc88dbb7e55311885b8c03a47e40dc0a477e793c06fe89f41fe664acdf6434e5cf7eca1eed5afb2f9e91e889b97755d343257d850a78e65af2d1f1b4ff08fd506422d93d3b8b9ee5580b0eb7f573bd411b8a27de0a2d011cf5bf2940dfc6dd679d19b42d2caa34c32fa898432365273970a5082329e61912d4eef4f24b926ae601579fc8f0fa2a3c2af89591ffce34b75eebb33b8156902d50adc2bcdb24763d29716bfd0626e59496e492fc385c150cf7e89132f467ebaa62301278af495c0e9bc64c588aa6e815255b85c7d90fe5c01aa73969671fd0e29b206006309aeb4615a4b5b0d066b3fa6bce7be06c51410e3ea7e031e6a8edd63d3c44f5ddd104222c649edb056ece9ce94e7a1d115f79b4f2d26a1d29f3213f0d647cafbbb8ef825c1226ed716bfb0d187df7463bc949b8281cd1e5343f1f2d37f5690a5557262a2053e34484be6267897bcba5f709a52a00a6255c58ef0f46632e05c2ccfe33e8258daf59413151812ebddc6b4293ca132b3612b1cf78b5f83285393979c5d07c3a01db4aba7bf8bca1705673b1a6f218fc971ebfc5ef5accc6fea12d0c0369d290bd9684eab10b88cad97cb10ea58ffc615c54212574874ee72289b96f8f3f00be319ebf72ddfeb45e36b9055f042dad6a290a01101452c3d0e2dd43ea4779f62bee347f05eb191b877dad4c5bdabfd0210b6a39fc8a93e0c2efab44426a3c9e0dbdc4626f4ffa245992c519d624a29b25ed65151ecc38e67d071e01886d922b2ec23728e8445223882b60e6dc2f8551bcbddc2f3d8bc106c8aa2ad0edcf0d1ee8af02ad69e57114f302f13acbda7b97730f4f141cd041198f9a3cb806b7db72b2c05e0aaf6a786bd367d38402a9087b669ec9b557ca2571689369bbd076789a91f655ff0bcaa853891b0ef2b0cf9914a2b886e6c3a0d3eb8d9225557baff7573bd6d45a4b64d4b3d8d5b596a0c944845cb79ca0b1eccd0048f3195b77ec0d2d16158a80cb5937b6f78066ad1e97c8afa5c654c8a68befd2a253280497c7ea2e0409f1fbfc3b507dbb6574dd111ffed8e2de29b5d696196ac949398971d217e9418c08715fe11e29c454ece4a057"}, 0x375, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x11, @loopback, 0x15, 0x0, 'rr\x00', 0x3c, 0xa, 0x80}, 0x2c) socket$inet6_udp(0xa, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) r5 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r5, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) 8.824652081s ago: executing program 5 (id=1885): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f000000a000)=@canfd={{0x5}, 0x1, 0x0, 0x0, 0x0, "0327e1b22b5fcef77300e2c069f986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2fb263a918fa1efd9b0b"}, 0x48}, 0x2, 0x0, 0x0, 0x4040}, 0x1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f00000000c0)={0xcde5, 0xdc83, 0x9, 0x1, 0xff}) syz_usb_control_io$printer(r2, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009009a8976ec8c0100766c616e00000000180002800c000200540a00001d000000060001000000000008000500092319d3bb7c80", @ANYRES32=r5], 0x50}, 0x1, 0xba01, 0x0, 0x800}, 0x20) 7.723022176s ago: executing program 4 (id=1887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setfsgid(0xee00) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000300)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f0000000040)='syscall\x00') pread64(r7, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 7.721840021s ago: executing program 3 (id=1888): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x6) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x80, @rand_addr=' \x01\x00', 0xf650}]}, &(0x7f0000000140)=0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 7.138073969s ago: executing program 3 (id=1889): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={0x0}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readlink(0x0, 0x0, 0x0) (async) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async, rerun: 64) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340), 0x0) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB="00931b", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) (async) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) (async) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r4, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff05000000000000000200000000000000030000000000000002000000000000000500000008000000060000000000000009000000000000000000000000000000ff0000000000000003000000000000000000000000000000ffffff7f570000000300000000800000ff030000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="040000000400000000000000000000000000200037050000000000002b000000090000003b2d285cc980000000c30000f3397dd86d4d928d24d3a461b6f44280970adb05061cad8a5f0245898556c60000000000002b133b0000000000000000f015e34de289ff1160db2bc3"], 0x0, 0x0, 0x0}) getdents(r7, 0x0, 0xffffffffffffffb7) (async) open_tree(0xffffffffffffff9c, 0x0, 0x89901) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, &(0x7f0000001b00)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 7.011813497s ago: executing program 3 (id=1890): ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000240)=0x8000000000000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x88840, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x18b001, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r6, 0x1000) write$UHID_INPUT(r6, &(0x7f0000000280)={0x8, {"796d6980235fa752171e1653eaabed98661977e2e58b294e1b7e56f9513925dca5c96a4b3a6a18a73eb28da285f52091e2fbdcb3c9f1f51b2d6eb8843c20dc7169b205130a99db7dfa82197637412584a3986023b9d31cc294f3e4d7866a8ff0732451b5f113a96be53b5d58cc80a6ea110e2a2a79b72b4ffb64c1d5cb678df6fef75f9276fca522b7f8288b0e0198d4d9ae7340525076cdeb1c3d6968e6e305475132b897902f86afb361394665867a4d2c4bbff476a1e947a8fe8e56e076919843803c79579d9c241d3317a30b5878a42770df758766b59f28cb6625ed50131667395860313ef1a049a38a780bc808c3d5c11f4afc5cc2a4fb956205ce274ea47369c0e2019bf4558340cb66ea4024a588f932a4e4389d0220a4bf30ee34d579e0debd817b09eb83b0fd0787284763169b9d047f2657331d6071a689dff0a48532eb3a99cf6742365044f54384643689c46073014b1f0cf8a6bf67843d3c1097bc23de3786233e048cc32f8fafa8a93d9d04dd252146e11bfb311145061106ad9837a354fa5e361bc7f13dfb2b65892475db5b7b265a25099f5dc1599f4772b7ce853cc29050d851391aaea92c1d1326984d828f8c01b208b971445e28c548fa104d73be968403b621e0722303b2f06d7443e3700a3757aafc054b2a2da80a9f69b2ad35f7cb278fc2f2d110a0ff224424aceeae88735d19693428e73968918d74bb4b8936892321e862794f7a740a071ed3946c2304ffdec5d69c8145de364cf7ff3930eac777e582ecc2f573c84e117f1f6d845cf9fba8ab12bd24ed2795c7ea6774697e86948647872309e6d373ac7a48339f0db483bf63ee22f6731ddda4f24584d3a89d362a0ff9aa1372d5a22a0f9e086961d43fbc5a861568b58c4e73a8e83e483dc88593a89db6076697f401894b00954a168ca4d44b2d5ed79ccf3b2a88e6f557a354a8221595037e24eb0b17f13e10df53e5cb3110a119391c9037774d3f9538f8e7ee65113ec40412d757243bc62a00e57f6778f7acdab1f9b0e7cd07b9e0152dee50d287144dc30182b812a904fdabc5b744cd2b5bb7f4a5467377dd437ede0e23107aa27b8e6eb3b6bed834afc12b1fd1cc2076b95ac60c0c4d875a4deb0ac0281d11dc7aa8d9bd835dbcd675c0969f67a0b1e912af4687dfb64bd77f9ec24d99444c358ac8edf5ea6a880ab270c5402a901caa8df1313477e6163b2b343a020907ff2f550d3698c3669d25ea680b45a057cfcf2a9848474e8208cd2083734c58efba620e3eb018a3e910ac68659f71e6e5044f2796f70b1d26ecc4e4d0fd8d4cdce9c98fb2c20d26949c9e893114639cfb678a9ad23f8fbca72ef629c5341d57728f60a051c1e35a2d3c557260dc1913e21f765744d60bbf708ec890c18836014759b6f2d7403a1e26c22982df3a3a368ead94e0b49535b8503d4e6c954e8416f05f7bd587d408ccdec0f96cd0809016dc82be01a354b6adc60b4bf346462ed6f2ad9299bc0cb67981906bca5822626a24235d07a751e45dec10690b6c8cbe2f299282fab2af1220660279751dc3307e825f25d493e9fae96112f395f907653b3b95baaaa84f383ae0cede9cb09aeb6ce4ba66d656d430822a234491c59d619658cea276517c7c6ff503017787fb6545e08e508515e7ec34f72d6d27590d696ab8976e1f63f284814cb0cb0cc002d0a0b118d9207132cf4b8eacf4129e0ca7e1b9cb46365f8b9973dab2f8a5c955dd0f5602167b9db02861acbb80d67dbedcca0c49bb8f5ddad715dbd5938714c9740f7649afa91eda838fe259a442975fd88040d0427c5f4ce83450470100940fa4643f442c008fa4c8687e7ceec08305b62c0dd201d275f32cc6954fea596d4ab6bd9d4788494be08511b23dab37aacaa8d39c6f961467b7314302fc55ed39ee58f5dc43e0a6b864163530e1a5f5048b77e63d5b93d596bf08cbb58188acefc0147289c3f00795b20f6157f1aa58448a586ecaa091db97ed739723db0c56410b25404da4a5221414ca16b442398b3f74f04fb0699803f6db2816c513d7fa188a41e150ced39a549ef48d884be02019f69a93064f3ec3897c776fa25d7b1eabe653f664c29866bad3d7f262941406e3796e81f866af7ee13d210f46b10ba76c74c9f9f0f90da05f5b6723f2c59f223ad7d79aa412e739db333d208a4ae33e14d6ee95286fc66c41936940a7dfa8a15156f2fe927c9a9f606cbedb4a9ef246055910769c9c9b9193fe2a2e0def05dc31ad85d4e360700b29861bbc9f5fd18cec3f006124dabe02aab63c473461782b750ef625d49d3d4c7639f42d11b29fa698584225ad49a7861cdceddfbe62142269fb768ef31a2ebb60b7147a857b4fb1ff956eb55bda0a9d4724aba2c1b55d0608f073f144b0de2b2a273431192db7564f70f273afd53d2cecf0c48929b8a9d1027ec67d770b787be98cd8d45c66e891bb05637e4e6c269497b9ffa193e6ee40bc0c7cacc50638eae33642cdf5630b9b0248bf4f0f49ecc565cd72193cb3d964b4d6df81915f197192e3dcb4d4bdd15f240a7789b37d33586baa7ecbcc7f5c814abcb8a8606fa626f7db0644f3a08571f72f664801a8f8384f89cd6b97cb747004e2231dbf572bf86c6b130603a0761aa6a5bdfb1e920a8ee5ad15fd1544a269ebc5c0413266571d4f92eb8c8f35610c3a19723669019dcdf13ea173a9007322ac4f8550f7ae1b1d7a49a3832ea8bc826d1fb914d57b647a9ce5c9c6b731b2f97ba8690b24f1ef72557967ae9f16a397f561e550352556968f415c6412be23bce1c7572fce42abd3ebf5bb7a0bb264999116f04f4168120e2df9ee30c606be2c1b14742d1fdf48be810b50227d9f3d2f4be24dca506a284dfead4df60f2eef4b0ff3986fb8a74de2a08de4372c14aef1eef6b8305064f96d0f87716400b4deeb56be9e7ed8f140bcd5e21af9d60000cfcd69d807a768eb65b05fafb026d9757198141ca372e1e5cedb1316cdf88a53d48f05cba3c2b0f17d40610e05cce5c123cea048f982b73fda5ae8b0f8d399b1b8d3926c37d7b3632c1805b304a0fd39b01aec119c46797bbdc521ec9340af1ba477b0723484ed30f2f49c7545878e00b7a1682689be9f387c098de6e3f4992891c19c0f174119a5ec86baed7372ccd0836e6e17b165bb1524ec047976c8c8b0d8d479dd20d5cd9408a4e36a6f2472c6427373ab15b8bec28ac9d0082a7c90e22cae12d8dba64520bfd4927a2e95537432de6624c7853fbb02664745f5d339d265170defd6e6b070b474303bc8dfe3fae85ccdcbe8459af1b93decebff86d875d584ad0818875b15e44a7823a3e3b9973b9cc3cde4a3a9b1abb4c0a89b768ca6e78ad5c8f50726b8c44f6d73303e8b6e308863c39d03e7bb6906f3df415e378f40ee9a1fa57bcd74f783ba58561fca74b8fcc632f2a9cee2c9751aadab3cf087071bb2b7860c4b5c9edb8579188bac1a2fab7a51e84f2a93eded122f7fd46c3b16b5b7adc9f2aa64f9bd3bf43d00432c131e50d271247b331822f0bb8a41640b71f6186e8bd4110b9a74e4b394934211535c032299a342ed4d1d795fcee9c0588f092ba55e0f34672b96eec1f79cd1094ada4d287c729ca7050f09b7d0c42594d097f125478367061232358af1c8bf2e8edf23c0546f78c76004b5984ed70ddce81922d48a1461ae65e75ccb33bd07e3c6f7024c4548d33d62af9ae34cf0e267e431abf2bd2fb39c4a1a6d68f57e161a8b1fb7e976e7f51d70f4a0d16d9d4e12e0948818a28859a559e7dfe520fd341aaa6118e2beade36b2814edb42eb718994221d5ceda5a9534932824cbd484b2611f1b38552967f11937b2f15272a3df81a935761e149941a8d34ffb18fb65968f09b6fdb0308132e824f23e34c7d6b2fc00a68b88a92487a84c1dd5f45c887a14255e08b4b5054fcfd0bc6077f344afe78804ce38a686d335e1ea92bfe65ce977faf830b463fd48b071b87cd1b691c562cbe6ea646a9517882dc0fc7d299d95a9033eafa28b03988bf216abab52b978970208bd44952204806b436e24bcc09d50505cc4388c48d7ec7735ef8647c3a03491d8d0ddf38a689211f529c8799f6415464b557277fceab5039160623c2f517c32980e8dcf2757aa92a02f68b15097366ead5f705d3c7a13e346d3df6bf873099e5769306a19c2c8b6a0379098e84e543506eeb971830c40e953d1c041612b99ecf5e32e5c501fb569a5262191fd110f090df91321fb54aaafc62f3d7632f5d67ea4d6a22cfdf52a08793ac453924b6af9c7d87d317807511d66ca80304d0f8130d7168ec00061eeaa55367803a05edf920355b787d11ac122f31a12935298002cb1a5faa70d61416dadacbad2fabed8811bb85c88e6c82faa1e7b87be8da807a01bad3a779c0e33ffd6c9403f95caccf3062a56e7d70f529de5a23d0e7d192c597b012347c0af028266f7e62319cdea0fdf014c508f326ea21bacfa8d9e3434ad37719df6de02fce8391b512bfb5de05c555962fc47eeb8ae47397d40bf2d804f9181e985bfeadffa3f11079d72dc3a00a0a4ae783d562577508483807a4f3386e1f8abe82420565b56bcc73e587bb6b9a3de5916526e90aa097693bfdf0ff1a491259b9c7ba1ae928fab4f3baa4c9f38968695500f691d3ef52d687b6c2b8e8bcf95b3d8c7ac9b7a41329f05e2ae2f9d692d3ff5b21999a19ca8a81ce221081409216a51c879ed111e0c15772ae2a2b62a62d57bd9922023dbe1739184f7be7e0ca462800f8e144d8012d70f38a2ce65a8d06240c76cdeef604ebd84ee7c52d0c23ed1ddbb0cf03c30a4889af8f413248a306521907120baff38ae78e87b98d1f9436ce167175f2e9e98d597224737735cdafca08e69f51294e56e0aa49360e8199aee8401c859fc1c6cf63edd0f7ddc14ca0e325cab6215e9c659ca3da66e13d17e9739e0d0681aa019fd23e590967fdc546fa8d2da24e8bbb9f8f790d4ad4fc730ae806efc0030d97228e357157e9f040282d8168e84f4666e1748aeb3ebf6a2c7f1ae13d720be7686c550cac161947a880636e40796ef4b027400307c9b25809889901567833ec7be39a52df22b150e1d4266a57328b4405c82486c0061478dcd8ed370039b995d9f3505ddeff185578ad6da8861ab7a170143241fbad2a67b369063a1b6163425d9515de3cd0f56267ac6a2f77d2fe4564237db32f821c5c984d77383d1decd67ba0aa936c1fdb48a55cc52a997c27ea92656634029e75320975199aec169ccdcd52403d5708766136f82c69453663e9f5a7a73580a69f9de3712cee25e2dc80dd0ea729827b64e151dce276b4e7383c79ba69b57193dcef0794a4eaacfc35d030ce4f354703003a82a2df66f26aa486957b2e711d7650f21ee8742c2f689c4066d0b8925e9b48c9a503f2f05384e7042f90740a0fe47438c26712b573a62edab1341cc7be7353e03daaedcffa5128cb45b7d19b41f97bc3aa9babe075406b76090972d950b39f8ce221d9e3c8e4290c6c51aa2316c7ac01b0a629d8723dbedadb60726d34f583bd3bb2c437c3a57b3dccdf5347fece2187790cb8f1be58e4ef06cba61bed5af4b279effb106a3f4b9afda4b8fa0f4400958ecd6dce1bee5439081358f050e8f902383d718058db1c91a9a591380284149a5e44d3dd3859096e228f473686b2ef32a4359a23f03192d00bb48d2ee30f9af9181ff363ecb7c111c9c33c9e38f8d9aa8ec19d8b8a0e25743721700", 0x1000}}, 0x1006) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x14) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x86, 0xfffffffffffffffe, 0x9, 0x7, 0xb, 0x651, 0xffffffff, 0x9657, 0x0, 0x7fffffff, 0x0, 0x0, 0xb, 0x80000000000000, 0xcc3, 0x1, 0x1, 0x94d6, 0x0, 0xfffffffd, 0x8, 0x8, 0xfffffffffffffffa, 0x3, 0x6}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r7 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x3, 0x0) ioctl$MON_IOCQ_RING_SIZE(r7, 0x9205) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) dup3(r4, 0xffffffffffffffff, 0x80000) r8 = getpgid(0xffffffffffffffff) syz_open_procfs(r8, &(0x7f0000000000)='oom_adj\x00') 6.449406289s ago: executing program 4 (id=1891): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x60, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x200, 0x20008000, 0xffffffffffffffff, 0x5, 0x54}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000000000000000a6c000000060a09040000000000000000020000070900010073797a30000000000900020073797a3200000000400004803c0001800c0001007061796c6f6164002c00028008000440000000000800024000000002081605400000000008000340000000000800064000000002140000001100010000000000000000000000000a"], 0x94}}, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r6 = memfd_secret(0x0) getsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') 6.42757112s ago: executing program 6 (id=1892): r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000540)="46938d5a961b6b55c6a7a7edf2f36bc82e6b8cb2d7d6589715fd1ab784b23448bab1231836e10844b6e41633753c704e0083d82e2c9db274ed00151981a6e8cf6f5d40fbab346cdda041ccc8005096f3d7d3ac1c2db01cf5f4cce316b1c5522c666f5522e15b1d7a867fd51bab2e5dbb3f2b956cc6c8da5915de6444fee07837b0b315b35cc3c6319bd2c78dff655aa05c4183391e02ac32b5e119292a441d7ce99b89588901551799e6724faa8343604d555c43f4ac1c546374e494e46748acc5e11ba81ec4b57c7cd7d76d7709d94928458260116306bb8410cbb31c6f6eb44e83be5c9adc305f", &(0x7f0000000640)="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"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYRESOCT=r4], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f"], 0x44}}, 0x0) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x5b9de09c9f345b62, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r8, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, &(0x7f0000000380)=0xbcd0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400013000078000000160a0101000b000000000000010000000900010073797a30000000000900020073797a3000000000440003804000038014000100726f7365300000000000000000000000140001007663616e3000000000000000000000001400010067656e6576653000000000000000000008000740000000021400000010000100"/254], 0x100}, 0x1, 0x0, 0x0, 0x240408c1}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000180)={0x400000080ffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000010000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) 5.040299955s ago: executing program 6 (id=1893): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_connect$uac1(0x3, 0x10a, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x3, 0x1, 0x3, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x5}, [@feature_unit={0x11, 0x24, 0x6, 0x2, 0x5, 0x5, [0x9, 0x8, 0x7, 0x7, 0x9], 0x6}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0x4, "f7227dee44c6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x201, 0x6, 0x2, 0x9, 0x3, 0xd7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x59, 0x9, "d73ffae59931"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xd, 0x1, 0x9, 0xff, "9a", "8522"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x2, 0x10, 0x3, "bd", 'Kg'}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x4, 0x1, 0x4, 0x21, "7b5574d99a"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x5, 0x6, 'z'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0xe, 0x2, {0x7, 0x25, 0x1, 0x3, 0x1, 0xd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xfe, 0x2, 0x4, 0x1, "0db16a35cd"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x353e, 0xa, 0x4, "c45d39"}, @as_header={0x7, 0x24, 0x1, 0x30, 0x5, 0x1}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x40, 0x3, 0x6, "9e8f7f251d96"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x5, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0xd, 0xc, {0x7, 0x25, 0x1, 0x0, 0xf, 0xfffc}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x7d, 0x0, 0x40, 0x40, 0xf7}, 0x5e, &(0x7f00000002c0)={0x5, 0xf, 0x5e, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x9, 0xf000, 0x0, [0x3f30, 0xffc0, 0x0, 0x3fcf, 0xffc0c0, 0xff3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x4, 0x0, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x99, 0x2, 0xd1d, 0xf0f, 0x9, [0x30, 0xfff0]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "9087d2962e4baf7a019f7b74109f86f1"}]}, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000380)=@lang_id={0x4}}]}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="7135a3a5905116023796a268d1e98f607098aa4427dd276c0462e3dbf6ff1e6ca3c62a4d0c3dfe7cb980420f0fbd2e82f620d964a7aef5652fd8c957b506d680ed7887cbeb8d42a52fbe46c7d53e7e57b4e4f84a0a534b8954fdc948a2449d3eedb51e8c8d5be2347c99df6ef8c12c0ed492dbca3a808791182e89888df25a5a8e0f14d75d4ac78cc3f0f6be732e5ccd75ee1ae25ef97e5d3d9703621b1a2400f6ccc3981e7735a6bc85b9550eb237277dc2f07ca997a1ebc37a2ed873962bae82cf27676f2fad692a5d71ed30a999489cb5ec3446cfbc3562e27658aa951ad87502ccf48e84155d03074dd8b8", 0xed}], 0x1) 5.039435304s ago: executing program 5 (id=1894): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xca3e9000) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.980002976s ago: executing program 4 (id=1895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000040000000300000004000000020051bc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0xff, 0x100, 0x2, r1, 0x2, '\x00', r2, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0xff}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0xf}, 0x94) r5 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64=r5, @ANYRES64=r4, @ANYRES8=r3, @ANYRES8, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r6, r1}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000340)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0xa0000, 0x0) ioctl$RTC_RD_TIME(r11, 0x80247009, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r7, &(0x7f00000000c0)="cf", &(0x7f00000001c0)=@udp6, 0x2}, 0x20) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000040), 0x6) bind$bt_hci(r12, &(0x7f0000000140)={0x1f, 0xfffe, 0x2}, 0x6) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x0, 0x0) 4.813211479s ago: executing program 5 (id=1896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tgkill(0x0, 0x0, 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x5, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100, 0xfd}, {0x9, 0xf2, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7ffffeff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x8, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x100007, 0x6}, {0x0, 0x2, 0x0, 0xff, 0x67, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x0, 0x56d, 0x4, 0x80000000}, {0x8001, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0xe, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x9, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x7, 0x5, 0x0, 0x7, 0x5}, {0x9, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0x8}, {0x8, 0x2, 0x3, 0x4, 0x69, 0x5149dc08}, {0x1, 0x0, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0x8001, 0xfff, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x2, 0xfff}, {0xc2ea, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x2, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x4, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x200, 0x344, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x2, 0x8, 0x800, 0x3}, {0x4, 0xed22, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0xfffffffc, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x8, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x7, 0xfffffffb}, {0x4, 0x5, 0x0, 0x8, 0xe, 0x7}, {0x10010, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0x8, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x8, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x7, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x3fb}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0xfffffe01, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0xa, 0x1, 0xcf69, 0x0, 0x457, 0x1}, {0x0, 0x573, 0x4, 0x5, 0x5, 0x4}, {0x6, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0xfe, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x6ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x4, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x4, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18b, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x0, 0x3, 0x8, 0x4f2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x80, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0xd, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0xffffffff}, {0x400, 0x5, 0x9, 0x1, 0xd, 0x3}, {0x1, 0x2b, 0x45, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x9, 0x80, 0x9, 0xd450}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x120000, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x10000, 0xb3f2, 0x1}, {0x7, 0x4, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x2, 0x8, 0x1ff}, {0x8, 0xc5, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3}, {0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x1}, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) syz_open_dev$vcsu(&(0x7f00000000c0), 0xa1cc27f, 0x401) io_setup(0x3, &(0x7f0000000140)=0x0) io_pgetevents(r8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180), 0x8}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) 4.640250764s ago: executing program 2 (id=1897): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546e2c5f437298fe78dc19175aa7b8d6afe2ef6b196de1aaab99b60f44276ce4c9bd640b78c7fb5f66b7397692465"], 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x202) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000000300)=""/88, 0x58}, {&(0x7f0000000380)=""/187, 0xbb}, {&(0x7f0000000440)=""/187, 0xbb}], 0x4, &(0x7f0000000540)=""/245, 0xf5}}, {{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002940)=[{&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000002780)=""/127, 0x7f}, {&(0x7f0000000280)=""/44, 0x2c}, {&(0x7f0000002800)=""/212, 0xd4}, {&(0x7f0000002900)=""/12, 0xc}], 0x5, &(0x7f0000002bc0)=""/182, 0xb6}, 0x8}, {{&(0x7f00000029c0)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002c80)=""/158, 0x9e}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/182, 0xb6}], 0x3, &(0x7f0000002e80)=""/101, 0x65}, 0x9}, {{&(0x7f0000002f00)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004100)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/137, 0x89}, {&(0x7f0000004040)=""/179, 0xb3}], 0x3, &(0x7f0000004140)=""/128, 0x80}, 0x4}, {{&(0x7f00000041c0)=@nfc_llcp, 0x80, &(0x7f0000005640)=[{&(0x7f0000004240)=""/45, 0x2d}, {&(0x7f0000004280)=""/119, 0x77}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f0000006bc0)=""/225, 0xe1}, {&(0x7f0000005400)=""/42, 0x2a}, {&(0x7f0000005440)=""/12, 0xc}, {&(0x7f0000005480)=""/98, 0x62}, {&(0x7f0000005500)=""/79, 0x4f}, {&(0x7f0000005580)=""/93, 0x5d}, {&(0x7f0000005600)=""/38, 0x26}], 0xa, &(0x7f0000005700)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000006900)=[{&(0x7f0000006700)=""/222, 0xde}, {&(0x7f0000006800)=""/135, 0x87}, {&(0x7f00000068c0)=""/39, 0x27}], 0x3, &(0x7f0000006940)=""/249, 0xf9}, 0xc23}], 0x6, 0x2, 0x0) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r4, &(0x7f0000000740)={0x2020}, 0x2020) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000002a40)={0x1000, r2, 0x180003}) sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f0000002b80)={&(0x7f0000002a80), 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="0d052abd7000ffdbdf25160000000c00991100000000000a001a0008021100000100000a000600ffffffffffff00000a001a0008021101000000000a00060008021100000000000a000600080211e9ff0000000a00060008021100000000000a002200ffffffffffff0000"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x8) write(r5, &(0x7f0000000340), 0x11000) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r7 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r7, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 3.876225225s ago: executing program 4 (id=1898): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe44, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000000000300", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3.692080793s ago: executing program 5 (id=1899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000060000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.264278339s ago: executing program 3 (id=1900): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_io_uring_setup(0x88c, &(0x7f0000000140)={0x0, 0x5136, 0x0, 0x2, 0x16c}, &(0x7f0000000080)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0xffff3759, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) 3.116074834s ago: executing program 4 (id=1901): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setfsgid(0xee00) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000300)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f0000000040)='syscall\x00') pread64(r7, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 3.115747782s ago: executing program 5 (id=1902): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0xfffffff8, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, {0xa, 0x4e24, 0xf5, @mcast2, 0x3}, 0xffffffffffffffff, {[0x2, 0x6, 0x401, 0x8, 0x10001, 0x8, 0x2, 0xd]}}, 0x5c) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="3721224e57d2ebde77030000ea0300000008000000b5"], 0x50) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', r8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000080), &(0x7f00000000c0)=r9}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000080)={0x1d, r11}, 0xb) sendmsg$can_bcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r5, @ANYRES64, @ANYBLOB="000000000100000000000000840004", @ANYBLOB="9f215833e5688a8997893fce8e08147d4aba642145cfdfe9fe05688668cd92f7334ace79778e2f3bc5961b1ecdcadbab5041e927b0d4ddf6530b8cd1b5b843961d581468caf2c314159c9fa7868b7668471ad0e32da61c0b70d7e8e1d99a4ba27ab9e09aa3d5e8ebe7a4f4b4a21e9291d121eda0a1f49acc99544ca3c082c3ec674664d8fa108ed5dad2d6d565614154a4afd78d3199907d3126ad5e3f29bd375139fe0b8f3a510c35ce017fbbf280890a777ed8559701c3f66c4c85af136b01f19b38f10f93347dbb175f7f0aafc3184153d7eaa926c77c788561a717", @ANYRESOCT=r4, @ANYRESDEC=r1, @ANYRESOCT=r2], 0x48}, 0x1, 0x0, 0x0, 0x400c011}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r12 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000e40), 0x2, 0x0) readv(r12, &(0x7f0000001f00)=[{&(0x7f0000000e80)=""/4096, 0x1000}], 0x1) r13 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r13) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 2.501814234s ago: executing program 6 (id=1903): r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0500000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x5, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) socket$inet6(0xa, 0x80002, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r8) sendmsg$FOU_CMD_ADD(r8, 0x0, 0x0) 1.520136285s ago: executing program 6 (id=1904): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8004551a, 0xffffffffffffffff) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7fff, 0x32c, 0x0, r6}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r6, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) ioctl$SNDCTL_TMR_METRONOME(r6, 0x40045407) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 1.343665867s ago: executing program 3 (id=1905): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0xffffffffffffffda, r1, {0x7, 0x1f, 0x0, 0x2466012, 0x8, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x1, 0xa, 0xffffffff, 0x0, 0xfffffffd, 0x2, 0xffd, 0x80007ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x3, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x5, 0x80000, 0xf58, 0x6, 0xffffffff]}) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x38, r5, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xd2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80000001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1d}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xf}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x24000080) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r7, 0x0, 0x0) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000140)=0x6) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x6, 0x0, 0x969, {0x0, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x2, 0xc000, 0x200000, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) 415.891336ms ago: executing program 6 (id=1906): socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, 0x0, 0x0, 0xa) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x1, 0x2000) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0x1, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0xf8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0xb25294f57ac9c81f) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 252.693768ms ago: executing program 4 (id=1907): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000007c0)={0x21, 0x25, '\x00', [@generic={0x2, 0xe6, "889ebf8a8cef6e305adb26fdd84dd5165c759eb06b4e29e2bba33a092af31b29ede4a4d1f7f39d740821e6fa93cc6100e798cf36f4997c94ba2782b95f9e6799961c00ce8874444aab74351ea55bed95baa88d24e3865f010271a8e3e472d68de3c8bab1d58dc4b3e73f7e38de245e4dbc0517d80709fa30f4e3d5dd875b1764259b516c156ab955cf134021e57bbb2ccbbb325f1a20be8cde62406213d675971512ddc89fde75b017f0d3be6e933395aa765e8fbb6bc526d18c342f332d95716a8cd7735ccb05fd5704235fc88d496129ba9974112c4542a133f41d95969225a536209e75fd"}, @ra={0x5, 0x2, 0xb}, @jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x4}, @pad1, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x28, {0x3, 0x8, 0x7, 0x1, [0x8000000000000001, 0xfffffffffffff4f2, 0xffffffffffffffff, 0x9]}}, @ra={0x5, 0x2, 0x4}]}, 0x138) syz_usb_connect$uac1(0x0, 0xc4, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x3, 0x1, 0x0, 0xa0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0x9d}, [@selector_unit={0x8, 0x24, 0x5, 0x2, 0x4b, "c4711c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x3, 0xb6}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x8000, 0x3, 0x2, "1e"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xb0, 0x4, 0x1, 0x3, "1795dd", "9ec94e"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf7, 0x4, 0x0, 0x7, "d8f7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x1, 0x5, {0x7, 0x25, 0x1, 0x82, 0x8, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x9, 0x4, 0x4, 0x2, "ea63087dfa"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7ff, 0x3ff, 0x81, "927496"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xe5, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xff, 0x7, 0xc, {0x7, 0x25, 0x1, 0x0, 0x1, 0x40}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x55, 0x7f, 0x3, 0x10, 0x7f}, 0xe9, &(0x7f00000001c0)={0x5, 0xf, 0xe9, 0x1, [@generic={0xe4, 0x10, 0x3, "974deace88a742de6f70a0990f907230bae2e27d6af866d1edb3d3e3bea8c23cdd58b3bfb79c28e1096dd2b4bdc33136704363af8af8dbec3339ae319ee8c5687358bffaff15d5bc0f7ded4245b97fe6ed8f4cc30ead5f5b154d5ef12c461dc6ec79f820b882037297ef79c46e345d92802171147f7f32992f4d4869e4ad6883c69b980ff8451b32fa33f704a3db7bc348d878448fd6e0ead40ca8e4c664a13e5a59650a086b0be17282d4803c5345556292d80bad2e9b9f4c1f260b4997676038702ef41db3bca0ee98df9b4888cb27867e1a750c04f8571cddd863a2b95eb0a9"}]}, 0x7, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x105a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4c, &(0x7f0000000600)=ANY=[@ANYBLOB="4c03b535761231f73f64773712701285f52e4dcfa4fdae40a40e73c38e552772095c116035f626a2e1e1f7086426caa28d5c05b9243ec0369d79cf98c2161a3228bd8f9b0bdd9b69190c156fc22b891b3d0950b47a297aec2c"]}, {0x61, &(0x7f0000000380)=@string={0x61, 0x3, "ea5e81e02ac8a19124b238abbcb34d1057eafe836d7b14c94c28aaabd1e6a58a4cf377cd3e2d22af356b93abe21048b35c9daa47cb4a0bd4c5f679043ba6481590d7e628efd8c2b0009ac76b27bfe4feb4d80a1807e8f9bfa2c5fbca335620"}}, {0xf0, &(0x7f0000000400)=@string={0xf0, 0x3, "4c75c9e067a9c22998a69e1a294d5fcefcd1e6206d05124adcde3af9a3b713124f967d4fdec9d74c3fc6daa621b68a8efb14a40f0957700803f38cd7171db31a19315276a23438cca81f6614fc1c035f06df90260ce5236f6d5e3577dfd8074f3640205c75305a16ff3a30e8a9f848f75bebbe82a0cfc81485b58e16c484ff63b85f3deab29eac96d1058dfcfe82334fce3b64e78623c8de317e7c9abba5acd385ddad621f9858edbd4ac4377581ab6caeb26fe3709323d944cb44c04012cde000d7747a9b39dc7e8e8f8f68c72a4c2b8cf6c94b903fd8655fa0d379e9cce00df65643e6c1f9302836d98f0d7e03"}}, {0xc8, &(0x7f0000000500)=@string={0xc8, 0x3, "986c0f18b5ad6c7964e4a16757dc1596591bb71259bb609c3defe580bcf505f7cd52fe993cee07dafcaca96ed1e27c5118ba9c535ab4c08ba27d6a52ac2147db9881d8fdcf50e3a1556a6a8e03d38beb85f9dd6318ecc9572d1571761824229c5e5815b60d4de473ac6a5eafdc6bb30e2cc55904497bb6f59dd81848354354f4dcfc63c839b148c3fb0f2f76636c67f0b7dabdaca178286fecc66d6cdffaf4eec0e2e6b45766b55accfa3cbaf379d250f240599c71172271334ff11bbe047c1c11da56abc900"}}, {0x102, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}]}) 113.133625ms ago: executing program 5 (id=1908): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) (async) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'caif0\x00', 0x4900}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) (async) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) fsopen(&(0x7f0000000240)='jfs\x00', 0x1) (async) r6 = fsopen(&(0x7f0000000240)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}}) 0s ago: executing program 6 (id=1909): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000200)='net_dev_xmit\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x400) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x8000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4048040) accept4(r1, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x80000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x1, 0x7f}}) r7 = syz_open_dev$mouse(&(0x7f00000002c0), 0x2, 0x4000) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004001) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x0, 0xe0, 0x2, 0x0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') socket$packet(0x11, 0x2, 0x300) kernel console output (not intermixed with test programs): [ T5902] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 482.871450][ T5902] asix 4-1:0.0: probe with driver asix failed with error -71 [ 482.913733][T11990] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1418'. [ 482.984458][ T5902] usb 4-1: USB disconnect, device number 34 [ 482.993969][ T30] audit: type=1400 audit(2000000010.700:890): avc: denied { getopt } for pid=11953 comm="syz.6.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 483.014609][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.435532][ T30] audit: type=1400 audit(2000000011.050:891): avc: denied { setopt } for pid=11997 comm="syz.5.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 483.461225][ T9] usb 7-1: USB disconnect, device number 2 [ 483.472194][ T30] audit: type=1400 audit(2000000011.210:892): avc: denied { setopt } for pid=11996 comm="syz.4.1455" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 483.587796][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1455'. [ 484.363551][ T5902] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 484.548611][ T5902] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 484.558217][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.577672][ T5902] usb 6-1: Product: syz [ 484.642469][ T5902] usb 6-1: Manufacturer: syz [ 484.664515][ T5902] usb 6-1: SerialNumber: syz [ 484.687017][ T30] audit: type=1400 audit(2000000012.420:893): avc: denied { getopt } for pid=12017 comm="syz.3.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 484.709560][ T30] audit: type=1400 audit(2000000012.420:894): avc: denied { connect } for pid=12017 comm="syz.3.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 484.877514][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 484.923031][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 485.073282][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 485.085466][ T9] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 485.578765][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.601611][ T9] usb 4-1: config 0 has no interface number 0 [ 485.610256][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice=81.28 [ 485.919888][ T9] usb 4-1: New USB device strings: Mfr=0, Product=27, SerialNumber=3 [ 485.946489][ T9] usb 4-1: Product: syz [ 485.970445][ T9] usb 4-1: SerialNumber: syz [ 486.009483][ T9] usb 4-1: config 0 descriptor?? [ 486.042702][ T9] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 486.049788][ T9] usb 4-1: No valid video chain found. [ 486.157909][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 486.249364][ T9] usb 4-1: USB disconnect, device number 35 [ 486.324827][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-diskseq/154.tmp-b7:6' failed: Read-only file system [ 486.492033][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/154.tmp-b7:6' failed: Read-only file system [ 486.515491][T12029] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1463'. [ 486.644074][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/154.tmp-b7:6' failed: Read-only file system [ 487.004844][T12042] siw: device registration error -23 [ 487.108004][T10432] block nbd0: Possible stuck request ffff8880266d5080: control (read@0,1024B). Runtime 240 seconds [ 487.119092][T10432] block nbd0: Possible stuck request ffff8880266d5240: control (read@1024,1024B). Runtime 240 seconds [ 487.130246][T10432] block nbd0: Possible stuck request ffff8880266d5400: control (read@2048,1024B). Runtime 240 seconds [ 487.183424][T10432] block nbd0: Possible stuck request ffff8880266d55c0: control (read@3072,1024B). Runtime 240 seconds [ 487.914450][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 487.959348][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/154.tmp-b7:6' failed: Read-only file system [ 488.873462][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 489.057695][ T9] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.098685][ T9] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.101684][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 489.236857][ T5902] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 489.273311][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 489.292457][ T5902] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 489.308086][ T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 489.319721][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.327773][ T43] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 489.342196][ T5902] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 489.371307][ T5902] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 489.374148][ T30] audit: type=1400 audit(2000000017.100:895): avc: denied { shutdown } for pid=12064 comm="syz.4.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 489.384637][ T5902] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 489.411811][ T9] usb 4-1: config 0 descriptor?? [ 489.453843][ T5902] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 489.479711][ T5902] usb 6-1: USB disconnect, device number 26 [ 489.495133][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 489.709228][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.851924][ T9] input: HID 28bd:0934 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0934.0010/input/input28 [ 489.888843][ T9] uclogic 0003:28BD:0934.0010: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.3-1/input0 [ 489.955507][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 489.978842][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.018956][ T43] usb 3-1: config 0 descriptor?? [ 490.040898][ T43] hub 3-1:0.0: USB hub found [ 490.069857][T12062] netlink: 'syz.3.1474': attribute type 21 has an invalid length. [ 490.080415][T12062] netlink: 'syz.3.1474': attribute type 1 has an invalid length. [ 490.163740][T12062] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.1474'. [ 490.246186][T12082] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1478'. [ 490.265256][ T43] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 490.501279][T12083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.525514][T12083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.586129][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 490.592767][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 490.613345][ T1206] usb 4-1: USB disconnect, device number 36 [ 490.653831][ T43] usb 3-1: USB disconnect, device number 53 [ 490.707249][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/154.tmp-b7:6' failed: Read-only file system [ 491.036650][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 491.702515][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/154.tmp-b7:6' failed: Read-only file system [ 491.771647][ T5902] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 491.849990][T12104] tipc: Enabled bearer , priority 0 [ 491.924598][T12104] syzkaller0: entered promiscuous mode [ 491.938010][T12104] syzkaller0: entered allmulticast mode [ 491.943292][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 492.059190][ T30] audit: type=1400 audit(2000000019.800:896): avc: denied { ioctl } for pid=12099 comm="syz.5.1485" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x5542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 492.084241][ C0] vkms_vblank_simulate: vblank timer overrun [ 492.383565][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 492.394659][T12111] tipc: Resetting bearer [ 492.407949][T12103] tipc: Resetting bearer [ 492.434800][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 492.465389][ T5902] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 492.481055][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 492.504996][T12103] tipc: Disabling bearer [ 492.551832][ T5902] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 492.670888][ T5902] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 492.692063][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.735427][ T5902] usb 3-1: config 0 descriptor?? [ 492.858763][T12093] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 492.906511][ T30] audit: type=1400 audit(2000000020.650:897): avc: denied { getopt } for pid=12108 comm="syz.4.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 493.165255][T12122] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 493.185970][T12122] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 493.211867][T12122] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 493.222620][T12122] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 493.229993][T12122] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 493.243610][T12122] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 493.264032][T12122] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 493.275388][T12122] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 493.314256][T12122] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 493.365118][T12093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.408096][T12093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.486303][ T6027] usb 3-1: USB disconnect, device number 54 [ 493.492326][ T5853] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 494.958588][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 494.968946][ T5864] udevd[5864]: setting mode of /dev/vcsa4 to 020660 failed: Read-only file system [ 494.983111][ T5848] udevd[5848]: setting mode of /dev/vcs4 to 020660 failed: Read-only file system [ 495.013600][ T5848] udevd[5848]: setting owner of /dev/vcs4 to uid=0, gid=5 failed: Read-only file system [ 495.014091][T10324] udevd[10324]: setting mode of /dev/vcsu4 to 020660 failed: Read-only file system [ 495.026865][ T5864] udevd[5864]: setting owner of /dev/vcsa4 to uid=0, gid=5 failed: Read-only file system [ 495.075802][T10324] udevd[10324]: setting owner of /dev/vcsu4 to uid=0, gid=5 failed: Read-only file system [ 495.925674][T12150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1495'. [ 496.712305][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/154.tmp-b7:6' failed: Read-only file system [ 496.895512][ T30] audit: type=1326 audit(2000000024.640:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12170 comm="syz.6.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139d38eba9 code=0x7ffc0000 [ 496.918930][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.068950][ T30] audit: type=1326 audit(2000000024.640:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12170 comm="syz.6.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f139d38eba9 code=0x7ffc0000 [ 497.242044][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 497.272836][ T30] audit: type=1326 audit(2000000024.640:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12170 comm="syz.6.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139d38eba9 code=0x7ffc0000 [ 497.340530][T12184] netlink: 'syz.2.1503': attribute type 10 has an invalid length. [ 497.347312][ T30] audit: type=1326 audit(2000000024.640:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12170 comm="syz.6.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f139d38eba9 code=0x7ffc0000 [ 497.597916][ T30] audit: type=1326 audit(2000000024.640:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12170 comm="syz.6.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139d38eba9 code=0x7ffc0000 [ 497.608751][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 498.026787][ T30] audit: type=1326 audit(2000000024.640:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12170 comm="syz.6.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f139d38eba9 code=0x7ffc0000 [ 498.251551][ T30] audit: type=1326 audit(2000000024.640:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12170 comm="syz.6.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139d38eba9 code=0x7ffc0000 [ 498.405141][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/154.tmp-b7:6' failed: Read-only file system [ 498.405302][ T30] audit: type=1326 audit(2000000024.640:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12170 comm="syz.6.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f139d38eba9 code=0x7ffc0000 [ 498.448244][T12205] syz_tun: entered allmulticast mode [ 498.539083][ T30] audit: type=1326 audit(2000000024.640:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12170 comm="syz.6.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139d38eba9 code=0x7ffc0000 [ 498.657874][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 498.674113][ T30] audit: type=1326 audit(2000000024.640:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12170 comm="syz.6.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f139d38eba9 code=0x7ffc0000 [ 498.697437][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.941469][T12210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1510'. [ 498.977227][ T5853] Bluetooth: hci5: connection err: -111 [ 499.020131][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 499.098289][T12215] dvmrp8: entered allmulticast mode [ 499.369146][T12210] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1510'. [ 499.383585][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 499.423081][ T6027] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 499.440533][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 499.442967][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 499.517400][T12219] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1512'. [ 499.560423][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 499.562914][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 499.612265][ T6027] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.623238][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 499.623266][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 499.623304][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 499.623324][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.700528][ T6027] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.711838][ T6027] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 499.722735][ T6027] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.755311][ T6027] usb 4-1: config 0 descriptor?? [ 499.819683][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 499.868825][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 499.875123][ T9] usbtmc 6-1:16.0: can't read capabilities [ 499.928228][T12229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1514'. [ 500.049188][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1515'. [ 500.058624][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1515'. [ 500.067949][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1515'. [ 500.077086][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1515'. [ 500.086321][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1515'. [ 500.197480][ T6027] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 500.216382][ T6027] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 500.268605][ T6027] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 500.297709][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 500.327877][ T6027] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 500.353029][ T6027] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 500.362558][ T1206] usb 6-1: USB disconnect, device number 27 [ 500.383709][ T6027] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 500.404442][ T6027] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 500.472820][ T6027] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 500.565215][ T6027] cp2112 0003:10C4:EA90.0011: Part Number: 0x00 Device Version: 0x00 [ 500.571791][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 501.024095][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.030441][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.311310][ T6027] cp2112 0003:10C4:EA90.0011: error reading lock byte: -71 [ 501.418779][ T6027] usb 4-1: USB disconnect, device number 37 [ 502.614790][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 502.688617][T12263] loop6: detected capacity change from 0 to 6 [ 502.705078][T12263] Dev loop6: unable to read RDB block 6 [ 502.752637][T12263] loop6: unable to read partition table [ 502.759707][T12263] loop6: partition table beyond EOD, truncated [ 502.772999][T12263] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 502.778421][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system [ 502.796072][T12264] FAULT_INJECTION: forcing a failure. [ 502.796072][T12264] name failslab, interval 1, probability 0, space 0, times 0 [ 502.809105][T12264] CPU: 0 UID: 0 PID: 12264 Comm: syz.2.1522 Not tainted syzkaller #0 PREEMPT(full) [ 502.809119][T12264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 502.809124][T12264] Call Trace: [ 502.809128][T12264] [ 502.809132][T12264] dump_stack_lvl+0x16c/0x1f0 [ 502.809150][T12264] should_fail_ex+0x512/0x640 [ 502.809164][T12264] ? fs_reclaim_acquire+0xae/0x150 [ 502.809179][T12264] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 502.809196][T12264] should_failslab+0xc2/0x120 [ 502.809208][T12264] __kmalloc_noprof+0xd2/0x510 [ 502.809222][T12264] tomoyo_realpath_from_path+0xc2/0x6e0 [ 502.809243][T12264] ? tomoyo_profile+0x47/0x60 [ 502.809255][T12264] tomoyo_path_number_perm+0x245/0x580 [ 502.809268][T12264] ? tomoyo_path_number_perm+0x237/0x580 [ 502.809282][T12264] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 502.809297][T12264] ? find_held_lock+0x2b/0x80 [ 502.809321][T12264] ? find_held_lock+0x2b/0x80 [ 502.809333][T12264] ? hook_file_ioctl_common+0x145/0x410 [ 502.809347][T12264] ? __fget_files+0x20e/0x3c0 [ 502.809361][T12264] security_file_ioctl+0x9b/0x240 [ 502.809378][T12264] __x64_sys_ioctl+0xb7/0x210 [ 502.809395][T12264] do_syscall_64+0xcd/0x4e0 [ 502.809410][T12264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.809420][T12264] RIP: 0033:0x7f7a5b18eba9 [ 502.809429][T12264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.809439][T12264] RSP: 002b:00007f7a5c0f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.809449][T12264] RAX: ffffffffffffffda RBX: 00007f7a5b3d5fa0 RCX: 00007f7a5b18eba9 [ 502.809455][T12264] RDX: 0000200000000280 RSI: 0000000000008946 RDI: 0000000000000006 [ 502.809461][T12264] RBP: 00007f7a5c0f3090 R08: 0000000000000000 R09: 0000000000000000 [ 502.809467][T12264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.809473][T12264] R13: 00007f7a5b3d6038 R14: 00007f7a5b3d5fa0 R15: 00007fff289c0be8 [ 502.809486][T12264] [ 502.809490][T12264] ERROR: Out of memory at tomoyo_realpath_from_path. [ 503.079726][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system [ 503.178099][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 503.230749][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system [ 503.395352][T12272] wlan0 speed is unknown, defaulting to 1000 [ 504.394989][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 504.395020][ T30] audit: type=1400 audit(2000000032.090:919): avc: denied { map } for pid=12268 comm="syz.4.1526" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 506.876887][T12269] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.884186][T12269] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.049682][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/156.tmp-b7:6' failed: Read-only file system [ 507.192526][T12269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.239454][T12269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.769069][ T30] audit: type=1400 audit(2000000035.510:920): avc: denied { read open } for pid=12296 comm="syz.5.1530" path="/" dev="configfs" ino=1203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 507.791527][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.849998][ T189] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.886216][T10780] Bluetooth: hci6: Frame reassembly failed (-84) [ 507.894046][ T189] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.917182][ T1206] wlan0 speed is unknown, defaulting to 1000 [ 507.927605][ T189] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.996083][ T1206] syz1: Port: 1 Link DOWN [ 508.030096][ T189] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.054055][ T189] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.063954][ T189] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.073649][T10775] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.099937][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 508.142015][T10775] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.160544][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1532'. [ 508.174503][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1532'. [ 508.254852][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1531'. [ 508.264935][T12304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'. [ 508.305558][ T1206] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 508.314045][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1532'. [ 508.914263][ T1206] usb 6-1: Using ep0 maxpacket: 8 [ 509.410429][ T1206] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 509.423880][ T1206] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 509.435437][ T1206] usb 6-1: config 6 has no interface number 0 [ 509.443507][ T1206] usb 6-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 509.497958][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1531'. [ 509.509451][T10775] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.520274][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1532'. [ 509.574762][T12304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'. [ 509.584903][T10775] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.596052][T10775] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.605461][T10775] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.615281][ T1206] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 509.635216][T12306] team0: Unable to change to the same mode the team is in [ 509.737609][T12310] bond0: (slave batadv0): Releasing backup interface [ 509.893028][ T5853] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 509.908878][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.928057][ T1206] usb 6-1: Product: syz [ 509.936658][T12310] bridge_slave_0: left allmulticast mode [ 509.957679][ T1206] usb 6-1: Manufacturer: syz [ 509.977584][T12310] bridge_slave_0: left promiscuous mode [ 509.982989][ T1206] usb 6-1: SerialNumber: syz [ 509.993291][T12310] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.014828][T12310] bridge_slave_1: left allmulticast mode [ 510.020489][T12310] bridge_slave_1: left promiscuous mode [ 510.026647][T12310] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.034675][ T1206] hso 6-1:6.2: Failed to find INT IN ep [ 510.043829][T12317] netlink: 'syz.3.1534': attribute type 1 has an invalid length. [ 510.055233][T12317] netlink: 'syz.3.1534': attribute type 2 has an invalid length. [ 510.067580][T12310] bond0: (slave bond_slave_0): Releasing backup interface [ 510.090690][T12310] bond0: (slave bond_slave_1): Releasing backup interface [ 510.092629][T12310] team0: Port device team_slave_0 removed [ 510.107281][T12310] team0: Port device team_slave_1 removed [ 510.108001][T12310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.109965][T12310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.118687][T12310] team0: Port device batadv1 removed [ 510.149283][T12314] team0: Mode changed to "loadbalance" [ 510.245176][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 510.321634][T12321] loop6: detected capacity change from 0 to 6 [ 510.326202][T12321] Dev loop6: unable to read RDB block 6 [ 510.326239][T12321] loop6: unable to read partition table [ 510.326391][T12321] loop6: partition table beyond EOD, truncated [ 510.326407][T12321] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 510.358713][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/157.tmp-b7:6' failed: Read-only file system [ 510.400803][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/157.tmp-b7:6' failed: Read-only file system [ 510.433650][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 510.760679][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/157.tmp-b7:6' failed: Read-only file system [ 510.861007][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/158.tmp-b7:6' failed: Read-only file system [ 511.062950][ T6027] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 511.243674][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 511.633061][ T6027] usb 3-1: device descriptor read/64, error -71 [ 511.670116][ T10] usb 6-1: USB disconnect, device number 28 [ 511.737694][ T9] usb 4-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.803544][ T9] usb 4-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.856073][ T9] usb 4-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 511.883692][ T6027] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 511.926942][ T9] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 511.957467][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.024281][T12347] overlay: Unknown parameter 'smackfshat' [ 512.044547][ T6027] usb 3-1: device descriptor read/64, error -71 [ 512.301463][ T6027] usb usb3-port1: attempt power cycle [ 512.740780][ T9] elo 0003:04E7:0030.0012: unknown main item tag 0x0 [ 512.928436][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/158.tmp-b7:6' failed: Read-only file system [ 512.964024][ T9] elo 0003:04E7:0030.0012: unknown main item tag 0x0 [ 512.999800][ T9] elo 0003:04E7:0030.0012: unknown main item tag 0x0 [ 513.034551][ T9] elo 0003:04E7:0030.0012: unknown main item tag 0x0 [ 513.050335][ T9] elo 0003:04E7:0030.0012: unknown main item tag 0x0 [ 513.088388][ T9] elo 0003:04E7:0030.0012: unknown main item tag 0x0 [ 513.120199][ T9] elo 0003:04E7:0030.0012: unknown main item tag 0x0 [ 513.130087][ T9] elo 0003:04E7:0030.0012: unknown main item tag 0x0 [ 513.157068][ T9] elo 0003:04E7:0030.0012: unknown main item tag 0x0 [ 513.188863][ T9] elo 0003:04E7:0030.0012: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.3-1/input0 [ 513.232733][ T9] usb 4-1: USB disconnect, device number 38 [ 513.243223][ T6027] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 513.283984][ T6027] usb 3-1: device descriptor read/8, error -71 [ 513.404052][T12361] fido_id[12361]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 513.524987][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 513.535805][ T6027] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 513.559649][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1547'. [ 513.578131][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 513.594211][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 513.632660][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1547'. [ 513.767176][ T6027] usb 3-1: device not accepting address 58, error -71 [ 513.777311][ T6027] usb usb3-port1: unable to enumerate USB device [ 513.788582][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/158.tmp-b7:6' failed: Read-only file system [ 513.966994][T12367] team0: Unable to change to the same mode the team is in [ 513.994470][T12372] loop6: detected capacity change from 0 to 6 [ 514.017463][T12372] Dev loop6: unable to read RDB block 6 [ 514.035528][T12372] loop6: unable to read partition table [ 514.087622][T12372] loop6: partition table beyond EOD, truncated [ 514.144122][T12372] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 514.188994][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/159.tmp-b7:6' failed: Read-only file system [ 514.434838][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/159.tmp-b7:6' failed: Read-only file system [ 514.646656][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/159.tmp-b7:6' failed: Read-only file system [ 514.734339][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 514.943635][ T9] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 516.180742][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 516.207805][ T9] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 516.232657][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.277297][ T9] usb 6-1: Product: syz [ 516.281413][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/160.tmp-b7:6' failed: Read-only file system [ 516.292414][ T9] usb 6-1: Manufacturer: syz [ 516.302030][ T9] usb 6-1: SerialNumber: syz [ 516.330438][ T9] usb 6-1: config 0 descriptor?? [ 516.484806][ T6027] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 517.261503][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/160.tmp-b7:6' failed: Read-only file system [ 517.273133][ T6027] usb 4-1: Using ep0 maxpacket: 32 [ 517.305506][ T6027] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 517.315569][ T6027] usb 4-1: config 0 has no interface number 0 [ 517.331937][ T6027] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 517.342117][ T6027] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.350244][ T6027] usb 4-1: Product: syz [ 517.355613][ T6027] usb 4-1: Manufacturer: syz [ 517.363368][ T6027] usb 4-1: SerialNumber: syz [ 517.375183][ T6027] usb 4-1: config 0 descriptor?? [ 517.396021][ T6027] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 517.651283][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1551'. [ 517.708774][T10784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.722958][T10432] block nbd0: Possible stuck request ffff8880266d5080: control (read@0,1024B). Runtime 270 seconds [ 517.734530][T10432] block nbd0: Possible stuck request ffff8880266d5240: control (read@1024,1024B). Runtime 270 seconds [ 517.747049][T10432] block nbd0: Possible stuck request ffff8880266d5400: control (read@2048,1024B). Runtime 270 seconds [ 517.759823][T10432] block nbd0: Possible stuck request ffff8880266d55c0: control (read@3072,1024B). Runtime 270 seconds [ 517.760263][T10784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.780820][ T6027] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 517.798930][ T6027] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 518.121488][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 518.249617][T12428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1562'. [ 518.352966][ T6027] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 518.376800][T12431] loop6: detected capacity change from 0 to 6 [ 518.386271][T12431] Dev loop6: unable to read RDB block 6 [ 518.392158][T12431] loop6: unable to read partition table [ 518.401281][T12431] loop6: partition table beyond EOD, truncated [ 518.433522][T12431] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 518.487530][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1564'. [ 518.500252][T12433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'. [ 518.516945][ T6027] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.529416][ T6027] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.531478][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1564'. [ 518.569752][T12433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'. [ 518.687259][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/162.tmp-b7:6' failed: Read-only file system [ 518.720405][T12433] team0: Unable to change to the same mode the team is in [ 518.804624][ T6027] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 518.814035][ T6027] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.886223][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1565'. [ 518.924322][T12438] geneve2: entered promiscuous mode [ 518.929731][T12438] geneve2: entered allmulticast mode [ 518.975054][ T6027] usb 5-1: config 0 descriptor?? [ 519.320415][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 519.342061][ T5929] usb 4-1: USB disconnect, device number 39 [ 520.565194][ T6027] saitek 0003:06A3:0CFA.0013: item fetching failed at offset 5/7 [ 520.580062][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/162.tmp-b7:6' failed: Read-only file system [ 520.583297][ T5929] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 520.625156][ T6027] saitek 0003:06A3:0CFA.0013: parse failed [ 520.631064][ T6027] saitek 0003:06A3:0CFA.0013: probe with driver saitek failed with error -22 [ 520.820364][ T5929] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 520.842800][ T6027] usb 5-1: USB disconnect, device number 51 [ 520.899158][ T5929] quatech2 4-1:0.51: device disconnected [ 520.925700][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 520.996396][ T5902] usb 6-1: USB disconnect, device number 29 [ 521.078999][T12453] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1569'. [ 521.170175][T12453] netlink: 'syz.2.1569': attribute type 2 has an invalid length. [ 521.194647][ T30] audit: type=1400 audit(2000000048.870:921): avc: denied { create } for pid=12449 comm="syz.2.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 521.393253][ T30] audit: type=1400 audit(2000000048.890:922): avc: denied { ioctl } for pid=12449 comm="syz.2.1569" path="socket:[37173]" dev="sockfs" ino=37173 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 521.472745][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 521.752099][T12460] i2c i2c-0: Invalid block write size 33 [ 521.907595][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 521.950507][T12471] loop6: detected capacity change from 0 to 6 [ 521.977393][T12471] Dev loop6: unable to read RDB block 6 [ 521.991738][T12471] loop6: unable to read partition table [ 522.004939][T12471] loop6: partition table beyond EOD, truncated [ 522.027853][T12471] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 522.048574][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/163.tmp-b7:6' failed: Read-only file system [ 522.118785][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/163.tmp-b7:6' failed: Read-only file system [ 522.519303][ T30] audit: type=1400 audit(2000000050.260:923): avc: denied { wake_alarm } for pid=12477 comm="syz.5.1577" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 522.540813][ T5929] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 522.574619][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/163.tmp-b7:6' failed: Read-only file system [ 522.657472][T12483] 9pnet_fd: Insufficient options for proto=fd [ 522.685511][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1580'. [ 522.695013][T12485] tipc: Started in network mode [ 522.703596][T12485] tipc: Node identity 86d7d185212d, cluster identity 4711 [ 522.711277][T12485] tipc: Enabled bearer , priority 0 [ 522.723176][ T5929] usb 3-1: Using ep0 maxpacket: 32 [ 522.742640][ T5929] usb 3-1: config 1 interface 0 altsetting 42 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 522.762730][T12488] syzkaller0: entered promiscuous mode [ 522.783381][ T5929] usb 3-1: config 1 interface 0 has no altsetting 0 [ 522.794465][ T5929] usb 3-1: New USB device found, idVendor=0eef, idProduct=7224, bcdDevice= 0.40 [ 522.815390][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 522.844641][T12488] syzkaller0: entered allmulticast mode [ 522.851257][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.887040][ T5929] usb 3-1: Product: Ы [ 522.891226][ T5929] usb 3-1: Manufacturer: 䶣왯臺츻虘죬䫤쑣䪥ỹ㮶橥ꂱ눍䃼鴡麾䎔嶿๮䝫纈欪츥걫绕쳔軽䠖耲ꨕꌒ㥵虿锼蹕綅쳌猢⇪芞夎篸惑঒ᬩ闵 [ 522.936193][T12492] befs: (nullb0): No write support. Marking filesystem read-only [ 522.951367][T12492] befs: (nullb0): invalid magic header [ 523.034155][ T5929] usb 3-1: SerialNumber: 늕냫ҙ౉ῶ쐲緭綈알⺸緊䦴䈴뺣镂⹙氶壖ﮍᗆ䄟ৠ⍍Ꮺ䷜ஐ钘ﶆ겨ᡴາ쳰쐴拉롨뵡촎魍铺晛뛽乆謷딧축 [ 523.245228][T12485] tipc: Resetting bearer [ 523.257396][T12484] tipc: Resetting bearer [ 523.284183][T12484] tipc: Disabling bearer [ 524.029737][T12472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.066222][T12472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.217059][T12512] random: crng reseeded on system resumption [ 524.251221][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 524.407665][ T30] audit: type=1326 audit(2000000052.150:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.5.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5b78eba9 code=0x7ffc0000 [ 524.454623][ T30] audit: type=1326 audit(2000000052.150:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.5.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5b78eba9 code=0x7ffc0000 [ 524.481719][ T30] audit: type=1326 audit(2000000052.190:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.5.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7f5b78eba9 code=0x7ffc0000 [ 524.525577][T12516] pim6reg: entered allmulticast mode [ 524.574348][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 524.662123][ T30] audit: type=1326 audit(2000000052.190:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.5.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5b78eba9 code=0x7ffc0000 [ 524.698158][ T30] audit: type=1326 audit(2000000052.190:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.5.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5b78eba9 code=0x7ffc0000 [ 524.731586][ T30] audit: type=1326 audit(2000000052.190:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.5.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7f5b78eba9 code=0x7ffc0000 [ 524.754886][ C0] vkms_vblank_simulate: vblank timer overrun [ 524.916245][T12516] netlink: 4856 bytes leftover after parsing attributes in process `syz.5.1586'. [ 524.925668][T12516] openvswitch: netlink: Message has 5620 unknown bytes. [ 524.932696][T12516] openvswitch: netlink: Actions may not be safe on all matching packets [ 524.965933][ T30] audit: type=1326 audit(2000000052.190:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.5.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5b78eba9 code=0x7ffc0000 [ 524.989370][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.012335][T12527] FAULT_INJECTION: forcing a failure. [ 525.012335][T12527] name failslab, interval 1, probability 0, space 0, times 0 [ 525.029811][T12527] CPU: 1 UID: 0 PID: 12527 Comm: syz.3.1590 Not tainted syzkaller #0 PREEMPT(full) [ 525.029831][T12527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 525.029837][T12527] Call Trace: [ 525.029841][T12527] [ 525.029845][T12527] dump_stack_lvl+0x16c/0x1f0 [ 525.029863][T12527] should_fail_ex+0x512/0x640 [ 525.029877][T12527] ? __kmalloc_noprof+0xbf/0x510 [ 525.029890][T12527] ? fuse_dev_do_write+0x3182/0x3490 [ 525.029906][T12527] should_failslab+0xc2/0x120 [ 525.029918][T12527] __kmalloc_noprof+0xd2/0x510 [ 525.029928][T12527] ? fuse_copy_do+0x31b/0x430 [ 525.029942][T12527] fuse_dev_do_write+0x3182/0x3490 [ 525.029957][T12527] ? __lock_acquire+0xb97/0x1ce0 [ 525.029973][T12527] ? _parse_integer_limit+0x17f/0x1d0 [ 525.029988][T12527] ? __pfx_fuse_dev_do_write+0x10/0x10 [ 525.030001][T12527] ? __pfx__kstrtoull+0x10/0x10 [ 525.030015][T12527] ? find_held_lock+0x2b/0x80 [ 525.030029][T12527] ? __lock_acquire+0x62e/0x1ce0 [ 525.030051][T12527] ? __asan_memset+0x23/0x50 [ 525.030068][T12527] fuse_dev_write+0x155/0x1e0 [ 525.030083][T12527] ? __pfx_fuse_dev_write+0x10/0x10 [ 525.030101][T12527] ? bpf_lsm_file_permission+0x9/0x10 [ 525.030114][T12527] ? security_file_permission+0x71/0x210 [ 525.030132][T12527] ? rw_verify_area+0xcf/0x6c0 [ 525.030153][T12527] vfs_write+0x7d0/0x11d0 [ 525.030165][T12527] ? __pfx_fuse_dev_write+0x10/0x10 [ 525.030181][T12527] ? __pfx_vfs_write+0x10/0x10 [ 525.030190][T12527] ? find_held_lock+0x2b/0x80 [ 525.030211][T12527] ksys_write+0x12a/0x250 [ 525.030221][T12527] ? __pfx_ksys_write+0x10/0x10 [ 525.030236][T12527] do_syscall_64+0xcd/0x4e0 [ 525.030251][T12527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.030262][T12527] RIP: 0033:0x7ff10db8eba9 [ 525.030271][T12527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.030281][T12527] RSP: 002b:00007ff10bdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 525.030291][T12527] RAX: ffffffffffffffda RBX: 00007ff10ddd6090 RCX: 00007ff10db8eba9 [ 525.030298][T12527] RDX: 000000000000002a RSI: 0000200000000080 RDI: 0000000000000003 [ 525.030304][T12527] RBP: 00007ff10bdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 525.030309][T12527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.030315][T12527] R13: 00007ff10ddd6128 R14: 00007ff10ddd6090 R15: 00007ffc9deeceb8 [ 525.030328][T12527] [ 525.612189][ T5929] usbhid 3-1:1.0: can't add hid device: -71 [ 525.647806][ T5864] udevd[5864]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 525.659899][ T5929] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 525.725608][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 525.800577][ T5929] usb 3-1: USB disconnect, device number 59 [ 526.611422][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 527.986270][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 528.967104][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 528.967127][ T30] audit: type=1400 audit(2000000056.710:970): avc: denied { setopt } for pid=12583 comm="syz.4.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 528.994376][T12553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12553 comm=syz.6.1596 [ 529.102394][ T30] audit: type=1400 audit(2000000056.840:971): avc: denied { mount } for pid=12583 comm="syz.4.1604" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 529.243659][ T5902] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 530.142455][ T30] audit: type=1400 audit(2000000057.880:972): avc: denied { append } for pid=12593 comm="syz.3.1607" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 530.142493][T12594] random: crng reseeded on system resumption [ 530.214824][ T5902] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 530.229740][ T5902] usb 3-1: config 0 has no interface number 0 [ 530.236420][ T5902] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 530.272660][ T30] audit: type=1400 audit(2000000058.010:973): avc: denied { ioctl } for pid=12593 comm="syz.3.1607" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 530.283439][ T5902] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 530.319597][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 530.370084][ T5902] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 530.426582][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 530.433889][T12600] tipc: Enabled bearer , priority 0 [ 530.459198][T12600] syzkaller0: entered promiscuous mode [ 530.470832][T12600] syzkaller0: entered allmulticast mode [ 530.476988][ T5902] usb 3-1: Product: syz [ 530.483588][ T5902] usb 3-1: SerialNumber: syz [ 530.586758][ T5902] usb 3-1: config 0 descriptor?? [ 530.601622][T12574] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 530.617729][ T5902] cm109 3-1:0.8: invalid payload size 64, expected 4 [ 530.627526][T12600] tipc: Resetting bearer [ 531.181049][T12599] tipc: Resetting bearer [ 531.189851][ T5902] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input29 [ 531.200558][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 531.224815][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 531.233779][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 531.240927][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 531.248350][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 531.256463][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 531.263932][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 531.271062][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 531.278484][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 531.285913][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 531.293528][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 531.339612][T12599] tipc: Disabling bearer [ 531.448669][T12611] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[12611] [ 531.463730][T11975] tipc: Node number set to 806692101 [ 531.471482][ T5864] udevd[5864]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 531.491863][ T5902] usb 3-1: USB disconnect, device number 60 [ 531.498520][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 531.574085][ T5902] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 531.626641][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 531.713781][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 532.070994][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 532.423641][ T5902] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 533.094318][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 533.101105][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 533.117466][ T5902] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 533.151384][ T5902] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 533.278541][ T5902] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 533.290784][ T5902] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 533.301056][ T5902] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 533.313619][ T5902] usb 3-1: config 0 has no interface number 0 [ 533.780219][ T5902] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 533.806945][ T5902] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 533.821482][ T5902] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 533.831917][ T5902] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 533.849570][ T5902] usb 3-1: config 0 interface 125 has no altsetting 0 [ 533.869428][ T5902] usb 3-1: config 0 interface 125 has no altsetting 2 [ 533.890825][ T5902] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 533.901651][T12638] netlink: 'syz.5.1620': attribute type 1 has an invalid length. [ 533.910270][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.921711][ T5902] usb 3-1: Product: syz [ 533.931729][ T5902] usb 3-1: Manufacturer: syz [ 534.007095][ T5902] usb 3-1: SerialNumber: syz [ 534.013518][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 534.036140][ T5902] usb 3-1: config 0 descriptor?? [ 534.041140][ T30] audit: type=1400 audit(2000000061.750:974): avc: denied { map } for pid=12639 comm="syz.6.1621" path="/proc/sys/net/ipv4/vs/sync_qlen_max" dev="proc" ino=36772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 534.077898][ T5902] usb 3-1: selecting invalid altsetting 2 [ 534.163259][T11975] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 534.380047][T11975] usb 6-1: unable to get BOS descriptor or descriptor too short [ 534.531078][T11975] usb 6-1: not running at top speed; connect to a high speed hub [ 534.540939][T11975] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.552368][T11975] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 534.583724][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 534.597288][T11975] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 534.613595][T11975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.634514][T11975] usb 6-1: Product: syz [ 534.639516][T11975] usb 6-1: Manufacturer: syz [ 534.647604][T11975] usb 6-1: SerialNumber: syz [ 534.935350][T12644] siw: device registration error -23 [ 534.964084][T12624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.985610][T12624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.400050][ T5902] get_1284_register timeout [ 535.524902][ T5902] uss720 3-1:0.125: probe with driver uss720 failed with error -5 [ 535.524945][ C0] usb 3-1: async_complete: urb error -104 [ 535.557974][T11975] usb 6-1: skipping empty audio interface (v1) [ 535.700292][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 535.771666][ T5902] usb 3-1: USB disconnect, device number 61 [ 535.838587][ T30] audit: type=1400 audit(2000000063.570:975): avc: denied { execmod } for pid=12655 comm="syz.3.1625" path="/dev/snd/pcmC0D0p" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 535.878664][T11975] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 535.933316][T12660] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1626'. [ 535.967753][ T8440] udevd[8440]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.991666][T11975] usb 6-1: USB disconnect, device number 30 [ 536.063271][T12653] syz.6.1624 (12653): drop_caches: 2 [ 536.217575][T12664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1627'. [ 537.340452][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 537.353964][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1631'. [ 538.353034][ T6027] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 538.383364][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 538.396655][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1631'. [ 538.412013][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1631'. [ 538.432982][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1631'. [ 538.510732][ T6125] udevd[6125]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 538.669569][ T6027] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 538.695803][ T6027] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 538.705703][ T6027] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 538.714939][ T6027] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 538.722983][ T6027] usb 7-1: SerialNumber: syz [ 538.942637][ T6027] usb 7-1: 0:2 : does not exist [ 538.961268][ T6027] usb 7-1: USB disconnect, device number 3 [ 539.145819][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.282789][ T5902] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 539.509045][T12686] team0: Unable to change to the same mode the team is in [ 540.005896][ T5902] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 540.114814][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 540.129792][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 540.157970][T12697] tipc: Enabled bearer , priority 0 [ 540.219883][T12697] syzkaller0: entered promiscuous mode [ 540.228971][T12697] syzkaller0: entered allmulticast mode [ 540.267530][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 540.395205][T12699] tipc: Resetting bearer [ 540.414000][T12696] tipc: Resetting bearer [ 540.438673][T12696] tipc: Disabling bearer [ 540.484601][ T5902] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 540.512098][T12714] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1641'. [ 540.811932][ T5902] usb 4-1: device descriptor read/64, error -71 [ 540.870013][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 541.312294][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 541.323859][ T5902] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 541.463603][ T5902] usb 4-1: device descriptor read/64, error -71 [ 541.598226][ T5902] usb usb4-port1: attempt power cycle [ 541.706156][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 541.713085][ T30] audit: type=1400 audit(2000000069.450:976): avc: denied { ioctl } for pid=12738 comm="syz.2.1648" path="socket:[37979]" dev="sockfs" ino=37979 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 541.746718][T12739] bond0: (slave rose0): Enslaving as an active interface with an up link [ 541.762695][ T30] audit: type=1400 audit(2000000069.500:977): avc: denied { bind } for pid=12738 comm="syz.2.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 541.785317][ T30] audit: type=1400 audit(2000000069.500:978): avc: denied { write } for pid=12738 comm="syz.2.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 541.859132][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 541.963461][ T5902] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 541.984031][ T5902] usb 4-1: device descriptor read/8, error -71 [ 542.059291][T12747] netlink: 'syz.5.1649': attribute type 21 has an invalid length. [ 542.077153][T12747] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1649'. [ 542.103519][T12747] netlink: 'syz.5.1649': attribute type 4 has an invalid length. [ 542.140301][T12749] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1649'. [ 542.149959][T12747] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1649'. [ 542.313457][ T5902] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 542.342221][ T5902] usb 4-1: device descriptor read/8, error -71 [ 542.518351][ T5902] usb usb4-port1: unable to enumerate USB device [ 542.566070][T12756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1651'. [ 542.673723][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 542.792387][ T5853] Bluetooth: hci5: link tx timeout [ 542.802008][ T5853] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 542.814278][ T5853] Bluetooth: hci5: link tx timeout [ 542.819440][ T5853] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 542.872182][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 542.947327][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 543.359919][ T30] audit: type=1400 audit(2000000071.090:979): avc: denied { add_name } for pid=12762 comm="syz.6.1654" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 543.380520][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.400447][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1655'. [ 543.409367][T12768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1655'. [ 543.419366][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1655'. [ 543.428545][T12768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1655'. [ 543.531571][ T30] audit: type=1400 audit(2000000071.100:980): avc: denied { create } for pid=12762 comm="syz.6.1654" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 543.615843][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 543.942429][T12771] netlink: 'syz.2.1656': attribute type 10 has an invalid length. [ 544.427913][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 544.462584][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 544.688165][T12789] smc: net device bond0 applied user defined pnetid SYZ2 [ 544.853044][T12122] Bluetooth: hci5: command 0x0406 tx timeout [ 545.727136][T12803] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000600000000000000000006' [ 546.066053][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 546.124446][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 546.199069][T12805] netlink: 'syz.6.1667': attribute type 11 has an invalid length. [ 546.228815][ T5864] udevd[5864]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 546.261569][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 546.322247][ T30] audit: type=1400 audit(2000000074.020:981): avc: denied { read } for pid=12804 comm="syz.6.1667" path="socket:[38065]" dev="sockfs" ino=38065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 546.335429][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1669'. [ 546.346639][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.347949][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 546.375102][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.388558][T12810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1669'. [ 546.488118][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.499981][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 546.511878][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.624633][ T9] usb 4-1: config 0 descriptor?? [ 546.680904][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 546.755770][T12810] team0: Unable to change to the same mode the team is in [ 547.247269][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 547.254832][ T9] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x0 [ 547.259415][T12122] Bluetooth: hci5: command 0x0406 tx timeout [ 547.282471][ T9] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x0 [ 547.431407][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 547.432559][ T9] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x0 [ 547.566605][ T9] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x0 [ 547.619402][T12829] __nla_validate_parse: 2 callbacks suppressed [ 547.619417][T12829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1672'. [ 547.878359][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 547.888833][ T9] konepure 0003:1E7D:2DB4.0015: hidraw1: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 547.957728][ T9] usb 4-1: USB disconnect, device number 44 [ 548.071835][T12835] fido_id[12835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 548.086719][T12838] netlink: 1296 bytes leftover after parsing attributes in process `syz.5.1676'. [ 548.544837][ T25] block nbd0: Possible stuck request ffff8880266d5080: control (read@0,1024B). Runtime 300 seconds [ 548.556027][ T25] block nbd0: Possible stuck request ffff8880266d5240: control (read@1024,1024B). Runtime 300 seconds [ 548.567237][ T25] block nbd0: Possible stuck request ffff8880266d5400: control (read@2048,1024B). Runtime 300 seconds [ 548.578374][ T25] block nbd0: Possible stuck request ffff8880266d55c0: control (read@3072,1024B). Runtime 300 seconds [ 548.673547][ T43] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 548.874931][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 548.901835][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 548.914956][ T43] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 548.933679][ T43] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 548.970806][ T43] usb 7-1: Product: syz [ 548.975854][ T43] usb 7-1: Manufacturer: syz [ 548.980468][ T43] usb 7-1: SerialNumber: syz [ 549.031666][T12853] afs: Unknown parameter '0xffffffffffffffff' [ 549.126356][ T43] usb 7-1: config 0 descriptor?? [ 549.128280][T12859] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 549.285534][T12859] bridge2: entered allmulticast mode [ 549.402711][T12867] hub 9-0:1.0: USB hub found [ 549.409847][T12867] hub 9-0:1.0: 1 port detected [ 549.708989][T12122] Bluetooth: hci5: command 0x0406 tx timeout [ 549.742384][T12868] block nbd5: Attempted send on invalid socket [ 549.780428][T12868] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 549.822017][T12868] hfsplus: unable to find HFS+ superblock [ 549.885186][ T43] usb 7-1: USB disconnect, device number 4 [ 550.568576][T12879] netlink: 892 bytes leftover after parsing attributes in process `syz.3.1686'. [ 550.598528][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 550.691326][T12883] loop2: detected capacity change from 0 to 7 [ 550.705986][ T5981] Dev loop2: unable to read RDB block 7 [ 550.711696][ T5981] loop2: unable to read partition table [ 550.719958][ T5981] loop2: partition table beyond EOD, truncated [ 550.731970][T12883] Dev loop2: unable to read RDB block 7 [ 550.741463][T12883] loop2: unable to read partition table [ 551.060732][T12883] loop2: partition table beyond EOD, truncated [ 551.308822][T12883] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 551.386701][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/165.tmp-b7:2' failed: Read-only file system [ 551.491658][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/165.tmp-b7:2' failed: Read-only file system [ 552.131623][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/165.tmp-b7:2' failed: Read-only file system [ 552.436494][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1694'. [ 552.479199][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 552.524909][ T30] audit: type=1400 audit(2000000080.270:982): avc: denied { read } for pid=12900 comm="syz.5.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 552.586300][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1694'. [ 552.609462][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 552.640739][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1694'. [ 552.661185][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1694'. [ 552.778693][T12904] team0: Unable to change to the same mode the team is in [ 552.816913][ T30] audit: type=1400 audit(2000000080.560:983): avc: denied { ioctl } for pid=12907 comm="syz.2.1695" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 553.000803][T12917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.010996][T12917] batadv_slave_0: entered promiscuous mode [ 553.646394][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 554.336292][T12934] netlink: 'syz.3.1700': attribute type 1 has an invalid length. [ 554.818288][T12944] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1704'. [ 554.941372][T12946] befs: (nullb0): No write support. Marking filesystem read-only [ 554.962295][T12946] befs: (nullb0): invalid magic header [ 555.008142][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1702'. [ 555.234531][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 555.252163][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 555.407830][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 555.652386][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 555.864569][ T5902] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 556.027730][T12966] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 556.039455][T12966] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 556.550078][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 556.664123][ T5902] usb 6-1: Using ep0 maxpacket: 32 [ 557.955826][ T30] audit: type=1400 audit(2000000085.110:984): avc: denied { unmount } for pid=11803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 558.035602][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 558.058951][T12971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1711'. [ 558.115654][T12978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1711'. [ 558.127205][ T5902] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 558.136798][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.148060][ T5902] usb 6-1: config 0 descriptor?? [ 558.155428][ T5902] gspca_main: sq930x-2.14.0 probing 041e:403c [ 558.256399][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 558.400315][ T30] audit: type=1400 audit(2000000086.130:985): avc: denied { map } for pid=12979 comm="syz.6.1713" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 558.446636][T12982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.462735][ T30] audit: type=1400 audit(2000000086.140:986): avc: denied { execute } for pid=12979 comm="syz.6.1713" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 558.487872][ T30] audit: type=1400 audit(2000000086.180:987): avc: denied { create } for pid=12979 comm="syz.6.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 558.554690][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 558.910891][T12979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.072275][ T30] audit: type=1400 audit(2000000086.810:988): avc: denied { create } for pid=12996 comm="syz.4.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 559.538762][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 559.553503][ T5902] gspca_sq930x: reg_w 0105 bf00 failed -110 [ 559.949608][T13008] bridge1: entered promiscuous mode [ 560.091787][ T5902] sq930x 6-1:0.0: probe with driver sq930x failed with error -110 [ 560.317021][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 560.340834][ T5902] usb 6-1: USB disconnect, device number 31 [ 560.575627][ T5852] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 560.704823][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 560.773113][ T5852] usb 3-1: Using ep0 maxpacket: 8 [ 560.781352][ T5852] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 560.793338][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.803433][ T5852] usb 3-1: Product: syz [ 560.807699][ T5852] usb 3-1: Manufacturer: syz [ 560.813239][ T5852] usb 3-1: SerialNumber: syz [ 560.894956][ T5852] usb 3-1: config 0 descriptor?? [ 560.909340][ T5852] gspca_main: sq905-2.14.0 probing 2770:9120 [ 561.331981][T13028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1724'. [ 561.342005][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1724'. [ 561.384884][T13028] IPv6: sit1: Disabled Multicast RS [ 561.396193][T13028] sit1: entered allmulticast mode [ 561.704163][ T5852] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 561.711896][ T5852] sq905 3-1:0.0: probe with driver sq905 failed with error -110 [ 562.304990][ T30] audit: type=1400 audit(2000000090.050:989): avc: denied { watch watch_reads } for pid=13013 comm="syz.2.1721" path="pipe:[38352]" dev="pipefs" ino=38352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 562.627298][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.745067][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.934389][T13047] block nbd5: Attempted send on invalid socket [ 562.942895][T13047] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 562.971201][T13047] hfsplus: unable to find HFS+ superblock [ 563.034699][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 563.244066][T13049] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 563.925661][ T9] usb 3-1: USB disconnect, device number 62 [ 564.105408][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 564.118013][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 564.895850][T13075] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1732'. [ 564.943101][T13075] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1732'. [ 565.181900][ T30] audit: type=1400 audit(2000000092.920:990): avc: denied { getopt } for pid=13076 comm="syz.5.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 565.286627][T13066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1731'. [ 565.806586][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 565.925016][T13090] befs: (nullb0): No write support. Marking filesystem read-only [ 565.936732][T13090] befs: (nullb0): invalid magic header [ 566.042040][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1737'. [ 566.311465][T13088] kvm_pr_unimpl_wrmsr: 231 callbacks suppressed [ 566.311477][T13088] kvm_intel: kvm [13084]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 566.329806][T13088] kvm_intel: kvm [13084]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 566.412195][T13088] kvm_intel: kvm [13084]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 566.747651][T13088] kvm_intel: kvm [13084]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 566.772751][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 566.811842][T13088] kvm_intel: kvm [13084]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 566.935681][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 567.010980][T13108] netlink: 'syz.6.1741': attribute type 1 has an invalid length. [ 567.938971][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 568.021192][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 568.245023][ T5929] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 569.322398][ T5929] hid-generic 0000:0000:0000.0016: hidraw1: HID v0.00 Device [syz1] on syz0 [ 569.569966][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 569.687843][T13139] fido_id[13139]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 569.720375][T13140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1747'. [ 569.732109][T13140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1747'. [ 569.826818][ T5864] udevd[5864]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 569.932973][ T5852] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 570.264622][ T5852] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 570.364109][ T5852] usb 6-1: config 0 has no interface number 0 [ 570.379513][ T5852] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 570.390816][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.401167][ T5852] usb 6-1: Product: syz [ 570.734391][ T5852] usb 6-1: Manufacturer: syz [ 570.773846][ T5852] usb 6-1: SerialNumber: syz [ 571.062978][ T5852] usb 6-1: config 0 descriptor?? [ 571.161084][T13159] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 571.204120][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 571.226344][T13159] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 571.232880][T13159] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 571.259124][T13167] loop8: detected capacity change from 0 to 8 [ 571.284548][T13159] vhci_hcd vhci_hcd.0: Device attached [ 571.292220][T13164] vhci_hcd: connection closed [ 571.295881][ T5852] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 571.302578][T13167] Dev loop8: unable to read RDB block 8 [ 571.315946][T10777] vhci_hcd: stop threads [ 571.320200][T10777] vhci_hcd: release socket [ 571.326113][T10777] vhci_hcd: disconnect device [ 571.333023][T13167] loop8: unable to read partition table [ 571.347221][T13167] loop8: partition table beyond EOD, truncated [ 571.360921][ T5864] udevd[5864]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 571.372539][T13167] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 571.387955][ T5852] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 571.408422][ T5848] udevd[5848]: symlink '../../loop8' '/dev/disk/by-diskseq/167.tmp-b7:8' failed: Read-only file system [ 571.430306][ T5852] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 571.657915][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 571.687150][ T8440] udevd[8440]: symlink '../../loop8' '/dev/disk/by-diskseq/167.tmp-b7:8' failed: Read-only file system [ 571.734859][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 571.761505][ T5852] usb 6-1: media controller created [ 571.792099][ T8440] udevd[8440]: symlink '../../loop8' '/dev/disk/by-diskseq/167.tmp-b7:8' failed: Read-only file system [ 571.823489][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 571.830469][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 571.844716][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 571.846860][ T5852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 572.168508][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 572.193926][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 572.236776][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 572.253053][ T5852] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 572.357078][ T5852] usb 6-1: USB disconnect, device number 32 [ 572.390006][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 572.413043][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.666549][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 572.686983][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 572.692564][ T10] usbtmc 5-1:16.0: can't read capabilities [ 573.153172][ T5852] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 573.335539][ T5852] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 573.484222][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1767'. [ 573.486214][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.519925][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1767'. [ 573.585684][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.596418][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 573.613457][ T5852] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 573.624759][ T5852] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 573.635061][ T5852] usb 3-1: Manufacturer: syz [ 573.641671][ T5852] usb 3-1: config 0 descriptor?? [ 573.661353][T13212] Option 'Ӿ,0A' to dns_resolver key: bad/missing value [ 573.761195][T13214] team0: No ports can be present during mode change [ 573.768109][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1767'. [ 573.788641][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1767'. [ 574.054017][T13213] bridge_slave_0: left allmulticast mode [ 574.146940][ T5852] appleir 0003:05AC:8243.0017: unknown main item tag 0x0 [ 574.170664][ T5852] appleir 0003:05AC:8243.0017: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 574.211172][T13213] bridge_slave_0: left promiscuous mode [ 574.218816][T13213] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.292143][ T5852] usb 5-1: USB disconnect, device number 52 [ 574.333521][T13192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.359528][T13192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.510652][ T1206] usb 3-1: USB disconnect, device number 63 [ 575.052662][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 575.271022][ T30] audit: type=1400 audit(2000000103.010:991): avc: denied { connect } for pid=13227 comm="syz.2.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 575.539390][T13213] bridge_slave_1: left allmulticast mode [ 575.663776][T13213] bridge_slave_1: left promiscuous mode [ 575.686670][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 575.700032][T13213] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.244839][T12122] Bluetooth: hci3: unexpected event for opcode 0x200a [ 576.253732][T13213] bond0: (slave bond_slave_0): Releasing backup interface [ 576.278310][T13213] bond0: (slave bond_slave_1): Releasing backup interface [ 576.292579][T13213] team0: Port device team_slave_0 removed [ 576.412192][T13247] No memory to map [ 576.706451][T13213] team0: Port device team_slave_1 removed [ 576.714018][T13213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.725207][T13213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.734423][T13213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.748099][T10775] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.758281][T13224] tipc: Enabled bearer , priority 10 [ 576.809028][T13225] lo speed is unknown, defaulting to 1000 [ 576.814836][T13225] lo speed is unknown, defaulting to 1000 [ 576.821009][T13225] lo speed is unknown, defaulting to 1000 [ 576.832727][T13225] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 576.849179][T13225] lo speed is unknown, defaulting to 1000 [ 576.856206][T13225] lo speed is unknown, defaulting to 1000 [ 576.893728][T13225] lo speed is unknown, defaulting to 1000 [ 576.900937][T10777] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.914616][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 576.925746][T13225] lo speed is unknown, defaulting to 1000 [ 576.933235][T13225] lo speed is unknown, defaulting to 1000 [ 576.940276][T13225] lo speed is unknown, defaulting to 1000 [ 576.977194][T10777] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.006755][T10777] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.187851][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 577.876567][T13267] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 577.893798][T13267] team0: Port device batadv1 added [ 578.019176][T13269] kvm_intel: kvm [13268]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 578.054103][T13269] kvm_intel: kvm [13268]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 578.086371][T13269] kvm_intel: kvm [13268]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 578.113345][T13269] kvm_intel: kvm [13268]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 578.127870][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 578.190981][T13276] kvm_intel: kvm [13275]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 578.192516][T13269] kvm_intel: kvm [13268]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 578.213676][T13269] kvm_intel: kvm [13268]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 578.223193][T13269] kvm_intel: kvm [13268]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 578.237843][T13276] kvm_intel: kvm [13275]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 578.270495][T13276] kvm_intel: kvm [13275]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 578.321751][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 578.496429][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 578.747140][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 578.852476][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 579.033419][ T1206] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 579.078377][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 579.201726][ T25] block nbd0: Possible stuck request ffff8880266d5080: control (read@0,1024B). Runtime 330 seconds [ 579.213303][ T1206] usb 7-1: Using ep0 maxpacket: 16 [ 579.218839][ T25] block nbd0: Possible stuck request ffff8880266d5240: control (read@1024,1024B). Runtime 330 seconds [ 579.230412][ T25] block nbd0: Possible stuck request ffff8880266d5400: control (read@2048,1024B). Runtime 330 seconds [ 579.654057][ T25] block nbd0: Possible stuck request ffff8880266d55c0: control (read@3072,1024B). Runtime 330 seconds [ 579.688405][ T1206] usb 7-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 579.705837][ T1206] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.714712][ T1206] usb 7-1: Product: syz [ 579.719130][ T1206] usb 7-1: Manufacturer: syz [ 579.724201][ T1206] usb 7-1: SerialNumber: syz [ 579.733245][ T1206] usb 7-1: config 0 descriptor?? [ 579.747968][ T1206] ums-jumpshot 7-1:0.0: USB Mass Storage device detected [ 579.762557][ T1206] ums-jumpshot 7-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 580.260268][T13311] netlink: 'syz.6.1785': attribute type 10 has an invalid length. [ 580.260291][T13311] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1785'. [ 580.559914][T13315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1793'. [ 580.565466][T13311] dummy0: entered promiscuous mode [ 580.566895][T13311] bridge0: port 1(dummy0) entered blocking state [ 580.567127][T13311] bridge0: port 1(dummy0) entered disabled state [ 580.567481][T13311] dummy0: entered allmulticast mode [ 580.572609][T13311] bridge0: port 1(dummy0) entered blocking state [ 580.572786][T13311] bridge0: port 1(dummy0) entered forwarding state [ 580.618685][T13316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1793'. [ 580.626283][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 580.777153][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 580.785370][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.796790][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.807229][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 580.819334][ T9] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 580.844084][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.991685][ T9] usb 3-1: config 0 descriptor?? [ 581.146069][ T30] audit: type=1400 audit(2000000108.890:992): avc: denied { append } for pid=13321 comm="syz.5.1795" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 581.169440][ C0] vkms_vblank_simulate: vblank timer overrun [ 582.319557][ T9] hid (null): bogus close delimiter [ 582.496031][T13329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.506138][T13329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.613426][ T9] hid (null): invalid report_count -723372659 [ 582.622563][ T9] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 582.630177][ T9] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 582.637607][ T9] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 582.645261][ T9] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 582.652318][ T9] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 582.661466][ T9] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 582.669899][ T9] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 582.679546][ T9] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 582.687072][ T9] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 582.694649][ T9] cougar 0003:060B:500A.0018: unknown main item tag 0x0 [ 582.702147][ T9] cougar 0003:060B:500A.0018: unexpected long global item [ 582.710183][ T9] cougar 0003:060B:500A.0018: parse failed [ 582.717036][ T9] cougar 0003:060B:500A.0018: probe with driver cougar failed with error -22 [ 582.749810][ T9] usb 3-1: USB disconnect, device number 64 [ 582.831877][ T5852] usb 7-1: USB disconnect, device number 5 [ 582.886479][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 582.961680][T13333] sp0: Synchronizing with TNC [ 583.086171][ T5852] IPVS: starting estimator thread 0... [ 583.092703][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 583.253283][T13340] IPVS: using max 41 ests per chain, 98400 per kthread [ 583.289500][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 583.440783][T13348] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1802'. [ 583.731633][ T30] audit: type=1326 audit(2000000111.130:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13343 comm="syz.6.1802" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f139d38eba9 code=0x0 [ 583.815737][T13332] [U] [ 583.828737][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 584.465821][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/164.tmp-b7:6' failed: Read-only file system [ 584.510371][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/166.tmp-b7:2' failed: Read-only file system [ 585.116819][T13384] loop6: detected capacity change from 0 to 6 [ 585.132660][ T5981] Dev loop6: unable to read RDB block 6 [ 585.149509][ T5981] loop6: unable to read partition table [ 585.171704][ T5981] loop6: partition table beyond EOD, truncated [ 585.203866][T13384] Dev loop6: unable to read RDB block 6 [ 585.223724][T13384] loop6: unable to read partition table [ 585.236332][T13384] loop6: partition table beyond EOD, truncated [ 585.267990][T13384] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 585.347673][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/169.tmp-b7:6' failed: Read-only file system [ 585.445403][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/169.tmp-b7:6' failed: Read-only file system [ 585.635817][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/169.tmp-b7:6' failed: Read-only file system [ 585.682761][ T30] audit: type=1400 audit(2000000113.420:994): avc: denied { read } for pid=13385 comm="syz.5.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 586.083046][ T1206] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 586.265588][ T1206] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 586.274214][ T1206] usb 5-1: config 0 has no interface number 0 [ 586.280387][ T1206] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 586.299632][ T1206] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 586.310857][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.391757][ T1206] usb 5-1: config 0 descriptor?? [ 586.525505][ T1206] ttusbir 5-1:0.83: cannot find expected altsetting [ 586.588278][T13396] loop2: detected capacity change from 0 to 7 [ 586.673385][T13396] Dev loop2: unable to read RDB block 7 [ 586.679175][T13396] loop2: unable to read partition table [ 586.691788][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/170.tmp-b7:6' failed: Read-only file system [ 586.708618][T13396] loop2: partition table beyond EOD, truncated [ 586.714976][T13396] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 587.024114][ T1206] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 587.101004][ T5929] hid-generic 0000:0000:0000.0019: hidraw1: HID v0.00 Device [syz1] on syz0 [ 587.855620][ T1206] usb 7-1: Using ep0 maxpacket: 32 [ 587.869852][ T1206] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 587.882209][ T1206] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.037319][T13405] fido_id[13405]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 588.136413][T13413] ubi7: attaching mtd0 [ 588.140720][T13413] ubi7 error: ubi_attach_mtd_dev: bad VID header (3) or data offsets (67) [ 588.422881][ T5852] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 588.645276][ T1206] usb 7-1: config 0 descriptor?? [ 588.659117][ T1206] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 588.815075][ T5852] usb 4-1: unable to get BOS descriptor or descriptor too short [ 588.840734][ T5852] usb 4-1: not running at top speed; connect to a high speed hub [ 588.880866][ T5852] usb 4-1: config 1 interface 0 altsetting 64 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 588.892038][ T5852] usb 4-1: config 1 interface 0 has no altsetting 0 [ 588.904144][ T5852] usb 4-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.40 [ 588.913295][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.921296][ T5852] usb 4-1: Product: syz [ 588.925539][ T5852] usb 4-1: Manufacturer: ⷃ㠓耻萵㭻ⱥ㰑ㄦྗ擼ਨ磶ᆒ⥆妺䊿暸⳩/কᐏ햓센콧挊 [ 588.939873][ T5852] usb 4-1: SerialNumber: syz [ 589.023832][T13413] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 589.182139][ T6027] usb 5-1: USB disconnect, device number 53 [ 589.689741][T13431] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1824'. [ 590.039656][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/173.tmp-b7:2' failed: Read-only file system [ 590.117982][T13398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.148016][T13398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.412482][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/173.tmp-b7:2' failed: Read-only file system [ 590.529679][ T1206] gspca_vc032x: reg_w err -110 [ 590.542828][ T1206] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.560653][ T1206] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.578561][ T1206] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.599656][ T1206] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.632029][ T1206] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.666858][ T1206] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.688779][ T1206] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.708348][T13447] bridge0: port 1(syz_tun) entered blocking state [ 590.715726][T13447] bridge0: port 1(syz_tun) entered disabled state [ 590.724046][T13447] syz_tun: entered allmulticast mode [ 590.730588][T13447] syz_tun: entered promiscuous mode [ 591.173566][ T1206] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.179617][ T1206] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.185131][ T1206] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.192224][ T1206] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.197937][ T1206] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.203588][ T1206] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.209095][ T1206] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.210320][ T5852] usbhid 4-1:1.0: can't add hid device: -71 [ 591.223026][ T1206] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.228307][ T1206] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.237504][ T5852] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 591.270209][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/170.tmp-b7:6' failed: Read-only file system [ 591.311913][ T9] hid_parser_main: 73 callbacks suppressed [ 591.311925][ T9] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 591.339989][ T1206] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.345982][ T5852] usb 4-1: USB disconnect, device number 45 [ 591.365603][ T1206] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.474055][ T9] hid-generic 0000:0000:0000.001A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 591.498536][ T1206] gspca_vc032x: Unknown sensor... [ 591.639258][ T1206] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 591.932638][ T6027] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 592.107226][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/170.tmp-b7:6' failed: Read-only file system [ 592.109723][ T6882] udevd[6882]: symlink '../../loop2' '/dev/disk/by-diskseq/173.tmp-b7:2' failed: Read-only file system [ 592.202183][ T6027] usb 3-1: config 0 has an invalid interface number: 149 but max is 0 [ 592.233050][ T6027] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 592.246448][T13474] netlink: 'syz.3.1836': attribute type 21 has an invalid length. [ 592.267927][ T6027] usb 3-1: config 0 has an invalid interface number: 171 but max is 0 [ 592.279628][ T6027] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 592.294691][ T6027] usb 3-1: config 0 has no interface number 0 [ 592.341091][T13472] fido_id[13472]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 592.438150][ T6027] usb 3-1: config 0 has no interface number 1 [ 592.444922][ T6027] usb 3-1: config 0 interface 149 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 592.462324][ T6027] usb 3-1: config 0 interface 149 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 592.473332][ T6027] usb 3-1: config 0 interface 149 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 592.492906][ T6027] usb 3-1: config 0 interface 149 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 592.512204][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/170.tmp-b7:6' failed: Read-only file system [ 592.648180][ T6027] usb 3-1: too many endpoints for config 0 interface 171 altsetting 116: 170, using maximum allowed: 30 [ 592.659380][ T6027] usb 3-1: config 0 interface 171 altsetting 116 has an invalid descriptor for endpoint zero, skipping [ 592.673713][ T6027] usb 3-1: config 0 interface 171 altsetting 116 has an invalid descriptor for endpoint zero, skipping [ 592.685613][ T6027] usb 3-1: config 0 interface 171 altsetting 116 has an invalid descriptor for endpoint zero, skipping [ 592.698287][ T6027] usb 3-1: config 0 interface 171 altsetting 116 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 592.709374][ T6027] usb 3-1: config 0 interface 171 altsetting 116 has 6 endpoint descriptors, different from the interface descriptor's value: 170 [ 592.722788][ T6027] usb 3-1: config 0 interface 171 has no altsetting 0 [ 592.746671][ T6027] usb 3-1: New USB device found, idVendor=4971, idProduct=8017, bcdDevice=8b.4e [ 592.759418][ T6027] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.773166][ T6027] usb 3-1: Product: syz [ 592.895324][ T6027] usb 3-1: Manufacturer: syz [ 592.900482][ T6027] usb 3-1: SerialNumber: syz [ 592.907695][ T6027] usb 3-1: config 0 descriptor?? [ 592.915664][ T6027] usb-storage 3-1:0.149: USB Mass Storage device detected [ 592.928604][ T30] audit: type=1400 audit(2000000120.670:995): avc: denied { create } for pid=13479 comm="syz.5.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 592.957840][T13485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1839'. [ 592.974111][ T6027] usb-storage 3-1:0.149: Quirks match for vid 4971 pid 8017: 4000000 [ 593.410565][T13485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1839'. [ 593.472575][T13485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1839'. [ 593.560843][ T6027] usb-storage 3-1:0.171: USB Mass Storage device detected [ 593.633285][T13485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1839'. [ 593.677466][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/170.tmp-b7:6' failed: Read-only file system [ 593.698620][ T6027] usb-storage 3-1:0.171: Quirks match for vid 4971 pid 8017: 4000000 [ 593.730048][T13485] team0: Unable to change to the same mode the team is in [ 593.954567][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/170.tmp-b7:6' failed: Read-only file system [ 594.060362][ T6027] usb 3-1: USB disconnect, device number 65 [ 594.189592][ T6125] udevd[6125]: symlink '../../loop2' '/dev/disk/by-diskseq/173.tmp-b7:2' failed: Read-only file system [ 594.232556][T13515] netlink: 'syz.2.1845': attribute type 10 has an invalid length. [ 594.243667][T13515] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.253799][T13515] bond0: (slave team0): Enslaving as an active interface with an up link [ 594.393100][ T30] audit: type=1400 audit(2000000121.970:996): avc: denied { map } for pid=13512 comm="syz.2.1845" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 594.443675][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 594.537973][T13510] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1841'. [ 594.566039][ T30] audit: type=1400 audit(2000000121.970:997): avc: denied { execute } for pid=13512 comm="syz.2.1845" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 594.723654][T13520] syz_tun: left allmulticast mode [ 594.728766][T13520] syz_tun: left promiscuous mode [ 594.738751][T13517] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1841'. [ 594.752248][T13520] bridge0: port 1(syz_tun) entered disabled state [ 595.372285][T13520] bond0: (slave team0): Releasing backup interface [ 595.385358][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 595.475919][T13521] team0: Unable to change to the same mode the team is in [ 595.695537][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 595.723479][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.774083][ T9] usb 5-1: Product: syz [ 595.778779][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/170.tmp-b7:6' failed: Read-only file system [ 595.797588][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/173.tmp-b7:2' failed: Read-only file system [ 595.810460][ T9] usb 5-1: Manufacturer: syz [ 595.818335][ T9] usb 5-1: SerialNumber: syz [ 595.829820][ T9] usb 5-1: config 0 descriptor?? [ 595.857558][ T9] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 595.880879][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 596.091128][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/173.tmp-b7:2' failed: Read-only file system [ 596.145665][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/170.tmp-b7:6' failed: Read-only file system [ 596.230998][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/173.tmp-b7:2' failed: Read-only file system [ 596.368902][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/170.tmp-b7:6' failed: Read-only file system [ 596.398124][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/173.tmp-b7:2' failed: Read-only file system [ 596.559461][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/173.tmp-b7:2' failed: Read-only file system [ 596.616980][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/170.tmp-b7:6' failed: Read-only file system [ 596.646857][ T30] audit: type=1400 audit(2000000124.390:998): avc: denied { append } for pid=13559 comm="syz.6.1864" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 598.257686][ T9] usb 5-1: USB disconnect, device number 54 [ 599.399953][T13595] tmpfs: Unknown parameter 'usrquota0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.399953][T13595] 0 [ 599.999772][T13602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.186956][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1875'. [ 600.502897][ T30] audit: type=1400 audit(2000000128.230:999): avc: denied { bind } for pid=13603 comm="syz.3.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 600.647707][T13607] netlink: 'syz.3.1876': attribute type 4 has an invalid length. [ 600.711959][T13611] netlink: 'syz.3.1876': attribute type 4 has an invalid length. [ 600.832722][ T9] usb 7-1: USB disconnect, device number 6 [ 600.859206][T13614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=13614 comm=syz.3.1876 [ 600.962717][T13616] evm: overlay not supported [ 601.248051][T13618] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1878'. [ 601.348977][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/170.tmp-b7:6' failed: Read-only file system [ 601.704691][T13620] loop2: detected capacity change from 0 to 7 [ 601.744915][ T5981] Dev loop2: unable to read RDB block 7 [ 601.750634][ T5981] loop2: unable to read partition table [ 601.773443][ T5981] loop2: partition table beyond EOD, truncated [ 601.829718][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/174.tmp-b7:2' failed: Read-only file system [ 601.867486][T13620] Dev loop2: unable to read RDB block 7 [ 601.903640][T13620] loop2: unable to read partition table [ 601.974442][T13620] loop2: partition table beyond EOD, truncated [ 601.992044][T13622] loop6: detected capacity change from 0 to 6 [ 602.012212][T13620] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 602.047288][T13622] Dev loop6: unable to read RDB block 6 [ 602.074735][T13622] loop6: unable to read partition table [ 602.122344][T13622] loop6: partition table beyond EOD, truncated [ 602.134206][ T5222] Dev loop2: unable to read RDB block 7 [ 602.139916][ T5222] loop2: unable to read partition table [ 602.160442][ T5222] loop2: partition table beyond EOD, truncated [ 602.168255][T13622] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 602.255619][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/175.tmp-b7:6' failed: Read-only file system [ 602.298455][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/174.tmp-b7:2' failed: Read-only file system [ 602.741447][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/175.tmp-b7:6' failed: Read-only file system [ 602.942586][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/174.tmp-b7:2' failed: Read-only file system [ 603.143868][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 604.061175][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/175.tmp-b7:6' failed: Read-only file system [ 604.073799][ T8440] udevd[8440]: symlink '../../loop2' '/dev/disk/by-diskseq/176.tmp-b7:2' failed: Read-only file system [ 604.097182][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 604.146204][ T10] usb 3-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 604.183395][ T5902] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 604.210265][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/176.tmp-b7:2' failed: Read-only file system [ 604.210666][ T8440] udevd[8440]: symlink '../../loop6' '/dev/disk/by-diskseq/177.tmp-b7:6' failed: Read-only file system [ 604.242459][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 604.254953][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.346272][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 604.363185][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 604.373829][ T10] usb 3-1: invalid MIDI out EP 0 [ 604.383121][ T5902] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 604.392467][ T5902] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 604.423595][ T5902] usb 6-1: Product: syz [ 604.457031][ T5902] usb 6-1: Manufacturer: syz [ 604.461705][ T5902] usb 6-1: SerialNumber: syz [ 604.508157][ T5902] usb 6-1: config 0 descriptor?? [ 604.549776][ T10] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 604.569200][ T5902] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 604.577865][T13631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.594371][T13631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.932178][ T30] audit: type=1326 audit(2000000132.670:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5b18eba9 code=0x7ffc0000 [ 604.934798][T13631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.986137][ T30] audit: type=1326 audit(2000000132.670:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5b18eba9 code=0x7ffc0000 [ 605.009602][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.050285][T13631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.066730][ T30] audit: type=1326 audit(2000000132.680:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a5b18d510 code=0x7ffc0000 [ 605.134370][ T5902] input: gspca_zc3xx as /devices/platform/dummy_hcd.5/usb6/6-1/input/input32 [ 605.155589][ T30] audit: type=1326 audit(2000000132.680:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a5b18e7ab code=0x7ffc0000 [ 605.178965][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.219392][ T30] audit: type=1326 audit(2000000132.680:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a5b18e7ab code=0x7ffc0000 [ 605.242805][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.344866][ T30] audit: type=1326 audit(2000000132.820:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5b18eba9 code=0x7ffc0000 [ 605.346461][ T5902] usb 6-1: USB disconnect, device number 33 [ 605.572518][ T30] audit: type=1326 audit(2000000132.820:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f7a5b18eba9 code=0x7ffc0000 [ 605.596020][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.997155][ T30] audit: type=1326 audit(2000000132.820:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5b18eba9 code=0x7ffc0000 [ 606.530217][ T30] audit: type=1326 audit(2000000132.820:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f7a5b18eba9 code=0x7ffc0000 [ 606.559632][ T30] audit: type=1326 audit(2000000132.820:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5b18eba9 code=0x7ffc0000 [ 606.648513][ T30] audit: type=1326 audit(2000000132.820:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5b18eba9 code=0x7ffc0000 [ 606.672603][ T30] audit: type=1400 audit(2000000133.230:1011): avc: denied { ioctl } for pid=13659 comm="syz.3.1890" path="/dev/usbmon3" dev="devtmpfs" ino=725 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 606.686831][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/177.tmp-b7:6' failed: Read-only file system [ 606.697894][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.902643][ T9] usb 3-1: USB disconnect, device number 66 [ 607.042910][ T6027] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 607.277049][T13684] qnx4: no qnx4 filesystem (no root dir). [ 607.519357][ T6027] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 607.904838][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/176.tmp-b7:2' failed: Read-only file system [ 607.923094][ T6027] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.948215][ T6027] usb 7-1: Product: syz [ 607.952156][T13689] loop2: detected capacity change from 0 to 7 [ 607.959149][ T6027] usb 7-1: Manufacturer: syz [ 607.967686][ T6027] usb 7-1: SerialNumber: syz [ 607.998952][ T5981] Dev loop2: unable to read RDB block 7 [ 608.004810][ T5981] loop2: unable to read partition table [ 608.011064][ T6027] usb 7-1: config 0 descriptor?? [ 608.016982][ T5981] loop2: partition table beyond EOD, truncated [ 608.029129][ T6027] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 608.058663][T13689] Dev loop2: unable to read RDB block 7 [ 608.070005][T13689] loop2: unable to read partition table [ 608.117096][T13689] loop2: partition table beyond EOD, truncated [ 608.254417][T13689] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 608.347516][ T1206] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 608.365611][T13676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.506704][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/178.tmp-b7:2' failed: Read-only file system [ 608.527982][T13676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.574097][ T6027] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 608.581237][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/178.tmp-b7:2' failed: Read-only file system [ 608.581590][ T6027] sq905c 7-1:0.0: Get version command failed [ 608.601930][ T5981] udevd[5981]: symlink '../../loop2' '/dev/disk/by-diskseq/178.tmp-b7:2' failed: Read-only file system [ 608.684526][ T1206] usb 3-1: Using ep0 maxpacket: 16 [ 608.690812][ T6027] sq905c 7-1:0.0: probe with driver sq905c failed with error -110 [ 608.703117][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.717187][ T6027] usb 7-1: USB disconnect, device number 7 [ 608.732238][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.758467][ T1206] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 608.946025][ T1206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.963622][ T1206] usb 3-1: config 0 descriptor?? [ 609.321449][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-diskseq/177.tmp-b7:6' failed: Read-only file system [ 609.483869][ T1206] apple 0003:05AC:024B.001B: fixing up MacBook JIS keyboard report descriptor [ 610.086496][ T25] block nbd0: Possible stuck request ffff8880266d5080: control (read@0,1024B). Runtime 360 seconds [ 610.099802][ T25] block nbd0: Possible stuck request ffff8880266d5240: control (read@1024,1024B). Runtime 360 seconds [ 610.116028][ T25] block nbd0: Possible stuck request ffff8880266d5400: control (read@2048,1024B). Runtime 360 seconds [ 610.130652][ T25] block nbd0: Possible stuck request ffff8880266d55c0: control (read@3072,1024B). Runtime 360 seconds [ 610.178368][ T1206] apple 0003:05AC:024B.001B: unknown global tag 0xe [ 610.248979][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/177.tmp-b7:6' failed: Read-only file system [ 610.264165][ T1206] apple 0003:05AC:024B.001B: item 0 1 1 14 parsing failed [ 610.280830][ T1206] apple 0003:05AC:024B.001B: parse failed [ 610.305575][ T1206] apple 0003:05AC:024B.001B: probe with driver apple failed with error -22 [ 611.194517][T13723] comedi comedi3: comedi_config --init_data is deprecated [ 611.319146][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/177.tmp-b7:6' failed: Read-only file system [ 611.740068][ T31] INFO: task syz.0.1353:11556 blocked for more than 143 seconds. [ 611.754596][ T31] Not tainted syzkaller #0 [ 611.765366][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 611.779152][ T5981] udevd[5981]: symlink '../../loop6' '/dev/disk/by-diskseq/177.tmp-b7:6' failed: Read-only file system [ 611.824325][ T31] task:syz.0.1353 state:D stack:28872 pid:11556 tgid:11555 ppid:5859 task_flags:0x400040 flags:0x00004004 [ 611.843104][ T43] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 611.877153][ T31] Call Trace: [ 611.882457][ T31] [ 611.887239][ T31] __schedule+0x1190/0x5de0 [ 611.892178][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 611.898887][ T31] ? __pfx___schedule+0x10/0x10 [ 611.906834][ T31] ? find_held_lock+0x2b/0x80 [ 611.912324][ T31] ? schedule+0x2d7/0x3a0 [ 611.918800][ T31] ? bdev_open+0x41a/0xe40 [ 612.015643][ T31] schedule+0xe7/0x3a0 [ 612.022977][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 612.028963][ T31] schedule_preempt_disabled+0x13/0x30 [ 612.038557][ T31] __mutex_lock+0x81b/0x1060 [ 612.044709][ T31] ? bdev_open+0x41a/0xe40 [ 612.050322][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 612.055603][ T43] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 612.066629][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.077735][ T31] ? __pfx_ilookup+0x10/0x10 [ 612.085466][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 612.141804][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 612.151164][ T31] ? bdev_open+0x41a/0xe40 [ 612.170157][ T31] bdev_open+0x41a/0xe40 [ 612.179125][ T43] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 612.199135][ T31] blkdev_open+0x34e/0x4f0 [ 612.216486][ T9] usb 3-1: USB disconnect, device number 67 [ 612.223014][ T31] do_dentry_open+0x97f/0x1530 [ 612.293839][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 612.323600][ T31] vfs_open+0x82/0x3f0 [ 612.330420][ T43] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 612.357748][ T31] path_openat+0x1de4/0x2cb0 [ 612.360773][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.364672][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/179.tmp-b7:2' failed: Read-only file system [ 612.382367][ T31] ? __pfx_path_openat+0x10/0x10 [ 612.388144][ T43] usb 5-1: Product: 㖵ቶ搿㝷瀒蔒⻵콍ﶤ䂮຤썳喎爧尉怑ꈦࣷ♤ꋊ岍뤅㸤㛀禝飏ᛂ㈚봨鮏榛ఙ漕 [ 612.414237][ T31] do_filp_open+0x20b/0x470 [ 612.428593][ T43] usb 5-1: Manufacturer: 〉 [ 612.430442][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 612.475641][ T31] ? alloc_fd+0x471/0x7d0 [ 612.512717][ T31] do_sys_openat2+0x11b/0x1d0 [ 612.517923][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 612.526058][ T31] ? find_held_lock+0x2b/0x80 [ 612.530756][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 612.537643][ T31] __x64_sys_openat+0x174/0x210 [ 612.546536][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 612.554159][ T31] ? do_user_addr_fault+0x843/0x1370 [ 612.554182][ T43] usb 5-1: SerialNumber: 廪젪醡눤ꬸ뎼၍菾筭줔⡌ꮪ誥쵷ⴾ꼢欵ꮓტ덈鵜䞪䫋퐋ѹ꘻ᕈ힐⣦냂騀毇뼧ﻤ᠊뿹얢쫻嘳 [ 612.559510][ T31] do_syscall_64+0xcd/0x4e0 [ 612.612147][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.644695][ T31] RIP: 0033:0x7fd6c218d510 [ 612.649254][ T31] RSP: 002b:00007fd6c30afb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 612.661047][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd6c218d510 [ 612.670691][ T31] RDX: 0000000000000000 RSI: 00007fd6c30afc10 RDI: 00000000ffffff9c [ 612.679156][ T31] RBP: 00007fd6c30afc10 R08: 0000000000000000 R09: 002364626e2f7665 [ 612.687734][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 612.695772][ T31] R13: 00007fd6c23d6038 R14: 00007fd6c23d5fa0 R15: 00007ffdbdb7ba38 [ 612.705427][ T31] [ 612.708528][ T31] INFO: task syz.0.1353:11558 blocked for more than 144 seconds. [ 612.719012][ T31] Not tainted syzkaller #0 [ 612.724250][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 612.736600][ T31] task:syz.0.1353 state:D stack:28872 pid:11558 tgid:11555 ppid:5859 task_flags:0x400040 flags:0x00004004 [ 612.766001][ T31] Call Trace: [ 612.771455][ T31] [ 612.778079][ T31] __schedule+0x1190/0x5de0 [ 612.782605][ T31] ? __pfx___schedule+0x10/0x10 [ 612.787528][ T31] ? find_held_lock+0x2b/0x80 [ 612.795593][ T31] ? schedule+0x2d7/0x3a0 [ 612.800002][ T31] ? bdev_open+0x41a/0xe40 [ 612.806685][ T31] schedule+0xe7/0x3a0 [ 612.811071][ T31] schedule_preempt_disabled+0x13/0x30 [ 612.816585][ T31] __mutex_lock+0x81b/0x1060 [ 612.821650][ T31] ? bdev_open+0x41a/0xe40 [ 612.826532][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 612.832542][ T31] ? __pfx_ilookup+0x10/0x10 [ 612.837373][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 612.845478][ T43] usb 5-1: 0:2 : does not exist [ 612.859930][ T31] ? bdev_open+0x41a/0xe40 [ 612.868845][ T31] bdev_open+0x41a/0xe40 [ 612.870460][ T43] usb 5-1: USB disconnect, device number 55 [ 612.880795][ T31] blkdev_open+0x34e/0x4f0 [ 612.885266][ T31] do_dentry_open+0x97f/0x1530 [ 612.890136][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 612.895621][ T31] vfs_open+0x82/0x3f0 [ 612.899742][ T31] path_openat+0x1de4/0x2cb0 [ 612.917070][ T31] ? __pfx_path_openat+0x10/0x10 [ 612.939802][ T31] do_filp_open+0x20b/0x470 [ 612.951199][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 612.963825][ T31] ? alloc_fd+0x471/0x7d0 [ 612.973594][ T31] do_sys_openat2+0x11b/0x1d0 [ 612.978480][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 612.984025][ T31] ? find_held_lock+0x2b/0x80 [ 612.989365][ T31] __x64_sys_openat+0x174/0x210 [ 612.994306][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 612.999822][ T31] do_syscall_64+0xcd/0x4e0 [ 613.004371][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.010533][ T31] RIP: 0033:0x7fd6c218d510 [ 613.015462][ T31] RSP: 002b:00007fd6c308eb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 613.024171][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd6c218d510 [ 613.032315][ T31] RDX: 0000000000000000 RSI: 00007fd6c308ec10 RDI: 00000000ffffff9c [ 613.040490][ T31] RBP: 00007fd6c308ec10 R08: 0000000000000000 R09: 002364626e2f7665 [ 613.048687][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 613.056909][ T31] R13: 00007fd6c23d6128 R14: 00007fd6c23d6090 R15: 00007ffdbdb7ba38 [ 613.065634][ T31] [ 613.069092][ T31] [ 613.069092][ T31] Showing all locks held in the system: [ 613.078352][ T31] 1 lock held by khungtaskd/31: [ 613.083266][ T31] #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 613.098256][ T31] 3 locks held by kworker/1:1/43: [ 613.104747][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 613.115228][ T31] #1: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0 [ 613.126328][ T31] #2: ffff888029aa1220 (&dev->power.lock){-...}-{3:3}, at: rpm_idle+0x65a/0x730 [ 613.136534][ T31] 3 locks held by kworker/u8:7/3496: [ 613.142516][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 613.153061][ T31] #1: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0 [ 613.163413][ T31] #2: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 613.174001][ T31] 2 locks held by getty/5609: [ 613.178686][ T31] #0: ffff888031a9a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 613.188510][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 613.198704][ T31] 2 locks held by syz-executor/5846: [ 613.204293][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 613.214348][ T31] #1: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0 [ 613.223843][ T31] 1 lock held by udevd/7825: [ 613.228443][ T31] #0: ffff8880265b3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 613.237833][ T31] 1 lock held by syz.0.1353/11556: [ 613.242973][ T31] #0: ffff8880265b3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 613.252292][ T31] 1 lock held by syz.0.1353/11558: [ 613.257746][ T31] #0: ffff8880265b3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 613.268217][ T31] 2 locks held by syz.6.1909/13736: [ 613.275230][ T31] #0: ffff88805878ca08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 613.286269][ T31] #1: ffffffff8e5ccb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 613.296354][ T31] 2 locks held by syz.6.1909/13741: [ 613.301541][ T31] #0: ffffffff90abb740 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 613.311196][ T31] #1: ffffffff90385088 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 613.320402][ T31] [ 613.322852][ T31] ============================================= [ 613.322852][ T31] [ 613.340067][ T31] NMI backtrace for cpu 1 [ 613.340081][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 613.340099][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 613.340108][ T31] Call Trace: [ 613.340114][ T31] [ 613.340121][ T31] dump_stack_lvl+0x116/0x1f0 [ 613.340145][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 613.340159][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 613.340179][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 613.340205][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 613.340223][ T31] watchdog+0xf0e/0x1260 [ 613.340245][ T31] ? __pfx_watchdog+0x10/0x10 [ 613.340261][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 613.340282][ T31] ? __kthread_parkme+0x19e/0x250 [ 613.340307][ T31] ? __pfx_watchdog+0x10/0x10 [ 613.340324][ T31] kthread+0x3c2/0x780 [ 613.340340][ T31] ? __pfx_kthread+0x10/0x10 [ 613.340357][ T31] ? rcu_is_watching+0x12/0xc0 [ 613.340378][ T31] ? __pfx_kthread+0x10/0x10 [ 613.340394][ T31] ret_from_fork+0x56a/0x730 [ 613.340408][ T31] ? __pfx_kthread+0x10/0x10 [ 613.340424][ T31] ret_from_fork_asm+0x1a/0x30 [ 613.340454][ T31] [ 613.340459][ T31] Sending NMI from CPU 1 to CPUs 0: [ 613.462081][ C0] NMI backtrace for cpu 0 [ 613.462094][ C0] CPU: 0 UID: 0 PID: 10784 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 613.462111][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 613.462120][ C0] Workqueue: events_unbound toggle_allocation_gate [ 613.462138][ C0] RIP: 0010:do_sync_core+0x34/0x40 [ 613.462154][ C0] Code: 10 cc cc cc e8 8d 3f 5c 00 0f 01 e8 e9 85 3f 5c 00 e8 80 3f 5c 00 8c d0 50 54 48 83 04 24 08 9c 8c c8 50 68 64 5f 5f 81 48 cf 67 3f 5c 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 [ 613.462167][ C0] RSP: 0018:ffffc9000e507880 EFLAGS: 00000092 [ 613.462177][ C0] RAX: 0000000000000010 RBX: ffffffff815f5f30 RCX: ffffffff81af8551 [ 613.462186][ C0] RDX: ffff88807bffa440 RSI: ffffffff815f5f50 RDI: 0000000000000000 [ 613.462194][ C0] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000000 [ 613.462202][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 613.462209][ C0] R13: 0000000000000000 R14: ffff8880b843b5c0 R15: 0000000000000002 [ 613.462217][ C0] FS: 0000000000000000(0000) GS:ffff8881246b3000(0000) knlGS:0000000000000000 [ 613.462230][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 613.462239][ C0] CR2: 000055555c6ce5c8 CR3: 000000000e380000 CR4: 00000000003526f0 [ 613.462247][ C0] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 613.462255][ C0] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 613.462264][ C0] Call Trace: [ 613.462268][ C0] [ 613.462273][ C0] smp_call_function_many_cond+0x1227/0x1600 [ 613.462294][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 613.462310][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 613.462326][ C0] ? perf_event_text_poke+0x130/0x180 [ 613.462342][ C0] ? __kmalloc_node_track_caller_noprof+0xeb/0x510 [ 613.462357][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 613.462375][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 613.462389][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 613.462406][ C0] smp_text_poke_batch_finish+0x5ad/0xdb0 [ 613.462425][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 613.462443][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 613.462464][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 613.462481][ C0] jump_label_update+0x376/0x550 [ 613.462504][ C0] static_key_disable_cpuslocked+0x158/0x1c0 [ 613.462523][ C0] static_key_disable+0x1a/0x20 [ 613.462541][ C0] toggle_allocation_gate+0x145/0x280 [ 613.462554][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 613.462568][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 613.462586][ C0] ? rcu_is_watching+0x12/0xc0 [ 613.462603][ C0] process_one_work+0x9cc/0x1b70 [ 613.462621][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 613.462636][ C0] ? __pfx_process_one_work+0x10/0x10 [ 613.462653][ C0] ? assign_work+0x1a0/0x250 [ 613.462666][ C0] worker_thread+0x6c8/0xf10 [ 613.462684][ C0] ? __pfx_worker_thread+0x10/0x10 [ 613.462697][ C0] kthread+0x3c2/0x780 [ 613.462709][ C0] ? __pfx_kthread+0x10/0x10 [ 613.462722][ C0] ? rcu_is_watching+0x12/0xc0 [ 613.462736][ C0] ? __pfx_kthread+0x10/0x10 [ 613.462749][ C0] ret_from_fork+0x56a/0x730 [ 613.462760][ C0] ? __pfx_kthread+0x10/0x10 [ 613.462772][ C0] ret_from_fork_asm+0x1a/0x30 [ 613.462797][ C0] [ 613.463591][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 613.463603][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 613.463620][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 613.463629][ T31] Call Trace: [ 613.463635][ T31] [ 613.463642][ T31] dump_stack_lvl+0x3d/0x1f0 [ 613.463664][ T31] vpanic+0x6e8/0x7a0 [ 613.463678][ T31] ? __pfx_vpanic+0x10/0x10 [ 613.463693][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 613.463714][ T31] panic+0xca/0xd0 [ 613.463727][ T31] ? __pfx_panic+0x10/0x10 [ 613.463741][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 613.463764][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 613.463780][ T31] ? watchdog+0xd78/0x1260 [ 613.463798][ T31] ? watchdog+0xd6b/0x1260 [ 613.463815][ T31] watchdog+0xd89/0x1260 [ 613.463836][ T31] ? __pfx_watchdog+0x10/0x10 [ 613.463851][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 613.463871][ T31] ? __kthread_parkme+0x19e/0x250 [ 613.463894][ T31] ? __pfx_watchdog+0x10/0x10 [ 613.463910][ T31] kthread+0x3c2/0x780 [ 613.463926][ T31] ? __pfx_kthread+0x10/0x10 [ 613.463943][ T31] ? rcu_is_watching+0x12/0xc0 [ 613.463961][ T31] ? __pfx_kthread+0x10/0x10 [ 613.463977][ T31] ret_from_fork+0x56a/0x730 [ 613.463991][ T31] ? __pfx_kthread+0x10/0x10 [ 613.464006][ T31] ret_from_fork_asm+0x1a/0x30 [ 613.464039][ T31] [ 613.917202][ T31] Kernel Offset: disabled [ 613.921510][ T31] Rebooting in 86400 seconds..