last executing test programs: 12m25.373855917s ago: executing program 0 (id=353): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x3}, @mcast2, @mcast2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x7ffffffc, 0x9, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="04000100"], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @local}], 0x20) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x52b281, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0xe6, 0x0, @buffer={0x2, 0x45, &(0x7f00000000c0)=""/69}, &(0x7f0000000240)="cb1a31cd22fdb9969bcb6993163c6bc4fd499816eb814e7516387a775ba82019cc2d19b25ef1394396d0e7dc6dae00c4212eb1f251d42ba8f772b28d0ec41bd3c5097f15f75065aea8ef43bf5c75cf6b9f44bc4c384a63363763142066fd557c30c4332a9fdee9550e95d5cb38c77f448fbbc516d517bb4c4464361e93a647b517fd19cd133b9756c9730c3502c0e62c31630671455c4d7f87d91db70bb52bf8a0501a748424b6118e32574d48044a6a39133d76199efb1af56573cb9e40c600000ea3e894d924b9b33a369c0474d94b1cb85b8155ad091a04e2bc325afc89e840b58de15c7e", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000900000087"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) 12m22.530320672s ago: executing program 2 (id=358): mkdir(&(0x7f0000000b40)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='grpquota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') fsopen(&(0x7f00000000c0)='debugfs\x00', 0x0) pipe(&(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x6, 0x4) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) 12m22.183776942s ago: executing program 2 (id=360): syz_pidfd_open(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f0000004000)=0x2, 0x4, 0x0, 0x0, &(0x7f0000004000), 0xb201fffe) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r6, 0x0, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040)) 12m21.869447483s ago: executing program 0 (id=362): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9ff3fea437d95cb3096af980c02d7c228cc0fcd139de0c5787c6a09f430de0c391e8d48f4601f42e50c3247201ff179e204923a8d4c6d57af9f48b8069be567e24c9045dd750e47e4acf8e33696473ec0690766ec8c6bd63758c22c1ad988a2b9eaf393", 0xde}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fddbaf1bff01a4", 0xb5}, {&(0x7f0000000a40)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b690", 0x4}], 0x1}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) 12m21.593846227s ago: executing program 0 (id=363): bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) sendfile(r5, r5, 0x0, 0x9) 12m20.233338686s ago: executing program 0 (id=364): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) listen(r5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r9, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r9, 0xc0405610, &(0x7f00000000c0)={0xb, 0x1, 0x4}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x3, r8, 0x0, 0x0, 0x0, &(0x7f0000000240)}) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 12m18.446833725s ago: executing program 0 (id=368): openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x100, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)=""/121, 0x79) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r0 = socket(0x1d, 0x2, 0x6) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) fstat(r1, &(0x7f0000000340)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0xfff, 0x80, 0x8008, 0x8cac, 0xf, 0x1, 0x95c, 0x30b8, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000003c0)={r5, @in={{0x2, 0x4e20, @local}}}, 0x84) fspick(0xffffffffffffff9c, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x488c4) ioctl$KVM_SET_CLOCK(r7, 0x4188aec6, &(0x7f0000000040)) 12m17.318922406s ago: executing program 0 (id=370): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r2], 0x44}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{0x0}], 0x1) 12m17.21842862s ago: executing program 2 (id=372): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r2], 0x44}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{0x0}], 0x1) 12m17.038052295s ago: executing program 2 (id=373): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x5f]}}, 0x0, 0x53}, 0x28) sendfile(r3, r4, 0x0, 0x20000023896) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000280)=[{0x2, 0x8, 0x8, 0x1}]}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4d25c}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xffffffff, @random="56dbee55ed05"}}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x8040) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000001c0)={'macvlan0\x00', {0x2, 0x4e21, @private=0xa010102}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x40, 0x0, 0x2}, 0x8}}, 0x18) connect$unix(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) 12m16.032251143s ago: executing program 2 (id=375): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @null, @rose={'rose', 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @null, @bcast, @bcast, @null]}) (async) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) (async) r3 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r3, 0x0, 0x0) (async) syz_io_uring_setup(0x6be5, 0x0, 0x0, 0x0) (async) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r3, 0x4004e502, &(0x7f0000000100)=0x401) 12m15.930150459s ago: executing program 2 (id=376): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) listen(r5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r9, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r9, 0xc0405610, &(0x7f00000000c0)={0xb, 0x1, 0x4}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x3, r8, 0x0, 0x0, 0x0, &(0x7f0000000240)}) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 12m2.127583505s ago: executing program 32 (id=370): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r2], 0x44}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{0x0}], 0x1) 12m0.712153385s ago: executing program 33 (id=376): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) listen(r5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r9, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r9, 0xc0405610, &(0x7f00000000c0)={0xb, 0x1, 0x4}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x3, r8, 0x0, 0x0, 0x0, &(0x7f0000000240)}) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 3m17.744316874s ago: executing program 5 (id=1886): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000800)={'batadv_slave_1\x00', &(0x7f00000007c0)=@ethtool_wolinfo={0xa, 0x0, 0x0, "2d51305d39af"}}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffff, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r4 = syz_io_uring_setup(0xac9, 0x0, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r4, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1) r6 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000980)={0x7, 0x0, r8, 0xb0b0b0b0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 3m14.527549418s ago: executing program 5 (id=1894): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x3) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000006800010002000000fc0000000000000cfaff00020000000400000063b6a5b137e9bb75b7e6abbf413eaf0e395bd4f437970951f7aa564d1b784b0ccf8391f0afe41b50fbde07f4d59bbd1181c24992582533f0d74dceaffbc92ac57e30906205bd0faee048c9f20d4160ec4774ec44e26e03ee03688deb569f7c57f1f9da6e3510f051b1c6f2000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x18, 0x140e, 0xb3b, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8014}, 0x9ee9fd74460f2f8e) r7 = syz_io_uring_setup(0x48a5, &(0x7f0000000080)={0x0, 0x9e92, 0x10100, 0x0, 0x86}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r0, 0x0}) io_uring_enter(r7, 0xa3d, 0x0, 0x0, 0x0, 0x0) 3m14.000623774s ago: executing program 5 (id=1896): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8013, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) chown(&(0x7f00000003c0)='./file0\x00', r2, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_open_dev$video4linux(0x0, 0x7, 0xc82) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 3m11.384042377s ago: executing program 5 (id=1901): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xab101a, 0x0) mount$bind(0x0, &(0x7f0000001ec0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) (fail_nth: 5) 3m10.808086397s ago: executing program 5 (id=1904): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r10, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r10, 0xc0405610, &(0x7f00000000c0)={0xb, 0x1, 0x4}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x3, r9, 0x0, 0x0, 0x0, &(0x7f0000000240)}) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 3m9.698117042s ago: executing program 5 (id=1908): syz_open_dev$sg(&(0x7f0000000040), 0x500000000, 0x40000) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, &(0x7f0000000100)='barrier') r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002100050100000000000000000a000000000000040000000072cc8b3af7ff76d4aab36741f018bc4816ad4dd37dc90232d415a044b7a7809df31429e9dc"], 0x1c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x15, 0x0, 0x0) 3m9.34781685s ago: executing program 34 (id=1908): syz_open_dev$sg(&(0x7f0000000040), 0x500000000, 0x40000) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, &(0x7f0000000100)='barrier') r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002100050100000000000000000a000000000000040000000072cc8b3af7ff76d4aab36741f018bc4816ad4dd37dc90232d415a044b7a7809df31429e9dc"], 0x1c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x15, 0x0, 0x0) 2m30.289936721s ago: executing program 6 (id=2027): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000340)={'nat\x00', 0x0, 0x0, 0x0, [0xa, 0x10001, 0x3ff, 0x0, 0x200, 0x5]}, &(0x7f00000003c0)=0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) openat$cgroup_int(r4, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) 2m29.408185758s ago: executing program 6 (id=2031): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0xe4931000) r1 = socket(0x40000000015, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0x6, 0x102, 0x2, {0x4, 0x2, 0x0, 0x9}}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000040)=@other={0x8, &(0x7f0000000000)=0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x208000, 0x0) 2m29.29839619s ago: executing program 6 (id=2032): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000006000)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x3ff, @remote, 0x5}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000240)="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", 0xfa}, {&(0x7f0000000340)="d9f3233e66894bc9904705c253f82778db275c9e727fa28a74388a28c5c84291b5cff2fa51195da86c5e828d5c6b09b290cf33b401a510f00a64d37c028c12fcda11763b4fa0d714e20761c1bdf7fa75951740b425cf7612e8ee99346cc02afa9755465300ea7aba3a34c157b5899abdc228159dd88b1b9227d781ad950a1445f5807f92", 0x84}, {&(0x7f0000000400)="833830378ace9786a9ed3144f6ac4ca08252565ed73f58b608d1ce23cca933d06120eb068b8306d1b8b7e77c7d477251fbd35370237a71e443ddded9a174a6af97b1989a2dcf4b0cada4e1c00a9b85dee4e59f9ee5dd7f2933a3bd712868cc03528e38bd04296c057448a46c7f3f11e43a09b48bab71082dd3bbb7f00e9661cc9e2cb7b8c598784c6b03738d23b00adca9846e4fbcbbd43c4b6d9f36517745e9b62087c2ce6ed18d0a41dd8c", 0xac}, {&(0x7f00000004c0)="06c08277d4de89ad968801efc86107b9651c98b63a15e6a632ab41a1258bebacb56ee2dae9a544bc021cd190cb1aac61bf", 0x31}, {&(0x7f0000000500)="f4cc59a365b9ada326f4f1f12f845de872d6f338d9aa5577c9477a10b4f20c16f4d307a3b4a963c34793d9344aaa12157851187e7fc8ff6361f5f895527a1673558a71ef9d80834fc1a2ff6210ed310899bf810dea30960e1f97c972b3f7a34a0038c5a12fe72b2a7cd71d43d1063778715c1e01c90b056fb490095a378fbac83f1ab6d2ec0af7782f2bde08be24ef541d06cc5c6d2a7f2b9b0e50a52a5538abca957d050a72f48fc58f527e0f659a6a1e25989b69b998bf65c0a52275ed755bbad83c", 0xc3}, {&(0x7f0000000600)="bd00f1eb4b868c43ef8648f48652a322ccce923fb10cc7799fa2be30ab783ef6fc20c6cd7dcb92abc2320df8714a2a0b9f64df8c14367646b6e89d3c9e6c35dd442d2e3d9a4feb3445d8ebba949b341b889f9d780d4f999ce3e076cf41fdea6a7a892bcbec8b01bf57df92f65f199f8fbbd9fe9633b1492db173d6354913f415e0401787c46fa83a69b0a7c14a9cea35d6caa3c18c791d4b21f35f4e481bcbac59acabf722e404dbcf25f79642dae62568abbd0b85c9c70a376f0340f4a5aab6", 0xc0}, {&(0x7f00000006c0)="61dca9dc89e6189f7e736ddabdd81a45d85fae69df10f6dfa10d9e142512fba9e381a2a0fda9a8cf44076248e750ce303a350215c0fd3498ed71a4490d9a58c9004684075a8c134198578439f4042e2859b84ed91b7bac8b72618bc6ecc7394ed2519647d02d", 0x66}, {&(0x7f0000000740)="39d94cfaaeed2e5d2f4a6abf627af8a571beb62d7f2d888f96f1e0fab505a45811dab7a37d7b7fa68384050cbc08a7", 0x2f}, {&(0x7f0000000780)="a676f815920ea914101c13b7be007cd885ec5942eb338452a8997592f5789c92c5e0", 0x22}], 0x9}}, {{&(0x7f0000000880)={0xa, 0x4e20, 0x8, @loopback, 0x8}, 0x1c, &(0x7f0000000c00)=[{&(0x7f00000008c0)="f6fe5d7c0165b05697d8fdbf94b2bcfe7b3393c9538721c6212422f32608d7d611f1c3f8ff3af7834ae8af3e963fd073d91fafc01cbf746ea9199e405ff72f23f3fc3ba2116e11ed5e0d9abd443b709b9be7a9b560aff8cfab343192725534994447aae195e5364a7412cca54d7e07084d386e91b7ef3aaf4f7d4fe9d2", 0x7d}, {&(0x7f0000000940)="c123cb2ef86a4370ce3ead5a06617673c96f99", 0x13}, {&(0x7f0000000980)="cfb6461763489f777ceb7f7cf8c0cb35434b4089747d81db3eaf042981a09140da774eede4ed2eb20cde55566fdee1fb339a75a36e66ca2c0fc7f59305fc2dad2f4573458b55431b708dafbed1e86a78bbce820d201068fe17fe6acc828a66c3c79d65450f6d7920b92fd614a5d7b787272974f3d5e8f513d3b8c2cfe918119c9acbde367675cde44c58e25baa630b50728c40aa4feee0b109962ef084b95818d9863e23e646714888fd254df6e50a2fb3894ee9312504ce9f6a8da3a4fdedae5946c429b15b49be58bbbd8e47f8", 0xce}, {&(0x7f0000000a80)="a52858e029b5575a1068693f40246fcc5cb21fcfd72a1645113fbc3cae855c99f0ec9ae3b1c67c3707fadac34aa265450149e88385bab5cb5683bf4f3bc1f6e3f4c941c146c941187994284c3dc82e7e2b9b0fbaaeb283f1fead38c16e113589e812a7b7e534b2b9676a6898083547d1f818a4cbc81f18062a42", 0x7a}, {&(0x7f0000000b00)="5db9731b0dad935da6da6341bbdb0c012143c5b67d6f3c7d3fb369d661e5c528fb247af41c92ce9f046b00b4e5dcb8fde9923ecaa6f0727b6c7a19e075cb7644a4344310c4f4c8851fe1f4686c9a1aaae0e3d65ee5839683733359a30bc0e6fd56eaddbab61f88d08a5a68b405bf6711d756607930f944", 0x77}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000b80)="95abb02d5732322d8baaa97d871f4c3cbac06d76768a41167455a76f8fb9e334e52f60c773e1d44ef4613fce71a42ff129998f74d72560d0aff154326719c4805eac3d959e69cfdb2e62c1f774b3b798993ec72a2b92829045837a5d542af4fc91c1202496586b2aad469d8040825a67686e0117c9018ab0788c32db4527ac", 0x7f}], 0x7, &(0x7f0000000c80)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x73, 0x0, '\x00', [@ra, @pad1]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x67, 0x9, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x4, 0x5, [0x5, 0x1, 0x8, 0x1, 0xfffffffffffeffff]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1ff}}, @rthdr={{0x28, 0x29, 0x39, {0x62, 0x2, 0x0, 0x8, 0x0, [@local]}}}, @rthdr={{0x38, 0x29, 0x39, {0x89, 0x4, 0x0, 0x7, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback]}}}], 0x100}}, {{&(0x7f0000000d80)={0xa, 0x4e23, 0x800, @loopback, 0x6}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)="12c03919879cf58903941f3b2776805a6ce773429e8fad9e18a9f6c5e54c10917a735dd4613f0c9c90ad47256685f1c86fd8e43b0286cca345d7001a08791c407e16a5c898e2176705ea25384772a9d982ff17fadda4c1c81c11fed2a5b34ec83a9feab35e3337e6819b4804f92f291bf1a085611c0cd76aa4ea0a577799d84f0f2a3935aa6107558d2011b691d62331ce3194e465673c8b3e6d02cdbdaf35334898343155455b381993c62748ce9f99ffacf3886690c07fbaaf3036c9bdb48509a59c34826ac085de2555771e8d08594fde987248ee09bf205a4b54a910ef3fd326facc1fbf9ac4ec0e6750", 0xec}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000002f80)="6ebd55e08687647b3c6f70efa9fe4de117049f15b172d1562d932d1f22b1450c86aeb0eec9baecf6ebdfcdf256b0c9175de0e4be3e1e170d827efa69340ffd570677d42519d03925a97e0125aca286ce4c6adc1401b24537a13d8ddb8c50b29ea38508678749b0ab24c6b601b374599b1a359f757baafdce884b29cbed3dfa0973076aeaf766f8a2546452e3ca8c496d1df8f3f4b3506ce987603d69a999568b7f7dd20c8cdb403a072cfaa9e39088ea51e05c0b8b6161f9ed34f56146f995e2b5364d67ae4c251ed71da97fdaccc172f149abf00f9542c82c2986e8ebef100b7ba282f78374153f", 0xe8}], 0x3, &(0x7f0000006200)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x3a, 0x8, 0x2, 0xa1, 0x0, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0]}}}, @rthdr={{0x88, 0x29, 0x39, {0x32, 0xe, 0x0, 0xe, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, @mcast1]}}}, @hopopts={{0x1b0, 0x29, 0x36, {0x2f, 0x32, '\x00', [@pad1, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x3}, @generic={0x6, 0xa5, "39248d065f02bc4ef792707a34b5ac67f682abc875b43d44205705208a62dc223db43897735bac925d3aa82e53cc4f6a6a9a89a51f0de1793f5a4f98a98dfe47f4bbf5f9d62daf29ab8dba01e7c3b2a7c25b5792c0b4120b8fb0d847a07e7c73014bde99f62d34fd36a92579ebc622e0ecba4cc124ae0fcb561a782337a7cbae16876c852ef13b7697aede3501bebcb79d76767e33d84c5355059b08e6b620c5b435bc8ffa"}, @ra={0x5, 0x2, 0x800}, @ra={0x5, 0x2, 0xf9}, @generic={0x7, 0xba, "3c7343c7cfc02ad1aa9311d3755df98277166309e54fc1e2929732f34fef0dcede40e4511f63c06337f2f94d69347ec5f62860a156f6c19d3f452c2a9c17eaed9b2023eb78faf60b0a4e1c6df546a6d9daaeb6fd5acd55c7f3e6a1bded1981362187b787a8ae3404c15ddd0585cabe782e1e68c9d1da7604d5ca01cf69b935a2da65991c2e1c432d436ae53928a082f14d32ac97c5c3e4584800ad257431e29a5d6ecf1a15a1cb097e32b812896ddf0927f1cec5f22d9a524b62"}, @hao={0xc9, 0x10, @local}]}}}], 0x290}}, {{&(0x7f0000000f00)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x865d}, 0x1c, &(0x7f0000004640)=[{&(0x7f0000003280)="2f013253a63152af9d65b086dd79897584857623e787a52bf99c14bee8576da3e6e10a9166d143cb225c4bbfebe10b47e7fb62e7b1c0d33ef528bda945e3713e6d8a65767e54639086b3d35452a3d5008abf71d97a432c0cbd8c2be6b706b9a954ff6fd639b70566ba", 0x69}, {&(0x7f0000003300)="b0e097dd7435deb1e59840fe605d775fd4cf5370039a370b43dc91f7083b5f10d918fb01138dbb", 0x27}, {&(0x7f0000003340)="534983ed932d9f8b0e775cb6526b4e09b33fb6d7ff7bb5de7bb68ce141223995043e92bbcc7bb09fdad9dee44f44a2ee56d28abf3aae4c433990692cb0b5a8696c09f6a8379de1e78f7da96e562ce2074c80f6ad959cce43c8115ee2c140741de106291cf3ba4fdffa2b28561d78d1a68192a7a1a5", 0x75}, {&(0x7f00000033c0)="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", 0x1000}, {&(0x7f00000043c0)="162d4bee813123cc2d8e24d17592a2074c36acf319cbd814f3f633ececb58be3b8dc2a9d5f65a43d8c8e1a66c941758a0d07b55c8b11cbeca9ca6a508ea0425cc9", 0x41}, {&(0x7f0000004440)="7179a42c1132ee50b53ff1638f911c8e558bbe572aded417e41bd96160f3380878362113540b44baa39f7dbcf9cab847c049504f94935ce0aef88468cded4fbcc3a7bf66447f6f3e949987b75864c812e715181ea87c9cda5afb2a1e1cdb6eb24e7dbd8fec436b0615cb2f7c656495fad451b5064644dcfc063f8c3c83f542d6c02c4361b98215c3089d2f42260baf8d0b678f99b35cc27b326d23ae2c6e1e2bcc3fb0c8334b8ab96217f534a895c2c2925623a1f8c755e1d0da60238ee6eba7e181946ccca25750a1b7851c1be7e8c5323e6cf601834e2981b60e5aff5469b53b9edfa6bc7d3911d7a358d41d5c34223a9995d4bbcd69a91fe6", 0xfa}, {&(0x7f0000004540)="ba51afb11d0ce17653875edf691b26ea63ecb8e176393cfc678896f1d7fde55264a199c9de554f465362", 0x2a}, {&(0x7f0000004580)="442e69a33bcfcf64b6eb4205d800f6336142921b1f9ac7a4342968c1b827e572bf9fce817653506adf723764646f5b91b29f023f3b4950806795eebb8aa84694b0cbdce33e5df3ccba2827d824a90a40ab094789666490efb0c7aff7a4d908eebc981eb424db5ff40b2461006c52d309f45184fb88efe0e1f4a564460b0b529787de888c1781dc72528d340f7b3803425250", 0x92}], 0x8}}, {{&(0x7f00000046c0)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0xc6}, 0x1c, &(0x7f00000061c0)=[{&(0x7f0000004700)="4d271409c4b1cf5e30ed5a09f01b9674c439f3ff80aea18e5098dcc4cf1d23cdde603a", 0x23}], 0x1, &(0x7f0000004780)=[@hopopts_2292={{0x48, 0x29, 0x36, {0x7f, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x28, {0x0, 0x8, 0x5, 0x1, [0xb, 0x4, 0x3, 0xfffffffffffffffe]}}, @enc_lim={0x4, 0x1, 0x4}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x80d400}}], 0x60}}, {{&(0x7f0000004800)={0xa, 0x4e22, 0xe195, @empty, 0x10}, 0x1c, &(0x7f0000004980)=[{&(0x7f0000004840)="a7e97be8cdf496f0a525b519ae4df442311ece91d40fd79273c3d36ec420f610be15ebb79314e00f336c92c84887fca4d300d026ade03f455b0bd753d28c578a866d71e8831e5b4fa3d13f01ec5ac04cb54c0e7005f8009c22012065067cb6a3baf63f66fe99013fd0a015900332bfb8b451ca01b98132681ea3457f63ee3a0b7c63c088d1b819ef14", 0x89}, {&(0x7f0000004900)="c4444cebbd7feb3c54eaa3a47859eff6a716aeac1cbfba1cd88d8d0368ad8740782f227801d3fb930e32618d9fb526516fd8edb430f1ef79abbd427f2c36bc75956ae4c6183cfb84ac56fb43ea1949bab436efde9e", 0x55}], 0x2}}, {{&(0x7f00000049c0)={0xa, 0x4e21, 0x8, @mcast1}, 0x1c, 0xfffffffffffffffe, 0x0, &(0x7f0000004ac0)=[@dstopts_2292={{0xe8, 0x29, 0x4, {0x73, 0x19, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x6, 0x93, "a15c5e063192572dbba6f1ac3247a6d2b897702a5f1de6d6db9401084e60b4fae4bb1c4aff22150b6d89fbaaca8ec0f39a98cbe20aa7061333bdc6922b260bfdc0c252629092b408409a929efac38bf1955ff06c8dee58aca967fab7479287f8543233b9c12917f44a20d1af3c07411bb65af06949e160c37d4d6d1f8758c0a13f1f7ddcdc7bef803fba5fb996d0e6466fcc1d"}, @generic={0xe4, 0x2e, "f536393440978e2b1ac212e4e58b83cb80de482d3bc6bf300c28d717d9874ff85f0f9df8956331e14e19a37a5ed0"}]}}}, @dstopts_2292={{0x210, 0x29, 0x4, {0x16, 0x3f, '\x00', [@hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x28, {0x2, 0x8, 0x2, 0x4, [0x4, 0x100000000, 0x7, 0xf]}}, @generic={0x20, 0xc2, "c520007b425474065816b95a14a3f03e018c61a06dfbb3912ae33bd0f64d46ff8e1d396372a5972625a9e1770458f4f595192fbe8d797e81adaff5b91914d5389d472b5cc0fd7a175afbe5951cd30f86e58eb6e85335b86922efe787e02be159826a6ec7ff01b22b1b6d87f0c706a772b0e74713c8f495aabd93a7cd530f071241633b2fafa4ec381650dac5aa0dc63289c33dd92c804c2e822b151f054b1cf5b674c51ee5b2080ae96bbe44d2af2d789a3f30906aea622874e9be42843530122ef4"}, @generic={0x4b, 0x8a, "03db725e81671c4bd0620689cf2314cb45d9330f857d403041eaeaa7a5fa5367e10150280bf51ee62cca1805e459f5283a9207c8ee04f79d58425dc8e4e75643631a181e3c71dd43fb6e8a307cee809e202de0ecc2aee25de45714fc4bde1a2aae95d2fb93e86281133825223e18cf020a5d97aa71cae4771c9e5c840d365017a043afcd6266ffa064f2"}, @generic={0xf, 0x67, "b1e34494e77bab627410139b19ce87fe9af1f294cee5e5d78dbf1c76d5517c008c2dcc314735dd000333b93d715c1302a2aa0c4646d7b5b81ff6dde306ebb50b87f4db26ce6be1888dc915ca0fe2913db254a6e1520c3d5fb271e32205d759a881aacdf8f2b982"}, @enc_lim]}}}, @dstopts_2292={{0x98, 0x29, 0x4, {0x3c, 0xf, '\x00', [@ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x40, {0x3, 0xe, 0x9, 0xffff, [0x1, 0xfffffffffffffff8, 0xfffffffffffffff1, 0x6, 0x8, 0x200, 0x2]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0xa4d, [0x65, 0x2, 0x3, 0x8c5]}}, @enc_lim={0x4, 0x1, 0xc}, @ra={0x5, 0x2, 0x3}]}}}, @hopopts={{0x1020, 0x29, 0x36, {0x33, 0x200, '\x00', [@generic={0xf5, 0x1000, "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"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0xb}}}}, @rthdr={{0x48, 0x29, 0x39, {0x26, 0x6, 0x0, 0x1, 0x0, [@private1, @mcast2, @private0]}}}, @dstopts={{0xd8, 0x29, 0x37, {0x3c, 0x17, '\x00', [@calipso={0x7, 0x50, {0x1, 0x12, 0x20, 0xe9, [0x5, 0x1, 0x2, 0x5, 0x7, 0x0, 0x5, 0x4, 0x3267]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x80, 0xff75, [0x7]}}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x18, {0x3, 0x4, 0x9, 0xfff, [0xff, 0x149]}}, @calipso={0x7, 0x38, {0x0, 0xc, 0x9, 0xfffd, [0x8, 0x1, 0x1800000000, 0xffff, 0x3, 0x7f]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8001}}], 0x1540}}], 0x7, 0x7f00) 2m29.106938991s ago: executing program 6 (id=2033): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f00000004000000040000002200000000000000", @ANYBLOB="00000000a55cc2fbbfed"], 0x50) 2m29.003364326s ago: executing program 6 (id=2034): inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0xa0000019}) process_mrelease(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x80003, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) r1 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) mlockall(0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22640, 0x0) fcntl$getflags(r2, 0x408) 2m26.390189165s ago: executing program 6 (id=2042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x15, 0x1, 0x10000, 0xe0a, 0x7f, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x8, 0x5}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="a746578acfd2e457a6b75e", @ANYRES64=0x0, @ANYBLOB="060000000000000001000000000000000500000000000000e809000000000000000000000300000005000000000000007f000000000000000700000000000000020000000000000009000000000000008b070000000000000008000000000000afdb000000c0000007000000", @ANYBLOB="9583a5f5a5d6287872548ad52777845f8408a1ae5da62596f4e2022e5ed96b864b7616cccf736cfe963852ef14fd57463d4cbf5d8663bf0ed963eca3b1398380b01a8dd9188cc9fdd025cbafaa47c4ed8ff2f85db7dc1f0d6c055a542e18fc2ab5707fd70a9733d645da274f48498210e4d874b2f7a6e7d244f657bef0085ddb1efc266265d6a3d5c77b36c532bcdce156177c45efb9337f99b7b3a5ad38238b17827c4cc268e641811a1ea76f160e15dd702db367f002a61966d32c9476b07dfceb698ce7c7e9081bc0fed16578f81d405f19d8a74232a2c0291c2f1e6703b115768abe0a2fd582c36ae56027d16942", @ANYRES32=0x0, @ANYBLOB="06000000000000800000000003000000000000000400000000000000030000007140482d5b255d0000000000060000000000000001000000000000000100010000000000040000000000000048400000100000000400000000000000000000000000000005000000000000000b000000000000000200000000000000000000521c00000005000000070000000400000000800000ff0f0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0700000000100000000000000000000000000000a2ffffffffffffff0100000001fcffff5e000000000000000600000000000000010000000000000000010000000000004ecf00000000000006000000ff0f0000020000000000000005000000000000000a000000000000000400000000000000ffffffffffffffff07000000000000000600000001000000000009200000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0900000007000000000000000200000000000000100000000000000002000000050000002c2c00000000000004000000000000000300000000000000000000000000000007000000000000006b0200000600000000000000000000000700000000000000000800000000000008000000000000000900000000000000f6570000000000000f00000008000000feffffff008000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="070000005e00000000000000010000000000000007000000000000000a000000040000002f6465762f636563230000000000000005000000000000000000000000000000a082ffffffffffff0500000000000000c3d20000040000000100000000000000020000000000000009000000000000000600000000000000090000000000000004000000000000000800000003000000010000000080000006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff03000003000000000000000100000000000000030000000000000002000000810000002a29000000000000"], 0x338) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x1, 0x6, 0xe30, 0x7fffffff, "c2a0da871813beebb98f6cd3d5e10363", 0x0, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfc}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r7 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2000000000000036) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000004a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRES32=r9, @ANYRES16=r6, @ANYRES8=r0, @ANYBLOB="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", @ANYRESHEX=r2, @ANYRES16=r5, @ANYRES64=r2, @ANYBLOB="660baf61833a05adb91c0c1b5aeef693f367c4f44eeeffe6ae30511006c1b602a4bc762d9eeaef2570c800a470b87b7b6e3ee5b9c8aafc9c8b7d386300a66445ad2360e2bdfc48e4ef193f7f7aa2771205102c23248d71799c43454b40abba18089245ac0280bb17de3a105015db9c5f6fafac9d3c2bad75c88eb88ecb0887889105aade60650b547027c4c437586598d2c0798e62cb05c001d444e511bbeef360520dbb527813f7a6c34d3bd011fd51ad", @ANYRES32=r7], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c000106", @ANYRES16=r11, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb"], 0x5c}}, 0x0) 2m10.959607957s ago: executing program 35 (id=2042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x15, 0x1, 0x10000, 0xe0a, 0x7f, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x8, 0x5}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="a746578acfd2e457a6b75e", @ANYRES64=0x0, @ANYBLOB="060000000000000001000000000000000500000000000000e809000000000000000000000300000005000000000000007f000000000000000700000000000000020000000000000009000000000000008b070000000000000008000000000000afdb000000c0000007000000", @ANYBLOB="9583a5f5a5d6287872548ad52777845f8408a1ae5da62596f4e2022e5ed96b864b7616cccf736cfe963852ef14fd57463d4cbf5d8663bf0ed963eca3b1398380b01a8dd9188cc9fdd025cbafaa47c4ed8ff2f85db7dc1f0d6c055a542e18fc2ab5707fd70a9733d645da274f48498210e4d874b2f7a6e7d244f657bef0085ddb1efc266265d6a3d5c77b36c532bcdce156177c45efb9337f99b7b3a5ad38238b17827c4cc268e641811a1ea76f160e15dd702db367f002a61966d32c9476b07dfceb698ce7c7e9081bc0fed16578f81d405f19d8a74232a2c0291c2f1e6703b115768abe0a2fd582c36ae56027d16942", @ANYRES32=0x0, @ANYBLOB="06000000000000800000000003000000000000000400000000000000030000007140482d5b255d0000000000060000000000000001000000000000000100010000000000040000000000000048400000100000000400000000000000000000000000000005000000000000000b000000000000000200000000000000000000521c00000005000000070000000400000000800000ff0f0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0700000000100000000000000000000000000000a2ffffffffffffff0100000001fcffff5e000000000000000600000000000000010000000000000000010000000000004ecf00000000000006000000ff0f0000020000000000000005000000000000000a000000000000000400000000000000ffffffffffffffff07000000000000000600000001000000000009200000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0900000007000000000000000200000000000000100000000000000002000000050000002c2c00000000000004000000000000000300000000000000000000000000000007000000000000006b0200000600000000000000000000000700000000000000000800000000000008000000000000000900000000000000f6570000000000000f00000008000000feffffff008000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="070000005e00000000000000010000000000000007000000000000000a000000040000002f6465762f636563230000000000000005000000000000000000000000000000a082ffffffffffff0500000000000000c3d20000040000000100000000000000020000000000000009000000000000000600000000000000090000000000000004000000000000000800000003000000010000000080000006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff03000003000000000000000100000000000000030000000000000002000000810000002a29000000000000"], 0x338) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x1, 0x6, 0xe30, 0x7fffffff, "c2a0da871813beebb98f6cd3d5e10363", 0x0, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfc}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r7 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2000000000000036) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000004a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRES32=r9, @ANYRES16=r6, @ANYRES8=r0, @ANYBLOB="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", @ANYRESHEX=r2, @ANYRES16=r5, @ANYRES64=r2, @ANYBLOB="660baf61833a05adb91c0c1b5aeef693f367c4f44eeeffe6ae30511006c1b602a4bc762d9eeaef2570c800a470b87b7b6e3ee5b9c8aafc9c8b7d386300a66445ad2360e2bdfc48e4ef193f7f7aa2771205102c23248d71799c43454b40abba18089245ac0280bb17de3a105015db9c5f6fafac9d3c2bad75c88eb88ecb0887889105aade60650b547027c4c437586598d2c0798e62cb05c001d444e511bbeef360520dbb527813f7a6c34d3bd011fd51ad", @ANYRES32=r7], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c000106", @ANYRES16=r11, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb"], 0x5c}}, 0x0) 6.606258995s ago: executing program 1 (id=2581): r0 = io_uring_setup(0x6b99, &(0x7f0000000100)={0x0, 0x6191, 0x2, 0x2, 0x8}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], &(0x7f0000007d40)=[{}, {}, {}, {}, {}], &(0x7f00000000c0), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x3c3c3c3c3c3c49c, 0x0, 0x1, 0x0, r5}) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x15b}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000000c0), 0x10) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 4.853407543s ago: executing program 4 (id=2587): syz_pidfd_open(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f0000004000)=0x2, 0x4, 0x0, 0x0, &(0x7f0000004000), 0xb201fffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee00, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r3, 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040)) 4.782012772s ago: executing program 1 (id=2588): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x2) 4.689356259s ago: executing program 3 (id=2591): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000030425bd7000fbdbdf2500000400", @ANYRES32=0x0, @ANYBLOB="000300000000000008001e004e0200000a000200ffffffffffff000008002400aea0491b08000500", @ANYRES32=r4, @ANYBLOB="0a2bd8cf7cda19de552ace87adb3de61ee7d0825641d147ada261a687039f1fa5c024e640d069352d4e903baa72e2343c3ead853d2caccde25f5815647f847119c5f4fd7d4825a013b18934243abed283aaa86f0592d2b06da5b2122817564c0af8dddc98ec2ebdb7c182c2ae21aa47fdf2656502240ae386666bc397c82f7"], 0x44}}, 0x40010) 4.493791244s ago: executing program 4 (id=2593): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000003}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x300, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in=@multicast1, 0x4e21, 0x4, 0x4e20, 0x8, 0x2, 0x60, 0x20, 0x67, r5}, {0xd94c, 0x0, 0x0, 0x854, 0x8, 0x2, 0x4, 0x6b6d}, {0x10000, 0xf9, 0xfffffffffffff001, 0xc34}, 0x800, 0x6e6bb8, 0x1, 0x0, 0x3}, {{@in6=@remote, 0x4d4, 0xff}, 0xa, @in6=@loopback, 0x0, 0x3, 0x3, 0xc7, 0x242, 0x4f9, 0x401}}, 0xe8) r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_delete(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)={0x1c, r9, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48840}, 0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0xfcff, &(0x7f0000000700)='V'}) 4.371698992s ago: executing program 3 (id=2595): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, 0x0) keyctl$read(0x20, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000000c0)=']){%%)^&!+)\x00', 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x40187013, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x27, 0x0, 0x2000000, 0x5}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 3.835542161s ago: executing program 1 (id=2597): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000140)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x1f00, 0x1}) 3.608882587s ago: executing program 1 (id=2599): syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x428702, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0x400c000) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) ioctl$sock_proto_private(r2, 0x89e1, &(0x7f0000001080)) syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') 3.493801521s ago: executing program 4 (id=2600): socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/time\x00') fsetxattr$system_posix_acl(r0, &(0x7f0000000740)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000340)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000001c0)=0xfffffffa, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280), 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="011927bd7000ffdbdf253500000008002c00fcffffff0c0006018100000001000000"], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x40) fcntl$setlease(r5, 0x400, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x1000000) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) 3.157735203s ago: executing program 3 (id=2601): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) lseek(r1, 0xfffffffffffffffd, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2456d400"], 0x24}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000980)=ANY=[@ANYBLOB="120101020000000825c46f4b05a8a44000010203010902240001010960450904000601070103030905010200040c1609090582020900070803"], &(0x7f0000000540)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x1, 0x5, 0x8, 0x20, 0xc1}, 0xa9, &(0x7f0000000300)={0x5, 0xf, 0xa9, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x8, 0x6, 0x3, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xe, 0x9, 0x101}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xf9, 0x2, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x2, 0xb, 0x3}, @generic={0x7e, 0x10, 0x4, "cc2d2e786c8256c06dcf55e73c8e5d72ceb27dbb405cf3ac3d68e593eb932dd2840fc3f790825990c92a0e6797d523b157565fc5cad93c3c26cde21a80d1e4ee3e895d05e7f59818669ea3abd1f6cd410e6b4b52697e6845178a0c04c264667e75959ff820920454d68ee875ad3d7ed1e42792f73d1ae1bc338b10"}]}, 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io$printer(r3, &(0x7f00000006c0)={0x14, &(0x7f0000000580)={0x0, 0x22, 0x4e, {0x4e, 0x7, "9daad418ec1af0a484270294ab28b612933066583f5e79c6b3b8953ad8e1f0f5502d552cb17d67cf5fbb9c670c91503b8abfb3da2d18a99f95036b6e00fa8d8655bb6e9c33866cfc2c7c020a"}}, &(0x7f0000000600)={0x0, 0x3, 0x80, @string={0x80, 0x3, "8d136b2db904a67cd163e87e94c1fe79949d6c76ca33234ffe3b2806d685e4b2aea97b9c8bf17d30c27d7242e4767765fce7e94ff1afa52f6f86543d946c670537f75793246838917cd579cca0ad8659357b83e616e8494662584854b8a0e2bf87234f77620131eeede52d6d7bdfc8c693bc72d70c99be5bcd78f228b793"}}}, &(0x7f0000000940)={0x34, &(0x7f0000000700)={0x20, 0x3, 0xa, "0bd09bf51b70afa8121a"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000007c0)={0x20, 0x0, 0xf9, {0xf7, "e98125cba0c59540af577cbc35260e0124fa429ce64435535024b2b89c574547a994356247a292617d13bdac4eb92bd0325ba5fec6472c4d81649931c8877e7f45dba982f74721ca53348859233fd8848f04075a4eefc4a2eefcd590e6ddc2920887ab5f1b557c0e1feec6baf45c1b1b38a79b8437d5e12e8ee2b6935bb0edf973492458f1f7c13559b0ad9de5ddc6435249b25dbdcc289d26cca40759e39921d16e57baf0ac76944eb2ee571865e4b9aa34a30b3b8c6c9c2c8aa681a9bf2b066fc417bf07b4daef2fe054517defce8387ae5bb48354b86e2538616ff0934df6b2070ae0d8bba227a63249d39172f50b7c1af5f21d7367"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000900)={0x20, 0x0, 0x1}}) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xabac, 0x1c080, 0x0, 0x44a}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) pipe2$9p(&(0x7f00000002c0), 0x0) pipe(&(0x7f0000000140)) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) 2.864340137s ago: executing program 7 (id=2605): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 2.818817564s ago: executing program 1 (id=2606): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r8 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r10, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r10, 0xc0405610, &(0x7f00000000c0)={0xb, 0x1, 0x4}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x3, r9, 0x0, 0x0, 0x0, &(0x7f0000000240)}) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2.63409553s ago: executing program 4 (id=2609): mkdirat(0xffffffffffffff9c, 0x0, 0x100) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x100001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0xa, 0x3, 0xf2c) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) 2.518000253s ago: executing program 8 (id=2610): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newsa={0x13c, 0x1a, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@local, 0x0, 0x0, 0x0, 0x2}, {@in=@multicast2, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, {0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0xffffffffffffffff}, {}, 0xfffffffe, 0x0, 0x2, 0x2, 0x0, 0x60}, [@algo_aead={0x4c, 0x12, {{'morus1280-generic\x00'}, 0x0, 0x100}}]}, 0x13c}}, 0x0) 2.517458519s ago: executing program 3 (id=2611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) vmsplice(r4, &(0x7f0000001440)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x4) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 2.421741381s ago: executing program 8 (id=2612): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) eventfd(0x9) io_submit(0x0, 0x7, &(0x7f0000001b80)=[0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000000440)="09171975074868c04758d57ef542e51a83010e53a66db490d4982012164afda33dc209063ae2a2ab305a614947baa718920847677790afe72107bfe0763ff05ea8b2e188c3aafa1ffe5ba6b19dfa27248b6da9a0b3b84644db2ec92a09ae6efe88def1c12d88ddf5699cc1ed39a45005cc831a0b24b97e85bbebbed762c40e4ad6102bcfa5", 0x85, 0x9, 0x0, 0x2}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x7, r1, &(0x7f0000000500)="390a918c864a5143ca4079f31e6cd11ce9aa85adbff0400f3f5c41b9ade3adcec53cd09f786230d531f1233f8dd6be90e9c587c933b5dfef12a78c8354405d258da77567524831d014a73cf38eec4d8eaae11f6497b0a9f18bb1c33468fe9a20bacb3196cff80356afef5a73296b6f4b58a97ac7109563343a812ddb5f2c90bd0be712ed3bd37524da456af1983357ff16cd5e06d6c6e9f256933fc11cc82ab35a71f0f04cebff36b666b3083b955b7aa9760359cc3f525bba5e0787e0468db1e50d20c5871946a98ec40d577cfc5037a9d2e97702caa66e3c54145f30efff96b0cc568228ab66a4fddbcfa836c4", 0xee, 0x5d, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x170, r0, &(0x7f0000000600)="5303cc3bdb7919f76981e929b90d8eea747cd904c18bf673fb395e90366407c2a36f6cca05d39b837ed0c579609f17372aa21bf35e42e64ac4cb891d0d1565e55969f86f79b97db69f328bad038e6699634fcee8cb0eeb02088c7a822360f6789cbe778a4a56ee65765bfc5075ee700b3ec9f6f8a8dacc1e68f335273108ec6e78e02008cba4e512876be23c607244b32f95a97ad1777fb6f01502293221502207c477", 0xa3, 0x8000000000000000, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x5, r1, &(0x7f00000008c0)="18660c96a44e034641fa1de06e52adafcb3ef687040ad707c2f6b9bc37e9b46eaf919e258e0fe726c2457e4a45ae38ed17233a20b3c45c3a4e90f740e700dc5836b67e86c72b20eec6ce0ac54b34991c438b0af18124489eb178", 0x5a, 0x7, 0x0, 0x2}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000006c0)="e29cf7536b070200000000000000b74d256d394563aa2875aa5b7616768b4ab4bd527a2db2d9d5a15b5b4bdf2b11555cee3382299223f821fb43132f6e4b8bd81d0683df89648bbf6222c19baf4f481f73108cf29c527e5fab06f5a4edb713e5d5888818b71f38e07267634fe4821affd7eac2efebd77d3de5ebb6d8a463f6bc30f72bc6957ab3db05e83ea65155fb9ccf471fa3f8", 0x95, 0x7, 0x0, 0x1}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x8, 0x8fdd, 0xffffffffffffffff, &(0x7f0000000780)="c075396ae119bd967018f18525a4e5e3970133c543e39a805d40aa1bd3e7854670ba", 0x22, 0x1ff, 0x0, 0x1}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r7 = socket$packet(0x11, 0x3, 0x300) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) dup(r7) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x110000}) 2.318520241s ago: executing program 7 (id=2613): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000019200)="9c8677", 0x3}], 0x1, 0x8, 0x6, 0x11) 2.066151239s ago: executing program 7 (id=2614): syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000740)={0x48}) r8 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r8, 0x0, 0x0, 0x0) 2.013870992s ago: executing program 4 (id=2615): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x34, 0xd, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) syz_emit_vhci(&(0x7f0000009c40)=ANY=[@ANYBLOB="04140003c9"], 0x17) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x4, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x0, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x4000000, 0x3, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xe, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xfffffff7, 0x4, 0x7, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x3, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x8, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x80000009, 0x0, 0x5, 0x4, 0x401, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x0, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x8, 0x7, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0x40, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0xc, 0x2, 0x81, 0x9, 0x2, 0x7, 0x100, 0x7, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17cb, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0x2, 0x5, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x6]}, 0x45c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000140)={r3}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.927281904s ago: executing program 4 (id=2616): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8013, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) chown(&(0x7f00000003c0)='./file0\x00', r2, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_open_dev$video4linux(0x0, 0x7, 0xc82) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 1.182106406s ago: executing program 1 (id=2617): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = eventfd(0x9) io_submit(0x0, 0x7, &(0x7f0000001b80)=[0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000000440)="09171975074868c04758d57ef542e51a83010e53a66db490d4982012164afda33dc209063ae2a2ab305a614947baa718920847677790afe72107bfe0763ff05ea8b2e188c3aafa1ffe5ba6b19dfa27248b6da9a0b3b84644db2ec92a09ae6efe88def1c12d88ddf5699cc1ed39a45005cc831a0b24b97e85bbebbed762c40e4ad6102bcfa5", 0x85, 0x9, 0x0, 0x2}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x7, r1, &(0x7f0000000500)="390a918c864a5143ca4079f31e6cd11ce9aa85adbff0400f3f5c41b9ade3adcec53cd09f786230d531f1233f8dd6be90e9c587c933b5dfef12a78c8354405d258da77567524831d014a73cf38eec4d8eaae11f6497b0a9f18bb1c33468fe9a20bacb3196cff80356afef5a73296b6f4b58a97ac7109563343a812ddb5f2c90bd0be712ed3bd37524da456af1983357ff16cd5e06d6c6e9f256933fc11cc82ab35a71f0f04cebff36b666b3083b955b7aa9760359cc3f525bba5e0787e0468db1e50d20c5871946a98ec40d577cfc5037a9d2e97702caa66e3c54145f30efff96b0cc568228ab66a4fddbcfa836c4", 0xee, 0x5d, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x170, r0, &(0x7f0000000600)="5303cc3bdb7919f76981e929b90d8eea747cd904c18bf673fb395e90366407c2a36f6cca05d39b837ed0c579609f17372aa21bf35e42e64ac4cb891d0d1565e55969f86f79b97db69f328bad038e6699634fcee8cb0eeb02088c7a822360f6789cbe778a4a56ee65765bfc5075ee700b3ec9f6f8a8dacc1e68f335273108ec6e78e02008cba4e512876be23c607244b32f95a97ad1777fb6f01502293221502207c477", 0xa3, 0x8000000000000000, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x5, r1, &(0x7f00000008c0)="18660c96a44e034641fa1de06e52adafcb3ef687040ad707c2f6b9bc37e9b46eaf919e258e0fe726c2457e4a45ae38ed17233a20b3c45c3a4e90f740e700dc5836b67e86c72b20eec6ce0ac54b34991c438b0af18124489eb178", 0x5a, 0x7, 0x0, 0x2}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x6, 0x436, r0, &(0x7f0000000800)="4afc83212afbf96b080610650c16aa4a0f242f93c63ece35", 0x18, 0x6, 0x0, 0x3, r3}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x8, 0x8fdd, 0xffffffffffffffff, &(0x7f0000000780)="c075396ae119bd967018f18525a4e5e3970133c543e39a805d40aa1bd3e7854670ba1b2ffbce6a3d3062f99f58", 0x2d, 0x1ff, 0x0, 0x1}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) dup(0xffffffffffffffff) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x110000}) 1.090652421s ago: executing program 7 (id=2618): mkdirat(0xffffffffffffff9c, 0x0, 0x63) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0010000008004a50325b41fa625f1fc76df9553030302e75"], 0x15) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xc00, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2000], [], [0x400000000000001]}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) waitid(0x2, 0x0, 0x0, 0x1000000, &(0x7f00000006c0)) r3 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'bridge_slave_1\x00', 0x8000}) syz_open_dev$dri(0x0, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97", 0xd7}], 0x1}, 0x60044884) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) 987.232673ms ago: executing program 7 (id=2619): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8013, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) chown(&(0x7f00000003c0)='./file0\x00', r2, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_open_dev$video4linux(0x0, 0x7, 0xc82) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 442.056868ms ago: executing program 8 (id=2620): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100feff"], 0xc8) sendmsg$sock(r1, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x0) 404.000737ms ago: executing program 8 (id=2621): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000071, 0x0, 0xff000000000c0000}]}) r2 = syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x70}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r3}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x9, 0xd9d2]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000"], 0x0, 0x37}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0xa}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="815b760341a6"}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x88000}, 0x40000) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x64, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff1}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x64}}, 0x48010) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 375.953067ms ago: executing program 3 (id=2622): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newsa={0x13c, 0x1a, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@local, 0x0, 0x0, 0x0, 0x2}, {@in=@multicast2, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, {0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0xffffffffffffffff}, {}, 0xfffffffe, 0x0, 0x2, 0x2, 0x0, 0x60}, [@algo_aead={0x4c, 0x12, {{'morus1280-generic\x00'}, 0x0, 0x100}}]}, 0x13c}}, 0x0) 334.796087ms ago: executing program 3 (id=2623): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x1}, 0x21, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000080)=0x4, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@caif=@dgm={0x25, 0x8, 0xcd}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000100)='mand\x00', 0x0, 0x0) fsmount(r4, 0x1, 0x3) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, 0x0, 0x48040) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0xa, 0x3, 0x3a) ioctl$KDGKBTYPE(r0, 0x4b48, &(0x7f0000000040)) 246.136621ms ago: executing program 8 (id=2624): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x11, @private=0xa010102, 0x15, 0x0, 'wrr\x00', 0x0, 0x0, 0x2c}, 0x2c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) 24.339833ms ago: executing program 7 (id=2625): mkdirat(0xffffffffffffff9c, 0x0, 0x100) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x100001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0xa, 0x3, 0xf2c) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) 0s ago: executing program 8 (id=2626): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x34, 0xd, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) syz_emit_vhci(&(0x7f0000009c40)=ANY=[@ANYBLOB="04140003c9"], 0x17) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x4, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x0, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x4000000, 0x3, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xe, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xfffffff7, 0x4, 0x7, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x3, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x8, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x80000009, 0x0, 0x5, 0x4, 0x401, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x0, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x8, 0x7, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0x40, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0xc, 0x2, 0x81, 0x9, 0x2, 0x7, 0x100, 0x7, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17cb, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0x2, 0x5, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x6]}, 0x45c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000140)={r3}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) kernel console output (not intermixed with test programs): 9.940120][T11084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.005839][T14550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 820.046056][T10659] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 820.061232][T10659] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 820.070419][T10659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.078633][T10659] usb 4-1: Product: syz [ 820.083147][T13435] block nbd5: Possible stuck request ffff8880264b5080: control (read@0,1024B). Runtime 420 seconds [ 820.083185][T13435] block nbd5: Possible stuck request ffff8880264b5240: control (read@1024,1024B). Runtime 420 seconds [ 820.083208][T13435] block nbd5: Possible stuck request ffff8880264b5400: control (read@2048,1024B). Runtime 420 seconds [ 820.083232][T13435] block nbd5: Possible stuck request ffff8880264b55c0: control (read@3072,1024B). Runtime 420 seconds [ 820.866820][T10659] usb 4-1: Manufacturer: syz [ 820.871455][T10659] usb 4-1: SerialNumber: syz [ 820.891990][T10659] usb 4-1: can't set config #1, error -71 [ 820.899288][T10659] usb 4-1: USB disconnect, device number 23 [ 821.023192][T11084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.106468][T14562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2063'. [ 821.315673][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 821.315692][ T30] audit: type=1400 audit(1760058571.289:1285): avc: denied { read } for pid=14555 comm="syz.7.2061" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 821.766323][T13435] block nbd1: Possible stuck request ffff888026377000: control (read@0,1024B). Runtime 540 seconds [ 821.782022][T13155] block nbd4: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 390 seconds [ 821.782296][ T6955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.792797][T13155] block nbd4: Possible stuck request ffff8880264701c0: control (read@1024,1024B). Runtime 390 seconds [ 821.801365][T11084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.811719][T13155] block nbd4: Possible stuck request ffff888026470380: control (read@2048,1024B). Runtime 390 seconds [ 821.824538][T13435] block nbd1: Possible stuck request ffff8880263771c0: control (read@1024,1024B). Runtime 540 seconds [ 821.831625][T13155] block nbd4: Possible stuck request ffff888026470540: control (read@3072,1024B). Runtime 390 seconds [ 821.841942][T13435] block nbd1: Possible stuck request ffff888026377380: control (read@2048,1024B). Runtime 540 seconds [ 821.861903][ T30] audit: type=1400 audit(1760058571.289:1286): avc: denied { open } for pid=14555 comm="syz.7.2061" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 821.863687][T13435] block nbd1: Possible stuck request ffff888026377540: control (read@3072,1024B). Runtime 540 seconds [ 821.888206][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.052482][T11084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.244132][T14576] netlink: 'syz.1.2065': attribute type 1 has an invalid length. [ 822.268353][ T30] audit: type=1326 audit(1760058572.269:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4038b8eec9 code=0x7ffc0000 [ 822.433396][ T30] audit: type=1326 audit(1760058572.269:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4038b8eec9 code=0x7ffc0000 [ 822.503188][ T30] audit: type=1326 audit(1760058572.269:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f4038b8eec9 code=0x7ffc0000 [ 822.653551][ T30] audit: type=1326 audit(1760058572.269:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4038b8eec9 code=0x7ffc0000 [ 823.223336][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.231479][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.240929][ T30] audit: type=1326 audit(1760058572.269:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4038b8eec9 code=0x7ffc0000 [ 823.277430][ T30] audit: type=1326 audit(1760058572.269:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4038b8eec9 code=0x7ffc0000 [ 823.308029][ T30] audit: type=1326 audit(1760058572.269:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4038b8eec9 code=0x7ffc0000 [ 823.479735][ T30] audit: type=1326 audit(1760058572.269:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4038b8eec9 code=0x7ffc0000 [ 823.633668][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2067'. [ 823.781920][T10659] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 823.931976][T10659] usb 4-1: Using ep0 maxpacket: 32 [ 823.938481][T10659] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.956917][T10659] usb 4-1: config 0 has no interfaces? [ 823.975158][T10659] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 823.985224][T10659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.003840][T10659] usb 4-1: Product: syz [ 824.016870][T10659] usb 4-1: Manufacturer: syz [ 824.042558][T10659] usb 4-1: SerialNumber: syz [ 824.064357][T10659] usb 4-1: config 0 descriptor?? [ 824.350431][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.497104][ T5813] Bluetooth: hci3: unexpected event 0x14 length: 20 > 6 [ 825.012744][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.095523][T14613] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2069'. [ 825.606334][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.622792][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.861009][T14617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 827.077738][ T6954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.086254][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.095479][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.653336][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.709757][ T5944] usb 4-1: USB disconnect, device number 24 [ 828.406593][T14640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.415332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.507708][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 828.521784][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 828.536772][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 828.546248][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 828.554872][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 828.648826][T14643] lo speed is unknown, defaulting to 1000 [ 828.693265][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.157358][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 829.157373][ T30] audit: type=1400 audit(1760058579.049:1331): avc: denied { mount } for pid=14652 comm="syz.7.2088" name="/" dev="rpc_pipefs" ino=55647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 829.286798][ T30] audit: type=1400 audit(1760058579.309:1332): avc: denied { unmount } for pid=13943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 829.307237][ C1] vkms_vblank_simulate: vblank timer overrun [ 829.344487][T13155] block nbd3: Possible stuck request ffff888026425080: control (read@0,1024B). Runtime 600 seconds [ 829.416306][T14643] chnl_net:caif_netlink_parms(): no params data found [ 829.448708][T14666] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2094'. [ 830.627242][T11084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.645014][ T5813] Bluetooth: hci4: command tx timeout [ 830.645350][T13155] block nbd3: Possible stuck request ffff888026425240: control (read@1024,1024B). Runtime 600 seconds [ 830.662147][T13155] block nbd3: Possible stuck request ffff888026425400: control (read@2048,1024B). Runtime 600 seconds [ 830.684097][T13155] block nbd3: Possible stuck request ffff8880264255c0: control (read@3072,1024B). Runtime 600 seconds [ 830.692178][ T5881] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 830.695929][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.970061][ T5881] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 831.006082][T14643] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.019459][ T5881] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 831.028870][T14643] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.036322][T14643] bridge_slave_0: entered allmulticast mode [ 831.045388][T14643] bridge_slave_0: entered promiscuous mode [ 831.054460][ T5881] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 831.117243][T14643] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.124447][T14643] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.131633][T14643] bridge_slave_1: entered allmulticast mode [ 831.139698][T14643] bridge_slave_1: entered promiscuous mode [ 831.142000][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 831.184251][ T5881] usb 2-1: SerialNumber: syz [ 831.751840][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.903815][T13435] block nbd6: Possible stuck request ffff888026517000: control (read@0,1024B). Runtime 540 seconds [ 831.914651][T13435] block nbd6: Possible stuck request ffff8880265171c0: control (read@1024,1024B). Runtime 540 seconds [ 831.926772][T13435] block nbd6: Possible stuck request ffff888026517380: control (read@2048,1024B). Runtime 540 seconds [ 831.938279][T13435] block nbd6: Possible stuck request ffff888026517540: control (read@3072,1024B). Runtime 540 seconds [ 832.504135][ T5881] usb 2-1: 0:2 : does not exist [ 832.513502][ T5881] usb 2-1: unit 5 not found! [ 832.533526][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.542180][T11533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.550796][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.559806][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.576037][ T5881] usb 2-1: USB disconnect, device number 49 [ 832.587060][T14643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.653702][ T9572] udevd[9572]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 832.683376][T14643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.693532][ T5813] Bluetooth: hci4: command tx timeout [ 832.773214][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.778177][T14697] FAULT_INJECTION: forcing a failure. [ 832.778177][T14697] name failslab, interval 1, probability 0, space 0, times 0 [ 833.019512][T14697] CPU: 1 UID: 0 PID: 14697 Comm: syz.3.2099 Not tainted syzkaller #0 PREEMPT(full) [ 833.019538][T14697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 833.019548][T14697] Call Trace: [ 833.019554][T14697] [ 833.019560][T14697] dump_stack_lvl+0x16c/0x1f0 [ 833.019591][T14697] should_fail_ex+0x512/0x640 [ 833.019617][T14697] ? __kmalloc_cache_node_noprof+0x62/0x7a0 [ 833.019637][T14697] should_failslab+0xc2/0x120 [ 833.019657][T14697] __kmalloc_cache_node_noprof+0x75/0x7a0 [ 833.019673][T14697] ? __pfx_css_rstat_updated+0x10/0x10 [ 833.019696][T14697] ? __get_vm_area_node+0x101/0x330 [ 833.019721][T14697] ? __get_vm_area_node+0x101/0x330 [ 833.019738][T14697] __get_vm_area_node+0x101/0x330 [ 833.019768][T14697] __vmalloc_node_range_noprof+0x271/0x1480 [ 833.019790][T14697] ? vhost_task_create+0x1d2/0x370 [ 833.019817][T14697] ? vhost_task_create+0x1d2/0x370 [ 833.019841][T14697] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 833.019867][T14697] ? rcu_is_watching+0x12/0xc0 [ 833.019892][T14697] ? vhost_task_create+0x1d2/0x370 [ 833.019907][T14697] __vmalloc_node_noprof+0xad/0xf0 [ 833.019927][T14697] ? vhost_task_create+0x1d2/0x370 [ 833.019944][T14697] copy_process+0x2c77/0x76a0 [ 833.019976][T14697] ? __pfx_copy_process+0x10/0x10 [ 833.020001][T14697] ? lockdep_init_map_type+0x5c/0x280 [ 833.020019][T14697] ? lockdep_init_map_type+0x5c/0x280 [ 833.020035][T14697] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 833.020061][T14697] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 833.020083][T14697] vhost_task_create+0x1d2/0x370 [ 833.020100][T14697] ? __pfx_vhost_task_create+0x10/0x10 [ 833.020125][T14697] ? __pfx_vhost_task_fn+0x10/0x10 [ 833.020153][T14697] kvm_mmu_post_init_vm+0x1b7/0x380 [ 833.020173][T14697] kvm_arch_vcpu_ioctl_run+0x66/0x1970 [ 833.020197][T14697] ? kvm_vcpu_ioctl+0x14c5/0x1690 [ 833.020219][T14697] kvm_vcpu_ioctl+0x5eb/0x1690 [ 833.020240][T14697] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 833.020258][T14697] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 833.020281][T14697] ? do_vfs_ioctl+0x128/0x14f0 [ 833.020305][T14697] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 833.020327][T14697] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 833.020354][T14697] ? hook_file_ioctl_common+0x145/0x410 [ 833.020381][T14697] ? selinux_file_ioctl+0x180/0x270 [ 833.020396][T14697] ? selinux_file_ioctl+0xb4/0x270 [ 833.020413][T14697] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 833.020432][T14697] __x64_sys_ioctl+0x18e/0x210 [ 833.020456][T14697] do_syscall_64+0xcd/0xfa0 [ 833.020483][T14697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.020499][T14697] RIP: 0033:0x7f45fff8eec9 [ 833.020513][T14697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.020529][T14697] RSP: 002b:00007f4600e51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 833.020549][T14697] RAX: ffffffffffffffda RBX: 00007f46001e5fa0 RCX: 00007f45fff8eec9 [ 833.020559][T14697] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 833.020568][T14697] RBP: 00007f4600e51090 R08: 0000000000000000 R09: 0000000000000000 [ 833.020578][T14697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.020588][T14697] R13: 00007f46001e6038 R14: 00007f46001e5fa0 R15: 00007fff993b3518 [ 833.020612][T14697] [ 833.344175][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.356621][T14697] syz.3.2099: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 833.371649][T14697] CPU: 1 UID: 0 PID: 14697 Comm: syz.3.2099 Not tainted syzkaller #0 PREEMPT(full) [ 833.371672][T14697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 833.371681][T14697] Call Trace: [ 833.371686][T14697] [ 833.371692][T14697] dump_stack_lvl+0x16c/0x1f0 [ 833.371717][T14697] warn_alloc+0x248/0x3a0 [ 833.371755][T14697] ? __pfx_warn_alloc+0x10/0x10 [ 833.371774][T14697] ? rcu_is_watching+0x12/0xc0 [ 833.371798][T14697] ? trace_kmalloc+0x2b/0xd0 [ 833.371816][T14697] ? __get_vm_area_node+0x101/0x330 [ 833.371842][T14697] ? __kasan_kmalloc+0x8a/0xb0 [ 833.371857][T14697] ? __get_vm_area_node+0x208/0x330 [ 833.371877][T14697] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 833.371902][T14697] ? vhost_task_create+0x1d2/0x370 [ 833.371922][T14697] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 833.371944][T14697] ? rcu_is_watching+0x12/0xc0 [ 833.371964][T14697] ? vhost_task_create+0x1d2/0x370 [ 833.371977][T14697] __vmalloc_node_noprof+0xad/0xf0 [ 833.371994][T14697] ? vhost_task_create+0x1d2/0x370 [ 833.372010][T14697] copy_process+0x2c77/0x76a0 [ 833.372039][T14697] ? __pfx_copy_process+0x10/0x10 [ 833.372061][T14697] ? lockdep_init_map_type+0x5c/0x280 [ 833.372076][T14697] ? lockdep_init_map_type+0x5c/0x280 [ 833.372090][T14697] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 833.372112][T14697] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 833.372129][T14697] vhost_task_create+0x1d2/0x370 [ 833.372144][T14697] ? __pfx_vhost_task_create+0x10/0x10 [ 833.372165][T14697] ? __pfx_vhost_task_fn+0x10/0x10 [ 833.372189][T14697] kvm_mmu_post_init_vm+0x1b7/0x380 [ 833.372205][T14697] kvm_arch_vcpu_ioctl_run+0x66/0x1970 [ 833.372226][T14697] ? kvm_vcpu_ioctl+0x14c5/0x1690 [ 833.372246][T14697] kvm_vcpu_ioctl+0x5eb/0x1690 [ 833.372263][T14697] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 833.372278][T14697] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 833.372299][T14697] ? do_vfs_ioctl+0x128/0x14f0 [ 833.372319][T14697] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 833.372339][T14697] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 833.372361][T14697] ? hook_file_ioctl_common+0x145/0x410 [ 833.372384][T14697] ? selinux_file_ioctl+0x180/0x270 [ 833.372397][T14697] ? selinux_file_ioctl+0xb4/0x270 [ 833.372412][T14697] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 833.372428][T14697] __x64_sys_ioctl+0x18e/0x210 [ 833.372448][T14697] do_syscall_64+0xcd/0xfa0 [ 833.372471][T14697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.372485][T14697] RIP: 0033:0x7f45fff8eec9 [ 833.372497][T14697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.372511][T14697] RSP: 002b:00007f4600e51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 833.372525][T14697] RAX: ffffffffffffffda RBX: 00007f46001e5fa0 RCX: 00007f45fff8eec9 [ 833.372535][T14697] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 833.372543][T14697] RBP: 00007f4600e51090 R08: 0000000000000000 R09: 0000000000000000 [ 833.372552][T14697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.372560][T14697] R13: 00007f46001e6038 R14: 00007f46001e5fa0 R15: 00007fff993b3518 [ 833.372581][T14697] [ 833.681915][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.692442][T14697] Mem-Info: [ 833.695565][T14697] active_anon:53461 inactive_anon:0 isolated_anon:0 [ 833.695565][T14697] active_file:18241 inactive_file:42425 isolated_file:0 [ 833.695565][T14697] unevictable:768 dirty:1050 writeback:0 [ 833.695565][T14697] slab_reclaimable:12629 slab_unreclaimable:111197 [ 833.695565][T14697] mapped:44978 shmem:41576 pagetables:1654 [ 833.695565][T14697] sec_pagetables:0 bounce:0 [ 833.695565][T14697] kernel_misc_reclaimable:0 [ 833.695565][T14697] free:1225809 free_pcp:13188 free_cma:0 [ 833.752769][T14697] Node 0 active_anon:213952kB inactive_anon:0kB active_file:72964kB inactive_file:169560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:179956kB dirty:4304kB writeback:0kB shmem:164768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13424kB pagetables:6588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 833.763930][T14643] team0: Port device team_slave_0 added [ 833.790848][T14697] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 833.821825][T11084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.860353][T14643] team0: Port device team_slave_1 added [ 833.873220][T14697] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 833.916865][T14697] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 833.925074][T14697] Node 0 DMA32 free:987524kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:213952kB inactive_anon:0kB active_file:72964kB inactive_file:169960kB unevictable:1536kB writepending:4804kB zspages:0kB present:3129332kB managed:2541400kB mlocked:0kB bounce:0kB free_pcp:39800kB local_pcp:28832kB free_cma:0kB [ 833.969460][T14697] lowmem_reserve[]: 0 0 1 1 1 [ 833.974396][T14697] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 834.011499][T14643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 834.027025][T14643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.053014][T14697] lowmem_reserve[]: 0 0 0 0 0 [ 834.053078][T14697] Node 1 Normal free:3899348kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12800kB local_pcp:6656kB free_cma:0kB [ 834.053129][T14697] lowmem_reserve[]: 0 0 0 0 0 [ 834.053164][T14697] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 834.053296][T14697] Node 0 DMA32: 164*4kB (UM) 139*8kB (ME) 107*16kB (UME) 107*32kB (UM) 58*64kB (UME) 50*128kB (M) 12*256kB (M) 7*512kB (UME) 3*1024kB (UM) 1*2048kB (M) 234*4096kB (M) = 987256kB [ 834.053454][T14697] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 834.053549][T14697] Node 1 Normal: 157*4kB (UE) 34*8kB (UME) 35*16kB (UME) 117*32kB (UME) 34*64kB (UME) 12*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3899348kB [ 834.053706][T14697] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 834.053721][T14697] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 834.053736][T14697] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 834.053751][T14697] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 834.053764][T14697] 102393 total pagecache pages [ 834.053771][T14697] 0 pages in swap cache [ 834.053778][T14697] Free swap = 124996kB [ 834.053785][T14697] Total swap = 124996kB [ 834.053792][T14697] 2097051 pages RAM [ 834.053799][T14697] 0 pages HighMem/MovableOnly [ 834.234397][T14643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 834.252797][T14697] 429675 pages reserved [ 834.257055][T14697] 0 pages cma reserved [ 834.345016][T14643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.362030][T14643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.391917][T14643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.469923][T14643] hsr_slave_0: entered promiscuous mode [ 834.482732][T14643] hsr_slave_1: entered promiscuous mode [ 834.520877][T14643] debugfs: 'hsr0' already exists in 'hsr' [ 834.527157][T14643] Cannot create hsr debugfs directory [ 834.662639][T14706] bond1: invalid ARP target 0.0.0.0 specified for addition [ 834.671439][T14706] bond1: option arp_ip_target: invalid value (0) [ 834.684963][T14706] bond1 (unregistering): Released all slaves [ 834.773914][ T5813] Bluetooth: hci4: command tx timeout [ 834.786354][ T5867] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 834.852492][T11084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.056936][ T5867] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.574125][ T5867] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.585683][T14714] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2105'. [ 835.604690][ T5867] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 835.623253][ T5867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.667181][ T5867] usb 8-1: config 0 descriptor?? [ 835.904259][ T5929] net_ratelimit: 1 callbacks suppressed [ 835.904277][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.916754][ T5867] usbhid 8-1:0.0: can't add hid device: -22 [ 836.013659][ T5867] usbhid 8-1:0.0: probe with driver usbhid failed with error -22 [ 836.118581][T14643] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 836.270549][T14643] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 836.357936][T14643] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 836.368414][T14643] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 836.580140][T14643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 836.665386][T14643] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.700136][ T6966] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.707313][ T6966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.740583][ T6971] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.747749][ T6971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.853679][ T5813] Bluetooth: hci4: command tx timeout [ 836.939796][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.584636][ T5929] usb 8-1: USB disconnect, device number 7 [ 837.829255][T14643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.984004][T11084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.614477][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.942102][T14770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.950802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.098117][T11084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.606576][T14643] veth0_vlan: entered promiscuous mode [ 839.635756][T14643] veth1_vlan: entered promiscuous mode [ 839.789299][T14643] veth0_macvtap: entered promiscuous mode [ 839.807583][T14643] veth1_macvtap: entered promiscuous mode [ 839.879555][T14643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 840.028024][T14643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.083453][ T6955] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.099630][ T6955] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.223721][T11084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.324869][T11533] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.340730][T11533] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.510218][T10659] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 840.626900][T11533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.722105][T10659] usb 4-1: Using ep0 maxpacket: 32 [ 840.774493][T10659] usb 4-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 840.784084][T10659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.832116][T10659] usb 4-1: Product: syz [ 840.841885][T10659] usb 4-1: Manufacturer: syz [ 840.846745][T11533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.855255][T10659] usb 4-1: SerialNumber: syz [ 840.888958][T10659] empeg 4-1:1.0: empeg converter detected [ 840.930227][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.986643][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.224996][T10659] empeg 4-1:1.0: probe with driver empeg failed with error -71 [ 841.252697][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.312459][T10659] usb 4-1: USB disconnect, device number 25 [ 842.072818][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.163328][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.212057][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 842.342253][T11084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.355679][T14809] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 842.384886][T14809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=14809 comm=syz.7.2123 [ 842.521885][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 842.528444][ T9] usb 9-1: config 0 has no interfaces? [ 842.535109][ T9] usb 9-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 842.554415][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.586249][ T9] usb 9-1: config 0 descriptor?? [ 842.712440][ T5929] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 842.794800][ T5867] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 842.841985][ T5929] usb 8-1: device descriptor read/64, error -71 [ 843.071949][ T5881] usb 9-1: USB disconnect, device number 2 [ 843.201950][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 843.208858][ T5867] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 843.217375][ T5867] usb 5-1: config 179 has no interface number 0 [ 843.224992][ T5867] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 843.236430][ T5867] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 843.250077][ T5867] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 843.263534][ T5929] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 843.292062][ T5867] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 843.303734][ T5867] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 843.316961][ T5867] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 843.326950][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.337352][T14813] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 843.444889][ T5929] usb 8-1: device descriptor read/64, error -71 [ 843.524799][T14821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 843.598698][ T5929] usb usb8-port1: attempt power cycle [ 843.804350][T11084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.840277][ T5867] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input29 [ 844.144307][ T5929] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 844.184404][ T5929] usb 8-1: device descriptor read/8, error -71 [ 844.307122][ T5881] usb 5-1: USB disconnect, device number 27 [ 844.307133][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 844.307266][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 844.418198][ T30] audit: type=1326 audit(1760058594.459:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14824 comm="syz.8.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91338eec9 code=0x7ffc0000 [ 844.471955][ T30] audit: type=1326 audit(1760058594.459:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14824 comm="syz.8.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91338eec9 code=0x7ffc0000 [ 844.512985][ T5929] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 844.532490][ T5929] usb 8-1: device descriptor read/8, error -71 [ 844.569109][T14827] pim6reg: entered allmulticast mode [ 844.596020][T14827] netlink: 'syz.8.2128': attribute type 1 has an invalid length. [ 844.652535][ T5929] usb usb8-port1: unable to enumerate USB device [ 844.865746][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.930349][T14840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 845.093902][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.482172][T14847] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2134'. [ 845.526763][T14847] netlink: 'syz.3.2134': attribute type 1 has an invalid length. [ 845.843739][ T30] audit: type=1400 audit(1760058595.889:1335): avc: denied { ioctl } for pid=14846 comm="syz.3.2134" path="pid:[4026532794]" dev="nsfs" ino=4026532794 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 845.892505][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.041089][T14858] pim6reg: entered allmulticast mode [ 846.059672][T14858] netlink: 'syz.7.2136': attribute type 1 has an invalid length. [ 846.194961][ T30] audit: type=1326 audit(1760058596.069:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.7.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752d8eec9 code=0x7ffc0000 [ 846.230618][ T30] audit: type=1326 audit(1760058596.069:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.7.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752d8eec9 code=0x7ffc0000 [ 846.517861][ T30] audit: type=1326 audit(1760058596.069:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.7.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f4752d8eec9 code=0x7ffc0000 [ 846.542467][ T30] audit: type=1326 audit(1760058596.069:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.7.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752d8eec9 code=0x7ffc0000 [ 846.569758][ T30] audit: type=1326 audit(1760058596.079:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.7.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752d8eec9 code=0x7ffc0000 [ 847.123789][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.132676][ T30] audit: type=1326 audit(1760058596.079:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.7.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4752d8eec9 code=0x7ffc0000 [ 847.156429][ T30] audit: type=1326 audit(1760058596.079:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.7.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752d8eec9 code=0x7ffc0000 [ 848.132170][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.140294][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.182961][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.829908][T14899] FAULT_INJECTION: forcing a failure. [ 849.829908][T14899] name failslab, interval 1, probability 0, space 0, times 0 [ 849.842813][T14899] CPU: 0 UID: 0 PID: 14899 Comm: syz.3.2147 Not tainted syzkaller #0 PREEMPT(full) [ 849.842837][T14899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 849.842848][T14899] Call Trace: [ 849.842860][T14899] [ 849.842867][T14899] dump_stack_lvl+0x16c/0x1f0 [ 849.842898][T14899] should_fail_ex+0x512/0x640 [ 849.842930][T14899] should_failslab+0xc2/0x120 [ 849.842951][T14899] kmem_cache_alloc_node_noprof+0x78/0x770 [ 849.842978][T14899] ? copy_process+0x4b5/0x76a0 [ 849.843008][T14899] ? copy_process+0x4b5/0x76a0 [ 849.843030][T14899] copy_process+0x4b5/0x76a0 [ 849.843051][T14899] ? stack_depot_save_flags+0x29/0x9c0 [ 849.843077][T14899] ? __lock_acquire+0xb97/0x1ce0 [ 849.843109][T14899] ? kasan_save_stack+0x42/0x60 [ 849.843125][T14899] ? kasan_save_stack+0x33/0x60 [ 849.843144][T14899] ? __pfx_copy_process+0x10/0x10 [ 849.843166][T14899] ? do_syscall_64+0xcd/0xfa0 [ 849.843202][T14899] ? __pfx_io_wq_worker+0x10/0x10 [ 849.843225][T14899] create_io_thread+0xbe/0x100 [ 849.843248][T14899] ? __pfx_create_io_thread+0x10/0x10 [ 849.843279][T14899] ? __pfx_io_wq_worker+0x10/0x10 [ 849.843302][T14899] ? lockdep_init_map_type+0x5c/0x280 [ 849.843321][T14899] ? lockdep_init_map_type+0x5c/0x280 [ 849.843339][T14899] ? __init_swait_queue_head+0xca/0x150 [ 849.843361][T14899] ? create_io_worker+0x1f/0x5b0 [ 849.843382][T14899] create_io_worker+0x1d0/0x5b0 [ 849.843406][T14899] io_wq_enqueue+0x4cc/0x980 [ 849.843430][T14899] ? __pfx_io_wq_enqueue+0x10/0x10 [ 849.843451][T14899] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 849.843472][T14899] ? io_prep_async_work+0x3c3/0x770 [ 849.843491][T14899] ? irqentry_exit+0x3b/0x90 [ 849.843522][T14899] io_queue_iowq+0x246/0x530 [ 849.843542][T14899] ? io_req_sqe_copy+0xea/0x130 [ 849.843569][T14899] io_queue_sqe_fallback+0xda/0x660 [ 849.843590][T14899] ? io_req_sqe_copy+0xea/0x130 [ 849.843615][T14899] io_submit_sqes+0x15b2/0x2710 [ 849.843654][T14899] __do_sys_io_uring_enter+0xd69/0x1630 [ 849.843683][T14899] ? __fget_files+0x20e/0x3c0 [ 849.843701][T14899] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 849.843729][T14899] ? fput+0x9b/0xd0 [ 849.843751][T14899] ? ksys_write+0x1ac/0x250 [ 849.843766][T14899] ? __pfx_ksys_write+0x10/0x10 [ 849.843790][T14899] do_syscall_64+0xcd/0xfa0 [ 849.843818][T14899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.843836][T14899] RIP: 0033:0x7f45fff8eec9 [ 849.843856][T14899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 849.843874][T14899] RSP: 002b:00007f4600e30038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 849.843891][T14899] RAX: ffffffffffffffda RBX: 00007f46001e6090 RCX: 00007f45fff8eec9 [ 849.843903][T14899] RDX: 0000000000000004 RSI: 000000000000749f RDI: 0000000000000005 [ 849.843913][T14899] RBP: 00007f4600e30090 R08: 0000000000000000 R09: fffffffffffffef5 [ 849.843924][T14899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.843934][T14899] R13: 00007f46001e6128 R14: 00007f46001e6090 R15: 00007fff993b3518 [ 849.843960][T14899] [ 850.373695][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.462401][ T9313] block nbd5: Possible stuck request ffff8880264b5080: control (read@0,1024B). Runtime 450 seconds [ 850.490870][ T9313] block nbd5: Possible stuck request ffff8880264b5240: control (read@1024,1024B). Runtime 450 seconds [ 850.540217][ T9313] block nbd5: Possible stuck request ffff8880264b5400: control (read@2048,1024B). Runtime 450 seconds [ 850.580893][ T9313] block nbd5: Possible stuck request ffff8880264b55c0: control (read@3072,1024B). Runtime 450 seconds [ 850.646002][T14902] FAULT_INJECTION: forcing a failure. [ 850.646002][T14902] name failslab, interval 1, probability 0, space 0, times 0 [ 850.745857][T14902] CPU: 1 UID: 0 PID: 14902 Comm: syz.7.2148 Not tainted syzkaller #0 PREEMPT(full) [ 850.745885][T14902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 850.745895][T14902] Call Trace: [ 850.745902][T14902] [ 850.745909][T14902] dump_stack_lvl+0x16c/0x1f0 [ 850.745940][T14902] should_fail_ex+0x512/0x640 [ 850.745967][T14902] ? __kmalloc_noprof+0xca/0x880 [ 850.745995][T14902] should_failslab+0xc2/0x120 [ 850.746015][T14902] __kmalloc_noprof+0xdd/0x880 [ 850.746038][T14902] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 850.746066][T14902] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 850.746087][T14902] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 850.746110][T14902] ? cred_has_capability.isra.0+0x190/0x310 [ 850.746132][T14902] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 850.746153][T14902] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 850.746179][T14902] ? bpf_lsm_capable+0x9/0x10 [ 850.746194][T14902] ? security_capable+0x7e/0x260 [ 850.746219][T14902] genl_rcv_msg+0x55c/0x800 [ 850.746236][T14902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 850.746252][T14902] ? __pfx_smc_pnet_add+0x10/0x10 [ 850.746275][T14902] ? __lock_acquire+0x62e/0x1ce0 [ 850.746302][T14902] netlink_rcv_skb+0x158/0x420 [ 850.746315][T14902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 850.746332][T14902] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 850.746354][T14902] ? netlink_deliver_tap+0x1ae/0xd30 [ 850.746379][T14902] genl_rcv+0x28/0x40 [ 850.746392][T14902] netlink_unicast+0x5a7/0x870 [ 850.746408][T14902] ? __pfx_netlink_unicast+0x10/0x10 [ 850.746430][T14902] netlink_sendmsg+0x8c8/0xdd0 [ 850.746446][T14902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.746467][T14902] ____sys_sendmsg+0xa95/0xc70 [ 850.746484][T14902] ? copy_msghdr_from_user+0x10a/0x160 [ 850.746504][T14902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 850.746530][T14902] ___sys_sendmsg+0x134/0x1d0 [ 850.746551][T14902] ? __pfx____sys_sendmsg+0x10/0x10 [ 850.746598][T14902] __sys_sendmsg+0x16d/0x220 [ 850.746619][T14902] ? __pfx___sys_sendmsg+0x10/0x10 [ 850.746653][T14902] do_syscall_64+0xcd/0xfa0 [ 850.746681][T14902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.746695][T14902] RIP: 0033:0x7f4752d8eec9 [ 850.746707][T14902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 850.746722][T14902] RSP: 002b:00007f4753be5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 850.746736][T14902] RAX: ffffffffffffffda RBX: 00007f4752fe5fa0 RCX: 00007f4752d8eec9 [ 850.746745][T14902] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 850.746754][T14902] RBP: 00007f4753be5090 R08: 0000000000000000 R09: 0000000000000000 [ 850.746762][T14902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.746771][T14902] R13: 00007f4752fe6038 R14: 00007f4752fe5fa0 R15: 00007ffeab8efe98 [ 850.746791][T14902] [ 851.181264][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.223267][T14909] netlink: 'syz.7.2151': attribute type 1 has an invalid length. [ 851.230983][T14909] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2151'. [ 851.731343][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.742620][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 851.742637][ T30] audit: type=1326 audit(1760058601.419:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.4.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62238eec9 code=0x7ffc0000 [ 851.742681][ T30] audit: type=1326 audit(1760058601.419:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.4.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa62238eec9 code=0x7ffc0000 [ 851.742720][ T30] audit: type=1326 audit(1760058601.419:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.4.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62238eec9 code=0x7ffc0000 [ 851.742759][ T30] audit: type=1326 audit(1760058601.419:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.4.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa62238eec9 code=0x7ffc0000 [ 851.742797][ T30] audit: type=1326 audit(1760058601.759:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.4.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62238eec9 code=0x7ffc0000 [ 851.743000][ T30] audit: type=1326 audit(1760058601.759:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.4.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62238eec9 code=0x7ffc0000 [ 851.743704][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.782244][ T30] audit: type=1326 audit(1760058601.829:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.4.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa62238eec9 code=0x7ffc0000 [ 851.791917][ T30] audit: type=1326 audit(1760058601.829:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.4.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62238eec9 code=0x7ffc0000 [ 851.791948][ T30] audit: type=1326 audit(1760058601.829:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.4.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62238eec9 code=0x7ffc0000 [ 851.869934][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.013751][T14909] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2151'. [ 852.406446][T13155] block nbd4: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 420 seconds [ 852.406473][T13155] block nbd4: Possible stuck request ffff8880264701c0: control (read@1024,1024B). Runtime 420 seconds [ 852.406494][T13155] block nbd4: Possible stuck request ffff888026470380: control (read@2048,1024B). Runtime 420 seconds [ 852.406517][T13155] block nbd4: Possible stuck request ffff888026470540: control (read@3072,1024B). Runtime 420 seconds [ 852.472441][ T9313] block nbd1: Possible stuck request ffff888026377000: control (read@0,1024B). Runtime 570 seconds [ 852.476474][ T9313] block nbd1: Possible stuck request ffff8880263771c0: control (read@1024,1024B). Runtime 570 seconds [ 852.476507][ T9313] block nbd1: Possible stuck request ffff888026377380: control (read@2048,1024B). Runtime 570 seconds [ 852.476522][ T9313] block nbd1: Possible stuck request ffff888026377540: control (read@3072,1024B). Runtime 570 seconds [ 852.772362][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.993860][ T30] audit: type=1326 audit(1760058602.959:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14931 comm="syz.4.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62238eec9 code=0x7ffc0000 [ 854.276610][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.286251][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.684194][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.061870][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 856.226521][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 856.531856][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 856.570253][ T24] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 856.579636][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 856.588559][ T24] usb 9-1: SerialNumber: syz [ 856.692266][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.904919][ T24] usb 9-1: 0:2 : does not exist [ 856.909836][ T24] usb 9-1: unit 5 not found! [ 857.049850][ T24] usb 9-1: USB disconnect, device number 3 [ 857.332148][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.451867][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 857.451886][ T30] audit: type=1326 audit(1760058607.469:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14974 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4038b8eec9 code=0x7ffc0000 [ 857.508845][T14979] netlink: 'syz.1.2163': attribute type 1 has an invalid length. [ 857.891190][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.051145][ T30] audit: type=1326 audit(1760058607.469:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14974 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4038b8eec9 code=0x7ffc0000 [ 858.457164][T14987] batadv1: entered promiscuous mode [ 858.981930][ T5881] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 859.035529][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.053910][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.056456][T13155] block nbd3: Possible stuck request ffff888026425080: control (read@0,1024B). Runtime 630 seconds [ 860.081904][T14994] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2169'. [ 860.554107][ T5881] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.571404][ T5881] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 860.587371][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.672014][T13155] block nbd3: Possible stuck request ffff888026425240: control (read@1024,1024B). Runtime 630 seconds [ 860.694238][T13155] block nbd3: Possible stuck request ffff888026425400: control (read@2048,1024B). Runtime 630 seconds [ 860.705324][T13155] block nbd3: Possible stuck request ffff8880264255c0: control (read@3072,1024B). Runtime 630 seconds [ 860.783328][ T5881] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 860.804580][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 860.935875][ T5881] usb 4-1: SerialNumber: syz [ 861.093205][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.356351][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.487767][ T5881] usb 4-1: 0:2 : does not exist [ 861.517267][ T5881] usb 4-1: unit 5 not found! [ 861.626202][ T5881] usb 4-1: USB disconnect, device number 26 [ 861.775435][ T9572] udevd[9572]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 862.226082][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.271959][ T9313] block nbd6: Possible stuck request ffff888026517000: control (read@0,1024B). Runtime 570 seconds [ 862.282970][ T9313] block nbd6: Possible stuck request ffff8880265171c0: control (read@1024,1024B). Runtime 570 seconds [ 862.295057][ T9313] block nbd6: Possible stuck request ffff888026517380: control (read@2048,1024B). Runtime 570 seconds [ 862.306076][ T9313] block nbd6: Possible stuck request ffff888026517540: control (read@3072,1024B). Runtime 570 seconds [ 862.932091][ T30] audit: type=1400 audit(1760058612.959:1401): avc: denied { setopt } for pid=15023 comm="syz.3.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 863.253285][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.654226][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.293703][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.365167][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.796009][ T30] audit: type=1400 audit(1760058615.809:1402): avc: denied { append } for pid=15054 comm="syz.7.2185" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 865.938850][T15065] netlink: 'syz.4.2184': attribute type 1 has an invalid length. [ 865.946667][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2184'. [ 865.982581][T15052] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2183'. [ 866.212849][T15071] fuse: Bad value for 'rootmode' [ 866.245877][T15070] netlink: 'syz.8.2187': attribute type 1 has an invalid length. [ 866.259727][T15070] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2187'. [ 866.390530][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.697456][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.713450][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.673339][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 868.820004][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.065586][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 869.077698][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.096830][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 869.196883][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.217843][ T9] usb 4-1: config 0 descriptor?? [ 869.226959][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 869.673955][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.684104][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 869.744032][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.850612][ T9] gspca_vc032x: reg_r err -110 [ 870.883088][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.883447][ T9] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 870.940880][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.892407][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.347174][ T5881] usb 4-1: USB disconnect, device number 27 [ 872.697295][T15136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.706166][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.716523][T15136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.730423][T15136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.739056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.330953][T15144] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2204'. [ 874.066269][ T5881] net_ratelimit: 7 callbacks suppressed [ 874.066285][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.080643][ T24] kernel read not supported for file /dsp (pid: 24 comm: kworker/1:0) [ 874.316397][T15157] netlink: 'syz.8.2206': attribute type 1 has an invalid length. [ 874.324221][T15157] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2206'. [ 875.092271][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.411800][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 875.419834][ C1] lec:lec_tx_timeout: lec0 [ 875.424431][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 876.082060][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.282475][T15180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 876.562644][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.108310][ T30] audit: type=1400 audit(1760058627.149:1403): avc: denied { create } for pid=15169 comm="syz.1.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 877.737958][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.976763][ T30] audit: type=1400 audit(1760058627.859:1404): avc: denied { setopt } for pid=15184 comm="syz.3.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 878.251876][ T24] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 878.424901][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 878.450941][ T24] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 878.461986][ T24] usb 8-1: config 179 has no interface number 0 [ 878.671299][ T24] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 878.781738][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.932048][ T24] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 878.950043][ T24] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 879.045550][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2220'. [ 879.814007][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.908229][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.073222][ T24] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 880.131584][ T24] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 880.220350][ T24] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 880.251952][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.431807][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 880.435227][T15226] netlink: 'syz.1.2222': attribute type 1 has an invalid length. [ 880.439828][ C1] lec:lec_tx_timeout: lec0 [ 880.472328][T15226] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2222'. [ 880.530432][ T24] usb 8-1: can't set config #179, error -71 [ 880.541627][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.550987][ T9313] block nbd5: Possible stuck request ffff8880264b5080: control (read@0,1024B). Runtime 480 seconds [ 880.563264][ T9313] block nbd5: Possible stuck request ffff8880264b5240: control (read@1024,1024B). Runtime 480 seconds [ 880.583030][ T24] usb 8-1: USB disconnect, device number 12 [ 880.601859][ T9313] block nbd5: Possible stuck request ffff8880264b5400: control (read@2048,1024B). Runtime 480 seconds [ 880.622002][ T9313] block nbd5: Possible stuck request ffff8880264b55c0: control (read@3072,1024B). Runtime 480 seconds [ 880.852668][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.931098][ T30] audit: type=1326 audit(1760058630.969:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15233 comm="syz.8.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91338eec9 code=0x7ffc0000 [ 880.963324][ T30] audit: type=1326 audit(1760058630.999:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15233 comm="syz.8.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91338eec9 code=0x7ffc0000 [ 880.987416][ T24] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 881.146567][ T30] audit: type=1326 audit(1760058631.179:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15233 comm="syz.8.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc91338eec9 code=0x7ffc0000 [ 881.177299][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 881.566822][ T24] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 881.577492][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.586217][ T30] audit: type=1326 audit(1760058631.189:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15233 comm="syz.8.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91338eec9 code=0x7ffc0000 [ 881.586633][T15234] netlink: 'syz.8.2229': attribute type 1 has an invalid length. [ 881.610967][ T24] usb 8-1: Product: syz [ 881.642274][ T24] usb 8-1: Manufacturer: syz [ 881.648641][ T24] usb 8-1: SerialNumber: syz [ 881.659128][ T24] usb 8-1: config 0 descriptor?? [ 881.668500][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 881.684486][ T30] audit: type=1326 audit(1760058631.189:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15233 comm="syz.8.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91338eec9 code=0x7ffc0000 [ 881.903319][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.123465][ T5867] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 882.226100][T15252] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2232'. [ 882.932289][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.963754][ T933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.982586][T13155] block nbd4: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 450 seconds [ 882.993441][T13155] block nbd4: Possible stuck request ffff8880264701c0: control (read@1024,1024B). Runtime 450 seconds [ 882.998104][ T24] gspca_stk1135: reg_w 0x0 err -110 [ 883.004470][T13155] block nbd4: Possible stuck request ffff888026470380: control (read@2048,1024B). Runtime 450 seconds [ 883.004502][T13155] block nbd4: Possible stuck request ffff888026470540: control (read@3072,1024B). Runtime 450 seconds [ 883.077130][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 883.084263][ T24] gspca_stk1135: Sensor write failed [ 883.089857][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 883.097879][ T24] gspca_stk1135: Sensor write failed [ 883.103569][ T9313] block nbd1: Possible stuck request ffff888026377000: control (read@0,1024B). Runtime 600 seconds [ 883.114329][ T9313] block nbd1: Possible stuck request ffff8880263771c0: control (read@1024,1024B). Runtime 600 seconds [ 883.125351][ T9313] block nbd1: Possible stuck request ffff888026377380: control (read@2048,1024B). Runtime 600 seconds [ 883.136434][ T9313] block nbd1: Possible stuck request ffff888026377540: control (read@3072,1024B). Runtime 600 seconds [ 883.147860][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 883.154336][ T24] gspca_stk1135: Sensor read failed [ 883.154395][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 883.160605][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 883.171568][ T24] gspca_stk1135: Sensor read failed [ 883.177775][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 883.187183][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 883.193587][ T24] gspca_stk1135: Sensor read failed [ 883.203912][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 883.211812][ T24] gspca_stk1135: Sensor read failed [ 883.217152][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 883.227289][ T24] gspca_stk1135: Sensor write failed [ 883.233015][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 883.239379][ T24] gspca_stk1135: Sensor write failed [ 883.249902][ T24] stk1135 8-1:0.0: probe with driver stk1135 failed with error -110 [ 883.347019][ T5867] usb 4-1: config 0 has no interfaces? [ 883.357865][ T5867] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 883.431957][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.473460][ T5867] usb 4-1: config 0 descriptor?? [ 883.688106][ T5867] usb 4-1: USB disconnect, device number 28 [ 884.009224][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.235952][ T24] usb 8-1: USB disconnect, device number 13 [ 884.639325][ T933] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 884.802142][T15273] netlink: 'syz.3.2238': attribute type 1 has an invalid length. [ 884.811301][T15273] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2238'. [ 884.882081][T10659] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 884.902368][ T933] usb 5-1: Using ep0 maxpacket: 8 [ 884.914297][ T933] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 884.926419][ T933] usb 5-1: config 179 has no interface number 0 [ 884.934508][ T933] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 884.969225][ T933] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 885.013857][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.043285][ T933] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 885.054844][ T933] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 885.068315][T10659] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.688799][T10659] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 885.697917][ T933] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 885.711549][ T933] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 885.715766][ T30] audit: type=1326 audit(1760058635.759:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.7.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752d8eec9 code=0x7ffc0000 [ 885.721695][T10659] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 885.758930][ T933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.782152][ T30] audit: type=1326 audit(1760058635.829:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.7.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752d8eec9 code=0x7ffc0000 [ 885.809198][T15264] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 885.984777][T14551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.007254][T10659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 886.016049][T10659] usb 2-1: SerialNumber: syz [ 886.052500][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.056153][ T30] audit: type=1326 audit(1760058635.939:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.7.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f4752d8eec9 code=0x7ffc0000 [ 886.088374][T15281] netlink: 'syz.7.2240': attribute type 1 has an invalid length. [ 886.096318][ T30] audit: type=1326 audit(1760058635.939:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.7.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752d8eec9 code=0x7ffc0000 [ 886.158503][ T933] usb 5-1: USB disconnect, device number 28 [ 886.158538][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 886.172728][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 886.186088][ T30] audit: type=1326 audit(1760058635.939:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.7.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4752d8eec9 code=0x7ffc0000 [ 886.215279][ T30] audit: type=1326 audit(1760058635.949:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.7.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752d8eec9 code=0x7ffc0000 [ 886.243965][ T30] audit: type=1326 audit(1760058635.949:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.7.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752d8eec9 code=0x7ffc0000 [ 886.287260][T10659] usb 2-1: 0:2 : does not exist [ 886.304091][T10659] usb 2-1: unit 5 not found! [ 886.322092][T10659] usb 2-1: USB disconnect, device number 50 [ 886.341241][ T30] audit: type=1326 audit(1760058635.999:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.7.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4752d8eec9 code=0x7ffc0000 [ 886.417745][ T30] audit: type=1326 audit(1760058635.999:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.7.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752d8eec9 code=0x7ffc0000 [ 886.421066][ T9572] udevd[9572]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 886.527395][T15289] netlink: 'syz.3.2242': attribute type 1 has an invalid length. [ 886.540664][ T30] audit: type=1326 audit(1760058635.999:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15280 comm="syz.7.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4752d8eec9 code=0x7ffc0000 [ 886.925621][T15299] netlink: 'syz.3.2244': attribute type 1 has an invalid length. [ 887.094346][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.854244][ T5813] Bluetooth: hci4: unexpected event 0x14 length: 20 > 6 [ 887.947774][T15313] netlink: 'syz.1.2249': attribute type 1 has an invalid length. [ 888.062059][T15313] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2249'. [ 888.143095][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.220298][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2249'. [ 888.915959][T15330] binder: BINDER_SET_CONTEXT_MGR already set [ 888.922445][T15330] binder: 15324:15330 ioctl 4018620d 2000000002c0 returned -16 [ 888.981534][T15331] binder: 15324:15331 ioctl c0306201 2000000001c0 returned -14 [ 889.027017][ T933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.172426][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.271882][T15000] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 889.431898][T15000] usb 5-1: Using ep0 maxpacket: 16 [ 889.439994][T15000] usb 5-1: config 0 has no interfaces? [ 889.445779][T15000] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 889.458394][T15000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.489471][T15000] usb 5-1: config 0 descriptor?? [ 889.771368][ T933] usb 5-1: USB disconnect, device number 29 [ 890.007927][T15345] netlink: 'syz.1.2255': attribute type 1 has an invalid length. [ 890.021911][T15000] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 890.135161][T14551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.143564][T13155] block nbd3: Possible stuck request ffff888026425080: control (read@0,1024B). Runtime 660 seconds [ 890.193936][T15000] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 890.208590][T15000] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 890.218990][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.230119][T15000] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 890.240934][T15000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 890.251022][T15000] usb 8-1: SerialNumber: syz [ 890.252308][ T5881] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 890.412044][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 890.857401][T13155] block nbd3: Possible stuck request ffff888026425240: control (read@1024,1024B). Runtime 660 seconds [ 890.868642][T13155] block nbd3: Possible stuck request ffff888026425400: control (read@2048,1024B). Runtime 660 seconds [ 890.880519][T13155] block nbd3: Possible stuck request ffff8880264255c0: control (read@3072,1024B). Runtime 660 seconds [ 890.908359][T15000] usb 8-1: 0:2 : does not exist [ 890.922279][T15000] usb 8-1: unit 5 not found! [ 890.966761][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.002976][T15359] netlink: 'syz.1.2261': attribute type 1 has an invalid length. [ 891.004469][T15000] usb 8-1: USB disconnect, device number 14 [ 891.010849][T15359] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2261'. [ 891.050327][ T5881] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 891.138767][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2261'. [ 891.181535][ T5881] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 891.230112][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.242352][ T5881] usb 4-1: Product: syz [ 891.246572][ T5881] usb 4-1: Manufacturer: syz [ 891.253252][ T5881] usb 4-1: SerialNumber: syz [ 891.260991][ T5881] usb 4-1: config 0 descriptor?? [ 891.267152][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.008799][T15373] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2257'. [ 892.164451][ T933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.875094][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.906065][ T9313] block nbd6: Possible stuck request ffff888026517000: control (read@0,1024B). Runtime 600 seconds [ 892.917025][ T9313] block nbd6: Possible stuck request ffff8880265171c0: control (read@1024,1024B). Runtime 600 seconds [ 892.948680][ T9313] block nbd6: Possible stuck request ffff888026517380: control (read@2048,1024B). Runtime 600 seconds [ 892.970582][ T9313] block nbd6: Possible stuck request ffff888026517540: control (read@3072,1024B). Runtime 600 seconds [ 894.429331][T15376] vivid-005: kernel_thread() failed [ 894.499729][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.627928][ T933] usb 4-1: USB disconnect, device number 29 [ 894.755697][T15381] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 895.187975][ T933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.771010][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.976743][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.317073][T15414] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2272'. [ 897.820280][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 898.067582][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.213361][T14551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.246283][T15420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2273'. [ 898.662386][T15000] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 898.772019][T14551] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 898.829509][T15000] usb 9-1: config 0 has an invalid interface number: 120 but max is 0 [ 898.851043][T15000] usb 9-1: config 0 has no interface number 0 [ 898.880567][T15000] usb 9-1: config 0 interface 120 has no altsetting 0 [ 898.896001][T15000] usb 9-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 898.911824][T15000] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.963486][T14551] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 898.974243][T14551] usb 4-1: config 0 has no interface number 0 [ 898.980368][T14551] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 899.012020][T14551] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 899.059972][T15000] usb 9-1: Product: syz [ 899.064755][T15000] usb 9-1: Manufacturer: syz [ 899.069419][T15000] usb 9-1: SerialNumber: syz [ 899.084408][T14551] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 899.097653][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.107379][T14551] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 376, setting to 8 [ 899.679606][T15000] usb 9-1: config 0 descriptor?? [ 900.117694][T14551] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 900.131425][T14551] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 900.141446][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.149582][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.153382][T15000] comedi comedi5: could not switch to alternate setting 1 [ 900.604650][T14551] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.617383][T14551] usb 4-1: config 0 descriptor?? [ 900.674248][T15428] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 900.681523][T15428] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 900.701092][T15000] usbduxfast 9-1:0.120: driver 'usbduxfast' failed to auto-configure device. [ 900.703872][T14551] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 900.730838][T15000] usb 9-1: USB disconnect, device number 4 [ 900.927318][T15428] ldusb 4-1:0.55: Write buffer overflow, 167 bytes dropped [ 900.955469][T15428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.967271][T15428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.979454][T14551] usb 4-1: USB disconnect, device number 30 [ 900.998052][T14551] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 901.151838][ T5929] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 901.176094][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.262052][T14551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.325108][ T5929] usb 8-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 901.346596][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.364013][ T5929] usb 8-1: Product: syz [ 901.375231][ T5929] usb 8-1: Manufacturer: syz [ 901.390482][ T5929] usb 8-1: SerialNumber: syz [ 901.401363][ T5929] usb 8-1: config 0 descriptor?? [ 902.314911][ T5929] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 902.325683][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.335755][ T5929] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 902.347125][ T5929] asix 8-1:0.0: probe with driver asix failed with error -71 [ 902.358156][ T5929] usb 8-1: USB disconnect, device number 15 [ 903.555924][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.569692][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 903.569708][ T30] audit: type=1400 audit(1760058653.619:1429): avc: denied { listen } for pid=15484 comm="syz.3.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 903.607217][ T30] audit: type=1400 audit(1760058653.619:1430): avc: denied { accept } for pid=15484 comm="syz.3.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 903.642512][ T5813] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 903.658467][ T5813] CPU: 0 UID: 0 PID: 5813 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 903.658498][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 903.658511][ T5813] Workqueue: hci1 hci_rx_work [ 903.658540][ T5813] Call Trace: [ 903.658546][ T5813] [ 903.658553][ T5813] dump_stack_lvl+0x16c/0x1f0 [ 903.658581][ T5813] sysfs_warn_dup+0x7f/0xa0 [ 903.658604][ T5813] sysfs_create_dir_ns+0x24b/0x2b0 [ 903.658626][ T5813] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 903.658648][ T5813] ? find_held_lock+0x2b/0x80 [ 903.658676][ T5813] ? do_raw_spin_unlock+0x172/0x230 [ 903.658700][ T5813] kobject_add_internal+0x2c4/0x9b0 [ 903.658725][ T5813] kobject_add+0x16e/0x240 [ 903.658743][ T5813] ? __pfx_kobject_add+0x10/0x10 [ 903.658764][ T5813] ? do_raw_spin_unlock+0x172/0x230 [ 903.658785][ T5813] ? kobject_put+0xab/0x5a0 [ 903.658811][ T5813] device_add+0x288/0x1aa0 [ 903.658840][ T5813] ? __pfx_dev_set_name+0x10/0x10 [ 903.658859][ T5813] ? __pfx_device_add+0x10/0x10 [ 903.658888][ T5813] ? mgmt_send_event_skb+0x2fb/0x460 [ 903.658922][ T5813] hci_conn_add_sysfs+0x17e/0x230 [ 903.658953][ T5813] le_conn_complete_evt+0x1260/0x2150 [ 903.658988][ T5813] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 903.659014][ T5813] ? hci_event_packet+0x459/0x11c0 [ 903.659048][ T5813] hci_le_conn_complete_evt+0x23c/0x370 [ 903.659081][ T5813] hci_le_meta_evt+0x357/0x5e0 [ 903.659108][ T5813] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 903.659138][ T5813] hci_event_packet+0x682/0x11c0 [ 903.659171][ T5813] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 903.659200][ T5813] ? __pfx_hci_event_packet+0x10/0x10 [ 903.659230][ T5813] ? kcov_remote_start+0x3c9/0x6d0 [ 903.659255][ T5813] ? lockdep_hardirqs_on+0x7c/0x110 [ 903.659292][ T5813] hci_rx_work+0x2c5/0x16b0 [ 903.659323][ T5813] ? rcu_is_watching+0x12/0xc0 [ 903.659352][ T5813] process_one_work+0x9cf/0x1b70 [ 903.659384][ T5813] ? __pfx_process_one_work+0x10/0x10 [ 903.659412][ T5813] ? assign_work+0x1a0/0x250 [ 903.659434][ T5813] worker_thread+0x6c8/0xf10 [ 903.659467][ T5813] ? __pfx_worker_thread+0x10/0x10 [ 903.659486][ T5813] kthread+0x3c2/0x780 [ 903.659510][ T5813] ? __pfx_kthread+0x10/0x10 [ 903.659530][ T5813] ? rcu_is_watching+0x12/0xc0 [ 903.659555][ T5813] ? __pfx_kthread+0x10/0x10 [ 903.659574][ T5813] ret_from_fork+0x672/0x7d0 [ 903.659590][ T5813] ? __pfx_kthread+0x10/0x10 [ 903.659609][ T5813] ret_from_fork_asm+0x1a/0x30 [ 903.659645][ T5813] [ 903.659723][ T5813] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 903.715405][T15494] sock: sock_timestamping_bind_phc: sock not bind to device [ 903.721951][ T5813] Bluetooth: hci1: failed to register connection device [ 904.798520][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.806664][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.049257][T15506] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 906.351960][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.512800][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.821907][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.862348][T15522] binder: 15521:15522 ioctl 4040942c 200000000300 returned -22 [ 908.536858][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.628769][T14551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.636926][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.404921][ T30] audit: type=1400 audit(1760058660.449:1431): avc: denied { read } for pid=15539 comm="syz.7.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 910.571645][T15546] loop7: detected capacity change from 0 to 7 [ 910.712744][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.218030][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.287546][ T9313] block nbd5: Possible stuck request ffff8880264b5080: control (read@0,1024B). Runtime 510 seconds [ 911.298586][ T9313] block nbd5: Possible stuck request ffff8880264b5240: control (read@1024,1024B). Runtime 510 seconds [ 911.309787][ T9313] block nbd5: Possible stuck request ffff8880264b5400: control (read@2048,1024B). Runtime 510 seconds [ 911.321572][ T9313] block nbd5: Possible stuck request ffff8880264b55c0: control (read@3072,1024B). Runtime 510 seconds [ 911.338461][ T30] audit: type=1400 audit(1760058660.529:1432): avc: denied { setopt } for pid=15539 comm="syz.7.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 912.506670][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.525913][ T30] audit: type=1400 audit(1760058661.859:1433): avc: denied { watch watch_reads } for pid=15556 comm="syz.4.2317" path="/proc/1825/sessionid" dev="proc" ino=61965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 912.561835][T14551] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 912.584546][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 912.594237][T15546] Dev loop7: unable to read RDB block 7 [ 912.599816][T15546] loop7: unable to read partition table [ 912.605609][T15546] loop7: partition table beyond EOD, truncated [ 912.611943][T15546] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 912.632980][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 1 [ 912.642792][ C1] buffer_io_error: 6 callbacks suppressed [ 912.642808][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 912.895656][T14551] usb 9-1: Using ep0 maxpacket: 16 [ 912.936039][T14551] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 913.078632][T14551] usb 9-1: config 0 has no interface number 0 [ 913.171651][T14551] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.216287][T13155] block nbd4: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 480 seconds [ 913.227694][T13155] block nbd4: Possible stuck request ffff8880264701c0: control (read@1024,1024B). Runtime 480 seconds [ 913.239097][T13155] block nbd4: Possible stuck request ffff888026470380: control (read@2048,1024B). Runtime 480 seconds [ 913.250875][T13155] block nbd4: Possible stuck request ffff888026470540: control (read@3072,1024B). Runtime 480 seconds [ 913.267522][ T9313] block nbd1: Possible stuck request ffff888026377000: control (read@0,1024B). Runtime 630 seconds [ 913.278360][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 913.283489][ T9313] block nbd1: Possible stuck request ffff8880263771c0: control (read@1024,1024B). Runtime 630 seconds [ 913.293295][T14551] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 913.294522][ T9313] block nbd1: Possible stuck request ffff888026377380: control (read@2048,1024B). Runtime 630 seconds [ 913.315131][ T9313] block nbd1: Possible stuck request ffff888026377540: control (read@3072,1024B). Runtime 630 seconds [ 913.327800][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 913.352096][T14551] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 913.391424][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 913.395530][T14551] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.410535][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 913.426600][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 913.434929][ T24] usb 4-1: SerialNumber: syz [ 913.450142][ T24] cdc_acm 4-1:1.0: skipping garbage [ 913.458791][ T24] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 913.471925][ T24] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 913.481527][ T24] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 913.507346][T14551] usb 9-1: config 0 descriptor?? [ 913.532212][T14551] usb 9-1: can't set config #0, error -71 [ 913.620763][T14551] usb 9-1: USB disconnect, device number 5 [ 913.644445][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.724480][ T24] usb 4-1: USB disconnect, device number 31 [ 913.731312][ T30] audit: type=1404 audit(1760058663.759:1434): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 913.807464][ T30] audit: type=1400 audit(1760058663.829:1435): avc: denied { map } for pid=15567 comm="syz.7.2321" path="socket:[61991]" dev="sockfs" ino=61991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 913.873555][ T30] audit: type=1400 audit(1760058663.849:1436): avc: denied { read write } for pid=14643 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 913.922165][ T30] audit: type=1400 audit(1760058663.879:1437): avc: denied { getattr } for pid=15567 comm="syz.7.2321" name="/" dev="nsfs" ino=4026531834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 913.971959][ T30] audit: type=1400 audit(1760058663.919:1438): avc: denied { read write } for pid=15570 comm="syz.8.2322" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 914.023908][ T30] audit: type=1400 audit(1760058663.969:1439): avc: denied { read write } for pid=13943 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 914.071917][ T30] audit: type=1400 audit(1760058664.059:1440): avc: denied { read write } for pid=13943 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 914.292221][T14551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.425808][T15589] batman_adv: batadv0: Adding interface: dummy0 [ 914.486510][T15589] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.581829][T15589] batman_adv: batadv0: Interface activated: dummy0 [ 914.692648][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.763682][T15605] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2333'. [ 914.820656][T15605] vxlan0: entered promiscuous mode [ 914.866099][T15611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2336'. [ 914.887322][ T12] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.937960][ T12] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.964035][ T12] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.984043][ T12] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 915.164829][T15617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.173608][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.213319][T15616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.222794][ T6966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.286917][T15616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.415413][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 915.415429][ T30] audit: type=1400 audit(1760058665.459:1501): avc: denied { create } for pid=15624 comm="syz.1.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 915.573313][T15628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.761944][T15636] batman_adv: batadv0: Adding interface: dummy0 [ 915.801886][ T30] audit: type=1400 audit(1760058665.499:1502): avc: denied { execmem } for pid=15624 comm="syz.1.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 915.801954][T15636] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.877506][ T30] audit: type=1400 audit(1760058665.549:1503): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 915.903099][T15636] batman_adv: batadv0: Interface activated: dummy0 [ 915.933715][ T30] audit: type=1400 audit(1760058665.559:1504): avc: denied { read write } for pid=13943 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 916.014006][ T30] audit: type=1400 audit(1760058665.559:1505): avc: denied { read write } for pid=14643 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 916.039484][ T5813] Bluetooth: hci1: unexpected cc 0x042f length: 9 > 7 [ 916.049260][ T5813] Bluetooth: hci1: unexpected event for opcode 0x042f [ 916.172900][ T30] audit: type=1400 audit(1760058665.579:1506): avc: denied { read } for pid=15624 comm="syz.1.2341" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 916.250571][ T30] audit: type=1400 audit(1760058665.579:1507): avc: denied { map_create } for pid=15624 comm="syz.1.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 916.280436][ T30] audit: type=1400 audit(1760058665.579:1508): avc: denied { prog_load } for pid=15624 comm="syz.1.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 916.352071][ T30] audit: type=1400 audit(1760058665.599:1509): avc: denied { prog_load } for pid=15627 comm="syz.3.2343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 916.479874][ T30] audit: type=1400 audit(1760058665.619:1510): avc: denied { name_bind } for pid=15627 comm="syz.3.2343" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 916.582381][T15662] bridge_slave_0: left allmulticast mode [ 916.603698][T15662] bridge_slave_0: left promiscuous mode [ 916.697777][T15662] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.763160][ T5182] udevd[5182]: worker [8903] /devices/virtual/block/nbd5 timeout; kill it [ 916.780498][ T5182] udevd[5182]: seq 14090 '/devices/virtual/block/nbd5' killed [ 916.854840][T15662] bridge_slave_1: left allmulticast mode [ 916.865285][ T5182] udevd[5182]: worker [6457] /devices/virtual/block/nbd3 timeout; kill it [ 916.895266][T15662] bridge_slave_1: left promiscuous mode [ 916.931598][ T5182] udevd[5182]: seq 12258 '/devices/virtual/block/nbd3' killed [ 916.941780][T15662] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.967577][ T5182] udevd[5182]: worker [5806] /devices/virtual/block/nbd6 timeout; kill it [ 917.149405][ T5182] udevd[5182]: seq 13387 '/devices/virtual/block/nbd6' killed [ 917.157801][ T5182] udevd[5182]: worker [5821] /devices/virtual/block/nbd4 timeout; kill it [ 917.166628][ T5182] udevd[5182]: seq 14335 '/devices/virtual/block/nbd4' killed [ 917.174325][ T5182] udevd[5182]: worker [5815] /devices/virtual/block/nbd1 timeout; kill it [ 917.183071][ T5182] udevd[5182]: seq 13362 '/devices/virtual/block/nbd1' killed [ 917.390095][T15662] bond0: (slave bond_slave_0): Releasing backup interface [ 917.517318][T15662] bond0: (slave bond_slave_1): Releasing backup interface [ 917.708806][T15662] team0: Port device team_slave_0 removed [ 917.816688][ T24] net_ratelimit: 10 callbacks suppressed [ 917.816706][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.914476][T15662] team0: Port device team_slave_1 removed [ 918.099024][T15662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 918.164330][T15662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.283818][T15662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 918.291370][T15662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 918.339308][T15662] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 918.421066][T15672] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2362'. [ 918.852376][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.074893][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.634863][T15702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2370'. [ 919.672514][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.680716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.893703][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.222246][T13155] block nbd3: Possible stuck request ffff888026425080: control (read@0,1024B). Runtime 690 seconds [ 920.372738][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.430195][ T30] kauditd_printk_skb: 129 callbacks suppressed [ 920.430206][ T30] audit: type=1400 audit(1760058670.469:1640): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 920.522562][ T30] audit: type=1400 audit(1760058670.549:1641): avc: denied { create } for pid=15717 comm="syz.1.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 920.544865][ T30] audit: type=1400 audit(1760058670.599:1642): avc: denied { read append } for pid=15720 comm="syz.3.2381" name="cec0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 920.571443][ T30] audit: type=1400 audit(1760058670.619:1643): avc: denied { allowed } for pid=15720 comm="syz.3.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 920.592230][ T30] audit: type=1400 audit(1760058670.619:1644): avc: denied { create } for pid=15720 comm="syz.3.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 920.615754][ T30] audit: type=1400 audit(1760058670.619:1645): avc: denied { create } for pid=15720 comm="syz.3.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 920.637405][ T30] audit: type=1400 audit(1760058670.619:1646): avc: denied { create } for pid=15720 comm="syz.3.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 920.659655][ T30] audit: type=1400 audit(1760058670.619:1647): avc: denied { prog_load } for pid=15720 comm="syz.3.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 920.679777][ T30] audit: type=1400 audit(1760058670.619:1648): avc: denied { read write } for pid=15720 comm="syz.3.2381" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 920.707913][ T30] audit: type=1400 audit(1760058670.619:1649): avc: denied { read write } for pid=15717 comm="syz.1.2378" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 920.882096][T13155] block nbd3: Possible stuck request ffff888026425240: control (read@1024,1024B). Runtime 690 seconds [ 920.893481][T13155] block nbd3: Possible stuck request ffff888026425400: control (read@2048,1024B). Runtime 690 seconds [ 920.923501][T13155] block nbd3: Possible stuck request ffff8880264255c0: control (read@3072,1024B). Runtime 690 seconds [ 921.196697][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.313247][T15730] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2379'. [ 922.512710][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.413780][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.423399][ T9313] block nbd6: Possible stuck request ffff888026517000: control (read@0,1024B). Runtime 630 seconds [ 923.435312][ T9313] block nbd6: Possible stuck request ffff8880265171c0: control (read@1024,1024B). Runtime 630 seconds [ 923.448476][ T9313] block nbd6: Possible stuck request ffff888026517380: control (read@2048,1024B). Runtime 630 seconds [ 923.459759][ T9313] block nbd6: Possible stuck request ffff888026517540: control (read@3072,1024B). Runtime 630 seconds [ 923.572628][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.613319][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.459266][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 925.459283][ T30] audit: type=1400 audit(1760058675.499:1765): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 925.503678][ T30] audit: type=1400 audit(1760058675.549:1766): avc: denied { create } for pid=15799 comm="syz.4.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 925.532465][ T30] audit: type=1400 audit(1760058675.579:1767): avc: denied { create } for pid=15799 comm="syz.4.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 925.612547][ T30] audit: type=1400 audit(1760058675.599:1768): avc: denied { read } for pid=15799 comm="syz.4.2405" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 925.652981][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.709988][ T30] audit: type=1400 audit(1760058675.609:1769): avc: denied { create } for pid=15799 comm="syz.4.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 925.750593][ T30] audit: type=1400 audit(1760058675.619:1770): avc: denied { create } for pid=15801 comm="syz.3.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 925.794361][ T30] audit: type=1400 audit(1760058675.619:1771): avc: denied { create } for pid=15801 comm="syz.3.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 925.836457][ T30] audit: type=1400 audit(1760058675.619:1772): avc: denied { read } for pid=15801 comm="syz.3.2406" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 925.912003][ T30] audit: type=1400 audit(1760058675.619:1773): avc: denied { create } for pid=15801 comm="syz.3.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 925.952849][ T30] audit: type=1400 audit(1760058675.639:1774): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 926.452450][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.693181][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.736598][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.542095][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.224762][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.492510][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.306908][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.474113][ T30] kauditd_printk_skb: 183 callbacks suppressed [ 930.474135][ T30] audit: type=1400 audit(1760058680.509:1958): avc: denied { create } for pid=15887 comm="syz.7.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 930.595432][ T30] audit: type=1400 audit(1760058680.519:1959): avc: denied { create } for pid=15887 comm="syz.7.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 930.653264][ T30] audit: type=1400 audit(1760058680.519:1960): avc: denied { read } for pid=15887 comm="syz.7.2438" dev="nsfs" ino=4026533131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 930.944215][ T30] audit: type=1400 audit(1760058680.979:1961): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 931.051889][ T30] audit: type=1400 audit(1760058681.059:1962): avc: denied { read } for pid=15910 comm="syz.1.2446" dev="nsfs" ino=4026532800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 931.109102][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.119954][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 931.178505][ T30] audit: type=1400 audit(1760058681.079:1963): avc: denied { read write } for pid=14643 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 931.210225][ T30] audit: type=1400 audit(1760058681.149:1964): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 931.243231][ T30] audit: type=1400 audit(1760058681.209:1965): avc: denied { read write } for pid=5817 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 931.280061][ T30] audit: type=1400 audit(1760058681.319:1966): avc: denied { allowed } for pid=15914 comm="syz.4.2449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 931.300800][ T30] audit: type=1400 audit(1760058681.329:1967): avc: denied { name_bind } for pid=15914 comm="syz.4.2449" src=19970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 931.335111][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.384319][ T5929] lo speed is unknown, defaulting to 1000 [ 931.692725][T15929] mkiss: ax0: crc mode is auto. [ 932.383706][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.539056][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.861660][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2460'. [ 933.422521][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.621007][T15973] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2470'. [ 934.324410][T15986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2474'. [ 934.459262][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.482073][ T30] kauditd_printk_skb: 3723 callbacks suppressed [ 935.482087][ T30] audit: type=1400 audit(1760058685.529:5691): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 935.492348][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.538182][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 935.549812][ T5477] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 935.568204][T16009] audit: audit_backlog=65 > audit_backlog_limit=64 [ 935.569218][ T5809] audit: audit_backlog=65 > audit_backlog_limit=64 [ 935.574759][ T5477] audit: backlog limit exceeded [ 935.574933][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 935.574945][ T5477] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 935.574957][ T5477] audit: backlog limit exceeded [ 935.575051][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 935.584003][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.905721][T16021] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2487'. [ 936.245879][T16024] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2488'. [ 936.371752][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5250 ms [ 936.379840][ C1] lec:lec_tx_timeout: lec0 [ 936.384441][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 936.532299][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.633921][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.264794][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.611978][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.711673][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.733991][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.868345][T16077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.876662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.528779][ T30] kauditd_printk_skb: 5025 callbacks suppressed [ 940.530169][ T30] audit: type=1400 audit(1760058690.469:10576): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 940.558686][ T30] audit: type=1400 audit(1760058690.469:10577): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 940.580353][ T30] audit: type=1400 audit(1760058690.469:10578): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 940.601901][ T30] audit: type=1400 audit(1760058690.469:10579): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 940.602348][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 940.655086][ T5809] audit: audit_backlog=65 > audit_backlog_limit=64 [ 940.662811][ T5809] audit: audit_lost=51 audit_rate_limit=0 audit_backlog_limit=64 [ 940.670769][ T30] audit: type=1400 audit(1760058690.469:10580): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 940.693571][ T5809] audit: backlog limit exceeded [ 940.718962][ T30] audit: type=1400 audit(1760058690.469:10581): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 940.787271][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.332519][ T9313] block nbd5: Possible stuck request ffff8880264b5080: control (read@0,1024B). Runtime 540 seconds [ 941.343411][ T9313] block nbd5: Possible stuck request ffff8880264b5240: control (read@1024,1024B). Runtime 540 seconds [ 941.354415][ T9313] block nbd5: Possible stuck request ffff8880264b5400: control (read@2048,1024B). Runtime 540 seconds [ 941.365374][ T9313] block nbd5: Possible stuck request ffff8880264b55c0: control (read@3072,1024B). Runtime 540 seconds [ 941.421856][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 941.429874][ C1] lec:lec_tx_timeout: lec0 [ 941.693048][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.817725][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.863034][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.266776][T13155] block nbd4: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 510 seconds [ 943.278602][T13155] block nbd4: Possible stuck request ffff8880264701c0: control (read@1024,1024B). Runtime 510 seconds [ 943.289746][T13155] block nbd4: Possible stuck request ffff888026470380: control (read@2048,1024B). Runtime 510 seconds [ 943.300806][T13155] block nbd4: Possible stuck request ffff888026470540: control (read@3072,1024B). Runtime 510 seconds [ 943.427968][T16160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.436312][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.898709][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.909359][ T9313] block nbd1: Possible stuck request ffff888026377000: control (read@0,1024B). Runtime 660 seconds [ 943.920201][ T9313] block nbd1: Possible stuck request ffff8880263771c0: control (read@1024,1024B). Runtime 660 seconds [ 943.931257][ T9313] block nbd1: Possible stuck request ffff888026377380: control (read@2048,1024B). Runtime 660 seconds [ 943.943334][ T9313] block nbd1: Possible stuck request ffff888026377540: control (read@3072,1024B). Runtime 660 seconds [ 944.785980][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.965281][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.537065][ T30] kauditd_printk_skb: 7049 callbacks suppressed [ 945.537080][ T30] audit: type=1400 audit(1760058695.579:17020): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 945.673590][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 945.685613][ T5477] audit: audit_lost=256 audit_rate_limit=0 audit_backlog_limit=64 [ 945.694667][ T5477] audit: backlog limit exceeded [ 945.699693][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 945.707487][ T5477] audit: audit_lost=257 audit_rate_limit=0 audit_backlog_limit=64 [ 945.715435][ T5477] audit: backlog limit exceeded [ 945.720534][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 945.728941][ T5477] audit: audit_lost=258 audit_rate_limit=0 audit_backlog_limit=64 [ 945.736934][ T5477] audit: backlog limit exceeded [ 945.973869][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.105274][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.731955][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.813904][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.134606][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.183211][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.996034][T16282] FAULT_INJECTION: forcing a failure. [ 949.996034][T16282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.029375][T16282] CPU: 1 UID: 0 PID: 16282 Comm: syz.7.2571 Not tainted syzkaller #0 PREEMPT(full) [ 950.029400][T16282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 950.029409][T16282] Call Trace: [ 950.029415][T16282] [ 950.029422][T16282] dump_stack_lvl+0x16c/0x1f0 [ 950.029453][T16282] should_fail_ex+0x512/0x640 [ 950.029480][T16282] _copy_to_user+0x32/0xd0 [ 950.029507][T16282] simple_read_from_buffer+0xcb/0x170 [ 950.029535][T16282] proc_fail_nth_read+0x197/0x240 [ 950.029555][T16282] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 950.029577][T16282] ? rw_verify_area+0xcf/0x6c0 [ 950.029601][T16282] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 950.029625][T16282] vfs_read+0x1e4/0xcf0 [ 950.029655][T16282] ? __pfx___mutex_lock+0x10/0x10 [ 950.029672][T16282] ? __pfx_vfs_read+0x10/0x10 [ 950.029706][T16282] ? __fget_files+0x20e/0x3c0 [ 950.029738][T16282] ksys_read+0x12a/0x250 [ 950.029754][T16282] ? __pfx_ksys_read+0x10/0x10 [ 950.029778][T16282] do_syscall_64+0xcd/0xfa0 [ 950.029806][T16282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.029824][T16282] RIP: 0033:0x7f4752d8d8dc [ 950.029839][T16282] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 950.029855][T16282] RSP: 002b:00007f4753be5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 950.029872][T16282] RAX: ffffffffffffffda RBX: 00007f4752fe5fa0 RCX: 00007f4752d8d8dc [ 950.029884][T16282] RDX: 000000000000000f RSI: 00007f4753be50a0 RDI: 0000000000000004 [ 950.029895][T16282] RBP: 00007f4753be5090 R08: 0000000000000000 R09: 000000000000001c [ 950.029906][T16282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.029916][T16282] R13: 00007f4752fe6038 R14: 00007f4752fe5fa0 R15: 00007ffeab8efe98 [ 950.029943][T16282] [ 950.219613][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.319139][T13155] block nbd3: Possible stuck request ffff888026425080: control (read@0,1024B). Runtime 720 seconds [ 950.550073][ T30] kauditd_printk_skb: 11571 callbacks suppressed [ 950.550085][ T30] audit: type=1400 audit(1760058700.589:25287): avc: denied { create } for pid=16290 comm="syz.7.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 950.580866][ T30] audit: type=1400 audit(1760058700.629:25288): avc: denied { create } for pid=16290 comm="syz.7.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 950.605024][ T30] audit: type=1400 audit(1760058700.629:25289): avc: denied { create } for pid=16290 comm="syz.7.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 950.649348][T16296] FAULT_INJECTION: forcing a failure. [ 950.649348][T16296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.652846][ T30] audit: type=1400 audit(1760058700.629:25290): avc: denied { read write } for pid=16290 comm="syz.7.2575" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 950.729817][ T30] audit: type=1400 audit(1760058700.629:25291): avc: denied { create } for pid=16290 comm="syz.7.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 950.772997][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 950.862253][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.906193][ T5477] audit: audit_lost=1361 audit_rate_limit=0 audit_backlog_limit=64 [ 950.914320][T13155] block nbd3: Possible stuck request ffff888026425240: control (read@1024,1024B). Runtime 720 seconds [ 950.935005][T13155] block nbd3: Possible stuck request ffff888026425400: control (read@2048,1024B). Runtime 720 seconds [ 950.946135][ T5477] audit: backlog limit exceeded [ 950.956820][T16296] CPU: 1 UID: 0 PID: 16296 Comm: syz.3.2576 Not tainted syzkaller #0 PREEMPT(full) [ 950.956837][T16296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 950.956845][T16296] Call Trace: [ 950.956848][T16296] [ 950.956853][T16296] dump_stack_lvl+0x16c/0x1f0 [ 950.956874][T16296] should_fail_ex+0x512/0x640 [ 950.956893][T16296] _copy_from_iter+0x29f/0x1720 [ 950.956914][T16296] ? __pfx__copy_from_iter+0x10/0x10 [ 950.956934][T16296] ? __pfx___might_resched+0x10/0x10 [ 950.956951][T16296] file_tty_write.constprop.0+0x487/0x9b0 [ 950.956968][T16296] vfs_write+0x7d0/0x11d0 [ 950.956979][T16296] ? __pfx_tty_write+0x10/0x10 [ 950.956992][T16296] ? __pfx_vfs_write+0x10/0x10 [ 950.957007][T16296] ? find_held_lock+0x2b/0x80 [ 950.957030][T16296] ksys_write+0x12a/0x250 [ 950.957045][T16296] ? __pfx_ksys_write+0x10/0x10 [ 950.957058][T16296] do_syscall_64+0xcd/0xfa0 [ 950.957075][T16296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.957087][T16296] RIP: 0033:0x7f45fff8eec9 [ 950.957096][T16296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.957107][T16296] RSP: 002b:00007f4600e51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 950.957118][T16296] RAX: ffffffffffffffda RBX: 00007f46001e5fa0 RCX: 00007f45fff8eec9 [ 950.957125][T16296] RDX: 0000000000001006 RSI: 0000200000001980 RDI: 0000000000000005 [ 950.957132][T16296] RBP: 00007f4600e51090 R08: 0000000000000000 R09: 0000000000000000 [ 950.957141][T16296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.957148][T16296] R13: 00007f46001e6038 R14: 00007f46001e5fa0 R15: 00007fff993b3518 [ 950.957162][T16296] [ 950.979252][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 950.979265][ T5477] audit: audit_lost=1362 audit_rate_limit=0 audit_backlog_limit=64 [ 951.197295][T13155] block nbd3: Possible stuck request ffff8880264255c0: control (read@3072,1024B). Runtime 720 seconds [ 951.254600][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.933752][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 952.057521][T16311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2581'. [ 952.297630][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.336546][T15000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.495956][ T9313] block nbd6: Possible stuck request ffff888026517000: control (read@0,1024B). Runtime 660 seconds [ 953.514506][ T9313] block nbd6: Possible stuck request ffff8880265171c0: control (read@1024,1024B). Runtime 660 seconds [ 953.525718][ T9313] block nbd6: Possible stuck request ffff888026517380: control (read@2048,1024B). Runtime 660 seconds [ 953.536882][ T9313] block nbd6: Possible stuck request ffff888026517540: control (read@3072,1024B). Runtime 660 seconds [ 953.652127][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 953.892564][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.983505][ T6971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.992342][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.001131][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.434950][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.492542][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.552436][ T30] kauditd_printk_skb: 8191 callbacks suppressed [ 955.552451][ T30] audit: type=1400 audit(1760058705.599:32716): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 955.583142][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 955.590727][ T5477] audit: audit_lost=1618 audit_rate_limit=0 audit_backlog_limit=64 [ 955.603315][ T5477] audit: backlog limit exceeded [ 955.613488][ T5477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 955.620090][ T30] audit: type=1400 audit(1760058705.599:32717): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 955.645249][ T5477] audit: audit_lost=1619 audit_rate_limit=0 audit_backlog_limit=64 [ 955.653689][ T30] audit: type=1400 audit(1760058705.599:32718): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 955.675294][ T5477] audit: backlog limit exceeded [ 955.682589][T16374] audit: audit_backlog=65 > audit_backlog_limit=64 [ 956.544132][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.622501][ T5813] Bluetooth: hci3: unexpected event 0x14 length: 20 > 6 [ 956.694537][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.033316][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.412046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.420633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.428830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.437046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.445209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.453409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.616982][ T31] INFO: task syz.6.2042:14474 blocked for more than 143 seconds. [ 958.629948][ T31] Not tainted syzkaller #0 [ 958.635760][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 958.644948][ T31] task:syz.6.2042 state:D stack:26968 pid:14474 tgid:14470 ppid:7584 task_flags:0x400040 flags:0x00080003 [ 958.657078][ T31] Call Trace: [ 958.660390][ T31] [ 958.663386][ T31] __schedule+0x1190/0x5de0 [ 958.668028][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 958.673110][ T31] ? __pfx___schedule+0x10/0x10 [ 958.678123][ T31] ? find_held_lock+0x2b/0x80 [ 958.699654][ T31] ? schedule+0x2d7/0x3a0 [ 958.710217][ T31] ? bdev_open+0x41a/0xe40 [ 958.721039][ T31] schedule+0xe7/0x3a0 [ 958.733648][ T31] schedule_preempt_disabled+0x13/0x30 [ 958.745769][ T31] __mutex_lock+0x818/0x1060 [ 958.754817][ T31] ? bdev_open+0x41a/0xe40 [ 958.764696][ T31] ? irqentry_exit+0x3b/0x90 [ 958.773192][ T5813] Bluetooth: hci4: unexpected event 0x14 length: 20 > 6 [ 958.784928][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 958.875491][ T31] ? disk_block_events+0x21/0x140 [ 958.885205][ T31] ? disk_block_events+0x36/0x140 [ 958.890323][ T31] ? bdev_open+0x41a/0xe40 [ 958.894925][ T31] bdev_open+0x41a/0xe40 [ 958.899246][ T31] ? iput+0x35/0x40 [ 958.903131][ T31] blkdev_open+0x34e/0x4f0 [ 958.907693][ T31] do_dentry_open+0x97f/0x1530 [ 958.912849][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 958.917905][ T31] vfs_open+0x82/0x3f0 [ 958.928022][ T31] path_openat+0x1de4/0x2cb0 [ 958.933881][ T31] ? __pfx___schedule+0x10/0x10 [ 958.940800][ T31] ? __pfx_path_openat+0x10/0x10 [ 958.949246][ T31] do_filp_open+0x20b/0x470 [ 958.954288][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 958.964070][ T31] ? do_sys_openat2+0x102/0x1d0 [ 958.971789][ T31] ? do_sys_openat2+0x10b/0x1d0 [ 958.977208][ T31] do_sys_openat2+0x11b/0x1d0 [ 958.983740][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 958.990294][ T31] ? __pfx___schedule+0x10/0x10 [ 958.996834][ T31] __x64_sys_openat+0x174/0x210 [ 959.003405][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 959.008842][ T31] ? syscall_user_dispatch+0x78/0x140 [ 959.017592][ T31] do_syscall_64+0xcd/0xfa0 [ 959.024116][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.032612][ T31] RIP: 0033:0x7f018f58d710 [ 959.037393][ T31] RSP: 002b:00007f01904a1b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 959.047279][ T31] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f018f58d710 [ 959.059323][ T31] RDX: 0000000000080000 RSI: 00007f01904a1c10 RDI: 00000000ffffff9c [ 959.068121][ T31] RBP: 00007f01904a1c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 959.138400][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 959.166144][ T31] R13: 00007f018f7e6218 R14: 00007f018f7e6180 R15: 00007ffe693ec2e8 [ 959.185068][ T31] [ 959.188158][ T31] INFO: task syz.6.2042:14475 blocked for more than 143 seconds. [ 959.208360][ T31] Not tainted syzkaller #0 [ 959.213898][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 959.223621][ T31] task:syz.6.2042 state:D stack:29096 pid:14475 tgid:14470 ppid:7584 task_flags:0x400140 flags:0x00080002 [ 959.236791][ T31] Call Trace: [ 959.241161][ T31] [ 959.245750][ T31] __schedule+0x1190/0x5de0 [ 959.251154][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 959.257690][ T31] ? __pfx___schedule+0x10/0x10 [ 959.263117][ T31] ? find_held_lock+0x2b/0x80 [ 959.268548][ T31] ? schedule+0x2d7/0x3a0 [ 959.276197][ T31] ? bdev_open+0xa2/0xe40 [ 959.281629][ T31] schedule+0xe7/0x3a0 [ 959.285974][ T31] schedule_preempt_disabled+0x13/0x30 [ 959.304543][ T31] __mutex_lock+0x818/0x1060 [ 959.309981][ T31] ? bdev_open+0xa2/0xe40 [ 959.315428][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 959.320844][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 959.327376][ T31] ? bdev_open+0xa2/0xe40 [ 959.332878][ T31] bdev_open+0xa2/0xe40 [ 959.337207][ T31] ? iput+0x35/0x40 [ 959.341550][ T31] bdev_file_open_by_dev+0x182/0x210 [ 959.348092][ T31] setup_bdev_super+0x78/0x730 [ 959.353526][ T31] get_tree_bdev_flags+0x363/0x620 [ 959.358958][ T31] ? __pfx_udf_fill_super+0x10/0x10 [ 959.365496][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 959.371806][ T31] ? bpf_lsm_capable+0x9/0x10 [ 959.377449][ T31] ? security_capable+0x7e/0x260 [ 959.386144][ T31] vfs_get_tree+0x8e/0x340 [ 959.391579][ T31] path_mount+0x7b9/0x23a0 [ 959.397019][ T31] ? __pfx_path_mount+0x10/0x10 [ 959.402443][ T31] ? putname+0x154/0x1a0 [ 959.406791][ T31] ? putname+0x154/0x1a0 [ 959.413345][ T31] ? putname+0x154/0x1a0 [ 959.417706][ T31] ? __x64_sys_mount+0x293/0x310 [ 959.424514][ T31] __x64_sys_mount+0x293/0x310 [ 959.429956][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 959.435404][ T31] do_syscall_64+0xcd/0xfa0 [ 959.441894][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.449280][ T31] RIP: 0033:0x7f018f58eec9 [ 959.453935][ T31] RSP: 002b:00007f0190481038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 959.462993][ T31] RAX: ffffffffffffffda RBX: 00007f018f7e6270 RCX: 00007f018f58eec9 [ 959.473251][ T31] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 959.482202][ T31] RBP: 00007f018f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 959.491122][ T31] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 959.505366][ T31] R13: 00007f018f7e6308 R14: 00007f018f7e6270 R15: 00007ffe693ec2e8 [ 959.514359][ T31] [ 959.517784][ T31] [ 959.517784][ T31] Showing all locks held in the system: [ 959.534667][ T31] 1 lock held by khungtaskd/31: [ 959.540119][ T31] #0: ffffffff8e3c44a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 959.554681][ T31] 2 locks held by syslogd/5164: [ 959.560120][ T31] 1 lock held by dhcpcd/5477: [ 959.565413][ T31] 2 locks held by getty/5567: [ 959.570615][ T31] #0: ffff88814d0120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 959.581804][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 959.592536][ T31] 1 lock held by udevd/5806: [ 959.597661][ T31] #0: ffff88802644a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 959.608151][ T31] 1 lock held by udevd/5815: [ 959.613370][ T31] #0: ffff888142ff9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 959.622847][ T31] 1 lock held by udevd/5821: [ 959.627677][ T31] #0: ffff888142fff358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 959.637061][ T31] 1 lock held by udevd/6457: [ 959.642206][ T31] #0: ffff888142ffd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 959.653556][ T31] 1 lock held by udevd/8903: [ 959.658634][ T31] #0: ffff8880263d5358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 959.669703][ T31] 1 lock held by syz.6.2042/14474: [ 959.675452][ T31] #0: ffff88802644a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 959.685841][ T31] 2 locks held by syz.6.2042/14475: [ 959.691596][ T31] #0: ffff8880511840e0 (&type->s_umount_key#85/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 959.702941][ T31] #1: ffff88802644a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 959.713179][ T31] [ 959.715681][ T31] ============================================= [ 959.715681][ T31] [ 959.725119][ T31] NMI backtrace for cpu 0 [ 959.725134][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 959.725154][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 959.725165][ T31] Call Trace: [ 959.725171][ T31] [ 959.725178][ T31] dump_stack_lvl+0x116/0x1f0 [ 959.725208][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 959.725233][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 959.725260][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 959.725283][ T31] watchdog+0xf3f/0x1170 [ 959.725310][ T31] ? rcu_is_watching+0x12/0xc0 [ 959.725332][ T31] ? __pfx_watchdog+0x10/0x10 [ 959.725351][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 959.725379][ T31] ? __kthread_parkme+0x19e/0x250 [ 959.725406][ T31] ? __pfx_watchdog+0x10/0x10 [ 959.725427][ T31] kthread+0x3c2/0x780 [ 959.725445][ T31] ? __pfx_kthread+0x10/0x10 [ 959.725464][ T31] ? rcu_is_watching+0x12/0xc0 [ 959.725486][ T31] ? __pfx_kthread+0x10/0x10 [ 959.725504][ T31] ret_from_fork+0x672/0x7d0 [ 959.725518][ T31] ? __pfx_kthread+0x10/0x10 [ 959.725536][ T31] ret_from_fork_asm+0x1a/0x30 [ 959.725567][ T31] [ 959.725575][ T31] Sending NMI from CPU 0 to CPUs 1: [ 959.847163][ C1] NMI backtrace for cpu 1 [ 959.847178][ C1] CPU: 1 UID: 0 PID: 5477 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 959.847195][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 959.847203][ C1] RIP: 0010:stack_access_ok+0x166/0x200 [ 959.847223][ C1] Code: 0f 85 95 00 00 00 48 8b 43 10 49 39 ee 77 29 48 39 e8 76 24 4c 01 e5 48 39 e8 0f 93 c0 49 39 ee 0f 92 c2 21 d0 48 83 c4 08 5b <5d> 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 83 c4 08 31 c0 5b 5d [ 959.847237][ C1] RSP: 0018:ffffc900032674b8 EFLAGS: 00000292 [ 959.847253][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffc90003268000 [ 959.847262][ C1] RDX: ffffc90003267601 RSI: ffffc90003267680 RDI: ffffc90003267558 [ 959.847271][ C1] RBP: ffffc90003267680 R08: ffffffff911c4848 R09: 0000000000000000 [ 959.847280][ C1] R10: 0000000000000000 R11: 000000000000a76f R12: 0000000000000008 [ 959.847288][ C1] R13: ffffc90003267568 R14: ffffc90003267560 R15: ffffc90003260000 [ 959.847297][ C1] FS: 00007f9a59f9a740(0000) GS:ffff888124adf000(0000) knlGS:0000000000000000 [ 959.847311][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.847320][ C1] CR2: 00007f46001b4198 CR3: 00000000759fa000 CR4: 00000000003526f0 [ 959.847330][ C1] Call Trace: [ 959.847335][ C1] [ 959.847341][ C1] unwind_next_frame+0xcfe/0x20a0 [ 959.847356][ C1] ? stack_trace_save+0x8e/0xc0 [ 959.847375][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 959.847393][ C1] arch_stack_walk+0x94/0x100 [ 959.847409][ C1] ? stack_trace_save+0x8e/0xc0 [ 959.847427][ C1] stack_trace_save+0x8e/0xc0 [ 959.847444][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 959.847462][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 959.847483][ C1] kasan_save_stack+0x33/0x60 [ 959.847511][ C1] kasan_save_track+0x14/0x30 [ 959.847523][ C1] __kasan_slab_alloc+0x89/0x90 [ 959.847536][ C1] kmem_cache_alloc_node_noprof+0x28a/0x770 [ 959.847556][ C1] ? __alloc_skb+0x2b2/0x380 [ 959.847576][ C1] ? __alloc_skb+0x2b2/0x380 [ 959.847591][ C1] __alloc_skb+0x2b2/0x380 [ 959.847607][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 959.847625][ C1] ? __pfx_sock_has_perm+0x10/0x10 [ 959.847645][ C1] alloc_skb_with_frags+0xe0/0x860 [ 959.847667][ C1] sock_alloc_send_pskb+0x7f9/0x980 [ 959.847685][ C1] ? avc_has_perm_noaudit+0x149/0x3b0 [ 959.847704][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 959.847720][ C1] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 959.847740][ C1] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 959.847761][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 959.847777][ C1] unix_dgram_sendmsg+0x3e9/0x17f0 [ 959.847797][ C1] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 959.847813][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 959.847834][ C1] __sys_sendto+0x4a0/0x520 [ 959.847851][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 959.847871][ C1] ? rcu_is_watching+0x12/0xc0 [ 959.847892][ C1] ? find_held_lock+0x2b/0x80 [ 959.847908][ C1] ? __task_pid_nr_ns+0x1f5/0x500 [ 959.847921][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 959.847937][ C1] ? do_syscall_64+0x91/0xfa0 [ 959.847956][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 959.847979][ C1] do_syscall_64+0xcd/0xfa0 [ 959.847998][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.848011][ C1] RIP: 0033:0x7f9a5a024407 [ 959.848021][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 959.848033][ C1] RSP: 002b:00007ffebf3a9980 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 959.848046][ C1] RAX: ffffffffffffffda RBX: 00007f9a59f9a740 RCX: 00007f9a5a024407 [ 959.848054][ C1] RDX: 000000000000003f RSI: 00007ffebf3a9ac0 RDI: 0000000000000003 [ 959.848063][ C1] RBP: 00007ffebf3a9ef0 R08: 0000000000000000 R09: 0000000000000000 [ 959.848071][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffebf3aa340 [ 959.848079][ C1] R13: 00007ffebf3a9ac0 R14: 000000000000001d R15: 00007ffebf3a9ac0 [ 959.848093][ C1] [ 959.849138][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 960.243880][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 960.252975][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 960.263015][ T31] Call Trace: [ 960.266272][ T31] [ 960.269183][ T31] dump_stack_lvl+0x3d/0x1f0 [ 960.273767][ T31] vpanic+0x640/0x6f0 [ 960.277741][ T31] panic+0xca/0xd0 [ 960.281456][ T31] ? __pfx_panic+0x10/0x10 [ 960.285858][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 960.291215][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 960.297352][ T31] ? watchdog+0xe48/0x1170 [ 960.301752][ T31] ? watchdog+0xe3b/0x1170 [ 960.306153][ T31] watchdog+0xe59/0x1170 [ 960.310557][ T31] ? rcu_is_watching+0x12/0xc0 [ 960.315324][ T31] ? __pfx_watchdog+0x10/0x10 [ 960.319982][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 960.325176][ T31] ? __kthread_parkme+0x19e/0x250 [ 960.330197][ T31] ? __pfx_watchdog+0x10/0x10 [ 960.334856][ T31] kthread+0x3c2/0x780 [ 960.338904][ T31] ? __pfx_kthread+0x10/0x10 [ 960.343479][ T31] ? rcu_is_watching+0x12/0xc0 [ 960.348747][ T31] ? __pfx_kthread+0x10/0x10 [ 960.353319][ T31] ret_from_fork+0x672/0x7d0 [ 960.357886][ T31] ? __pfx_kthread+0x10/0x10 [ 960.362472][ T31] ret_from_fork_asm+0x1a/0x30 [ 960.367236][ T31] [ 960.370458][ T31] Kernel Offset: disabled [ 960.374756][ T31] Rebooting in 86400 seconds..